| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| Quartz.NET-3.22.6.zip | < 8 hours ago | 52.5 MB | |
| README.md | < 8 hours ago | 1.2 kB | |
| v3.22.6 source code.tar.gz | < 8 hours ago | 5.6 MB | |
| v3.22.6 source code.zip | < 8 hours ago | 6.3 MB | |
| Totals: 4 Items | 64.5 MB | 0 | |
One dependency fix for the 3.x line, from Microsoft's October 13 security advisories. There is no public API change and no schema change, and no other package changes.
Fixed
Quartz.Dashboarddepends onMicrosoft.AspNetCore.SignalR.Client8.0.32. 3.22.5 depended on 8.0.8, whoseMicrosoft.AspNetCore.SignalR.CommonGHSA-334f-vvp4-7g6p (CVE-2026-70159) covers, and 8.0.32 is the fixed version on the 8.x line. The fixed client raisesMicrosoft.Extensions.DependencyInjection,DependencyInjection.Abstractions,LoggingandLogging.Abstractionswithin 8.0.x (to 8.0.1, 8.0.2, 8.0.1 and 8.0.3). An application that pins one of those lower directly will get NU1605 and needs to raise the pin. (#4073)
The same fix ships for 4.x's Quartz.Dashboard.Agent in 4.5.1.
What's Changed
Other changes
- The restore graph takes the October 13 security fixes for SignalR and the cryptography packages by @lahma in https://github.com/quartznet/quartznet/pull/4073
Full Changelog: https://github.com/quartznet/quartznet/compare/v3.22.5...v3.22.6
