[Vulnerability] Newtonsoft.Json dependency on Microsoft.Azure.CognitiveServices.Vision.ComputerVision

[igoravila-net]

The latest Microsoft.Azure.CognitiveServices.Vision.ComputerVision version is 7.0.1 which has a Newtonsoft.Json dependency that uses v10.0.3 which is vulnerable
I'm running a SAST scan that recommends to update Newtonsoft.Json to v13.0.1 but the dev team can't make this update
How can I mitigate this vulnerability?

[github-actions]

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @areddish @ryogok @tburns10 @TFR258 @toothache.

[igoravila-net]

FYI
https://nvd.nist.gov/vuln/detail/CVE-2024-21907