From ca8a679b9b50e6da4b9ea58c619501fdbd9e8c40 Mon Sep 17 00:00:00 2001
From: John Erickson <jerick@microsoft.com>
Date: Fri, 17 Jul 2026 07:05:22 -0700
Subject: [PATCH] Bump .NET SDK pin in global.json to 10.0.103 (CVE-2026-21218,
 alert 12340720)

Fixes CVE-2026-21218 (.NET security feature bypass). Updates sdk.version from 10.0.100 to 10.0.103 in global.json. rollForward=latestFeature preserved.
---
 global.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global.json b/global.json
index bd1ddef..d09a72c 100644
--- a/global.json
+++ b/global.json
@@ -1,6 +1,6 @@
 {
   "sdk": {
-    "version": "10.0.100",
+    "version": "10.0.103",
     "rollForward": "latestFeature"
   },
   "msbuild-sdks": {