[CodeThreat] Update Microsoft.Owin from 4.0.1 to 4.1.1

[ysf-ct]

This PR was generated by CodeThreat utilizing authenticated user credentials.

Issue Description

A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.

The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.

The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names.

Changes included in this PR

• Modifications to the following files to address the vulnerabilities with updated dependencies:
  • src/NETMVCBlot/packages.config

Security Issues Addressed

Through Dependency Upgrades:

Issue	Upgrade	Severity
dotnet: ASP.NET cookie prefix spoofing vulnerability	Microsoft.Owin: 4.0.1 -> 4.1.1	HIGH

Review the modifications in this PR to confirm they do not introduce any issues to your project.