In the microsoft.aspnetcore.razor.design.2.3.0\tools the used Newtonsoft.Json.dll is vulnerable according to the CVE-2024-21907.