Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
cb3320d57a |
@@ -98,14 +98,14 @@
|
||||
<!-- Direct pin to override EF Core 9's transitive SQLitePCLRaw 2.1.10 (vulnerable
|
||||
bundled SQLite, GHSA-2m69-gcr7-jv3q). The 3.x line ships the patched native
|
||||
(lib.e_sqlite3 3.50.3); core 3.0.4 satisfies Microsoft.Data.Sqlite's `>= 2.1.10`. (#8) -->
|
||||
<PackageVersion Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.5" />
|
||||
<PackageVersion Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.4" />
|
||||
<!-- Direct pin to override the transitive 9.0.4 that EFCore.BulkExtensions' Oracle and SqlServer
|
||||
providers pull in (via Oracle.ManagedDataAccess.Core / Microsoft.Data.SqlClient):
|
||||
GHSA-846f-f764-76mx (High) and GHSA-2fmv-rv2c-59x7 (Moderate), both fixed in 9.0.21.
|
||||
Referenced directly in ErsatzTV.Infrastructure.csproj, the only project that references
|
||||
EFCore.BulkExtensions, so the override flows to every project above it (#929). -->
|
||||
<PackageVersion Include="System.Security.Cryptography.Pkcs" Version="9.0.21" />
|
||||
<PackageVersion Include="System.CommandLine" Version="2.0.2" />
|
||||
<PackageVersion Include="System.Security.Cryptography.Pkcs" Version="9.0.22" />
|
||||
<PackageVersion Include="System.CommandLine" Version="2.0.14" />
|
||||
<PackageVersion Include="TagLibSharp" Version="2.3.0" />
|
||||
<PackageVersion Include="Testably.Abstractions" Version="10.0.0" />
|
||||
<PackageVersion Include="Testably.Abstractions.Testing" Version="5.1.0" />
|
||||
|
||||
Reference in New Issue
Block a user