Browse Source

Bump SharpCompress from 0.41.0 to 0.48.0 (#21339)

Addresses path traversal vulnerability GHSA-6c8g-7p36-r338
(CVE in IArchive.WriteToDirectory) which affects all versions
<= 0.47.4. Version 0.48.0 is the first non-vulnerable release
per the NuGet vulnerability API.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
pull/21386/head
Nikita Tsukanov 5 months ago
committed by GitHub
parent
commit
989a91dc9c
No known key found for this signature in database GPG Key ID: B5690EEEBB952194
  1. 2
      Directory.Packages.props

2
Directory.Packages.props

@ -41,7 +41,7 @@
<PackageVersion Include="NUnit" Version="4.5.1" /> <PackageVersion Include="NUnit" Version="4.5.1" />
<PackageVersion Include="NUnit3TestAdapter" Version="6.2.0" /> <PackageVersion Include="NUnit3TestAdapter" Version="6.2.0" />
<PackageVersion Include="Quamotion.RemoteViewing" Version="1.1.211" /> <PackageVersion Include="Quamotion.RemoteViewing" Version="1.1.211" />
<PackageVersion Include="SharpCompress" Version="0.41.0" /> <PackageVersion Include="SharpCompress" Version="0.48.0" />
<PackageVersion Include="Silk.NET.Direct3D.Compilers" Version="2.22.0" /> <PackageVersion Include="Silk.NET.Direct3D.Compilers" Version="2.22.0" />
<PackageVersion Include="Silk.NET.Direct3D11" Version="2.22.0" /> <PackageVersion Include="Silk.NET.Direct3D11" Version="2.22.0" />
<PackageVersion Include="Silk.NET.Vulkan" Version="2.22.0" /> <PackageVersion Include="Silk.NET.Vulkan" Version="2.22.0" />

Loading…
Cancel
Save