From 5f84dbe4a61b6fe7808b666dc7d9e6353215aa25 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?K=C3=A9vin=20Chalet?= <kevinchalet@gmail.com>
Date: Wed, 24 Jun 2026 10:36:57 +0200
Subject: [PATCH] Suppress the GHSA-2m69-gcr7-jv3q security advisory

---
 Directory.Build.props | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/Directory.Build.props b/Directory.Build.props
index 56289014..b723365e 100644
--- a/Directory.Build.props
+++ b/Directory.Build.props
@@ -24,6 +24,17 @@
     <AccelerateBuildsInVisualStudio>true</AccelerateBuildsInVisualStudio>
   </PropertyGroup>
 
+  <ItemGroup>
+    <!--
+      Note: the EF Core SQLite package depends on a vulnerable version of SQLitePCLRaw.core.
+      Unfortunately, this package hasn't been updated to use the newer SourceGear.sqlite3 package,
+      which is not vulnerable. To work around that, this specific vulnerability is suppressed until
+      the EF Core team updates the package to use SourceGear.sqlite3 instead of SQLitePCLRaw.core.
+    -->
+
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-2m69-gcr7-jv3q" />
+  </ItemGroup>
+
   <PropertyGroup>
     <StrongNameKeyId>OpenIddict</StrongNameKeyId>
     <AssemblyOriginatorKeyFile>$(MSBuildThisFileDirectory)eng\key.snk</AssemblyOriginatorKeyFile>