Bump System.Drawing.Common from 4.6.0 to 4.7.3 due to vulnerability

canton7 / Stylet

A very lightweight but powerful ViewModel-First MVVM framework for WPF for .NET Framework and .NET Core, inspired by Caliburn.Micro.

MIT License

995 stars 144 forks source link

Bump System.Drawing.Common from 4.6.0 to 4.7.3 due to vulnerability #389

Closed Yoooi0 closed 7 months ago

Yoooi0 commented 7 months ago

https://github.com/advisories/GHSA-rxg9-xrhp-64gj

Merge to develop branch as per checklist but I would hope this gets pushed as 1.3.7 hotfix.

canton7 commented 7 months ago

This vulnerability only exists on systems running on MacOS or Linux

Since Stylet only runs on Windows, there's no need to rush out a fix here IMO.

Yoooi0 commented 7 months ago

While its true it does not affect windows but each time someone will reference Stylet it will show a vulnerable warnings in nuget manager in visual studio, not ideal for a general use library/framework i think.