empira / PDFsharp

PDFsharp and MigraDoc Foundation for .NET 6 and .NET Framework
https://docs.pdfsharp.net/
Other
531 stars 132 forks source link

warning NU1903: Package 'System.Formats.Asn1' 8.0.0 has a known high severity vulnerability #208

Open ThomasHoevel opened 1 week ago

ThomasHoevel commented 1 week ago

After updating Visual Studio and Windows, we saw this warning while compiling:

warning NU1903: Package 'System.Formats.Asn1' 8.0.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-447r-wph3-92pm

To resolve this issue when compiling PDFsharp, go to Directory.Packages.prop and locate this line:

<Cryptography_PackageVersion>8.0.0</Cryptography_PackageVersion>

Change the version to 8.0.1 and the warning disappears.

This change will be included with PDFsharp 6.2.0 Preview 2 coming this or next month.