search

files-community / Files

Building the best file manager for Windows
https://files.community
MIT License
34k stars 2.17k forks source link

LiteDB Vulnerability? #14576

Closed pbeens closed 8 months ago

pbeens commented 8 months ago

Description

I admit I know nothing about Visual Studio so I'm following the instructions about how to deploy the package found at https://files.community/docs/contributing/building-from-source.

When I open Files.sln I get this warning:

2024-01-29 Files_Vulnerability


...which leads me to this:

2024-01-29 Files_Vulnerability_2


Should I be concerned?

Concerned code

Files.sln

Gains

Addressing this in the installation instructions would help noobs like me.

Requirements

Not sure how this has to be addressed. Perhaps I just need reassurance that it's not a problem.

Comments

No response

hez2010 commented 8 months ago

We are not affected by the part that has vulnerability. While I do have a plan to move to 5.x. By updating LiteDB we need to handle inter-process concurrency issue with care of not regressing performance, which is not a trivial work.

pbeens commented 8 months ago

We are not affected by the part that has vulnerability. While I do have a plan to move to 5.x. By updating LiteDB we need to handle inter-process concurrency issue with care of not regressing performance, which is not a trivial work.

Thanks so much for the quick and detailed update!