search

linq2db / linq2db.LINQPad

linq2db.LINQPad is a driver for LINQPad.
MIT License
74 stars 24 forks source link

Updated Oracle to fix vulnerability from dependency #64

Closed db2222 closed 2 years ago

db2222 commented 2 years ago

The NuGet package Oracle.ManagedDataAccess.Core version 3.21.4 uses System.DirectoryServices.Protocols version 5.0.0.

This package has a vulnerability. See https://www.nuget.org/packages/System.DirectoryServices.Protocols/5.0.0. I noticed this as LinqPad shows a warning.

grafik

Therefore updated Oracle.ManagedDataAccess.Core to 3.21.61. This updates System.DirectoryServices.Protocols to 5.0.1 which hasn't got this vulnerability.