search

linq2db / linq2db.LINQPad

linq2db.LINQPad is a driver for LINQPad.
MIT License
74 stars 23 forks source link

Upgrade dependency Azure.Identity package #97

Closed kkbruce closed 6 months ago

kkbruce commented 9 months ago

image

https://github.com/advisories/GHSA-5mfx-4wcx-rv27

viceroypenguin commented 9 months ago

This is an upstream issue in Microsoft.Data.SqlClient. Will have to wait for updated version of this package to address. You can manually reference a later of Azure.Identity if you want to remove the warning as a temporary fix. https://forum.linqpad.net/discussion/3035/nuget-package-vulnerability-in-managed-reference#latest

MaceWindu commented 9 months ago

Original issue https://github.com/dotnet/SqlClient/issues/2181 Will be included in 5.2.0 release expected in January (?)