search

madelson / DistributedLock

A .NET library for distributed synchronization
MIT License
1.74k stars 182 forks source link

DistributedLock.Azure is updated but not released to NuGet #177

Closed krukowskid closed 3 months ago

krukowskid commented 7 months ago

Hey! DistributedLock.Azure has a transitive package with vulnerability (Azure.Storage.Blobs). I see that you updated this package in the source code but this change was not published.

madelson commented 7 months ago

@krukowskid thanks for bringing this to my attention. Probably obvious, but note that you can work around this in the meantime by just adding a <PackageReference> element for the problematic package of your own to set a version floor.