(v4) back port fix for CVE-2022-23535 - Githubissues

mbdavid / LiteDB

LiteDB - A .NET NoSQL Document Store in a single data file

http://www.litedb.org

MIT License

8.35k stars 1.22k forks source link

(v4) back port fix for CVE-2022-23535 #2465

Open cfauchere opened 2 months ago

cfauchere commented 2 months ago

Backport the fix for CVE-2022-23535 to v4 (we cannot upgrade to v5 yet)

See #2466

Integrating those 2 changes in v4 branch https://github.com/mbdavid/LiteDB/commit/4382ff4dd0dd8b8b16a4e37dfd29727c5f70f93f https://github.com/mbdavid/LiteDB/commit/d72c6774e6a13de2cfcd7d477d3575efeb75c8f2

viveleltsi commented 2 months ago

Hello, just so you know I probably made the same MR here : https://github.com/mbdavid/LiteDB/pull/2424