search

sqlkata / querybuilder

SQL query builder, written in c#, helps you build complex queries easily, supports SqlServer, MySql, PostgreSql, Oracle, Sqlite and Firebird
https://sqlkata.com
MIT License
3.06k stars 499 forks source link

Vulnerability in System.Text.RegularExpressions 4.3.0 #703

Open joehom0416 opened 6 months ago

joehom0416 commented 6 months ago

Hi Team,

We's running Synk scan and it show a vulnerability for for System.Text.RegularExpressions 4.3.0. check this link https://security.snyk.io/vuln/SNYK-DOTNET-SYSTEMTEXTREGULAREXPRESSIONS-174708

I tracked it down to the dependency of sqlkata, found that System.IO 4.3.0 has depend on System.Text.RegularExpressions 4.3.0

I believe it can be resolved by upgrading the System.IO to 4.3.1.