search

step-up-labs / firebase-database-dotnet

C# library for Firebase Realtime Database.
MIT License
668 stars 168 forks source link

Fixed `LiteDB` security issue #317

Closed AndreasReitberger closed 9 months ago

AndreasReitberger commented 9 months ago

This PR updates the LiteDB dependency to its latest version and fixes the security vulnerability. For this, following code needed to be replaced.

this.db.Delete<OfflineEntry>(Query.All());

with

// Only works for v4, v5 see https://github.com/mbdavid/LiteDB/issues/1478
this.db.DeleteMany<OfflineEntry>(_ => true);

Fixed https://github.com/step-up-labs/firebase-database-dotnet/issues/316 Security: GHSA-3x49-g6rc-c284