MindWorkAI/AI-Studio
MindWorkAI/AI-Studio
1
0
Fork 0
mirror of https://github.com/MindWorkAI/AI-Studio.git synced 2026-08-19 03:12:16 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Fixed a vulnerable transitive NuGet dependency in the build script

Browse Source
This commit is contained in:
Thorsten Sommer 2026-08-04 08:10:23 +02:00
parent 21d08c4b35
commit 1698d00f1b
Signed by untrusted user who does not match committer: tsommer
GPG Key ID: 371BBA77A02C0108
2 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
app/Build/Build Script.csproj
View File

@ -12,6 +12,9 @@
<ItemGroup> <ItemGroup>
<PackageReference Include="Cocona" Version="2.2.0" /> <PackageReference Include="Cocona" Version="2.2.0" />
<!-- Pins Cocona's transitive Microsoft.Extensions.Hosting 6.0.0, which pulled in the vulnerable System.Text.Json 6.0.0 (GHSA-8g4q-xg66-9fp4) -->
<PackageReference Include="Microsoft.Extensions.Hosting" Version="9.0.18" />
</ItemGroup> </ItemGroup>
<ItemGroup> <ItemGroup>

8
app/Directory.Build.props Normal file
View File

@ -0,0 +1,8 @@
<Project>
<PropertyGroup>
<!-- Audit direct and transitive packages, so vulnerable transitive dependencies surface during restore instead of only in the IDE -->
<NuGetAuditMode>all</NuGetAuditMode>
</PropertyGroup>
</Project>