mirror of
https://github.com/MindWorkAI/AI-Studio.git
synced 2026-11-04 21:07:21 +00:00
Closed two security advisories in a dependency of MailKit (#1068)
This commit is contained in:
1 parent
b1e5199f62
commit
de04f292d2
2 files changed
+82
-67
No files matched your search
@@ -81,6 +81,14 @@
|
||||
<PackageReference Include="ReverseMarkdown" Version="5.0.0" />
|
||||
<PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.5" />
|
||||
<PackageReference Include="LuaCSharp" Version="0.5.7" />
|
||||
|
||||
<!--
|
||||
Not used by AI Studio directly: MailKit pulls it in through MimeKit, which asks for 10.0.0. That
|
||||
version is affected by CVE-2026-70162 and CVE-2026-84008 (GHSA-2fmv-rv2c-59x7, GHSA-846f-f764-76mx),
|
||||
fixed in 10.0.13. The package wins over the older copy within the .NET runtime, so upgrading .NET
|
||||
alone does not help. Remove this reference once MimeKit itself asks for 10.0.13 or newer.
|
||||
-->
|
||||
<PackageReference Include="System.Security.Cryptography.Pkcs" Version="10.0.13" />
|
||||
</ItemGroup>
|
||||
|
||||
<ItemGroup>
|
||||
|
||||
Reference in new issue
Block a user