Closed two security advisories in a dependency of MailKit (#1068)

This commit is contained in:
Thorsten Sommer authored and GitHub committed 2026-10-15 20:01:08 +02:00
1 parent b1e5199f62
commit de04f292d2
2 files changed
+82 -67

No files matched your search

@@ -81,6 +81,14 @@
<PackageReference Include="ReverseMarkdown" Version="5.0.0" />
<PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.5" />
<PackageReference Include="LuaCSharp" Version="0.5.7" />
<!--
Not used by AI Studio directly: MailKit pulls it in through MimeKit, which asks for 10.0.0. That
version is affected by CVE-2026-70162 and CVE-2026-84008 (GHSA-2fmv-rv2c-59x7, GHSA-846f-f764-76mx),
fixed in 10.0.13. The package wins over the older copy within the .NET runtime, so upgrading .NET
alone does not help. Remove this reference once MimeKit itself asks for 10.0.13 or newer.
-->
<PackageReference Include="System.Security.Cryptography.Pkcs" Version="10.0.13" />
</ItemGroup>
<ItemGroup>