ClosedXML / ClosedXML/ClosedXML.Report
Transitive packages has at least one vulnerability with high severity in ClosedXml.Report 0.2.11
Open
- Dominant language
- C#
- Stars
- 647
- Forks
- 122
- PR merge metrics
- No merged PRs in 30d
Description
Is it possible to update System.IO.Packaging and System.Private.Uri to latest none vulnerable version?
Contributor guide
No contributing guide indexed for this repository
Research direction
Locate the project's dependency declarations and inspect the references to System.IO.Packaging and System.Private.Uri. Check which newer non-vulnerable versions are compatible with ClosedXml.Report 0.2.11, then verify that the project still builds and its existing tests pass.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100