commandlineparser / commandlineparser/commandline

Version 2.9.1 is reported as vulnerable

Ouverte
#938 8 commentaires 0 réactions 0 personnes assignées Voir sur GitHub
Langage dominant
C#
Étoiles
4.8k
Forks
478
Métriques de merge des PR
Aucune PR mergée en 30 j

Description

**Describe the bug**
JetBrains Rider signal the 2.9.1 version as vulnerable.
It doesn't provide details on the motivation.
This is also mentioned here:
https://github.com/jeremylong/DependencyCheck/issues/6048
https://github.com/jeremylong/DependencyCheck/issues/6088

Unfortunately some of the projects/customers I'm working on/with refuse to use libraries with known vulnerabilities.
Is there a mitigation ?

Many thanks in advance for any suggestion.

**To Reproduce**
Just add the NuGet package to any project in Rider, and the warning will appear

**Expected behavior**
No vulnerabilities signaled

**Screenshots**
![image](https://github.com/user-attachments/assets/b8606be8-24dd-4b0a-9fb9-5a6e365510c7)

Guide de contribution

Aucun guide de contribution indexé pour ce dépôt

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.