commandlineparser / commandlineparser/commandline

Version 2.9.1 is reported as vulnerable

Aperta
#938 8 commenti 0 reazioni 0 assegnatari Vedi su GitHub
Lingua principale
C#
Stelle
4.8k
Fork
478
Metriche di merge delle PR
Nessuna PR unita negli ultimi 30g

Descrizione

**Describe the bug**
JetBrains Rider signal the 2.9.1 version as vulnerable.
It doesn't provide details on the motivation.
This is also mentioned here:
https://github.com/jeremylong/DependencyCheck/issues/6048
https://github.com/jeremylong/DependencyCheck/issues/6088

Unfortunately some of the projects/customers I'm working on/with refuse to use libraries with known vulnerabilities.
Is there a mitigation ?

Many thanks in advance for any suggestion.

**To Reproduce**
Just add the NuGet package to any project in Rider, and the warning will appear

**Expected behavior**
No vulnerabilities signaled

**Screenshots**
![image](https://github.com/user-attachments/assets/b8606be8-24dd-4b0a-9fb9-5a6e365510c7)

Guida per i contributori

Nessuna guida per i contributori indicizzata per questo repository

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.