commandlineparser / commandlineparser/commandline

Version 2.9.1 is reported as vulnerable

未关闭
#938 8 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
主要语言
C#
星标
4.8k
派生
478
PR 合并指标
30 天内没有已合并 PR

描述

**Describe the bug**
JetBrains Rider signal the 2.9.1 version as vulnerable.
It doesn't provide details on the motivation.
This is also mentioned here:
https://github.com/jeremylong/DependencyCheck/issues/6048
https://github.com/jeremylong/DependencyCheck/issues/6088

Unfortunately some of the projects/customers I'm working on/with refuse to use libraries with known vulnerabilities.
Is there a mitigation ?

Many thanks in advance for any suggestion.

**To Reproduce**
Just add the NuGet package to any project in Rider, and the warning will appear

**Expected behavior**
No vulnerabilities signaled

**Screenshots**
![image](https://github.com/user-attachments/assets/b8606be8-24dd-4b0a-9fb9-5a6e365510c7)

贡献指南

这个仓库没有索引到贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。