Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix Microsoft.NETCore.App vulnerability warnings #307

Conversation

c72578
Copy link
Collaborator

@c72578 c72578 commented Dec 4, 2023

Microsoft.NETCore.App 2.0.0 contains a vulnerability.

  • Switch to version 2.0.9 by specifying RuntimeFrameworkVersion.
  • Fixes the following warnings:
    Warning NU1903 Package 'Microsoft.NETCore.App' 2.0.0 has a known
    high severity vulnerability,
    GHSA-7mfr-774f-w5r9
  • This only concerns the TargetFramework netcoreapp2.0 of:
    CUETools.ALACEnc/CUETools.ALACEnc.csproj
    CUETools.ARCUE/CUETools.ARCUE.csproj
    CUETools.CTDB.Converter/CUETools.CTDB.Converter.csproj
    CUETools.Converter/CUETools.Converter.csproj
    CUETools.Flake/CUETools.Flake.csproj
    CUETools.LossyWAV/CUETools.LossyWAV.csproj
    CUETools.eac3to/CUETools.eac3to.csproj

@c72578 c72578 marked this pull request as draft December 5, 2023 12:40
Microsoft.NETCore.App 2.0.0 contains a vulnerability.

- Switch to version 2.0.9 by specifying `RuntimeFrameworkVersion`.
- Fixes the following warnings:
  Warning NU1903 Package 'Microsoft.NETCore.App' 2.0.0 has a known
  high severity vulnerability,
  GHSA-7mfr-774f-w5r9
- This only concerns the TargetFramework `netcoreapp2.0` of:
  CUETools.ALACEnc/CUETools.ALACEnc.csproj
  CUETools.ARCUE/CUETools.ARCUE.csproj
  CUETools.CTDB.Converter/CUETools.CTDB.Converter.csproj
  CUETools.Converter/CUETools.Converter.csproj
  CUETools.Flake/CUETools.Flake.csproj
  CUETools.LossyWAV/CUETools.LossyWAV.csproj
  CUETools.eac3to/CUETools.eac3to.csproj
@c72578 c72578 force-pushed the 2023-12-04_Fix_Microsoft.NETCore.App_vulnerability_warnings branch from 5f93a0c to 9e72746 Compare December 5, 2023 20:32
@c72578 c72578 marked this pull request as ready for review December 5, 2023 20:33
@c72578 c72578 merged commit 58cc39e into gchudov:master Dec 9, 2023
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant