notfire/Iceshrimp.NET
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[backend/csproj] Bump ImageSharp version

Browse source 
3.1.5-iceshrimp (based on upstream 3.1.4) is vulnerable to a DoS attack using specially crafted GIF images. Ref: https://github.com/advisories/GHSA-63p8-c4ww-9cg7
This commit is contained in:
Laura Hausmann 2024-07-23 21:13:16 +02:00
parent 4d0ccf1e74
commit ccdfb75e6d
No known key found for this signature in database
GPG key ID: D044E84C5BE01605
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
Iceshrimp.Backend/Iceshrimp.Backend.csproj
View file

@ -37,7 +37,7 @@
<PackageReference Include="Microsoft.Extensions.Configuration.Ini" Version="8.0.0" /> <PackageReference Include="Microsoft.Extensions.Configuration.Ini" Version="8.0.0" />
<PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="8.0.4" /> <PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="8.0.4" />
<PackageReference Include="SixLabors.ImageSharp.Drawing" Version="2.1.3" /> <PackageReference Include="SixLabors.ImageSharp.Drawing" Version="2.1.3" />
<PackageReference Include="SixLabors.ImageSharp" Version="3.1.5-iceshrimp" /> <PackageReference Include="SixLabors.ImageSharp" Version="3.1.6-iceshrimp" />
<PackageReference Include="Swashbuckle.AspNetCore" Version="6.6.2" /> <PackageReference Include="Swashbuckle.AspNetCore" Version="6.6.2" />
<PackageReference Include="System.IO.Hashing" Version="8.0.0" /> <PackageReference Include="System.IO.Hashing" Version="8.0.0" />
<PackageReference Include="System.Text.RegularExpressions" Version="4.3.1" /> <PackageReference Include="System.Text.RegularExpressions" Version="4.3.1" />