Updated vulnerable dependencies System.Security.Cryptography and SharpZipLib#905
Merged
NightOwl888 merged 2 commits intoapache:master from NightOwl888:fix/vulnerable-dependencies-jan-2024Jan 20, 2024
+2-2
Commits
Commits on Jan 20, 2024
.build/dependencies.props: Bumped System.Security.Cryptography package to 6.0.1 because of security vulnerabilities found in 4.7.0. See: GHSA-2m65-m22p-9wjw
committed.build/dependencies.props: Bumped SharpZipLib to 1.4.2 because of security vulnerabilities found in 1.1.0. See: GHSA-m22m-h4rf-pwq3 and GHSA-mm6g-mmq6-53ff
committed