sqlkata/querybuilder

Vulnerability in System.Text.RegularExpressions 4.3.0

joehom0416 opened this issue · 0 comments

joehom0416 commented

Hi Team,

We's running Synk scan and it show a vulnerability for for System.Text.RegularExpressions 4.3.0. check this link https://security.snyk.io/vuln/SNYK-DOTNET-SYSTEMTEXTREGULAREXPRESSIONS-174708

I tracked it down to the dependency of sqlkata, found that System.IO 4.3.0 has depend on System.Text.RegularExpressions 4.3.0

I believe it can be resolved by upgrading the System.IO to 4.3.1.