totpero/DeviceDetector.NET

Update minimum version for LiteDB | security vulnerability

Camcdonou opened this issue · 2 comments

Camcdonou commented

Hi! LiteDB 5.0.11 has a major security vulnerability (Deserialization of untrusted data). Could you update the package to require a minimum version for LiteDB of 5.0.13 or above?

My source: GHSA-3x49-g6rc-c284

Thanks :)

totpero commented

Hi @ConnorMcDonough and thanks.
I will create new release.

Thanks 👍

  • ❤️1
totpero commented

Hi @ConnorMcDonough

In last relasease v6.1.0 I update all nugets.

Thanks 👍

  • ❤️1