Update Microsoft.Data.SqlClient to avoid CVE

[ggros-septeo]

Hi there,

I'm using DistributedLock.SqlServer in a project. I'm also using Snyk to check my project CVE.

The tool is flagging a vulnerability (SNYK-DOTNET-SYSTEMRUNTIMECACHING-8168846) in the System.Runtime.Caching package.

Would it be possible to update the package Microsoft.Data.SqlClient to the latest version (6.1.4) ? I would be pleased to open a pull request.

[madelson]

@ggros-septeo thanks for flagging. I am happy to update.

In the meantime for your use please just override the version of sqlclient for your project. DistributedLock does not bound the upper version specifically to support things like this.

Happy to take a PR if you’d like to send. (fixed it)

[ggros-septeo]

Thank you.