Closed
Description
We use the latest version(2.21.0) on a .NET6 web api. It seems the package adds as a transitive dependency the package: System.Drawing.Common version 4.70. This is flagged with a security vulnerability: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-24112.
Because of this our dependencies security scanner service rejects all the builds during CI. Is there a way to get this updated or removed ?
Thanks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Metadata
Assignees
Labels
No labels