Merge pull request #149 from Lombiq/issue/OSOE-917

OSOE-917: Update vulnerable NuGet packages
Lombiq · Nov 28, 2024 · e198ee4 · e198ee4
2 parents a954610 + c5defae
commit e198ee4
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/Lombiq.VueJs.Samples/Lombiq.VueJs.Samples.csproj b/Lombiq.VueJs.Samples/Lombiq.VueJs.Samples.csproj
@@ -37,7 +37,9 @@
     <PackageReference Include="OrchardCore.Module.Targets" Version="2.0.0" />
     <PackageReference Include="OrchardCore.DisplayManagement" Version="2.0.0" />
     <PackageReference Include="OrchardCore.ResourceManagement" Version="2.0.0" />
-    <PackageReference Include="ZXing.Net.Bindings.ImageSharp.V2" Version="0.16.15" />
+    <!-- Only needed to override the vulnerable version referenced by ZXing.Net.Bindings.ImageSharp.V3. -->
+    <PackageReference Include="SixLabors.ImageSharp" Version="3.1.5" />
+    <PackageReference Include="ZXing.Net.Bindings.ImageSharp.V3" Version="0.16.16" />
   </ItemGroup>
 
   <ItemGroup>