In #17, we have added a direct dependency to SharpCompress and Snappier packages in order to avoid getting NU1902/NU1903 errors due to known vulnerabilities:
Once a new version of MongoDB.Driver gets released and it references newer versions, we need to remove:
|
<PackageReference Include="SharpCompress" /> |
|
<PackageReference Include="Snappier" /> |
|
<PackageVersion Include="SharpCompress" Version="0.49.1" /> |
|
<PackageVersion Include="Snappier" Version="1.3.1" /> |
And bump MongoDB.Driver here:
|
<PackageVersion Include="MongoDB.Driver" Version="3.7.1" /> |
In #17, we have added a direct dependency to SharpCompress and Snappier packages in order to avoid getting NU1902/NU1903 errors due to known vulnerabilities:
SharpCompress0.49.1 (fixes GHSA-6c8g-7p36-r338)Snappier1.3.1 (fixes GHSA-pggp-6c3x-2xmx)Once a new version of
MongoDB.Drivergets released and it references newer versions, we need to remove:AI/MEVD/src/CosmosMongoDB/CosmosMongoDB.csproj
Lines 24 to 25 in 1697580
AI/Directory.Packages.props
Lines 22 to 23 in 1697580
And bump
MongoDB.Driverhere:AI/Directory.Packages.props
Line 16 in 1697580