Skip to content

Commit 7e021cf

Browse files
authored
fix: suppress SQLitePCLRaw.lib.e_sqlite3 audit warning (GHSA-2m69-gcr7-jv3q) (#1424)
All versions of SQLitePCLRaw.lib.e_sqlite3 (<= 2.1.11) depend on SQLite < 3.50.2 which has a memory corruption vulnerability (HIGH severity). No patched NuGet package exists yet. This suppresses the NU1903 audit warning that breaks CI builds due to TreatWarningsAsErrors=true. The suppression should be removed once a patched SQLitePCLRaw version is published.
1 parent 63d4e08 commit 7e021cf

1 file changed

Lines changed: 4 additions & 1 deletion

File tree

Directory.Build.props

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -52,5 +52,8 @@
5252

5353
<ItemGroup>
5454
<NuGetAuditSuppress Include="https://github.com/advisories/GHSA-4mjw-xr5x-prpc" />
55+
<!-- SQLitePCLRaw.lib.e_sqlite3 <= 2.1.11 depends on vulnerable SQLite < 3.50.2 (memory corruption).
56+
No patched NuGet version available yet. Suppress until upstream ships a fix. -->
57+
<NuGetAuditSuppress Include="https://github.com/advisories/GHSA-2m69-gcr7-jv3q" />
5558
</ItemGroup>
56-
</Project>
59+
</Project>

0 commit comments

Comments
 (0)