Skip to content

Commit 5f5cf30

Browse files
committed
Unpin Snappier since MongoDB.Driver has fixed that CVE
1 parent b33dd4f commit 5f5cf30

1 file changed

Lines changed: 2 additions & 3 deletions

File tree

src/NServiceBus.Storage.MongoDB/NServiceBus.Storage.MongoDB.csproj

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,10 +13,9 @@
1313
</ItemGroup>
1414

1515
<ItemGroup Label="Direct references to transitive dependencies to avoid versions with CVE">
16-
<!-- Both Snappier and SharpCompress are brought in by MongoDB.Driver -->
17-
<!-- These references can be removed when MongoDB.Driver is updated to reference the latest versions of Snappier and SharpCompress -->
16+
<!-- SharpCompress is brought in by MongoDB.Driver -->
17+
<!-- This reference can be removed when MongoDB.Driver is updated to reference the latest version of SharpCompress -->
1818
<PackageReference Include="SharpCompress" Version="0.48.0" />
19-
<PackageReference Include="Snappier" Version="1.3.1" />
2019
</ItemGroup>
2120

2221
<ItemGroup>

0 commit comments

Comments
 (0)