Skip to content

Commit a8d74c7

Browse files
committed
CSHARP-6038: Suppress SharpCompress NU1902 audit warning (#1998)
1 parent ad1d826 commit a8d74c7

3 files changed

Lines changed: 21 additions & 0 deletions

File tree

benchmarks/MongoDB.Driver.Benchmarks/MongoDB.Driver.Benchmarks.csproj

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,4 +34,11 @@
3434
<ProjectReference Include="..\..\src\MongoDB.Driver.Encryption\MongoDB.Driver.Encryption.csproj" />
3535
<ProjectReference Include="..\..\tests\MongoDB.Driver.TestHelpers\MongoDB.Driver.TestHelpers.csproj" />
3636
</ItemGroup>
37+
38+
<ItemGroup>
39+
<!-- CSHARP-6038: SharpCompress directory-traversal advisory does not affect the driver,
40+
which only uses in-memory ZLib stream compression and never calls IArchive.WriteToDirectory.
41+
Remove once the SharpCompress dependency is dropped. -->
42+
<NuGetAuditSuppress Include="https://github.com/advisories/GHSA-6c8g-7p36-r338" />
43+
</ItemGroup>
3744
</Project>

src/Directory.Build.props

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -56,6 +56,13 @@
5656
</PackageReference>
5757
</ItemGroup>
5858

59+
<ItemGroup>
60+
<!-- CSHARP-6038: SharpCompress directory-traversal advisory does not affect the driver,
61+
which only uses in-memory ZLib stream compression and never calls IArchive.WriteToDirectory.
62+
Remove once the SharpCompress dependency is dropped. -->
63+
<NuGetAuditSuppress Include="https://github.com/advisories/GHSA-6c8g-7p36-r338" />
64+
</ItemGroup>
65+
5966
<ItemGroup>
6067
<Compile Include="..\MongoDB.Shared\IsExternalInit.cs" Visible="false" />
6168
</ItemGroup>

tests/BuildProps/Tests.Build.props

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -63,4 +63,11 @@
6363
<PackageReference Include="JunitXml.TestLogger" Version="2.1.81" />
6464
</ItemGroup>
6565

66+
<ItemGroup>
67+
<!-- CSHARP-6038: SharpCompress directory-traversal advisory does not affect the driver,
68+
which only uses in-memory ZLib stream compression and never calls IArchive.WriteToDirectory.
69+
Remove once the SharpCompress dependency is dropped. -->
70+
<NuGetAuditSuppress Include="https://github.com/advisories/GHSA-6c8g-7p36-r338" />
71+
</ItemGroup>
72+
6673
</Project>

0 commit comments

Comments
 (0)