Patch vulnerable PDF cryptography dependency

2026-10-14 22:22:34 +03:00
parent 66138eb3ea
commit 0919f34b14
2 changed files with 8 additions and 0 deletions
@@ -9,6 +9,8 @@
    <PackageReference Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="10.0.8" />
    <PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.0" />
    <PackageReference Include="PDFsharp-MigraDoc" Version="6.2.4" />
+    <!-- PDFsharp requests 8.0.1; pin its security-patched compatible dependency. -->
+    <PackageReference Include="System.Security.Cryptography.Pkcs" Version="8.0.2" />
  </ItemGroup>

  <PropertyGroup>