fix(security): pin compatible patched dependency versions

2026-10-24 09:05:23 +02:00
parent 75cd04cfc2
commit 780b9bc64f
8 changed files with 116 additions and 68 deletions
@@ -25,6 +25,8 @@
    <PackageReference Include="SQLitePCLRaw.lib.e_sqlite3" Version="2.1.12" />
    <PackageReference Include="Stripe.net" Version="52.2.0" />
    <PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="8.14.0" />
+    <!-- Override MimeKit's vulnerable transitive floor; retain its supported 8.x API. -->
+    <PackageReference Include="System.Security.Cryptography.Pkcs" Version="8.0.2" />
  </ItemGroup>

 </Project>
@@ -138,6 +138,12 @@
          "Microsoft.IdentityModel.Tokens": "8.14.0"
        }
      },
+      "System.Security.Cryptography.Pkcs": {
+        "type": "Direct",
+        "requested": "[8.0.2, )",
+        "resolved": "8.0.2",
+        "contentHash": "VWACYq0JGxi9sw3TonSSV4B2MfhYk5nhgOtp9wbrt5NFOtUetFqHkMZylcCwPX+117cBJH5EnIzIy6X4OKn/kA=="
+      },
      "BouncyCastle.Cryptography": {
        "type": "Transitive",
        "resolved": "2.6.2",
@@ -600,11 +606,6 @@
        "resolved": "6.0.0",
        "contentHash": "/iUeP3tq1S0XdNNoMz5C9twLSrM/TH+qElHkXWaPvuNOt+99G75NrV0OS2EqHx5wMN7popYjpc8oTjC1y16DLg=="
      },
-      "System.Security.Cryptography.Pkcs": {
-        "type": "Transitive",
-        "resolved": "8.0.1",
-        "contentHash": "CoCRHFym33aUSf/NtWSVSZa99dkd0Hm7OCZUxORBjRB16LNhIEOf8THPqzIYlvKM0nNDAPTRBa1FxEECrgaxxA=="
-      },
      "System.Security.Cryptography.ProtectedData": {
        "type": "Transitive",
        "resolved": "9.0.0",