Visual Studio detecting Venerability with SixLabours.ImageSharp dependencies

[bhaveshvakil]

Can someone upgrade this package?

GHSA-65x7-c272-7g7r

As per author, they already fixed the issue but PdfSharpCore is still using old package.

Thanks

[chrisg32]

@bhaveshvakil If you add package SixLabors.ImageSharp 2.1.7 the error will go away.

This should be closed with #429

[hungphamcrl]

will PdfSharpCore works with 2.1.8? version 2.1.7 is vulnerable now

[chrisg32]

@hungphamcrl it should it you add the 2.1.8 package directly.

PR #435 will bump the minimum version to 2.1.8

[TonyValenti]

PR #427 contains that fix and preserves different versions for legacy builds of the library as well.

[Grynet]

It would be great if this could finally get some attention from the author.

As mentioned solution proposals have already been provided in the linked PR

[jarrabito]

Is there an ETA on this?