Constrain System.Drawing version to fix CVE (OrchardCMS#5)

DrewScoggins · Nov 4, 2022 · 4bf053c · 4bf053c
1 parent 333d60b
commit 4bf053c
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/...hardCore.Modules/OrchardCore.DataProtection.Azure/OrchardCore.DataProtection.Azure.csproj b/...hardCore.Modules/OrchardCore.DataProtection.Azure/OrchardCore.DataProtection.Azure.csproj
@@ -14,6 +14,7 @@
   </ItemGroup>
 
   <ItemGroup>
+    <PackageReference Include="System.Drawing.Common" Version="4.7.2"/>
     <PackageReference Include="Azure.Extensions.AspNetCore.DataProtection.Blobs"/>
   </ItemGroup>
 

diff --git a/src/OrchardCore/OrchardCore.Data.YesSql/OrchardCore.Data.YesSql.csproj b/src/OrchardCore/OrchardCore.Data.YesSql/OrchardCore.Data.YesSql.csproj
@@ -23,6 +23,7 @@
   </ItemGroup>
 
   <ItemGroup>
+    <PackageReference Include="System.Drawing.Common" Version="4.7.2" />
     <PackageReference Include="YesSql" />
   </ItemGroup>