Restore fails on develop: SixLabors.ImageSharp 3.1.12 flagged by NuGet audit (high severity advisories)
Maintainers usually reply within 7 days
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 55/100
- Issue type
- Bug
- Clarity
- Mostly clear
- Activity status
- Active
- Tech stack
- csharp
- Domain
- build-system, security
Research direction
Start with the SixLabors.ImageSharp pin in src/Directory.Packages.props and the restore failure from dotnet test src/Chaptarr.Core.Test/Chaptarr.Core.Test.csproj. Check ImageSharp 4.x API compatibility and license terms, then run the test project to confirm restore and tests succeed without disabling NuGet audit.
Written by the indexing model from the issue text.
Description
On current develop (e67374f), dotnet test src/Chaptarr.Core.Test/Chaptarr.Core.Test.csproj fails at restore with
NU1902/NU1903 "Warning As Error" for SixLabors.ImageSharp 3.1.12 (pinned in src/Directory.Packages.props):
- high: GHSA-j3p4-wp97-rph4, GHSA-j9gm-c75j-xc9q, GHSA-jjfr-hcj7-qf5w
- moderate: GHSA-gwg2-r3hj-4w44, GHSA-wmxv-xphr-5c9g
3.1.12 is the newest 3.1.x on NuGet; the next releases are 4.0.0 … 4.1.2, so the fix is a major-version upgrade
(API and licence terms to check), not a patch bump. Workaround for local builds only: -p:NuGetAudit=false.
SDK 10.0.400, Linux. Happy to test a PR.
- Dominant language
- C#
- Stars
- 664
- Forks
- 48
- Avg merge
- 3d 5h
- Merged PRs (30d)
- 1
Getting set up
- Ships a Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from Chaptarr/chaptarr
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
Maintainers usually reply within 7 days
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
Chaptarr/chaptarr#313 · 1 comment ·
Maintainers usually reply within 7 days
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
Maintainers usually reply within 7 days
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 63/100
Maintainers usually reply within 7 days
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
Maintainers usually reply within 7 days
All issues in Chaptarr/chaptarr
Similar issues
-
ASP.NET Core container quickstart: `docker-run: debug` task sample is missing its closing braceOpen
Difficulty 1/5 Under an hour Newbie friendliness 88/100
microsoft/vscode-docs#10499 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
python triage
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
microsoft/semantic-kernel#14615 ·
Maintainers usually reply within 3 days
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
vzeol/DeployCraft#125 ·
Maintainers usually reply within 1 day