Skip to content

Please update version of System.Data.SqlClient in Serilog.Exceptions.SqlServer #830

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
Banner-Keith opened this issue Apr 11, 2024 · 2 comments
Labels
bug Issues describing a bug or pull requests fixing a bug.
Milestone

Comments

@Banner-Keith
Copy link

Describe the bug

System.Data.SqlClient 4.8.1 has a high and a moderate security vulnerability. Please update to 4.8.6

There are no breaking changes so it should be a quick update.

Steps to reproduce

See vulnerability here: https://www.nuget.org/packages/System.Data.SqlClient/4.8.1

Expected behaviour

No vulnerable dependencies.

@Banner-Keith Banner-Keith added the bug Issues describing a bug or pull requests fixing a bug. label Apr 11, 2024
@alexdresko
Copy link

Also, I'm getting an error Could not load type 'SqlGuidCaster' from assembly 'System.Data.SqlClient, Version=4.6.1.1, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a' because it contains an object field at offset 0 that is incorrectly aligned or overlapped by a non-object field.' which appears to be related to the version of System.Data.SqlClient being referenced. See dotnet/SqlClient#1930.

I removed Serilog.Exceptions.SqlServer from my project and the error went away.

@SimonCropp SimonCropp added this to the 9.0.0 milestone Oct 19, 2024
@SimonCropp
Copy link
Collaborator

will be fixed in v9

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Issues describing a bug or pull requests fixing a bug.
Projects
None yet
Development

No branches or pull requests

3 participants