Vulnerability in System.Text.RegularExpressions

[JoaoSeverino]

Currently, TinyCsvParser uses NuGet System.Text.RegularExpressions version 4.3.0 which has a known vulnerability and should be upgraded to a patched version.

See GHSA-cmhx-cq75-c4mj

[bytefish]

I will update the dependency and release it as a new 2.6.2. The other PR has some breaking changes I think, and it should be a 3.0. What do you think?

[JoaoSeverino]

That is perfectly OK

[JoaoSeverino]

I also now noticed another vulnerability in the Test and Benchmark projects for Microsoft.NETCore.App NuGet (see GHSA-7mfr-774f-w5r9)

But the original one is the only one that affects the product itself.

[bytefish]

I think disabling dependabot wasn’t that clever. 😇

[bytefish]

I removed the net45 Target Framework, because it isn't supported anymore. Instead netstandard2.0, netstandard2.1 and net6.0 are targeted. The latter is probably not required, because .net6.0 should support netstandard2.1 anyway.