Skip to content

9.45.1

Choose a tag to compare

View all tags
@jeremydmiller jeremydmiller released this 14 Oct 16:54
· 41 commits to master since this release
9.45.1
e1703f9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

A security patch release. No code changes needed. See the 9.45.1 notes.

Security

  • CVE-2026-84008 / GHSA-846f-f764-76mx (System.Security.Cryptography.Pkcs, high-severity denial of service) (#710). Weasel.SqlServer brought in a vulnerable Pkcs 9.0.4 through Microsoft.Data.SqlClient 6.1.3, and Weasel.Oracle brought in 8.0.0 through Oracle.ManagedDataAccess.Core 23.7.0. Both now reference the package directly, at 9.0.21 on net9.0 and 10.0.13 on net10.0.
Assets 2
Loading