dohertj2/lmxopcua
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Remove NuGetAuditSuppress for CVE-2025-6965 once a patched SQLitePCLRaw bundle ships #458

New Issue
Closed
opened 2026-07-15 08:01:43 -04:00 by dohertj2 · 0 comments
dohertj2 commented 2026-07-15 08:01:43 -04:00
Owner
Copy Link
Copy Source

Status: upstream-gated cleanup. Directory.Build.props carries a temporary <NuGetAuditSuppress> for CVE-2025-6965 / GHSA-2m69-gcr7-jv3q — the transitive native SQLitePCLRaw.lib.e_sqlite3 bundle, which has no upstream fix yet. Restore/build not flagging it is expected while the suppression is in place.

Acceptance:

  • When a patched SQLitePCLRaw bundle ships, bump the dependency and remove the <NuGetAuditSuppress> entry from Directory.Build.props.
  • Verify dotnet restore/build is clean without the suppression (audit no longer flags GHSA-2m69-gcr7-jv3q).
**Status:** upstream-gated cleanup. `Directory.Build.props` carries a temporary `<NuGetAuditSuppress>` for **CVE-2025-6965 / GHSA-2m69-gcr7-jv3q** — the transitive native `SQLitePCLRaw.lib.e_sqlite3` bundle, which has no upstream fix yet. Restore/build not flagging it is expected while the suppression is in place. **Acceptance:** - [ ] When a patched `SQLitePCLRaw` bundle ships, bump the dependency and **remove** the `<NuGetAuditSuppress>` entry from `Directory.Build.props`. - [ ] Verify `dotnet restore`/`build` is clean without the suppression (audit no longer flags GHSA-2m69-gcr7-jv3q).
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
auto-managed
queue management
 cross-driver
queue management
 driver/abcip
queue management
 driver/ablegacy
queue management
 driver/focas
queue management
 driver/opcuaclient
queue management
 driver/s7
queue management
 driver/twincat
queue management
 phase/1
queue management
 phase/2
queue management
 phase/3
queue management
 phase/4
queue management
 phase/5
queue management
 phase/6
queue management
 queue/blocked
queue management
 queue/done
queue management
 queue/failed
queue management
 queue/in-progress
queue management
 queue/queued
queue management
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
dohertj2 (dohertj2)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dohertj2/lmxopcua#458
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?