HIGH8.7
GHSA-98g6-xh36-x2p7
Microsoft.Data.SqlClient and System.Data.SqlClient vulnerable to SQL Data Provider Security Feature Bypass
Quick fix
GHSA-98g6-xh36-x2p7 — Microsoft.Data.SqlClient: upgrade to the fixed version with the command below.
dotnet add package Microsoft.Data.SqlClient --version 2.1.7Details
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
Are you affected?
Enter the version of the package you're using.
Affected packages
NuGet/Microsoft.Data.SqlClient
Introduced in:
0Fixed in: 2.1.7Fix
dotnet add package Microsoft.Data.SqlClient --version 2.1.7NuGet/System.Data.SqlClient
Introduced in:
0Fixed in: 4.8.6Fix
dotnet add package System.Data.SqlClient --version 4.8.6NuGet/Microsoft.Data.SqlClient
Introduced in:
3.0.0Fixed in: 3.1.5Fix
dotnet add package Microsoft.Data.SqlClient --version 3.1.5NuGet/Microsoft.Data.SqlClient
Introduced in:
4.0.0Fixed in: 4.0.5Fix
dotnet add package Microsoft.Data.SqlClient --version 4.0.5NuGet/Microsoft.Data.SqlClient
Introduced in:
5.0.0Fixed in: 5.1.3Fix
dotnet add package Microsoft.Data.SqlClient --version 5.1.3