Update of Packages due to Security Issues

[radlung]

I got a highly relevant security warning when using the NPOI package.
It's related to package System.Security.Cryptography.Pkcs which has security issues and should be updated.

In general one should consider to update all referring packages from time to time.

[tonyqus]

which version of NPOI are you using? What security issues are you talking about?

[radlung]

Thank you for quick reply!
I am using version 2.6.0 and in my cloud application's security scanner I got this critical warning:

The mentioned security issue of the library (System.Security.Cryptography.Pkcs) is used by the project NPOI.OOXML.Core.

[tonyqus]

According to https://www.nuget.org/packages/System.Security.Cryptography.Xml/6.0.1, it replies on System.Security.Cryptography.Pkcs 6.0.1 instead of 6.0.3, which causes the issue. But there is no further fix on 6.0.x unless NPOI uses 7.0.x instead.

[Bykiev]

You can find more information here: dotnet/runtime#87498