From e9fb6fbbde2f364d9a8020457d89933f0d38f0b4 Mon Sep 17 00:00:00 2001 From: Eduardo Jimenez Date: Tue, 1 Sep 2026 15:14:51 -0300 Subject: [PATCH 1/2] fix(deps): bump Testcontainers to 4.14.0 to clear the SSH.NET advisory Testcontainers 4.11.0 depends on SSH.NET 2025.1.0, which carries a high-severity advisory (GHSA-q939-rpr3-3284: ScpClient recursive download allows arbitrary file write via server-controlled SCP filenames). NuGetAudit raises NU1903 and, under TreatWarningsAsErrors, fails restore for Integration.Tests and Integration.Middleware.Tests. Testcontainers 4.14.0 already depends on the patched SSH.NET 2026.0.0, so bumping the three Testcontainers.* packages clears the advisory without a transitive pin that would later need removing. Co-Authored-By: Claude Opus 5 --- src/Directory.Packages.props | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/src/Directory.Packages.props b/src/Directory.Packages.props index 0d38b28190..415756d0c0 100644 --- a/src/Directory.Packages.props +++ b/src/Directory.Packages.props @@ -122,9 +122,10 @@ - - - + + + + From e94d513a68fd24177e5c63cd2e6011e1f7b6545e Mon Sep 17 00:00:00 2001 From: maxiar Date: Tue, 1 Sep 2026 15:16:52 -0300 Subject: [PATCH 2/2] fix(deps): bump Testcontainers to 4.14.0 to clear the SSH.NET advisory Testcontainers 4.11.0 depends on SSH.NET 2025.1.0, which carries a high-severity advisory (GHSA-q939-rpr3-3284: ScpClient recursive download allows arbitrary file write via server-controlled SCP filenames). NuGetAudit raises NU1903 and, under TreatWarningsAsErrors, fails restore for Integration.Tests and Integration.Middleware.Tests. Testcontainers 4.14.0 already depends on the patched SSH.NET 2026.0.0, so bumping the three Testcontainers.* packages clears the advisory without a transitive pin that would later need removing. Co-Authored-By: Claude Opus 5 --- src/Directory.Packages.props | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/src/Directory.Packages.props b/src/Directory.Packages.props index 0d38b28190..415756d0c0 100644 --- a/src/Directory.Packages.props +++ b/src/Directory.Packages.props @@ -122,9 +122,10 @@ - - - + + + +