log4net > Vulnerability > CVE-2021-24112

[miguel.carvajal]

Hello,

 

In our CI pipeline, we detected vulnerability CVE-2021-24112, which affects
the System.Drawing.Common 5.0.0 package, which is a dependency of log4net
2.0.15.

 

> dotnet list package --vulnerable --include-transitive

   > System.Drawing.Common      5.0.0      Critical
https://github.com/advisories/GHSA-rxg9-xrhp-64gj

 



 

Regards.