Dependency on System.Drawing.Common that has a vulnerability
StackExchange.Redis 2.6.70
- System.Diagnostics.PerformanceCounter >= 5.0.0
- System.Configuration.ConfigurationManager >= 5.0.0
- System.Security.Permissions >= 5.0.0
- System.Windows.Extensions >= 5.0.0
- System.Drawing.Common >= 5.0.0
- System.Windows.Extensions >= 5.0.0
- System.Security.Permissions >= 5.0.0
- System.Configuration.ConfigurationManager >= 5.0.0
Because nuget uses the lowest version that meets the requirements, by default you end up with a System.Drawing.Common 5.0.0 which as the following security vulnerability: GHSA-rxg9-xrhp-64gj
This can be worked around by explicitly referencing the version with the fix:
<PackageReference Inculde="System.Drawing.Common" Version="5.0.3" />