Possibility to update System.Data.SqlClient to version >=4.8.5?

[akaBilih]

Good day,

I'm recieveing warnings by my IDE that "Transitive dependency System.Data.SqlClient 4.8.1 contains vulnerabilities according to
Checkmarx©", and there is, in fact, an official Microsoft report on the vulnerability (which indicates a medium security risk) and that it has been fixed in version 4.8.5.

In theory, to fix it, its only necessary to update the Nuget Package.
Would that be possible?
Thanks a lot

[lbargaoanu]

You'll have to do that in your own code. EF depends on that package and there is no newer version for that.

[MagicAndre1981]

EF depends on that package and there is no newer version for that.

EF 6.5.1 has some updates and uses a newer Sql client version.

So, maybe also update EF in your lib to 6.5.1

[lbargaoanu]

A PR is welcome.

[MagicAndre1981]

A PR is welcome.

done in #36