Mimekit has vulnerable dependency that can lead to denial of service

[danielwspie]

GHSA-gmc6-fwg3-75m5

Serilog.Sinks.Email (v4.0.0)
└─ MailKit (v4.6.0)
└─ MimeKit (v4.6.0)

[jwalz-hunter]

Any update on this?

[romovs]

Are there any plans to officially release a new version with #143 merged? Mentioned vulnerability is of high severity

[Amir-Ageez]

Any updates, please?

[Kissaki]

For your consideration:

As a workaround, you can install the vulnerable transient dependencies explicitly in a newer non-vulnerable version. The newer versions are compatible. NuGet will resolve the newer versions, and MimeKit will use those.