System.Security.Cryptography.Pkcs dependency has severe vulnerability

[tdhooten]

The dependency on System.Security.Cryptography.Pkcs version 6.0.1 has the following CVE-2023-29331:

GHSA-555c-2p6r-68mm

Please bump the version to at least 7.0.2 as soon as possible.

[mganss]

This is an indirect dependency introduced through NPOI. I have reported to the NPOI team.

[mganss]

This has been resolved in nissl-lab/npoi#1183. Will update as soon as NPOI releases a new version.