Original все еще уязвим и имеет незакрытую CVE-2024-48510

EvilBeaver · EvilBeaver · commit 2ab4e87ecaf3 · 2025-07-29T20:46:58.000+03:00
ProDotNetZip и его родитель DotNetZip.Semverd имеют коммит с исправлением: haf/DotNetZip.Semverd@18486ad
diff --git a/src/OneScript.StandardLibrary/OneScript.StandardLibrary.csproj b/src/OneScript.StandardLibrary/OneScript.StandardLibrary.csproj
@@ -24,8 +24,8 @@
     </PropertyGroup>
 
     <ItemGroup>
-        <PackageReference Include="DotNetZip.Original" Version="2025.2.15" />
         <PackageReference Include="Newtonsoft.Json" Version="13.0.2" />
+        <PackageReference Include="ProDotNetZip" Version="1.20.0" />
     </ItemGroup>
     
     <ItemGroup>
diff --git a/src/OneScript.StandardLibrary/Zip/DotNetZipEncoding.cs b/src/OneScript.StandardLibrary/Zip/DotNetZipEncoding.cs
@@ -32,12 +32,17 @@ public static void SetDefault(Encoding encoding)
                 if (_encodingIsSet)
                     return;
                 
-                SetDefaultEncoding(encoding);
+                SetDefaultEncodingViaProperty(encoding);
                 _encodingIsSet = true;
             }
         }
 
-        private static void SetDefaultEncoding(Encoding encoding)
+        private static void SetDefaultEncodingViaProperty(Encoding encoding)
+        {
+            ZipFile.DefaultEncoding = encoding;
+        }
+        
+        private static void SetDefaultEncodingViaReflection(Encoding encoding)
         {
             const string fieldName = "_defaultEncoding";
 

Original file line number	Diff line number	Diff line change
`@@ -32,12 +32,17 @@ public static void SetDefault(Encoding encoding)`
`32`	`32`	`if (_encodingIsSet)`
`33`	`33`	`return;`
`34`	`34`
`35`		`- SetDefaultEncoding(encoding);`
	`35`	`+ SetDefaultEncodingViaProperty(encoding);`
`36`	`36`	`_encodingIsSet = true;`
`37`	`37`	`}`
`38`	`38`	`}`
`39`	`39`
`40`		`- private static void SetDefaultEncoding(Encoding encoding)`
	`40`	`+ private static void SetDefaultEncodingViaProperty(Encoding encoding)`
	`41`	`+ {`
	`42`	`+ ZipFile.DefaultEncoding = encoding;`
	`43`	`+ }`
	`44`	`+`
	`45`	`+ private static void SetDefaultEncodingViaReflection(Encoding encoding)`
`41`	`46`	`{`
`42`	`47`	`const string fieldName = "_defaultEncoding";`
`43`	`48`