Vulnerability in System.Data.SqlClient package

[alexanddercrb]

There is a vulnerability on this package, details here: https://security.snyk.io/vuln/SNYK-DOTNET-SYSTEMDATASQLCLIENT-3110424
Maybe it can be updated to a newer version

[Cinchoo]

completed.

[jvmap]

There is a new vulnerability:
GHSA-98g6-xh36-x2p7

I wonder, why does the core ChoETL package even depend on System.Data.SqlClient? On first sight, this dependency would be more sensible as an optional extension.

[stevenrlp]

This is causing users who have upgraded to .NET 9 to not be able to build their solutions as Microsoft have changed the default NuGetAudit options. Maybe this should be addressed and as jvmap said maybe even added as an optional extension.

[Cinchoo]

upgraded sqlclient package, released v1.2.1.69.