FreeDotnetImageSharp 2.1.15
dotnet add package FreeDotnetImageSharp --version 2.1.15
NuGet\Install-Package FreeDotnetImageSharp -Version 2.1.15
<PackageReference Include="FreeDotnetImageSharp" Version="2.1.15" />
<PackageVersion Include="FreeDotnetImageSharp" Version="2.1.15" />
<PackageReference Include="FreeDotnetImageSharp" />
paket add FreeDotnetImageSharp --version 2.1.15
#r "nuget: FreeDotnetImageSharp, 2.1.15"
#:package FreeDotnetImageSharp@2.1.15
#addin nuget:?package=FreeDotnetImageSharp&version=2.1.15
#tool nuget:?package=FreeDotnetImageSharp&version=2.1.15
FreeDotnetImageSharp
FreeDotnetImageSharp is a community-maintained fork of SixLabors.ImageSharp 2.1.13, the last release line published under the Apache License 2.0. It ships security fixes for the 2.1.x API while staying under Apache-2.0.
Drop-in replacement
The assembly name (SixLabors.ImageSharp), strong-name identity (version 2.0.0.0), namespaces and public API are unchanged. Replace the package reference and your code keeps working:
dotnet remove package SixLabors.ImageSharp
dotnet add package FreeDotnetImageSharp
Do not reference both FreeDotnetImageSharp and SixLabors.ImageSharp in the same project. Documentation written for ImageSharp 2.x applies unchanged.
Security fixes
| Version | Advisory | Issue |
|---|---|---|
| 2.1.14 | GHSA-j9gm-c75j-xc9q | TIFF CCITT T4 encoder writes past its output buffer |
| 2.1.14 | GHSA-jjfr-hcj7-qf5w | TIFF CCITT T6 encoder writes past its output buffer |
| 2.1.14 | GHSA-j3p4-wp97-rph4 | HistogramEqualization uses an unchecked luminance as a histogram index |
| 2.1.14 | GHSA-gwg2-r3hj-4w44 | ICC CLUT parsing allocates from untrusted dimensions |
| 2.1.14 | GHSA-wmxv-xphr-5c9g | BigTIFF IFD entry count can cause a non-progressing loop |
| 2.1.15 | None (found by a FreeDotnetImageSharp audit; same class as GHSA-gwg2-r3hj-4w44) | ICC profile parsing allocated memory from untrusted counts in 12 more tag types (up to gigabytes from a profile of a few hundred bytes) when reading IccProfile.Entries |
License and credits
Licensed under the Apache License 2.0. All credit for the original work goes to Six Labors and the ImageSharp contributors. This project is not affiliated with or endorsed by Six Labors. Security fixes are independent implementations; no code from ImageSharp 3.x or later (Six Labors Split License) is included.
Source, issues and security reports: https://github.com/rickygzz/FreeDotnetImageSharp
| Product | Versions Compatible and additional computed target framework versions. |
|---|---|
| .NET | net5.0 was computed. net5.0-windows was computed. net6.0 was computed. net6.0-android was computed. net6.0-ios was computed. net6.0-maccatalyst was computed. net6.0-macos was computed. net6.0-tvos was computed. net6.0-windows was computed. net7.0 was computed. net7.0-android was computed. net7.0-ios was computed. net7.0-maccatalyst was computed. net7.0-macos was computed. net7.0-tvos was computed. net7.0-windows was computed. net8.0 was computed. net8.0-android was computed. net8.0-browser was computed. net8.0-ios was computed. net8.0-maccatalyst was computed. net8.0-macos was computed. net8.0-tvos was computed. net8.0-windows was computed. net9.0 was computed. net9.0-android was computed. net9.0-browser was computed. net9.0-ios was computed. net9.0-maccatalyst was computed. net9.0-macos was computed. net9.0-tvos was computed. net9.0-windows was computed. net10.0 was computed. net10.0-android was computed. net10.0-browser was computed. net10.0-ios was computed. net10.0-maccatalyst was computed. net10.0-macos was computed. net10.0-tvos was computed. net10.0-windows was computed. |
| .NET Core | netcoreapp2.0 was computed. netcoreapp2.1 is compatible. netcoreapp2.2 was computed. netcoreapp3.0 was computed. netcoreapp3.1 is compatible. |
| .NET Standard | netstandard2.0 is compatible. netstandard2.1 is compatible. |
| .NET Framework | net461 was computed. net462 was computed. net463 was computed. net47 was computed. net471 was computed. net472 is compatible. net48 was computed. net481 was computed. |
| MonoAndroid | monoandroid was computed. |
| MonoMac | monomac was computed. |
| MonoTouch | monotouch was computed. |
| Tizen | tizen40 was computed. tizen60 was computed. |
| Xamarin.iOS | xamarinios was computed. |
| Xamarin.Mac | xamarinmac was computed. |
| Xamarin.TVOS | xamarintvos was computed. |
| Xamarin.WatchOS | xamarinwatchos was computed. |
-
.NETCoreApp 2.1
- System.Runtime.CompilerServices.Unsafe (>= 5.0.0)
- System.Text.Encoding.CodePages (>= 5.0.0)
-
.NETCoreApp 3.1
- System.Runtime.CompilerServices.Unsafe (>= 5.0.0)
- System.Text.Encoding.CodePages (>= 5.0.0)
-
.NETFramework 4.7.2
- System.Buffers (>= 4.5.1)
- System.Memory (>= 4.5.4)
- System.Numerics.Vectors (>= 4.5.0)
- System.Runtime.CompilerServices.Unsafe (>= 5.0.0)
- System.Text.Encoding.CodePages (>= 5.0.0)
-
.NETStandard 2.0
- System.Buffers (>= 4.5.1)
- System.Memory (>= 4.5.4)
- System.Numerics.Vectors (>= 4.5.0)
- System.Runtime.CompilerServices.Unsafe (>= 5.0.0)
- System.Text.Encoding.CodePages (>= 5.0.0)
-
.NETStandard 2.1
- System.Buffers (>= 4.5.1)
- System.Memory (>= 4.5.4)
- System.Numerics.Vectors (>= 4.5.0)
- System.Runtime.CompilerServices.Unsafe (>= 5.0.0)
- System.Text.Encoding.CodePages (>= 5.0.0)
NuGet packages (1)
Showing the top 1 NuGet packages that depend on FreeDotnetImageSharp:
| Package | Downloads |
|---|---|
|
FreeDotnetPOI
Community-maintained, Apache-2.0 licensed fork of NPOI 2.7.6 (.NET port of Apache POI). Not affiliated with or endorsed by Nissl Lab or the Apache Software Foundation. |
GitHub repositories
This package is not used by any popular GitHub repositories.