OrmLite.Sqlite.Data package has a vunerability issue

Keith · June 19, 2026, 10:24am

In the latest (10.0.7) ServiceStack.OrmLite.Sqlite.Data package there is a vunerability:

error NU1903: Warning As Error: Package ‘SQLitePCLRaw.lib.e_sqlite3’ 2.1.11 has a known high severity vulnerability,

Any timeline for a fix?

mythz · June 19, 2026, 1:58pm

All ServiceStack external dependencies should be updated to use the latest stable versions and
v10.0.8 that’s now available on NuGet.

The next v10.0.9 pre-release packages have also been updated with this latest version.

Keith · June 19, 2026, 2:14pm

Great, thank you very much.

Keith · June 19, 2026, 5:06pm

I upgraded to 10.0.8 (from nuget), but I still see the same vulnerability warning.

mythz · June 20, 2026, 1:53am

ServiceStack.OrmLite.SqlServer.Data was updated to reference the latest stable version of
Microsoft.Data.Sqlite (>= 10.0.9):

This is the latest stable version available which was just released 10 days ago:

That’s all that can be done until Microsoft releases a newer stable version.