Please upgrade targeting to include .net 8. Currently .net 8 projects resolve .net standard 2.0 packages which include a vulnerability.

[Banner-Keith]

System.Data.Common 4.3.0 has a dependency on System.Text.RegularExpressions 4.3.0 which has a vulnerability. Please add .net 8 support, and consider adding System.Text.RegularExpressions 4.3.1 to your netstandard 2.0 dependencies so that those who are targeting .net standard don't pull in a vulnerable package.

You may also want to consider dropping support for .net 6 since it goes EOL on the 12th.

I would be happy to open a PR if that would help get this done.

[rgroenewoudt]

Most of the dependencies in MiniProfiler.Shared could be removed if it targets net8.0

[ctyar-qc]

While waiting for a new release you can add this to your csproj file to supress this warning:

<ItemGroup>
  <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-cmhx-cq75-c4mj" />
</ItemGroup>

[NickCraver]

Version 4.5.4 is being uploaded to NuGet now, resolving all these issues and moving us to net8.0. I'd appreciate any additional things y'all see that need love - I think we should be in a good state with this set of updates :)