Fix CVE-2024-43483

Author: C0nquistadore

Directory.Packages.props

@@ -46,6 +46,7 @@
     <PackageVersion Include="System.IO.Packaging" Version="9.0.0" />
     <PackageVersion Include="System.Reflection.Emit" Version="4.7.0" />
     <PackageVersion Include="System.Reflection.Metadata" Version="9.0.0" />
+    <PackageVersion Include="System.Runtime.Caching" Version="8.0.1" />
     <PackageVersion Include="Testcontainers" Version="4.0.0" />
     <PackageVersion Include="Testcontainers.MsSql" Version="4.0.0" />
   </ItemGroup>

src/Dibix.Http.Host/Dibix.Http.Host.csproj

@@ -24,6 +24,13 @@
     <PackageReference Include="Microsoft.Data.SqlClient" />
     <PackageReference Include="Microsoft.Extensions.Hosting" />
     <PackageReference Include="System.IO.Packaging" />
+
+    <!--
+      CVE-2024-43483
+      Explicitily reference this implicit dependency of Microsoft.Data.SqlClient to force the correct version to be deployed.
+      Enabling CentralPackageTransitivePinningEnabled would introduce breaking changes for other packages and is avoided during a patch.
+    -->
+    <PackageReference Include="System.Runtime.Caching" />
   </ItemGroup>
 
   <ItemGroup>

src/Dibix.Worker.Host/Dibix.Worker.Host.csproj

@@ -24,6 +24,13 @@
     <PackageReference Include="Microsoft.Extensions.Hosting" />
     <PackageReference Include="Microsoft.Extensions.Hosting.WindowsServices" />
     <PackageReference Include="Microsoft.Extensions.Http" />
+
+    <!--
+      CVE-2024-43483
+      Explicitily reference this implicit dependency of Microsoft.Data.SqlClient to force the correct version to be deployed.
+      Enabling CentralPackageTransitivePinningEnabled would introduce breaking changes for other packages and is avoided during a patch.
+    -->
+    <PackageReference Include="System.Runtime.Caching" />
   </ItemGroup>
 
   <ItemGroup>