From 5d1ca4cde1037e6e5390579fd3823255b5be6c60 Mon Sep 17 00:00:00 2001
From: Toaster <brottoastlemon@gmail.com>
Date: Fri, 9 Oct 2026 18:31:54 +0200
Subject: [PATCH 1/2] Manually bump ImageSharp version to 4.1.3

---
 Refresh.Core/Refresh.Core.csproj | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Refresh.Core/Refresh.Core.csproj b/Refresh.Core/Refresh.Core.csproj
index 6c46ab518..8c968f81c 100644
--- a/Refresh.Core/Refresh.Core.csproj
+++ b/Refresh.Core/Refresh.Core.csproj
@@ -26,7 +26,7 @@
         <PackageReference Include="NPTicket" Version="3.1.1" />
         <PackageReference Include="Pfim" Version="0.11.3" />
         <PackageReference Include="SharpZipLib" Version="1.4.2" />
-        <PackageReference Include="SixLabors.ImageSharp" Version="3.1.12" />
+        <PackageReference Include="SixLabors.ImageSharp" Version="4.1.3" />
         <PackageReference Include="EasyHotReload" Version="1.0.0" />
     </ItemGroup>
 

From 601e5a2c5a599cf3488bb70d6c9b0f570b4a9f43 Mon Sep 17 00:00:00 2001
From: Toaster <brottoastlemon@gmail.com>
Date: Sat, 10 Oct 2026 11:21:15 +0200
Subject: [PATCH 2/2] Revert back to ImageSharp 3.1.12, suppress warnings

---
 Refresh.Core/Refresh.Core.csproj | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/Refresh.Core/Refresh.Core.csproj b/Refresh.Core/Refresh.Core.csproj
index 8c968f81c..89cae4cea 100644
--- a/Refresh.Core/Refresh.Core.csproj
+++ b/Refresh.Core/Refresh.Core.csproj
@@ -26,7 +26,10 @@
         <PackageReference Include="NPTicket" Version="3.1.1" />
         <PackageReference Include="Pfim" Version="0.11.3" />
         <PackageReference Include="SharpZipLib" Version="1.4.2" />
-        <PackageReference Include="SixLabors.ImageSharp" Version="4.1.3" />
+        <!-- Nearly all the suppressed CVEs are related to TIFF parsing, which we don't do here. -->
+        <!-- Also, we cannot update ImageSharp to any of its newer versions due to other issues, we will likely have to replace it entirely relatively soon. -->
+        <!-- See https://github.com/LittleBigRefresh/Refresh/issues/1144 for more info. -->
+        <PackageReference Include="SixLabors.ImageSharp" Version="3.1.12" NoWarn="NU1902, NU1903" />
         <PackageReference Include="EasyHotReload" Version="1.0.0" />
     </ItemGroup>