PredicateBuilder depends on vulnerable transitive dependencies

[InfoSec812]

Output from dotnet retire:

info: RetireNet.Packages.Tool.Services.RetireLogger[0]
      Scan starting
info: RetireNet.Packages.Tool.Services.RetireLogger[0]
      Analyzing 'Com.RedHat.Feedback360'
fail: RetireNet.Packages.Tool.Services.RetireLogger[0]
      Found use of 2 vulnerable libs in 2 dependency paths.
      
      * Microsoft Security Advisory CVE-2018-8416: .NET Core Tampering Vulnerability in System.IO.Compression.ZipFile/4.0.1
      https://github.com/dotnet/announcements/issues/95
      
          Binbin.Linq.PredicateBuilder/2.0.1
          ╚ NETStandard.Library/1.6.0
           ╚ System.IO.Compression.ZipFile/4.0.1
      
      * Microsoft Security Advisory CVE-2018-8292: .NET Core Information Disclosure Vulnerability in System.Net.Http/4.1.0
      https://github.com/dotnet/announcements/issues/88
      
          Binbin.Linq.PredicateBuilder/2.0.1
          ╚ NETStandard.Library/1.6.0
           ╚ System.Net.Http/4.1.0
      
      
info: RetireNet.Packages.Tool.Services.RetireLogger[0]
      Scan complete.