You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, we have the vulnerability url in the message, but not the fixed version, we could get the fixed version from the URL, while we may not care about the vulnerability details, just want to update a fixed version to stay safe, it would be convenient to include the fixed version in the message.
error NU1903: Warning As Error: Package 'System.Text.Json' 8.0.0 has a known high severity vulnerability, GHSA-hh2w-p6rv-4g7w
Enhance the protocol to include the fixed version (this would be a moving target since other advisories might be raised for that version).
A more pragmatic approach that doesn't require protocol changes would be to just log the range and allow the customer to infer the fixed version based on the upper boundary.
NuGet Product(s) Involved
NuGet.exe
The Elevator Pitch
Currently, we have the vulnerability url in the message, but not the fixed version, we could get the fixed version from the URL, while we may not care about the vulnerability details, just want to update a fixed version to stay safe, it would be convenient to include the fixed version in the message.
Additional Context and Details
It may also contribute to #13372
The text was updated successfully, but these errors were encountered: