You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When updating Visual Studio to latest version, it is now more thorough when reporting vulnerable dependencies.
My project references RazorLight (v2.3.1) NuGet package which in its turn references Microsoft.Extensions.Caching.Memory (v6.0.0) which has high vulnerability, hence error.
As a result I cannot build the project on new version of Visual Studio.
Can you please update dependencies to non-vulnerable versions?
The text was updated successfully, but these errors were encountered:
That's an ideal first Pull Request you could make to the project, I'd be more than welcome to merge it
While I would normally agree, the dependencies in RazorLight are particularly old and it is non-trivial for an "outsider" to upgrade them. There are many gotchas like Microsoft.AspNetCore.Hosting.Abstractions being deprecated in favor of Microsoft.Extensions.Hosting.Abstractions and similar.
When updating Visual Studio to latest version, it is now more thorough when reporting vulnerable dependencies.
My project references
RazorLight (v2.3.1)
NuGet package which in its turn referencesMicrosoft.Extensions.Caching.Memory (v6.0.0)
which has high vulnerability, hence error.As a result I cannot build the project on new version of Visual Studio.
Can you please update dependencies to non-vulnerable versions?
The text was updated successfully, but these errors were encountered: