This solution contains packages with vulnerabilities

5 months ago
I have updated Visual Studio (Community Edition) today to the latest version and now when I open a nopCommerce project I get a warning that says "This solution contains packages with vulnerabilities".

It wants me to update 3 NuGet packages, Azure.Identify, Microsoft.Azure.Services.AppAuthenticaiton and SkiaSharp.

When I build or run the project it gives build errors related to the above.

Should I be updating the packages? Is there a way to run this without the warning/build errors?

Thanks
Ashley
5 months ago
I noticed the same thing.  I guess the latest VS looks for that now.
I think it's probably safe to update the packages in the Package Manager.

Alternately, you can disable warnings based on error level


(Hopefully the Team will do the update in 4.70.  I see two warnings in the 4.70 code I downloaded form GitHub a few days ago.)
5 months ago
Hi. My studio also gives a warning, but it does not seem to block the solution from being built or the site being launched in the studio. As for updating packages, when a new version is released, we try to update all packages to the latest versions. We have a corresponding ticket for this