You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The package Microsoft.AspNetCore.Authentication version 2.2.0 has been released in 2018 and has deprecated for a long time. Referencing this nuget package results in multiple vulnerabilities being included through its dependencies such as GHSA-ghhp-997w-qr28.
In the Microsoft docs #1 and #2 , it is explained that AspNetCore packages are no longer published on nuget since dotnet 2.2 and should be replaced with a FrameworkReference when used in class libraries. However, in my own testing locally it seems like removing the nuget reference altogether does not break the build or the tests.
Please consider either removing the reference or changing the current reference from a PackageReference to a FrameworkReference.
Thanks!
The text was updated successfully, but these errors were encountered:
The package Microsoft.AspNetCore.Authentication version
2.2.0
has been released in 2018 and has deprecated for a long time. Referencing this nuget package results in multiple vulnerabilities being included through its dependencies such as GHSA-ghhp-997w-qr28.In the Microsoft docs #1 and #2 , it is explained that AspNetCore packages are no longer published on nuget since dotnet
2.2
and should be replaced with a FrameworkReference when used in class libraries. However, in my own testing locally it seems like removing the nuget reference altogether does not break the build or the tests.Please consider either removing the reference or changing the current reference from a PackageReference to a FrameworkReference.
Thanks!
The text was updated successfully, but these errors were encountered: