Microsoft.PowerShell.SDK 7.6.4 depends on vulnerable version of System.Security.Cryptography.Xml 10.0.6.
Project that references Microsoft.PowerShell.SDK 7.6.4 should compile with no warnings/errors when NuGet audit is enabled.
Project that references Microsoft.PowerShell.SDK 7.6.4 fails to compile when NuGet audit is enabled.
Build fails with error
error NU1903: Warning As Error: Package 'System.Security.Cryptography.Xml' 10.0.6 has a known high severity vulnerability, https://github.com/advisories/GHSA-23rf-6693-g89p
Prerequisites
Steps to reproduce
Microsoft.PowerShell.SDK 7.6.4 depends on vulnerable version of System.Security.Cryptography.Xml 10.0.6.
Expected behavior
Project that references Microsoft.PowerShell.SDK 7.6.4 should compile with no warnings/errors when NuGet audit is enabled.Actual behavior
Project that references Microsoft.PowerShell.SDK 7.6.4 fails to compile when NuGet audit is enabled.Error details
Environment data
N/A.Visuals
No response