Skip to content

Powershell Breaks CI - System.Security.Cryptography.Xml #1287

@Omnideth

Description

@Omnideth

Describe the bug

Every version except 10.0.6 has a critical vulnerability.

You can look at various builds to validate it.

Regression

No response

Steps to reproduce

1. Open the CT
2. Try to build the Powershell Project

(Or look at a CI build failure)

[2026-04-18 02:28:12] [build-stdout] /home/runner/work/Aspire/Aspire/examples/powershell/CommunityToolkit.Aspire.PowerShell.AppHost/CommunityToolkit.Aspire.PowerShell.AppHost.csproj : error NU1903: Warning As Error: Package 'System.Security.Cryptography.Xml' 8.0.2 has a known high severity vulnerability, https://github.com/advisories/GHSA-37gx-xxp4-5rgx [/home/runner/work/Aspire/Aspire/CommunityToolkit.Aspire.slnx]
  [2026-04-18 02:28:12] [build-stdout] /home/runner/work/Aspire/Aspire/examples/powershell/CommunityToolkit.Aspire.PowerShell.AppHost/CommunityToolkit.Aspire.PowerShell.AppHost.csproj : error NU1903: Warning As Error: Package 'System.Security.Cryptography.Xml' 8.0.2 has a known high severity vulnerability, https://github.com/advisories/GHSA-w3x6-4m5h-cxqf [/home/runner/work/Aspire/Aspire/CommunityToolkit.Aspire.slnx]

Expected behavior

That the CI and the project builds cleanly.

Screenshots

No response

IDE and version

VS Code

IDE version

No response

Nuget packages


Additional context

No response

Help us help you

Yes, I'd like to be assigned to work on this item

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions