[browser][WBT] SignalRPassMessageWasmBrowser - NU1903 - System.Text.Json 8.0.0

[pavelsavara]

Log

Wasm.Build.Tests.AspNetCore.SignalRClientTests.SignalRPassMessageWasmBrowser(config: "Debug", transport: "LongPolling") [FAIL]

       []   Restored C:\helix\work\workitem\e\wbt artifacts\SignalRClientTests_s1zeg3lf_gag\AspNetCoreServer\AspNetCoreServer.csproj (in 9.91 sec).
        [] C:\helix\work\workitem\e\wbt artifacts\SignalRClientTests_s1zeg3lf_gag\WasmBrowserClient\WasmBrowserClient.csproj : error NU1903: Package 'System.Text.Json' 8.0.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-hh2w-p6rv-4g7w [C:\helix\work\workitem\e\wbt artifacts\SignalRClientTests_s1zeg3lf_gag\AspNetCoreServer\AspNetCoreServer.csproj]
        []   Restored C:\helix\work\workitem\e\wbt artifacts\SignalRClientTests_s1zeg3lf_gag\BlazorClient\BlazorClient.csproj (in 10.45 sec).
        []   Restored C:\helix\work\workitem\e\wbt artifacts\SignalRClientTests_s1zeg3lf_gag\WasmBrowserClient\WasmBrowserClient.csproj (in 493 ms).
        [] C:\helix\work\workitem\e\wbt artifacts\SignalRClientTests_s1zeg3lf_gag\Shared\Shared.csproj : error NU1903: Package 'System.Text.Json' 8.0.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-hh2w-p6rv-4g7w [C:\helix\work\workitem\e\wbt artifacts\SignalRClientTests_s1zeg3lf_gag\AspNetCoreServer\AspNetCoreServer.csproj]
        []   Restored C:\helix\work\workitem\e\wbt artifacts\SignalRClientTests_s1zeg3lf_gag\Shared\Shared.csproj (in 5 ms).

Build Information

Build: https://dev.azure.com/dnceng-public/public/_build/results?buildId=737345
Build error leg or test failing:

Error Message

Fill the error message using step by step known issues guidance.

{
  "ErrorMessage": "NU1903: Package 'System.Text.Json' 8.0.0 has a known high severity vulnerability",
  "BuildRetry": false,
  "ExcludeConsoleLog": false
}

Known issue validation

Build: 🔎 https://dev.azure.com/dnceng-public/public/_build/results?buildId=737345
Error message validated: [NU1903: Package 'System.Text.Json' 8.0.0 has a known high severity vulnerability]
Result validation: ✅ Known issue matched with the provided build.
Validation performed at: 7/11/2024 4:23:34 PM UTC

Report

Build	Definition	Test	Pull Request
737660	dotnet/runtime	Workloads-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#104577
736134	dotnet/runtime	Workloads-NoWebcil-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#104638
738762	dotnet/runtime	Workloads-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#103755
738708	dotnet/runtime	Workloads-NoWebcil-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#104683
738681	dotnet/runtime	Workloads-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#104437
738661	dotnet/runtime	Workloads-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution
738535	dotnet/runtime	Workloads-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#104750
738431	dotnet/runtime	Workloads-NoWebcil-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#104757
738133	dotnet/runtime	Workloads-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#103757
738356	dotnet/runtime	Workloads-NoWebcil-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#104764
738311	dotnet/runtime	Workloads-NoWebcil-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#104760
738295	dotnet/runtime	Workloads-NoWebcil-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#104758
738288	dotnet/runtime	Workloads-NoWebcil-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#104750
738193	dotnet/runtime	Wasm.Build.Tests.AspNetCore.SignalRClientTests.SignalRPassMessageWasmBrowser
738246	dotnet/runtime	Workloads-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#104753
738220	dotnet/runtime	Workloads-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#104644
737629	dotnet/runtime	Wasm.Build.Tests.AspNetCore.SignalRClientTests.SignalRPassMessageWasmBrowser	#103755
737568	dotnet/runtime	Wasm.Build.Tests.AspNetCore.SignalRClientTests.SignalRPassMessageWasmBrowser	#100048
736603	dotnet/runtime	Wasm.Build.Tests.AspNetCore.SignalRClientTests.SignalRPassMessageWasmBrowser	#104698
737703	dotnet/runtime	Workloads-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#104683
737654	dotnet/runtime	Workloads-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#104701
737354	dotnet/runtime	Wasm.Build.Tests.AspNetCore.SignalRClientTests.SignalRPassMessageWasmBrowser	#104672
737155	dotnet/runtime	Workloads-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#102464
737345	dotnet/runtime	Wasm.Build.Tests.AspNetCore.SignalRClientTests.SignalRPassMessageWasmBrowser	#104729
737493	dotnet/runtime	Workloads-NoWebcil-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#104733
737342	dotnet/runtime	Wasm.Build.Tests.AspNetCore.SignalRClientTests.SignalRPassMessageWasmBrowser	#100056
737280	dotnet/runtime	Wasm.Build.Tests.AspNetCore.SignalRClientTests.SignalRPassMessageWasmBrowser	#104730
736235	dotnet/runtime	Workloads-NoWebcil-ST-Wasm.Build.Tests.AspNetCore.SignalRClientTests.WorkItemExecution	#104685

Summary

24-Hour Hit Count	7-Day Hit Count	1-Month Count
0	27	28

[dotnet-policy-service]

Tagging subscribers to 'arch-wasm': @lewing
See info in area-owners.md if you want to be subscribed.

[ViktorHofer]

Note that this means that you are using the nuget.org feed somewhere which is unrelated but should be fixed as well. NU1903 is part of the NuGet Audit feature which only works with the nuget.org feed atm.