dotnet / dotnet/machinelearning-modelbuilder

When training SQL server data, the auto-installed package "System.Data.SqlClient, version 4.8.3" with vulnerability.

Open
#2,831 1 comment 0 reactions 0 assignees View on GitHub
Priority:2 Reported by: Test
Dominant language
Dockerfile
Stars
285
Forks
66
PR merge metrics
No merged PRs in 30d

Description

**System Information (please complete the following information):**
Windows OS: Windows-11-Enterprise-22H2
ML.Net Model Builder 2022: 17.17.17.2407507 (Main Build)
Microsoft Visual Studio Enterprise: 2022(17.2.0)
.Net Core: 6.0,7.0,8.0

**Describe the bug**
- On which step of the process did you run into an issue:
When training SQL server data, the auto-installed package "System.Data.SqlClient, version 4.8.3" with vulnerability.

**TestMatrix**
https://testpass.blob.core.windows.net/test-pass-data/wikipedia-detox-250-line-data.tsv

**To Reproduce**
Steps to reproduce the behavior:

1. Select Create a new project from the Visual Studio start window.
2. Choose the C# Console App (.NET Core) project template.
3. Add model builder by right click on the project.
4. Select any scenario.
5. On the Data page, choose the SQL Server data source to completed.
6. You will see the pop-up message "The solution contains packages with vulnerability".

**Expected behavior**
Should auto-installed latest stable 4.8.6 version.

**Gif:**
![image](https://github.com/dotnet/machinelearning-modelbuilder/assets/99375895/25db3656-e805-492a-bb90-9ded043565ba)
![image](https://github.com/dotnet/machinelearning-modelbuilder/assets/99375895/85346163-648c-4b02-925c-0b6718400b6d)

**Additional context:**

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.