Nugetauditsuppress | ~upd~

dotnet restore --verbosity detailed | grep "Audit" Or list vulnerabilities regardless of suppression:

warning NU1901: Package 'Newtonsoft.Json' 12.0.1 has a known critical vulnerability. This audit is controlled by two main properties: nugetauditsuppress

Date: April 14, 2026 Subject: Analysis of the NuGetAuditSuppress MSBuild property 1. Executive Summary NuGetAuditSuppress is an MSBuild property introduced in .NET 8 (and backported to certain .NET 7 SDKs) to control the NuGet vulnerability audit feature. By default, dotnet restore and dotnet build report known security vulnerabilities in your project’s transitive or direct packages. Setting NuGetAuditSuppress to true silences these warnings entirely. 2. Background: NuGet Audit Since .NET 8, the NuGet client automatically queries the NuGet Vulnerability Database during restore. If a package with a known, unpatched vulnerability (CVE) is referenced, the build produces warnings like: dotnet restore --verbosity detailed | grep "Audit" Or