Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug Bash] The vulnerable warning icon info shows inconsistently between the right of the “Installed” tab and the right of the “Installed” column in solution-level PM UI #14023

Open
CiciLi1 opened this issue Dec 30, 2024 · 1 comment

Comments

@CiciLi1
Copy link

CiciLi1 commented Dec 30, 2024

NuGet Product Used

Visual Studio Package Management UI

Product Version

NuGet Client Dev\6.13.0.106

Worked before?

It is not a regression it is a new feature.

Impact

It bothers me. A fix would be nice

Repro Steps & Context

Notes:  

The repro rate is 100%. 

Repro Steps:   

  1. Create a solution with two C# Console App (.NET [latest]) projects (called Project1 & Project2) and make sure Project1 referenced Project2.

  2. Right-click the project in Solution Explorer and select "Manage NuGet Packages for Solution…" menu item to open PM UI.

  3. Select the package source: "nuget.org" near the gear button.

  4. Go to the “Browse" tab, install a vulnerable package version “Newtonsoft.json 12.0.1” into the Project2.

  5. Go to the “Installed” tab and click the installed package (e.g. "Newtonsoft.Json") in the package list.

  6. Observe the package list, hover on the warning icon on the right of the “Installed” tab and the warning icon on the right of the “Installed” column.

Expected:   

The warning icon info shows consistently between the right of the “Installed” tab and the right of the “Installed” column.

Actual:   

The vulnerable warning icon info shows inconsistently between the right of the “Installed” tab and the right of the “Installed” column as below:
1230——3

1230_6

Verbose Logs

No response

@jgonz120
Copy link
Contributor

I was able to repro, to me it feels like the text on the installed tab is actually incorrect, since technically only 1 package version is installed with the vulnerability.

@jeffkl jeffkl added Priority:2 Issues for the current backlog. and removed Triage:NeedsTriageDiscussion labels Jan 6, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants