Enabling pinning which allows to define all target versions in Directory.Packages.props. dotnet restore --force-evaluate -p:NuGetAudit=true -p:NuGetAuditMode=all .\NPOI.Core.Test.sln was also reporting " warning NU1903: Package 'System.Formats.Asn1' 8.0.0 has a known high severity vulnerability" which was fixed by adding explicit reference and pinnin guiding the restore in projects.
Enabling pinning which allows to define all target versions in
Directory.Packages.props
.dotnet restore --force-evaluate -p:NuGetAudit=true -p:NuGetAuditMode=all .\NPOI.Core.Test.sln
was also reporting " warning NU1903: Package 'System.Formats.Asn1' 8.0.0 has a known high severity vulnerability" which was fixed by adding explicit reference and pinnin guiding the restore in projects.fixes #1394