VMR Build Failure: Known Vulnerability in Microsoft.Build.Tasks.Core Package (NU1901)

[mmitche]

Failure Mode

The build failed because the Microsoft.Build.Tasks.Core NuGet package version in use has a known low severity vulnerability, as flagged by error NU1901. The build treats this warning as an error due to strict settings. This is a configuration or dependency hygiene issue and requires updating to a non-vulnerable version.

• Relevant error lines:
  • 'error NU1901: ... Package 'Microsoft.Build.Tasks.Core' ... has a known low severity vulnerability, GHSA-h4j7-5rxr-p4wc'
• Locations within a build:
  • Multiple jobs and platforms (Build, Run Tests, etc.)

Affected Builds

• Build 20250514.1
• Build 20250514.3