Skip to content
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/core/tools/dotnet-package-list.md
Original file line number Diff line number Diff line change
Expand Up @@ -122,7 +122,7 @@ The project or solution file to operate on. If not specified, the command search
- **`--vulnerable`**

Lists packages that have known vulnerabilities. Cannot be combined with `--deprecated` or `--outdated` options.
Use the `<AuditSources>` property in your configuration file to specify your source of vulnerability data, which is acquired from the [VulnerabilityInfo](/nuget/api/vulnerability-info) resource.
Available starting in **.NET SDK 9.0.300**, this option uses `<AuditSources>` property in your configuration file to specify your source of vulnerability data, which is acquired from the [VulnerabilityInfo](/nuget/api/vulnerability-info) resource.
If `<AuditSources>` is not specified, the specified `<PackageSources>` are used to load vulnerability data.
For more information, see [Audit sources](/nuget/concepts/auditing-packages#audit-sources) and [How to scan NuGet packages for security vulnerabilities](https://devblogs.microsoft.com/nuget/how-to-scan-nuget-packages-for-security-vulnerabilities/).

Expand Down
Loading