Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions en/manual/toc.yml
Original file line number Diff line number Diff line change
Expand Up @@ -655,6 +655,8 @@ items:
href: troubleshooting/unable-to-resolve-stride-game-studio.md
- name: The Launcher is showing only 3.x version
href: troubleshooting/unable-to-resolve-stride-game-studio.md
- name: Solution contains packages with vulnerabilities
href: troubleshooting/solution-contains-packages-with-vulnerabilities.md

- name: Glossary
href: glossary/index.md
1 change: 1 addition & 0 deletions en/manual/troubleshooting/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,3 +15,4 @@ These pages describe how to fix problems with Stride.
* [SceneCameraRenderer error](error-a-scenecamerarenderer-in-use-has-no-camera-set.md)
* [Unable to resolve Stride.GameStudio](unable-to-resolve-stride-game-studio.md)
* [The Launcher is showing only 3.x version](unable-to-resolve-stride-game-studio.md)
* [Solution contains packages with vulnerabilities](solution-contains-packages-with-vulnerabilities.md)
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Original file line number Diff line number Diff line change
@@ -0,0 +1,34 @@
# Solution contains packages with vulnerabilities

Sometimes, especially when using an older version of Stride, you might notice warnings in Visual Studio that look like this:

![This solution contains packages with vulnerabilities.](media/visual-studio-vulnerable-packages-warning.webp)

![Warnings in the Error List, saying that a package has a known high severity vulnerability.](media/visual-studio-error-list-vulnerable-packages-warnings.webp)

...or when building your project:

![The terminal displaying multiple warnings, saying that a package has a known high severity vulnerability.](media/terminal-vulnerable-packages-warnings.webp)

## What does it mean?

This means that one of the **external packages** your project is using has been marked as vulnerable and **could be exploited by bad actors in your released game**.

## Why does it happen?

Stride depends on **other libraries** in order to work and sometimes, those libraries are **marked as vulnerable on [nuget.org](https://nuget.org)**.

## How to fix it?

1. Update your project to the latest version of Stride. See [Update Stride](../install-and-update/update-stride.md).
2. Check in the engine's [source code](https://github.com/stride3d/stride) if the warning is limited to Game Studio, in which case it can be safely ignored.
3. Ignore the warning while you work on your game and wait for the next release of the engine.

This warning **does not impact your ability to develop and build**. You are still able to use the editor, test your game and even release it (see the note below).

> [!NOTE]
> If you want to release a game with vulnerable packages, make sure to **check how the vulnerability would impact your users** and decide if the warnings can be ignored. If you can't wait, you will have to **build the engine from source**.

## See also

* [Update stride](../install-and-update/update-stride.md)