this has been addressed and fixed in v5.0. v5.0.0-beta.1 is now online but you can wait for the v5-rc version to update your project. until your update, you can manually fix the case
I know that it's not directly referenced to your project. but if you directly reference it, the vulnerable version will be updated to the latest. do not update a single ABP library! if you want to update ABP, use ABP CLI or ABP Suite to update it all.
directly referencing will overwrite the current version System.Text.Encodings.Web package
is it beta version?
use IMultitenant when the entity is not being shared across the tenants.
The System.Text.Encodings.Web package is owned by Microsoft and used by the ABP Framework. See the reference github.com/abpframework/Volo.Abp.Core.csproj.
You can update it in your project to the latest version 5.0.1
Install-Package System.Text.Encodings.Web -Version 5.0.1
@maliming will help you on that.
this exception is thrown if only the target user is not linked to you. and the -link check- is done here https://github.com/abpframework/abp/blob/dev/modules/identity/src/Volo.Abp.Identity.Domain/Volo/Abp/Identity/IdentityLinkUserManager.cs#L96
check that your user.id and target user.id exist in AbpLinkUsers db table.
and did you implement the IMultiTenant interface for your new entities.
https://docs.abp.io/en/abp/latest/Multi-Tenancy#imultitenant
you can use .AsNoTracking() in your Queryable object.
