ok thank you. we can keep this open.
I mean ABP Commercial has beta version as well. What's the ABP version? (it's written in your csproj files)
see an example https://github.com/abpframework/abp/blob/48c52625f4c4df007f04d5ac6368b07411aa7521/modules/cms-kit/src/Volo.CmsKit.Domain/Volo/CmsKit/Users/CmsUser.cs#L33
this has been addressed and fixed in v5.0. v5.0.0-beta.1 is now online but you can wait for the v5-rc version to update your project. until your update, you can manually fix the case
I know that it's not directly referenced to your project. but if you directly reference it, the vulnerable version will be updated to the latest. do not update a single ABP library! if you want to update ABP, use ABP CLI or ABP Suite to update it all.
directly referencing will overwrite the current version System.Text.Encodings.Web package
is it beta version?
use IMultitenant
when the entity is not being shared across the tenants.
The System.Text.Encodings.Web package is owned by Microsoft and used by the ABP Framework. See the reference github.com/abpframework/Volo.Abp.Core.csproj.
You can update it in your project to the latest version 5.0.1
Install-Package System.Text.Encodings.Web -Version 5.0.1
@maliming will help you on that.