A family of Microsoft suites of integrated development tools for building applications for Windows, the web, mobile devices and many other platforms. Miscellaneous topics that do not fit into specific categories.
NU1900 indicates NuGet could not download vulnerability data from a package source. In this case, the source is https://api.nuget.org/v3/index.json.
To resolve it effectively:
- Check network connectivity to nuget.org
- Ensure the machine can reach
api.nuget.orgover HTTPS (no proxy, firewall, or DNS issues blocking it). - If there was a transient network problem (timeout, DNS error, etc.), retry restore after a few minutes.
- Ensure the machine can reach
- Verify the source configuration
- Open the NuGet configuration (NuGet.Config) and confirm that
https://api.nuget.org/v3/index.jsonis correctly configured as a package source. - Make sure there are no typos or invalid URLs.
- Open the NuGet configuration (NuGet.Config) and confirm that
- Clear NuGet HTTP cache
- If the error is related to invalid or corrupted data, clear the HTTP cache and try again:
dotnet nuget locals http-cache --clear - Then rerun restore so NuGet can re-download the vulnerability data.
- If the error is related to invalid or corrupted data, clear the HTTP cache and try again:
- If the problem persists
- The issue is likely with the package source itself (for example, returning invalid JSON or being temporarily unavailable).
- Contact the administrators of the package source (for nuget.org, check service status or organization network policies) to confirm there is no ongoing outage or filtering.
This warning does not necessarily block restore unless warnings are treated as errors; it indicates that vulnerability auditing could not be completed for that source.
References: