Gets or sets a value indicating whether to upgrade packages that restore reports as having known vulnerabilities. Packages are upgraded to the lowest version that is higher than the currently referenced version and has no known vulnerabilities.

public bool Vulnerable { get; set; }