Obsolescence and security review

Aditya Shah 20 Reputation points
2026-01-19T12:59:34.2133333+00:00

Dear Team,

Just following up on my earlier request regarding the SBOM compilation and the security/obsolescence review for some instruments.

To finalize compliance documentation and plan upgrades, please share the details for each production component:

Components:

EntityFramework 5.0.0

Microsoft.AspNet.Mvc 4.0.20710.0

Microsoft.AspNet.Razor 2.0.20710.0

Microsoft.AspNet.Web.Optimization 1.0.0

Microsoft.AspNet.WebApi.Client 4.0.20710.0

Microsoft.AspNet.WebApi.Core 4.0.20710.0

Microsoft.AspNet.WebApi.WebHost 4.0.20710.0

Microsoft.AspNet.WebApi 4.0.20710.0

Microsoft.AspNet.WebPages.Data 2.0.20710.0

Microsoft.AspNet.WebPages.OAuth 2.0.20710.0

Microsoft.AspNet.WebPages.WebData 2.0.20710.0

Microsoft.AspNet.WebPages 2.0.20710.0

Microsoft.jQuery.Unobtrusive.Ajax 2.0.30506.0

Microsoft.jQuery.Unobtrusive.Validation 2.0.30506.0

Microsoft.Net.Http 2.0.20710.0

Microsoft.Web.Infrastructure 1.0.0.0

WebGrease 1.1.0

For each component, please provide:

1. Lifecycle & Support

  • Official EOS/EOL dates
  • Link to vendor lifecycle/support policy

2. Current Supported Versions

3. Upgrade Guidance

Recommended upgrade path (target version and any intermediate steps)

If any item is tracked elsewhere, a link or pointer to the source is perfect.

Thank you,

Aditya Shah

Developer technologies | .NET | Other
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. AgaveJoe 30,571 Reputation points
    2026-01-19T14:19:32.6133333+00:00

    Hello Aditya Shah,

    Most of the components you listed are part of the ASP.NET MVC 4 and ASP.NET 4.5 ecosystem, which have passed their End of Support dates.

    Here is the breakdown based on the official Microsoft Support Lifecycle Policy:

    ASP.NET MVC 4, Web API 1, and Web Pages 2

    The following components from your list are governed by the ASP.NET External Packages support policy:

    Microsoft.AspNet.Mvc (4.0.x)

    Microsoft.AspNet.WebApi (4.0.x / Web API 1)

    Microsoft.AspNet.WebPages (2.0.x)

    Status: Out of Support End of Support Date: July 1, 2019 Official Policy Link: ASP.NET Support Policy (See the "External Packages" table which explicitly lists MVC 4, Web API 1, and Web Pages 2 as ending support on July 1, 2019.)

    Entity Framework 5.0.0

    Entity Framework 5 was released in 2012. It has been superseded by Entity Framework 6 (the long-term support version for .NET Framework).

    Status: Out of Support Upgrade Guidance: You must upgrade to Entity Framework 6.x (currently 6.4.4 or 6.5) to be on a supported version for .NET Framework. Official Policy Link: Entity Framework Support Policies

    Utility Libraries (WebGrease, Unobtrusive Ajax, etc.)

    Components like WebGrease 1.1.0 and Microsoft.jQuery.Unobtrusive.Ajax are dependencies that shipped with the MVC 4 templates.

    WebGrease: The version you are using (1.1.0) is from 2012. It is no longer supported.

    Unobtrusive Ajax/Validation: These are "Tools" often supported for 1 year after the release of a successor.

    Status: Out of Support (Implied by the EOL of the parent MVC 4 framework).

    Recommended Upgrade Path

    You have two primary options to reach a supported state:

    Option A: The "In-Place" Update (Easiest) Target the latest .NET Framework 4.8.1 and update your NuGet packages to the "LTS" versions of the classic stack.

    Target Framework: Upgrade to .NET Framework 4.8.1.

    MVC: Upgrade Microsoft.AspNet.Mvc to 5.3.x.

    Web API: Upgrade Microsoft.AspNet.WebApi to 5.3.x (Web API 2).

    Entity Framework: Upgrade to Entity Framework 6.5.

    Option B: The "Modernization" Rewrite (Best for Security/Long Term) Rewrite the application to .NET 8 (or later).

    This involves moving from ASP.NET MVC to ASP.NET Core.

    Moving from EF5/6 to EF Core.

    This is a significant effort but places you on the modern, cross-platform lifecycle.

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.