Uh oh!
There was an error while loading. Please reload this page.
Add 'Rajkumar' to the README file - #11
Merged
Merged
Veracode Workflow App / Veracode Software Composition Analysis
succeeded
Jun 9, 2026 in 43s
Veracode Software Composition Analysis
Veracode SCA agent scanning engine ready Searching for supported projects (this may take a minute)... [MSBuildDotNet]Scanning /home/runner/work/veracode/veracode/example-dotnet-utils [MSBuildDotNet]Scanning /home/runner/work/veracode/veracode/example-dotnet Processing results... Processing results complete Found 0 example-dotnet-utils.dll, example-dotnet.dll files for vulnerable method analysis. Summary Report Scan ID a687aa58-541e-49b2-a7d4-52f4b2943712 Scan Date & Time Jun 09 2026 07:35PM UTC Account type ENTERPRISE Scan engine 3.8.115 (latest 3.8.115) Analysis time 14 seconds User runner Project /home/runner/work/veracode/veracode Package Manager(s) MSBuildDotNet Open-Source Libraries Total Libraries 124 Direct Libraries 16 Transitive Libraries 110 Vulnerable Libraries 13 Security With Vulnerable Methods 0 Critical Risk Vulnerabilities 6 High Risk Vulnerabilities 11 Medium Risk Vulnerabilities 11 Low Risk Vulnerabilities 1 Vulnerabilities - Public Data CVE-2021-32840 Critical Risk Directory Traversal SharpZipLib 1.0.0-alpha1 CVE-2018-1285 Critical Risk XML External Entities (XXE) log4net 2.0.8 CVE-2017-0907 Critical Risk Server-Side Request Forgery (SSRF) recurly-api-client 1.8.0 CVE-2019-0564 High Risk Denial Of Service (DoS) Microsoft.NETCore.App 2.1.0 CVE-2020-1147 High Risk Remote Code Execution (RCE) Microsoft.NETCore.App 2.1.0 CVE-2020-1161 High Risk Denial Of Service (DoS) Microsoft.NETCore.App 2.1.0 CVE-2019-0545 High Risk Cross-Origin Resource Sharing (CORS) Bypass Microsoft.NETCore.App 2.1.0 CVE-2020-1108 High Risk Denial Of Service (DoS) Microsoft.NETCore.App 2.1.0 CVE-2017-11770 High Risk Denial Of Service (DoS) System.Security.Cryptography.X509Certificates 4.1.0 CVE-2024-21907 High Risk Denial Of Service (DoS) Newtonsoft.Json 11.0.2 CVE-2018-8292 High Risk Information Disclosure System.Net.Http 4.1.0 CVE-2018-8292 High Risk Information Disclosure System.Net.Http 4.1.0 CVE-2018-1000210 High Risk Remote Code Execution (RCE) YamlDotNet 3.7.0 CVE-2018-8416 Medium Risk Arbitrary File Writes And Directory Creation Microsoft.NETCore.App 2.1.0 CVE-2019-0657 Medium Risk Authorization Bypass Microsoft.NETCore.App 2.1.0 CVE-2018-8416 Medium Risk Arbitrary File Writes And Directory Creation Microsoft.NETCore.App 2.1.0 CVE-2018-1002205 Medium Risk Arbitrary File Writing DotNetZip 1.10.0 CVE-2018-1002208 Medium Risk Arbitrary File Writing SharpZipLib 1.0.0-alpha1 CVE-2021-32841 Medium Risk Directory Traversal SharpZipLib 1.0.0-alpha1 CVE-2021-32842 Medium Risk Directory Traversal SharpZipLib 1.0.0-alpha1 CVE-2026-44788 Medium Risk SharpCompress Has Directory Traversal Via Directory Entries In WriteToDirectory (zip Slip Variant) SharpCompress 0.17.1 CVE-2018-1002206 Medium Risk Arbitrary File Write SharpCompress 0.17.1 CVE-2021-39208 Medium Risk Path Traversal SharpCompress 0.17.1 CVE-2026-40021 Medium Risk Apache Log4net: Silent Log Event Loss In XmlLayout And XmlLayoutSchemaLog4J Due To Unescaped XML 1.0 Forbidden Character log4net 2.0.8 Vulnerabilities - Premium Data NO-CVE Critical Risk Timing Attack BCrypt.Net-Core 1.2.0-CI00005 NO-CVE Critical Risk SQL Injection GSF.Security 2.1.326-beta NO-CVE Critical Risk SQL Injection GSF.Core 2.1.326-beta NO-CVE High Risk XML External Entity (XXE) recurly-api-client 1.8.0 NO-CVE Low Risk Insecure Temporary File SharpZipLib 1.0.0-alpha1 Licenses Unique Library Licenses 14 Unique Libraries Using GPL 1 Unique Libraries With High Risk License 1 Unique Libraries With Medium Risk License 70 Unique Libraries With Low Risk License 122 Unique Libraries With Multiple Licenses 99 Unique Libraries With Unassessable License 95 Unique Libraries With Unrecognizable License 1 Issues Issue ID Issue Type Severity Description Library Name & Version In Use 546945635 Vulnerability 9.8 CVE-2017-0907: Server-Side Request Forgery (SSRF) recurly-api-client 1.8.0 546945636 Vulnerability 5.5 CVE-2018-1002206: Arbitrary File Write SharpCompress 0.17.1 546945637 Vulnerability 5.5 CVE-2018-1002208: Arbitrary File Writing SharpZipLib 1.0.0-alpha1 546945638 Vulnerability 5.5 CVE-2018-1002205: Arbitrary File Writing DotNetZip 1.10.0 546945639 Vulnerability 7.8 CVE-2018-1000210: Remote Code Execution (RCE) YamlDotNet 3.7.0 546945640 Vulnerability 9.1 NO-CVE: Timing Attack BCrypt.Net-Core 1.2.0-CI00005 546945641 Vulnerability 9.8 NO-CVE: SQL Injection GSF.Security 2.1.326-beta 546945642 Vulnerability 9.8 NO-CVE: SQL Injection GSF.Core 2.1.326-beta 546945643 Vulnerability 7.5 CVE-2018-8292: Information Disclosure System.Net.Http 4.1.0 546945644 Vulnerability 6.5 CVE-2018-8416: Arbitrary File Writes And Directory Creation Microsoft.NETCore.App 2.1.0 546945645 Vulnerability 7.3 NO-CVE: XML External Entity (XXE) recurly-api-client 1.8.0 546945646 Vulnerability 7.5 CVE-2019-0545: Cross-Origin Resource Sharing (CORS) Bypass Microsoft.NETCore.App 2.1.0 546945647 Vulnerability 7.5 CVE-2019-0564: Denial Of Service (DoS) Microsoft.NETCore.App 2.1.0 546945648 Vulnerability 7.5 CVE-2017-11770: Denial Of Service (DoS) System.Security.Cryptography.X509Certificates 4.1.0 546945649 Vulnerability 7.5 CVE-2018-8292: Information Disclosure System.Net.Http 4.1.0 546945650 Vulnerability 6.5 CVE-2018-8416: Arbitrary File Writes And Directory Creation Microsoft.NETCore.App 2.1.0 546945651 Vulnerability 5.9 CVE-2019-0657: Authorization Bypass Microsoft.NETCore.App 2.1.0 546945652 Vulnerability 9.8 CVE-2018-1285: XML External Entities (XXE) log4net 2.0.8 546945653 Vulnerability 7.5 CVE-2020-1108: Denial of Service (DoS) Microsoft.NETCore.App 2.1.0 546945654 Vulnerability 7.5 CVE-2020-1161: Denial Of Service (DoS) Microsoft.NETCore.App 2.1.0 546945655 Vulnerability 7.8 CVE-2020-1147: Remote Code Execution (RCE) Microsoft.NETCore.App 2.1.0 546945656 Vulnerability 3.7 NO-CVE: Insecure Temporary File SharpZipLib 1.0.0-alpha1 546945657 Vulnerability 4.3 CVE-2021-39208: Path Traversal SharpCompress 0.17.1 546945658 Vulnerability 5.3 CVE-2021-32841: Directory Traversal SharpZipLib 1.0.0-alpha1 546945659 Vulnerability 5.3 CVE-2021-32842: Directory Traversal SharpZipLib 1.0.0-alpha1 546945660 Vulnerability 9.8 CVE-2021-32840: Directory Traversal SharpZipLib 1.0.0-alpha1 546945661 Vulnerability 7.5 CVE-2024-21907: Denial Of Service (DoS) Newtonsoft.Json 11.0.2 546945662 Vulnerability 5.3 CVE-2026-40021: Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden character log4net 2.0.8 546945663 Vulnerability 5.9 CVE-2026-44788: SharpCompress has directory traversal via directory entries in WriteToDirectory (zip slip variant) SharpCompress 0.17.1 546945664 Outdated Library 3.0 Latest version at scan: 4.3.1 System.Runtime.Extensions 4.3.0 546945665 Outdated Library 3.0 Latest version at scan: 1.6.0 BCrypt.Net-Core 1.2.0-CI00005 546945666 Outdated Library 3.0 Latest version at scan: 1.16.0 DotNetZip 1.10.0 546945667 Outdated Library 3.0 Latest version at scan: 11.0.101-preview4.26230.115 FSharp.Core 10.1.300 546945668 Outdated Library 3.0 Latest version at scan: 2.4.275-beta GSF.Security 2.1.326-beta 546945669 Outdated Library 3.0 Latest version at scan: 3.3.1 log4net 2.0.8 546945670 Outdated Library 3.0 Latest version at scan: 3.0.0-preview-27324-5 Microsoft.NETCore.App 2.1.0 546945671 Outdated Library 3.0 Latest version at scan: 9.7.0 MySql.Data 8.0.11 546945672 Outdated Library 3.0 Latest version at scan: 13.0.5-beta1 Newtonsoft.Json 11.0.2 546945673 Outdated Library 3.0 Latest version at scan: 4.6.1 NUnit 3.10.1 546945674 Outdated Library 3.0 Latest version at scan: 2.0.0 recurly-api-client 1.8.0 546945675 Outdated Library 3.0 Latest version at scan: 1.0.0 SharpCompress 0.17.1 546945676 Outdated Library 3.0 Latest version at scan: 1.4.2 SharpZipLib 1.0.0-alpha1 546945677 Outdated Library 3.0 Latest version at scan: 11.0.0-preview.4.26230.115 System.Text.Encoding.CodePages 4.5.1 546945678 Outdated Library 3.0 Latest version at scan: 18.0.0 YamlDotNet 3.7.0 546945679 License 9.0 Library has High-Risk License MySql.Data 8.0.11 Full Report Details https://sca.analysiscenter.veracode.com/teams/PaainkYl/scans/119726345
Loading