Prtest git - #17

Veracode SCA agent scanning engine ready
Searching for supported projects (this may take a minute)...
[MSBuildDotNet]Scanning /home/runner/work/veracode/veracode/example-dotnet-utils
[MSBuildDotNet]Scanning /home/runner/work/veracode/veracode/example-dotnet
Processing results...
Processing results complete
Found 0 example-dotnet-utils.dll, example-dotnet.dll files for vulnerable method analysis.
Summary Report
Scan ID 42f3d28d-ccdf-4678-9334-d9bf2c873236
Scan Date & Time Aug 21 2026 04:25PM UTC
Account type ENTERPRISE
Scan engine 3.8.120 (latest 3.8.120)
Analysis time 13 seconds
User runner
Project /home/runner/work/veracode/veracode
Package Manager(s) MSBuildDotNet
Open-Source Libraries
Total Libraries 124
Direct Libraries 16
Transitive Libraries 110
Vulnerable Libraries 13
Security
With Vulnerable Methods 0
Critical Risk Vulnerabilities 6
High Risk Vulnerabilities 11
Medium Risk Vulnerabilities 11
Low Risk Vulnerabilities 1
Vulnerabilities - Public Data
CVE-2021-32840 Critical Risk Directory Traversal SharpZipLib 1.0.0-alpha1
CVE-2018-1285 Critical Risk XML External Entities (XXE) log4net 2.0.8
CVE-2017-0907 Critical Risk Server-Side Request Forgery (SSRF) recurly-api-client 1.8.0
CVE-2019-0564 High Risk Denial Of Service (DoS) Microsoft.NETCore.App 2.1.0
CVE-2020-1147 High Risk Remote Code Execution (RCE) Microsoft.NETCore.App 2.1.0
CVE-2020-1161 High Risk Denial Of Service (DoS) Microsoft.NETCore.App 2.1.0
CVE-2019-0545 High Risk Cross-Origin Resource Sharing (CORS) Bypass Microsoft.NETCore.App 2.1.0
CVE-2020-1108 High Risk Denial Of Service (DoS) Microsoft.NETCore.App 2.1.0
CVE-2017-11770 High Risk Denial Of Service (DoS) System.Security.Cryptography.X509Certificates 4.1.0
CVE-2024-21907 High Risk Denial Of Service (DoS) Newtonsoft.Json 11.0.2
CVE-2018-8292 High Risk Information Disclosure System.Net.Http 4.1.0
CVE-2018-8292 High Risk Information Disclosure System.Net.Http 4.1.0
CVE-2018-1000210 High Risk Remote Code Execution (RCE) YamlDotNet 3.7.0
CVE-2018-8416 Medium Risk Arbitrary File Writes And Directory Creation Microsoft.NETCore.App 2.1.0
CVE-2019-0657 Medium Risk Authorization Bypass Microsoft.NETCore.App 2.1.0
CVE-2018-8416 Medium Risk Arbitrary File Writes And Directory Creation Microsoft.NETCore.App 2.1.0
CVE-2018-1002205 Medium Risk Arbitrary File Writing DotNetZip 1.10.0
CVE-2018-1002208 Medium Risk Arbitrary File Writing SharpZipLib 1.0.0-alpha1
CVE-2021-32841 Medium Risk Directory Traversal SharpZipLib 1.0.0-alpha1
CVE-2021-32842 Medium Risk Directory Traversal SharpZipLib 1.0.0-alpha1
CVE-2026-44788 Medium Risk SharpCompress Has Directory Traversal Via Directory Entries In WriteToDirectory (zip Slip Variant) SharpCompress 0.17.1
CVE-2018-1002206 Medium Risk Arbitrary File Write SharpCompress 0.17.1
CVE-2021-39208 Medium Risk Path Traversal SharpCompress 0.17.1
CVE-2026-40021 Medium Risk Apache Log4net: Silent Log Event Loss In XmlLayout And XmlLayoutSchemaLog4J Due To Unescaped XML 1.0 Forbidden Character log4net 2.0.8
Vulnerabilities - Premium Data
NO-CVE Critical Risk Timing Attack BCrypt.Net-Core 1.2.0-CI00005
NO-CVE Critical Risk SQL Injection GSF.Security 2.1.326-beta
NO-CVE Critical Risk SQL Injection GSF.Core 2.1.326-beta
NO-CVE High Risk XML External Entity (XXE) recurly-api-client 1.8.0
NO-CVE Low Risk Insecure Temporary File SharpZipLib 1.0.0-alpha1
Licenses
Unique Library Licenses 14
Unique Libraries Using GPL 1
Unique Libraries With High Risk License 1
Unique Libraries With Medium Risk License 70
Unique Libraries With Low Risk License 122
Unique Libraries With Multiple Licenses 99
Unique Libraries With Unassessable License 95
Unique Libraries With Unrecognizable License 1
Issues
Issue ID Issue Type Severity Description Library Name & Version In Use
586988432 Vulnerability 9.8 CVE-2017-0907: Server-Side Request Forgery (SSRF) recurly-api-client 1.8.0
586988433 Vulnerability 5.5 CVE-2018-1002206: Arbitrary File Write SharpCompress 0.17.1
586988434 Vulnerability 5.5 CVE-2018-1002208: Arbitrary File Writing SharpZipLib 1.0.0-alpha1
586989185 Vulnerability 5.5 CVE-2018-1002205: Arbitrary File Writing DotNetZip 1.10.0
586989186 Vulnerability 7.8 CVE-2018-1000210: Remote Code Execution (RCE) YamlDotNet 3.7.0
586989187 Vulnerability 9.1 NO-CVE: Timing Attack BCrypt.Net-Core 1.2.0-CI00005
586989188 Vulnerability 9.8 NO-CVE: SQL Injection GSF.Security 2.1.326-beta
586989189 Vulnerability 9.8 NO-CVE: SQL Injection GSF.Core 2.1.326-beta
586989190 Vulnerability 7.5 CVE-2018-8292: Information Disclosure System.Net.Http 4.1.0
586989191 Vulnerability 6.5 CVE-2018-8416: Arbitrary File Writes And Directory Creation Microsoft.NETCore.App 2.1.0
586989192 Vulnerability 7.3 NO-CVE: XML External Entity (XXE) recurly-api-client 1.8.0
586989193 Vulnerability 7.5 CVE-2019-0545: Cross-Origin Resource Sharing (CORS) Bypass Microsoft.NETCore.App 2.1.0
586989194 Vulnerability 7.5 CVE-2019-0564: Denial Of Service (DoS) Microsoft.NETCore.App 2.1.0
586989195 Vulnerability 7.5 CVE-2017-11770: Denial Of Service (DoS) System.Security.Cryptography.X509Certificates 4.1.0
586989196 Vulnerability 7.5 CVE-2018-8292: Information Disclosure System.Net.Http 4.1.0
586989197 Vulnerability 6.5 CVE-2018-8416: Arbitrary File Writes And Directory Creation Microsoft.NETCore.App 2.1.0
586989198 Vulnerability 5.9 CVE-2019-0657: Authorization Bypass Microsoft.NETCore.App 2.1.0
586989199 Vulnerability 9.8 CVE-2018-1285: XML External Entities (XXE) log4net 2.0.8
586989200 Vulnerability 7.5 CVE-2020-1108: Denial of Service (DoS) Microsoft.NETCore.App 2.1.0
586989201 Vulnerability 7.5 CVE-2020-1161: Denial Of Service (DoS) Microsoft.NETCore.App 2.1.0
586989202 Vulnerability 7.8 CVE-2020-1147: Remote Code Execution (RCE) Microsoft.NETCore.App 2.1.0
586989203 Vulnerability 3.7 NO-CVE: Insecure Temporary File SharpZipLib 1.0.0-alpha1
586989204 Vulnerability 4.3 CVE-2021-39208: Path Traversal SharpCompress 0.17.1
586989205 Vulnerability 5.3 CVE-2021-32841: Directory Traversal SharpZipLib 1.0.0-alpha1
586989206 Vulnerability 5.3 CVE-2021-32842: Directory Traversal SharpZipLib 1.0.0-alpha1
586989207 Vulnerability 9.8 CVE-2021-32840: Directory Traversal SharpZipLib 1.0.0-alpha1
586989208 Vulnerability 7.5 CVE-2024-21907: Denial Of Service (DoS) Newtonsoft.Json 11.0.2
586989209 Vulnerability 5.3 CVE-2026-40021: Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden character log4net 2.0.8
586989210 Vulnerability 5.9 CVE-2026-44788: SharpCompress has directory traversal via directory entries in WriteToDirectory (zip slip variant) SharpCompress 0.17.1
586989211 Outdated Library 3.0 Latest version at scan: 4.3.1 System.Runtime.Extensions 4.3.0
586989212 Outdated Library 3.0 Latest version at scan: 1.6.0 BCrypt.Net-Core 1.2.0-CI00005
586989213 Outdated Library 3.0 Latest version at scan: 1.16.0 DotNetZip 1.10.0
586989214 Outdated Library 3.0 Latest version at scan: 11.0.101-preview7.26381.103 FSharp.Core 10.1.400
586989215 Outdated Library 3.0 Latest version at scan: 2.4.310-beta GSF.Security 2.1.326-beta
586989216 Outdated Library 3.0 Latest version at scan: 3.3.2 log4net 2.0.8
586989217 Outdated Library 3.0 Latest version at scan: 3.0.0-preview-27324-5 Microsoft.NETCore.App 2.1.0
586989218 Outdated Library 3.0 Latest version at scan: 9.7.0 MySql.Data 8.0.11
586989219 Outdated Library 3.0 Latest version at scan: 13.0.5-beta1 Newtonsoft.Json 11.0.2
586989220 Outdated Library 3.0 Latest version at scan: 4.6.1 NUnit 3.10.1
586989221 Outdated Library 3.0 Latest version at scan: 2.0.0 recurly-api-client 1.8.0
586989222 Outdated Library 3.0 Latest version at scan: 1.0.0 SharpCompress 0.17.1
586989223 Outdated Library 3.0 Latest version at scan: 1.4.2 SharpZipLib 1.0.0-alpha1
586989224 Outdated Library 3.0 Latest version at scan: 11.0.0-preview.7.26381.103 System.Text.Encoding.CodePages 4.5.1
586989225 Outdated Library 3.0 Latest version at scan: 18.1.0 YamlDotNet 3.7.0
586989226 License 9.0 Library has High-Risk License MySql.Data 8.0.11
Full Report Details https://sca.analysiscenter.veracode.com/teams/PaainkYl/scans/126760097