Today - #8

Veracode SCA agent scanning engine ready
Searching for supported projects (this may take a minute)...
[MSBuildDotNet]Scanning /home/runner/work/veracode/veracode/example-dotnet-utils
[MSBuildDotNet]Scanning /home/runner/work/veracode/veracode/example-dotnet
Processing results...
Processing results complete
Found 0 example-dotnet-utils.dll, example-dotnet.dll files for vulnerable method analysis.
Summary Report
Scan ID c3013857-40c7-43b2-87a0-deec3236e153
Scan Date & Time Jun 09 2026 02:13AM UTC
Account type ENTERPRISE
Scan engine 3.8.115 (latest 3.8.115)
Analysis time 14 seconds
User runner
Project /home/runner/work/veracode/veracode
Package Manager(s) MSBuildDotNet
Open-Source Libraries
Total Libraries 124
Direct Libraries 16
Transitive Libraries 110
Vulnerable Libraries 13
Security
With Vulnerable Methods 0
Critical Risk Vulnerabilities 6
High Risk Vulnerabilities 11
Medium Risk Vulnerabilities 11
Low Risk Vulnerabilities 1
Vulnerabilities - Public Data
CVE-2021-32840 Critical Risk Directory Traversal SharpZipLib 1.0.0-alpha1
CVE-2018-1285 Critical Risk XML External Entities (XXE) log4net 2.0.8
CVE-2017-0907 Critical Risk Server-Side Request Forgery (SSRF) recurly-api-client 1.8.0
CVE-2019-0564 High Risk Denial Of Service (DoS) Microsoft.NETCore.App 2.1.0
CVE-2020-1147 High Risk Remote Code Execution (RCE) Microsoft.NETCore.App 2.1.0
CVE-2020-1161 High Risk Denial Of Service (DoS) Microsoft.NETCore.App 2.1.0
CVE-2019-0545 High Risk Cross-Origin Resource Sharing (CORS) Bypass Microsoft.NETCore.App 2.1.0
CVE-2020-1108 High Risk Denial Of Service (DoS) Microsoft.NETCore.App 2.1.0
CVE-2017-11770 High Risk Denial Of Service (DoS) System.Security.Cryptography.X509Certificates 4.1.0
CVE-2024-21907 High Risk Denial Of Service (DoS) Newtonsoft.Json 11.0.2
CVE-2018-8292 High Risk Information Disclosure System.Net.Http 4.1.0
CVE-2018-8292 High Risk Information Disclosure System.Net.Http 4.1.0
CVE-2018-1000210 High Risk Remote Code Execution (RCE) YamlDotNet 3.7.0
CVE-2018-8416 Medium Risk Arbitrary File Writes And Directory Creation Microsoft.NETCore.App 2.1.0
CVE-2019-0657 Medium Risk Authorization Bypass Microsoft.NETCore.App 2.1.0
CVE-2018-8416 Medium Risk Arbitrary File Writes And Directory Creation Microsoft.NETCore.App 2.1.0
CVE-2018-1002205 Medium Risk Arbitrary File Writing DotNetZip 1.10.0
CVE-2018-1002208 Medium Risk Arbitrary File Writing SharpZipLib 1.0.0-alpha1
CVE-2021-32841 Medium Risk Directory Traversal SharpZipLib 1.0.0-alpha1
CVE-2021-32842 Medium Risk Directory Traversal SharpZipLib 1.0.0-alpha1
CVE-2026-44788 Medium Risk SharpCompress Has Directory Traversal Via Directory Entries In WriteToDirectory (zip Slip Variant) SharpCompress 0.17.1
CVE-2018-1002206 Medium Risk Arbitrary File Write SharpCompress 0.17.1
CVE-2021-39208 Medium Risk Path Traversal SharpCompress 0.17.1
CVE-2026-40021 Medium Risk Apache Log4net: Silent Log Event Loss In XmlLayout And XmlLayoutSchemaLog4J Due To Unescaped XML 1.0 Forbidden Character log4net 2.0.8
Vulnerabilities - Premium Data
NO-CVE Critical Risk Timing Attack BCrypt.Net-Core 1.2.0-CI00005
NO-CVE Critical Risk SQL Injection GSF.Security 2.1.326-beta
NO-CVE Critical Risk SQL Injection GSF.Core 2.1.326-beta
NO-CVE High Risk XML External Entity (XXE) recurly-api-client 1.8.0
NO-CVE Low Risk Insecure Temporary File SharpZipLib 1.0.0-alpha1
Licenses
Unique Library Licenses 14
Unique Libraries Using GPL 1
Unique Libraries With High Risk License 1
Unique Libraries With Medium Risk License 70
Unique Libraries With Low Risk License 122
Unique Libraries With Multiple Licenses 99
Unique Libraries With Unassessable License 95
Unique Libraries With Unrecognizable License 1
Issues
Issue ID Issue Type Severity Description Library Name & Version In Use
541533337 Vulnerability 9.8 CVE-2017-0907: Server-Side Request Forgery (SSRF) recurly-api-client 1.8.0
541533338 Vulnerability 5.5 CVE-2018-1002206: Arbitrary File Write SharpCompress 0.17.1
541533339 Vulnerability 5.5 CVE-2018-1002208: Arbitrary File Writing SharpZipLib 1.0.0-alpha1
541533340 Vulnerability 5.5 CVE-2018-1002205: Arbitrary File Writing DotNetZip 1.10.0
541533341 Vulnerability 7.8 CVE-2018-1000210: Remote Code Execution (RCE) YamlDotNet 3.7.0
541533342 Vulnerability 9.1 NO-CVE: Timing Attack BCrypt.Net-Core 1.2.0-CI00005
541533343 Vulnerability 9.8 NO-CVE: SQL Injection GSF.Security 2.1.326-beta
541533344 Vulnerability 9.8 NO-CVE: SQL Injection GSF.Core 2.1.326-beta
541533345 Vulnerability 7.5 CVE-2018-8292: Information Disclosure System.Net.Http 4.1.0
541533346 Vulnerability 6.5 CVE-2018-8416: Arbitrary File Writes And Directory Creation Microsoft.NETCore.App 2.1.0
541533347 Vulnerability 7.3 NO-CVE: XML External Entity (XXE) recurly-api-client 1.8.0
541533348 Vulnerability 7.5 CVE-2019-0545: Cross-Origin Resource Sharing (CORS) Bypass Microsoft.NETCore.App 2.1.0
541533349 Vulnerability 7.5 CVE-2019-0564: Denial Of Service (DoS) Microsoft.NETCore.App 2.1.0
541533350 Vulnerability 7.5 CVE-2017-11770: Denial Of Service (DoS) System.Security.Cryptography.X509Certificates 4.1.0
541533351 Vulnerability 7.5 CVE-2018-8292: Information Disclosure System.Net.Http 4.1.0
541533352 Vulnerability 6.5 CVE-2018-8416: Arbitrary File Writes And Directory Creation Microsoft.NETCore.App 2.1.0
541533353 Vulnerability 5.9 CVE-2019-0657: Authorization Bypass Microsoft.NETCore.App 2.1.0
541533354 Vulnerability 9.8 CVE-2018-1285: XML External Entities (XXE) log4net 2.0.8
541533355 Vulnerability 7.5 CVE-2020-1108: Denial of Service (DoS) Microsoft.NETCore.App 2.1.0
541533356 Vulnerability 7.5 CVE-2020-1161: Denial Of Service (DoS) Microsoft.NETCore.App 2.1.0
541533357 Vulnerability 7.8 CVE-2020-1147: Remote Code Execution (RCE) Microsoft.NETCore.App 2.1.0
541533358 Vulnerability 3.7 NO-CVE: Insecure Temporary File SharpZipLib 1.0.0-alpha1
541533359 Vulnerability 4.3 CVE-2021-39208: Path Traversal SharpCompress 0.17.1
541533360 Vulnerability 5.3 CVE-2021-32841: Directory Traversal SharpZipLib 1.0.0-alpha1
541533361 Vulnerability 5.3 CVE-2021-32842: Directory Traversal SharpZipLib 1.0.0-alpha1
541533362 Vulnerability 9.8 CVE-2021-32840: Directory Traversal SharpZipLib 1.0.0-alpha1
541533363 Vulnerability 7.5 CVE-2024-21907: Denial Of Service (DoS) Newtonsoft.Json 11.0.2
541533364 Vulnerability 5.3 CVE-2026-40021: Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden character log4net 2.0.8
541533365 Vulnerability 5.9 CVE-2026-44788: SharpCompress has directory traversal via directory entries in WriteToDirectory (zip slip variant) SharpCompress 0.17.1
541533366 Outdated Library 3.0 Latest version at scan: 4.3.1 System.Runtime.Extensions 4.3.0
541533367 Outdated Library 3.0 Latest version at scan: 1.6.0 BCrypt.Net-Core 1.2.0-CI00005
541533368 Outdated Library 3.0 Latest version at scan: 1.16.0 DotNetZip 1.10.0
541533369 Outdated Library 3.0 Latest version at scan: 11.0.101-preview4.26230.115 FSharp.Core 10.1.300
541533370 Outdated Library 3.0 Latest version at scan: 2.4.275-beta GSF.Security 2.1.326-beta
541533371 Outdated Library 3.0 Latest version at scan: 3.3.1 log4net 2.0.8
541533372 Outdated Library 3.0 Latest version at scan: 3.0.0-preview-27324-5 Microsoft.NETCore.App 2.1.0
541533373 Outdated Library 3.0 Latest version at scan: 9.7.0 MySql.Data 8.0.11
541533374 Outdated Library 3.0 Latest version at scan: 13.0.5-beta1 Newtonsoft.Json 11.0.2
541533375 Outdated Library 3.0 Latest version at scan: 4.6.1 NUnit 3.10.1
541533376 Outdated Library 3.0 Latest version at scan: 2.0.0 recurly-api-client 1.8.0
541533377 Outdated Library 3.0 Latest version at scan: 1.0.0 SharpCompress 0.17.1
541533378 Outdated Library 3.0 Latest version at scan: 1.4.2 SharpZipLib 1.0.0-alpha1
541533379 Outdated Library 3.0 Latest version at scan: 11.0.0-preview.4.26230.115 System.Text.Encoding.CodePages 4.5.1
541533380 Outdated Library 3.0 Latest version at scan: 18.0.0 YamlDotNet 3.7.0
541533381 License 9.0 Library has High-Risk License MySql.Data 8.0.11
Full Report Details https://sca.analysiscenter.veracode.com/teams/PaainkYl/scans/119624962