Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.1.0
Report Generated On: Tue, 4 Mar 2025 11:56:28 +0530
Dependencies Scanned: 81 (64 unique)
Vulnerable Dependencies: 1
Vulnerabilities Found: 1
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2025-03-04T10:03:23+0530
NVD API Last Modified: 2025-03-04T04:15:15Z

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Highest Severity	CVE Count	Confidence	Evidence Count
AWSSDK.APIGateway:3.7.100.22		pkg:nuget/AWSSDK.APIGateway@3.7.100.22		0		6
AWSSDK.CodePipeline:3.7.100.22		pkg:nuget/AWSSDK.CodePipeline@3.7.100.22		0		6
AWSSDK.Core:3.7.100.22		pkg:nuget/AWSSDK.Core@3.7.100.22		0		6
AWSSDK.Extensions.NETCore.Setup:3.7.1		pkg:nuget/AWSSDK.Extensions.NETCore.Setup@3.7.1		0		8
AWSSDK.Lambda:3.7.100.2		pkg:nuget/AWSSDK.Lambda@3.7.100.2		0		6
AWSSDK.S3:3.7.100		pkg:nuget/AWSSDK.S3@3.7.100		0		6
AWSSDK.SecurityToken:3.7.100.22		pkg:nuget/AWSSDK.SecurityToken@3.7.100.22		0		6
AWSSDK.SimpleEmail:3.7.0.15		pkg:nuget/AWSSDK.SimpleEmail@3.7.0.15		0		6
AWSSDK.SimpleNotificationService:3.7.100.2		pkg:nuget/AWSSDK.SimpleNotificationService@3.7.100.2		0		6
AWSSDK.SimpleSystemsManagement:3.7.100.2		pkg:nuget/AWSSDK.SimpleSystemsManagement@3.7.100.2		0		6
Amazon.Lambda.AspNetCoreServer:8.1.0	cpe:2.3:a:asp-project:asp-project:8.1.0:::::::*	pkg:nuget/Amazon.Lambda.AspNetCoreServer@8.1.0		0	Low	8
Amazon.Lambda.Core:2.1.0		pkg:nuget/Amazon.Lambda.Core@2.1.0		0		8
Amazon.Lambda.Serialization.SystemTextJson:2.3.0		pkg:nuget/Amazon.Lambda.Serialization.SystemTextJson@2.3.0		0		8
Amazon.Lambda.Serialization.SystemTextJson:2.3.1		pkg:nuget/Amazon.Lambda.Serialization.SystemTextJson@2.3.1		0		8
AspectInjector:2.6.0		pkg:nuget/AspectInjector@2.6.0		0		4
AutoMapper.Extensions.Microsoft.DependencyInjection:12.0.0		pkg:nuget/AutoMapper.Extensions.Microsoft.DependencyInjection@12.0.0		0		8
AutoMapper:12.0.0		pkg:nuget/AutoMapper@12.0.0		0		4
AwsParameterStore.Microsoft.Extensions.Configuration:0.7.0		pkg:nuget/AwsParameterStore.Microsoft.Extensions.Configuration@0.7.0		0		8
BBPS.API.csproj				0		2
BBPS.csproj				0		2
BBPSBillerPlanUpdater.csproj				0		2
BBPSCodePipelineDeployAPI.csproj				0		2
BouncyCastle.Cryptography:2.4.0		pkg:nuget/BouncyCastle.Cryptography@2.4.0		0		6
FluentValidation.AspNetCore:11.0.0	cpe:2.3:a:asp-project:asp-project:11.0.0:::::::*	pkg:nuget/FluentValidation.AspNetCore@11.0.0		0	Low	6
FluentValidation:11.4.0		pkg:nuget/FluentValidation@11.4.0		0		4
Hashids.net:1.6.1		pkg:nuget/Hashids.net@1.6.1		0		6
Lumigo.DotNET:1.0.51		pkg:nuget/Lumigo.DotNET@1.0.51		0		6
Microsoft.AspNetCore.Authentication.JwtBearer:6.0.11	cpe:2.3:a:asp-project:asp-project:6.0.11:::::::*	pkg:nuget/Microsoft.AspNetCore.Authentication.JwtBearer@6.0.11		0	Low	8
Microsoft.AspNetCore.Http:2.2.2	cpe:2.3:a:asp-project:asp-project:2.2.2:::::::*	pkg:nuget/Microsoft.AspNetCore.Http@2.2.2	MEDIUM	1	Low	8
Microsoft.EntityFrameworkCore.Design:6.0.11		pkg:nuget/Microsoft.EntityFrameworkCore.Design@6.0.11		0		8
Microsoft.EntityFrameworkCore.Relational:6.0.32		pkg:nuget/Microsoft.EntityFrameworkCore.Relational@6.0.32		0		8
Microsoft.EntityFrameworkCore:6.0.32		pkg:nuget/Microsoft.EntityFrameworkCore@6.0.32		0		6
Microsoft.Extensions.Configuration.EnvironmentVariables:6.0.1		pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@6.0.1		0		8
Microsoft.Extensions.Configuration.EnvironmentVariables:7.0.0		pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@7.0.0		0		8
Microsoft.Extensions.Configuration.Json:6.0.0		pkg:nuget/Microsoft.Extensions.Configuration.Json@6.0.0		0		8
Microsoft.Extensions.Configuration.Json:7.0.0		pkg:nuget/Microsoft.Extensions.Configuration.Json@7.0.0		0		8
Microsoft.Extensions.Configuration:6.0.1		pkg:nuget/Microsoft.Extensions.Configuration@6.0.1		0		8
Microsoft.Extensions.DependencyInjection:6.0.1		pkg:nuget/Microsoft.Extensions.DependencyInjection@6.0.1		0		8
Microsoft.Extensions.DependencyInjection:7.0.0		pkg:nuget/Microsoft.Extensions.DependencyInjection@7.0.0		0		8
Microsoft.Extensions.Http:6.0.0		pkg:nuget/Microsoft.Extensions.Http@6.0.0		0		8
Microsoft.Extensions.Logging:6.0.0		pkg:nuget/Microsoft.Extensions.Logging@6.0.0		0		8
Microsoft.Extensions.PlatformAbstractions:1.1.0		pkg:nuget/Microsoft.Extensions.PlatformAbstractions@1.1.0		0		8
Microsoft.IdentityModel.Tokens:8.3.1	cpe:2.3:a:identitymodel_project:identitymodel:8.3.1:::::::* cpe:2.3:a:microsoft:identity_model:8.3.1:::::::* cpe:2.3:a:microsoft:identitymodel:8.3.1:::::::*	pkg:nuget/Microsoft.IdentityModel.Tokens@8.3.1		0	Low	8
Newtonsoft.Json:13.0.2		pkg:nuget/Newtonsoft.Json@13.0.2		0		7
Newtonsoft.Json:13.0.3		pkg:nuget/Newtonsoft.Json@13.0.3		0		7
Pomelo.EntityFrameworkCore.MySql:6.0.3	cpe:2.3:a:mysql:mysql:6.0.3:::::::* cpe:2.3:a:www-sql_project:www-sql:6.0.3:::::::*	pkg:nuget/Pomelo.EntityFrameworkCore.MySql@6.0.3		0	Low	8
SwaggerController.js				0		0
Swashbuckle.AspNetCore.Newtonsoft:6.5.0		pkg:nuget/Swashbuckle.AspNetCore.Newtonsoft@6.5.0		0		8
Swashbuckle.AspNetCore.Swagger:6.5.0		pkg:nuget/Swashbuckle.AspNetCore.Swagger@6.5.0		0		8
Swashbuckle.AspNetCore:6.5.0		pkg:nuget/Swashbuckle.AspNetCore@6.5.0		0		6
System.IdentityModel.Tokens.Jwt:8.3.1	cpe:2.3:a:identitymodel_project:identitymodel:8.3.1:::::::*	pkg:nuget/System.IdentityModel.Tokens.Jwt@8.3.1		0	Low	8
authswagger.js				0		0
billercategoryswagger.js				0		0
billerswagger.js				0		0
billingoverviewswagger.js				0		0
billingswagger.js				0		0
complaintoverviewswagger.js				0		0
complaintswagger.js				0		0
lookupswagger.js				0		0
package.json				0		0
paymentswagger.js				0		0
stateswagger.js				0		0
swagger.js				0		0
swaggerDefinition.js				0		0

Dependencies (vulnerable)

AWSSDK.APIGateway:3.7.100.22

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSCodePipelineDeployAPI\BBPSCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	APIGateway	Low
Vendor	msbuild	id	AWSSDK	Medium
Vendor	msbuild	id	AWSSDK.APIGateway	Medium
Product	msbuild	id	APIGateway	Medium
Product	msbuild	id	AWSSDK.APIGateway	Highest
Version	msbuild	version	3.7.100.22	Highest

Related Dependencies

Identifiers

pkg:nuget/AWSSDK.APIGateway@3.7.100.22 (Confidence:Highest)

AWSSDK.CodePipeline:3.7.100.22

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSCodePipelineDeployAPI\BBPSCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AWSSDK	Medium
Vendor	msbuild	id	AWSSDK.CodePipeline	Medium
Vendor	msbuild	id	CodePipeline	Low
Product	msbuild	id	AWSSDK.CodePipeline	Highest
Product	msbuild	id	CodePipeline	Medium
Version	msbuild	version	3.7.100.22	Highest

Related Dependencies

Identifiers

pkg:nuget/AWSSDK.CodePipeline@3.7.100.22 (Confidence:Highest)

AWSSDK.Core:3.7.100.22

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSCodePipelineDeployAPI\BBPSCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AWSSDK	Medium
Vendor	msbuild	id	AWSSDK.Core	Medium
Vendor	msbuild	id	Core	Low
Product	msbuild	id	AWSSDK.Core	Highest
Product	msbuild	id	Core	Medium
Version	msbuild	version	3.7.100.22	Highest

Related Dependencies

Identifiers

pkg:nuget/AWSSDK.Core@3.7.100.22 (Confidence:Highest)

AWSSDK.Extensions.NETCore.Setup:3.7.1

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AWSSDK	Medium
Vendor	msbuild	id	AWSSDK.Extensions.NETCore.Setup	Medium
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.NETCore.Setup	Low
Product	msbuild	id	AWSSDK.Extensions.NETCore.Setup	Highest
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.NETCore.Setup	Medium
Version	msbuild	version	3.7.1	Highest

Identifiers

pkg:nuget/AWSSDK.Extensions.NETCore.Setup@3.7.1 (Confidence:Highest)

AWSSDK.Lambda:3.7.100.2

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AWSSDK	Medium
Vendor	msbuild	id	AWSSDK.Lambda	Medium
Vendor	msbuild	id	Lambda	Low
Product	msbuild	id	AWSSDK.Lambda	Highest
Product	msbuild	id	Lambda	Medium
Version	msbuild	version	3.7.100.2	Highest

Identifiers

pkg:nuget/AWSSDK.Lambda@3.7.100.2 (Confidence:Highest)

AWSSDK.S3:3.7.100

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSCodePipelineDeployAPI\BBPSCodePipelineDeployAPI.csproj

Evidence

Related Dependencies

Identifiers

pkg:nuget/AWSSDK.S3@3.7.100 (Confidence:Highest)

AWSSDK.SecurityToken:3.7.100.22

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSCodePipelineDeployAPI\BBPSCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AWSSDK	Medium
Vendor	msbuild	id	AWSSDK.SecurityToken	Medium
Vendor	msbuild	id	SecurityToken	Low
Product	msbuild	id	AWSSDK.SecurityToken	Highest
Product	msbuild	id	SecurityToken	Medium
Version	msbuild	version	3.7.100.22	Highest

Related Dependencies

Identifiers

pkg:nuget/AWSSDK.SecurityToken@3.7.100.22 (Confidence:Highest)

AWSSDK.SimpleEmail:3.7.0.15

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AWSSDK	Medium
Vendor	msbuild	id	AWSSDK.SimpleEmail	Medium
Vendor	msbuild	id	SimpleEmail	Low
Product	msbuild	id	AWSSDK.SimpleEmail	Highest
Product	msbuild	id	SimpleEmail	Medium
Version	msbuild	version	3.7.0.15	Highest

Identifiers

pkg:nuget/AWSSDK.SimpleEmail@3.7.0.15 (Confidence:Highest)

AWSSDK.SimpleNotificationService:3.7.100.2

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AWSSDK	Medium
Vendor	msbuild	id	AWSSDK.SimpleNotificationService	Medium
Vendor	msbuild	id	SimpleNotificationService	Low
Product	msbuild	id	AWSSDK.SimpleNotificationService	Highest
Product	msbuild	id	SimpleNotificationService	Medium
Version	msbuild	version	3.7.100.2	Highest

Identifiers

pkg:nuget/AWSSDK.SimpleNotificationService@3.7.100.2 (Confidence:Highest)

AWSSDK.SimpleSystemsManagement:3.7.100.2

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSCodePipelineDeployAPI\BBPSCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AWSSDK	Medium
Vendor	msbuild	id	AWSSDK.SimpleSystemsManagement	Medium
Vendor	msbuild	id	SimpleSystemsManagement	Low
Product	msbuild	id	AWSSDK.SimpleSystemsManagement	Highest
Product	msbuild	id	SimpleSystemsManagement	Medium
Version	msbuild	version	3.7.100.2	Highest

Related Dependencies

Identifiers

pkg:nuget/AWSSDK.SimpleSystemsManagement@3.7.100.2 (Confidence:Highest)

Amazon.Lambda.AspNetCoreServer:8.1.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.API\BBPS.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Amazon	Medium
Vendor	msbuild	id	Amazon.Lambda.AspNetCoreServer	Medium
Vendor	msbuild	id	Lambda	Low
Vendor	msbuild	id	Lambda.AspNetCoreServer	Low
Product	msbuild	id	Amazon.Lambda.AspNetCoreServer	Highest
Product	msbuild	id	Lambda	Medium
Product	msbuild	id	Lambda.AspNetCoreServer	Medium
Version	msbuild	version	8.1.0	Highest

Identifiers

pkg:nuget/Amazon.Lambda.AspNetCoreServer@8.1.0 (Confidence:Highest)
cpe:2.3:a:asp-project:asp-project:8.1.0:*:*:*:*:*:*:* (Confidence:Low)

Amazon.Lambda.Core:2.1.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSBillerPlanUpdater\BBPSBillerPlanUpdater.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Amazon	Medium
Vendor	msbuild	id	Amazon.Lambda.Core	Medium
Vendor	msbuild	id	Lambda	Low
Vendor	msbuild	id	Lambda.Core	Low
Product	msbuild	id	Amazon.Lambda.Core	Highest
Product	msbuild	id	Lambda	Medium
Product	msbuild	id	Lambda.Core	Medium
Version	msbuild	version	2.1.0	Highest

Related Dependencies

Identifiers

pkg:nuget/Amazon.Lambda.Core@2.1.0 (Confidence:Highest)

Amazon.Lambda.Serialization.SystemTextJson:2.3.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSCodePipelineDeployAPI\BBPSCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Amazon	Medium
Vendor	msbuild	id	Amazon.Lambda.Serialization.SystemTextJson	Medium
Vendor	msbuild	id	Lambda	Low
Vendor	msbuild	id	Lambda.Serialization.SystemTextJson	Low
Product	msbuild	id	Amazon.Lambda.Serialization.SystemTextJson	Highest
Product	msbuild	id	Lambda	Medium
Product	msbuild	id	Lambda.Serialization.SystemTextJson	Medium
Version	msbuild	version	2.3.0	Highest

Related Dependencies

Identifiers

pkg:nuget/Amazon.Lambda.Serialization.SystemTextJson@2.3.0 (Confidence:Highest)

Amazon.Lambda.Serialization.SystemTextJson:2.3.1

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSBillerPlanUpdater\BBPSBillerPlanUpdater.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Amazon	Medium
Vendor	msbuild	id	Amazon.Lambda.Serialization.SystemTextJson	Medium
Vendor	msbuild	id	Lambda	Low
Vendor	msbuild	id	Lambda.Serialization.SystemTextJson	Low
Product	msbuild	id	Amazon.Lambda.Serialization.SystemTextJson	Highest
Product	msbuild	id	Lambda	Medium
Product	msbuild	id	Lambda.Serialization.SystemTextJson	Medium
Version	msbuild	version	2.3.1	Highest

Identifiers

pkg:nuget/Amazon.Lambda.Serialization.SystemTextJson@2.3.1 (Confidence:Highest)

AspectInjector:2.6.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.API\BBPS.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AspectInjector	Medium
Vendor	msbuild	id	AspectInjector	Low
Product	msbuild	id	AspectInjector	Highest
Version	msbuild	version	2.6.0	Highest

Identifiers

pkg:nuget/AspectInjector@2.6.0 (Confidence:Highest)

AutoMapper.Extensions.Microsoft.DependencyInjection:12.0.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AutoMapper	Medium
Vendor	msbuild	id	AutoMapper.Extensions.Microsoft.DependencyInjection	Medium
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.Microsoft.DependencyInjection	Low
Product	msbuild	id	AutoMapper.Extensions.Microsoft.DependencyInjection	Highest
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.Microsoft.DependencyInjection	Medium
Version	msbuild	version	12.0.0	Highest

Identifiers

pkg:nuget/AutoMapper.Extensions.Microsoft.DependencyInjection@12.0.0 (Confidence:Highest)

AutoMapper:12.0.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Identifiers

pkg:nuget/AutoMapper@12.0.0 (Confidence:Highest)

AwsParameterStore.Microsoft.Extensions.Configuration:0.7.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AwsParameterStore	Medium
Vendor	msbuild	id	AwsParameterStore.Microsoft.Extensions.Configuration	Medium
Vendor	msbuild	id	Microsoft	Low
Vendor	msbuild	id	Microsoft.Extensions.Configuration	Low
Product	msbuild	id	AwsParameterStore.Microsoft.Extensions.Configuration	Highest
Product	msbuild	id	Microsoft	Medium
Product	msbuild	id	Microsoft.Extensions.Configuration	Medium
Version	msbuild	version	0.7.0	Highest

Identifiers

pkg:nuget/AwsParameterStore.Microsoft.Extensions.Configuration@0.7.0 (Confidence:Highest)

BBPS.API.csproj

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.API\BBPS.API.csproj
MD5: bd899faa27c52f4df5d1cbd3a2626881
SHA1: 8043a473abf87dcb2b060e87674b61a5a70e6e32
SHA256:38a50bdaf1527a4de57b01568bc1339302f790aefb5d3385da1dd6c621191ef3

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	BBPS.API	High
Product	file	name	BBPS.API	High

Identifiers

None

BBPS.csproj

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj
MD5: 696d771bb9ca32aae201233d8c3f376d
SHA1: 286fc84811e59c7236e3b334ec8ce49eb44bf9a0
SHA256:ff8e284045e6f576c766ed0d5b05160f4a39c39e4ac6d7ea2fe9105e0be2756e

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	BBPS	High
Product	file	name	BBPS	High

Identifiers

None

BBPSBillerPlanUpdater.csproj

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSBillerPlanUpdater\BBPSBillerPlanUpdater.csproj
MD5: a754e5cb4bbe19ab11af1102c867fa32
SHA1: b1106fbd57a08e319d45c305a7f9d0109170d218
SHA256:e5070eb73dddf7588ae21430292ad06fa79965096faa4ef243484f9a4a15b8d7

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	BBPSBillerPlanUpdater	High
Product	file	name	BBPSBillerPlanUpdater	High

Related Dependencies

Identifiers

None

BBPSCodePipelineDeployAPI.csproj

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSCodePipelineDeployAPI\BBPSCodePipelineDeployAPI.csproj
MD5: e812acaeeb02be949727bab10b1cffee
SHA1: ec4d10869ac373552a60f1e0a7ea5f058bcdde3e
SHA256:9b11a6b5fe56924cc450b76e268e91a101a2407fb67e37e4ab72dace1d299923

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	BBPSCodePipelineDeployAPI	High
Product	file	name	BBPSCodePipelineDeployAPI	High

Identifiers

None

BouncyCastle.Cryptography:2.4.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	BouncyCastle	Medium
Vendor	msbuild	id	BouncyCastle.Cryptography	Medium
Vendor	msbuild	id	Cryptography	Low
Product	msbuild	id	BouncyCastle.Cryptography	Highest
Product	msbuild	id	Cryptography	Medium
Version	msbuild	version	2.4.0	Highest

Identifiers

pkg:nuget/BouncyCastle.Cryptography@2.4.0 (Confidence:Highest)

FluentValidation.AspNetCore:11.0.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.API\BBPS.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AspNetCore	Low
Vendor	msbuild	id	FluentValidation	Medium
Vendor	msbuild	id	FluentValidation.AspNetCore	Medium
Product	msbuild	id	AspNetCore	Medium
Product	msbuild	id	FluentValidation.AspNetCore	Highest
Version	msbuild	version	11.0.0	Highest

Related Dependencies

Identifiers

pkg:nuget/FluentValidation.AspNetCore@11.0.0 (Confidence:Highest)
cpe:2.3:a:asp-project:asp-project:11.0.0:*:*:*:*:*:*:* (Confidence:Low)

FluentValidation:11.4.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.API\BBPS.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	FluentValidation	Medium
Vendor	msbuild	id	FluentValidation	Low
Product	msbuild	id	FluentValidation	Highest
Version	msbuild	version	11.4.0	Highest

Related Dependencies

Identifiers

pkg:nuget/FluentValidation@11.4.0 (Confidence:Highest)

Hashids.net:1.6.1

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Hashids	Medium
Vendor	msbuild	id	Hashids.net	Medium
Vendor	msbuild	id	net	Low
Product	msbuild	id	Hashids.net	Highest
Product	msbuild	id	net	Medium
Version	msbuild	version	1.6.1	Highest

Identifiers

pkg:nuget/Hashids.net@1.6.1 (Confidence:Highest)

Lumigo.DotNET:1.0.51

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSBillerPlanUpdater\BBPSBillerPlanUpdater.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	DotNET	Low
Vendor	msbuild	id	Lumigo	Medium
Vendor	msbuild	id	Lumigo.DotNET	Medium
Product	msbuild	id	DotNET	Medium
Product	msbuild	id	Lumigo.DotNET	Highest
Version	msbuild	version	1.0.51	Highest

Related Dependencies

Identifiers

pkg:nuget/Lumigo.DotNET@1.0.51 (Confidence:Highest)

Microsoft.AspNetCore.Authentication.JwtBearer:6.0.11

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AspNetCore	Low
Vendor	msbuild	id	AspNetCore.Authentication.JwtBearer	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.AspNetCore.Authentication.JwtBearer	Medium
Product	msbuild	id	AspNetCore	Medium
Product	msbuild	id	AspNetCore.Authentication.JwtBearer	Medium
Product	msbuild	id	Microsoft.AspNetCore.Authentication.JwtBearer	Highest
Version	msbuild	version	6.0.11	Highest

Identifiers

pkg:nuget/Microsoft.AspNetCore.Authentication.JwtBearer@6.0.11 (Confidence:Highest)
cpe:2.3:a:asp-project:asp-project:6.0.11:*:*:*:*:*:*:* (Confidence:Low)

Microsoft.AspNetCore.Http:2.2.2

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AspNetCore	Low
Vendor	msbuild	id	AspNetCore.Http	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.AspNetCore.Http	Medium
Product	msbuild	id	AspNetCore	Medium
Product	msbuild	id	AspNetCore.Http	Medium
Product	msbuild	id	Microsoft.AspNetCore.Http	Highest
Version	msbuild	version	2.2.2	Highest

Identifiers

pkg:nuget/Microsoft.AspNetCore.Http@2.2.2 (Confidence:Highest)
cpe:2.3:a:asp-project:asp-project:2.2.2:*:*:*:*:*:*:* (Confidence:Low)

Published Vulnerabilities

CVE-2020-1045 (OSSINDEX)

<p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p>
<p>The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.</p>
<p>The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names.</p>


Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://ossindex.sonatype.org/vulnerability/CVE-2020-1045 for details

CWE-noinfo

CVSSv2:

Base Score: MEDIUM (5.0)
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

References:

OSSINDEX - [CVE-2020-1045] CWE-noinfo
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-1045
OSSIndex - https://github.com/dotnet/announcements/issues/165
OSSIndex - https://github.com/dotnet/aspnetcore/issues/23578
OSSIndex - https://github.com/dotnet/aspnetcore/issues/25701
OSSIndex - https://github.com/dotnet/aspnetcore/pull/23579
OSSIndex - https://github.com/dotnet/aspnetcore/pull/24264
OSSIndex - https://github.com/dotnet/aspnetcore/pull/24389
OSSIndex - https://github.com/dotnet/core/blob/master/release-notes/3.1/3.1.8/3.1.8.md#cve-2020-1045--microsoft-aspnet-core-security-feature-bypass-vulnerability
OSSIndex - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-1045

Vulnerable Software & Versions (OSSINDEX):

cpe:2.3:a:*:Microsoft.AspNetCore.Http:2.2.2:*:*:*:*:*:*:*

Microsoft.EntityFrameworkCore.Design:6.0.11

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	EntityFrameworkCore	Low
Vendor	msbuild	id	EntityFrameworkCore.Design	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.EntityFrameworkCore.Design	Medium
Product	msbuild	id	EntityFrameworkCore	Medium
Product	msbuild	id	EntityFrameworkCore.Design	Medium
Product	msbuild	id	Microsoft.EntityFrameworkCore.Design	Highest
Version	msbuild	version	6.0.11	Highest

Identifiers

pkg:nuget/Microsoft.EntityFrameworkCore.Design@6.0.11 (Confidence:Highest)

Microsoft.EntityFrameworkCore.Relational:6.0.32

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	EntityFrameworkCore	Low
Vendor	msbuild	id	EntityFrameworkCore.Relational	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.EntityFrameworkCore.Relational	Medium
Product	msbuild	id	EntityFrameworkCore	Medium
Product	msbuild	id	EntityFrameworkCore.Relational	Medium
Product	msbuild	id	Microsoft.EntityFrameworkCore.Relational	Highest
Version	msbuild	version	6.0.32	Highest

Identifiers

pkg:nuget/Microsoft.EntityFrameworkCore.Relational@6.0.32 (Confidence:Highest)

Microsoft.EntityFrameworkCore:6.0.32

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	EntityFrameworkCore	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.EntityFrameworkCore	Medium
Product	msbuild	id	EntityFrameworkCore	Medium
Product	msbuild	id	Microsoft.EntityFrameworkCore	Highest
Version	msbuild	version	6.0.32	Highest

Identifiers

pkg:nuget/Microsoft.EntityFrameworkCore@6.0.32 (Confidence:Highest)

Microsoft.Extensions.Configuration.EnvironmentVariables:6.0.1

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSCodePipelineDeployAPI\BBPSCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.Configuration.EnvironmentVariables	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.Extensions.Configuration.EnvironmentVariables	Medium
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.Configuration.EnvironmentVariables	Medium
Product	msbuild	id	Microsoft.Extensions.Configuration.EnvironmentVariables	Highest
Version	msbuild	version	6.0.1	Highest

Related Dependencies

Identifiers

pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@6.0.1 (Confidence:Highest)

Microsoft.Extensions.Configuration.EnvironmentVariables:7.0.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSBillerPlanUpdater\BBPSBillerPlanUpdater.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.Configuration.EnvironmentVariables	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.Extensions.Configuration.EnvironmentVariables	Medium
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.Configuration.EnvironmentVariables	Medium
Product	msbuild	id	Microsoft.Extensions.Configuration.EnvironmentVariables	Highest
Version	msbuild	version	7.0.0	Highest

Identifiers

pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@7.0.0 (Confidence:Highest)

Microsoft.Extensions.Configuration.Json:6.0.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSCodePipelineDeployAPI\BBPSCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.Configuration.Json	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.Extensions.Configuration.Json	Medium
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.Configuration.Json	Medium
Product	msbuild	id	Microsoft.Extensions.Configuration.Json	Highest
Version	msbuild	version	6.0.0	Highest

Related Dependencies

Identifiers

pkg:nuget/Microsoft.Extensions.Configuration.Json@6.0.0 (Confidence:Highest)

Microsoft.Extensions.Configuration.Json:7.0.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSBillerPlanUpdater\BBPSBillerPlanUpdater.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.Configuration.Json	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.Extensions.Configuration.Json	Medium
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.Configuration.Json	Medium
Product	msbuild	id	Microsoft.Extensions.Configuration.Json	Highest
Version	msbuild	version	7.0.0	Highest

Identifiers

pkg:nuget/Microsoft.Extensions.Configuration.Json@7.0.0 (Confidence:Highest)

Microsoft.Extensions.Configuration:6.0.1

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSCodePipelineDeployAPI\BBPSCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.Configuration	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.Extensions.Configuration	Medium
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.Configuration	Medium
Product	msbuild	id	Microsoft.Extensions.Configuration	Highest
Version	msbuild	version	6.0.1	Highest

Identifiers

pkg:nuget/Microsoft.Extensions.Configuration@6.0.1 (Confidence:Highest)

Microsoft.Extensions.DependencyInjection:6.0.1

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSCodePipelineDeployAPI\BBPSCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.DependencyInjection	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.Extensions.DependencyInjection	Medium
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.DependencyInjection	Medium
Product	msbuild	id	Microsoft.Extensions.DependencyInjection	Highest
Version	msbuild	version	6.0.1	Highest

Related Dependencies

Identifiers

pkg:nuget/Microsoft.Extensions.DependencyInjection@6.0.1 (Confidence:Highest)

Microsoft.Extensions.DependencyInjection:7.0.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSBillerPlanUpdater\BBPSBillerPlanUpdater.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.DependencyInjection	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.Extensions.DependencyInjection	Medium
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.DependencyInjection	Medium
Product	msbuild	id	Microsoft.Extensions.DependencyInjection	Highest
Version	msbuild	version	7.0.0	Highest

Identifiers

pkg:nuget/Microsoft.Extensions.DependencyInjection@7.0.0 (Confidence:Highest)

Microsoft.Extensions.Http:6.0.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.Http	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.Extensions.Http	Medium
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.Http	Medium
Product	msbuild	id	Microsoft.Extensions.Http	Highest
Version	msbuild	version	6.0.0	Highest

Identifiers

pkg:nuget/Microsoft.Extensions.Http@6.0.0 (Confidence:Highest)

Microsoft.Extensions.Logging:6.0.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSCodePipelineDeployAPI\BBPSCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.Logging	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.Extensions.Logging	Medium
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.Logging	Medium
Product	msbuild	id	Microsoft.Extensions.Logging	Highest
Version	msbuild	version	6.0.0	Highest

Identifiers

pkg:nuget/Microsoft.Extensions.Logging@6.0.0 (Confidence:Highest)

Microsoft.Extensions.PlatformAbstractions:1.1.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.PlatformAbstractions	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.Extensions.PlatformAbstractions	Medium
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.PlatformAbstractions	Medium
Product	msbuild	id	Microsoft.Extensions.PlatformAbstractions	Highest
Version	msbuild	version	1.1.0	Highest

Identifiers

pkg:nuget/Microsoft.Extensions.PlatformAbstractions@1.1.0 (Confidence:Highest)

Microsoft.IdentityModel.Tokens:8.3.1

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.API\BBPS.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	IdentityModel	Low
Vendor	msbuild	id	IdentityModel.Tokens	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.IdentityModel.Tokens	Medium
Product	msbuild	id	IdentityModel	Medium
Product	msbuild	id	IdentityModel.Tokens	Medium
Product	msbuild	id	Microsoft.IdentityModel.Tokens	Highest
Version	msbuild	version	8.3.1	Highest

Identifiers

pkg:nuget/Microsoft.IdentityModel.Tokens@8.3.1 (Confidence:Highest)
cpe:2.3:a:identitymodel_project:identitymodel:8.3.1:*:*:*:*:*:*:* (Confidence:Low)
cpe:2.3:a:microsoft:identity_model:8.3.1:*:*:*:*:*:*:* (Confidence:Low)
cpe:2.3:a:microsoft:identitymodel:8.3.1:*:*:*:*:*:*:* (Confidence:Low)

Newtonsoft.Json:13.0.2

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Json	Low
Vendor	msbuild	id	Newtonsoft	Medium
Vendor	msbuild	id	Newtonsoft.Json	Medium
Product	hint analyzer	vendor	net	Medium
Product	msbuild	id	Json	Medium
Product	msbuild	id	Newtonsoft.Json	Highest
Version	msbuild	version	13.0.2	Highest

Identifiers

pkg:nuget/Newtonsoft.Json@13.0.2 (Confidence:Highest)

Newtonsoft.Json:13.0.3

File Path: D:\Auropayrepos\BharatBillPay\src\BBPSCodePipelineDeployAPI\BBPSCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Json	Low
Vendor	msbuild	id	Newtonsoft	Medium
Vendor	msbuild	id	Newtonsoft.Json	Medium
Product	hint analyzer	vendor	net	Medium
Product	msbuild	id	Json	Medium
Product	msbuild	id	Newtonsoft.Json	Highest
Version	msbuild	version	13.0.3	Highest

Identifiers

pkg:nuget/Newtonsoft.Json@13.0.3 (Confidence:Highest)

Pomelo.EntityFrameworkCore.MySql:6.0.3

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	EntityFrameworkCore	Low
Vendor	msbuild	id	EntityFrameworkCore.MySql	Low
Vendor	msbuild	id	Pomelo	Medium
Vendor	msbuild	id	Pomelo.EntityFrameworkCore.MySql	Medium
Product	msbuild	id	EntityFrameworkCore	Medium
Product	msbuild	id	EntityFrameworkCore.MySql	Medium
Product	msbuild	id	Pomelo.EntityFrameworkCore.MySql	Highest
Version	msbuild	version	6.0.3	Highest

Identifiers

pkg:nuget/Pomelo.EntityFrameworkCore.MySql@6.0.3 (Confidence:Highest)
cpe:2.3:a:mysql:mysql:6.0.3:*:*:*:*:*:*:* (Confidence:Low)
cpe:2.3:a:www-sql_project:www-sql:6.0.3:*:*:*:*:*:*:* (Confidence:Low)

SwaggerController.js

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.Swagger.API\swagger\controller\SwaggerController.js
MD5: a8049fc5296d68fd8653adcbc78b4334
SHA1: ba0ab36160eb2bb0ac9a7e025a1b9e48a955bc71
SHA256:57c1f4d7ec0efa8b898193775b0a8a544c15aa2752cbdcbfd72dcfa6f9156250

Evidence

Identifiers

None

Swashbuckle.AspNetCore.Newtonsoft:6.5.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.API\BBPS.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AspNetCore	Low
Vendor	msbuild	id	AspNetCore.Newtonsoft	Low
Vendor	msbuild	id	Swashbuckle	Medium
Vendor	msbuild	id	Swashbuckle.AspNetCore.Newtonsoft	Medium
Product	msbuild	id	AspNetCore	Medium
Product	msbuild	id	AspNetCore.Newtonsoft	Medium
Product	msbuild	id	Swashbuckle.AspNetCore.Newtonsoft	Highest
Version	msbuild	version	6.5.0	Highest

Identifiers

pkg:nuget/Swashbuckle.AspNetCore.Newtonsoft@6.5.0 (Confidence:Highest)

Swashbuckle.AspNetCore.Swagger:6.5.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.API\BBPS.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AspNetCore	Low
Vendor	msbuild	id	AspNetCore.Swagger	Low
Vendor	msbuild	id	Swashbuckle	Medium
Vendor	msbuild	id	Swashbuckle.AspNetCore.Swagger	Medium
Product	msbuild	id	AspNetCore	Medium
Product	msbuild	id	AspNetCore.Swagger	Medium
Product	msbuild	id	Swashbuckle.AspNetCore.Swagger	Highest
Version	msbuild	version	6.5.0	Highest

Identifiers

pkg:nuget/Swashbuckle.AspNetCore.Swagger@6.5.0 (Confidence:Highest)

Swashbuckle.AspNetCore:6.5.0

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.API\BBPS.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AspNetCore	Low
Vendor	msbuild	id	Swashbuckle	Medium
Vendor	msbuild	id	Swashbuckle.AspNetCore	Medium
Product	msbuild	id	AspNetCore	Medium
Product	msbuild	id	Swashbuckle.AspNetCore	Highest
Version	msbuild	version	6.5.0	Highest

Identifiers

pkg:nuget/Swashbuckle.AspNetCore@6.5.0 (Confidence:Highest)

System.IdentityModel.Tokens.Jwt:8.3.1

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS\BBPS.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	IdentityModel	Low
Vendor	msbuild	id	IdentityModel.Tokens.Jwt	Low
Vendor	msbuild	id	System	Medium
Vendor	msbuild	id	System.IdentityModel.Tokens.Jwt	Medium
Product	msbuild	id	IdentityModel	Medium
Product	msbuild	id	IdentityModel.Tokens.Jwt	Medium
Product	msbuild	id	System.IdentityModel.Tokens.Jwt	Highest
Version	msbuild	version	8.3.1	Highest

Identifiers

pkg:nuget/System.IdentityModel.Tokens.Jwt@8.3.1 (Confidence:Highest)
cpe:2.3:a:identitymodel_project:identitymodel:8.3.1:*:*:*:*:*:*:* (Confidence:Low)

authswagger.js

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.Swagger.API\swagger\definitions\authswagger.js
MD5: 252d61ee3836873c4b739fb955776094
SHA1: 8edbad16b6215b7bf4b2193f6e39411f43c2e37a
SHA256:41ef2a743417b93423e3ef48b6c0b5ee4c44ffbbce2385721c1d00bb742b41e7

Evidence

Identifiers

None

billercategoryswagger.js

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.Swagger.API\swagger\definitions\billercategoryswagger.js
MD5: dfdf0c31d24478fb80b88044f8d0aa30
SHA1: b496e13d8044dcb176f2c6cb6567136c5b5f9171
SHA256:10dbad14be4a21c65b95b19d1d6950fc6881342bb5313678e9fb88242854b62f

Evidence

Identifiers

None

billerswagger.js

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.Swagger.API\swagger\definitions\billerswagger.js
MD5: c1df9a5565e1f54d6afc3580598a9236
SHA1: 589a02e93ce20d1658286ad53cd1f7d2374516ad
SHA256:5c672c1c19f8f21e6adcd0bfe562cac213a3bd3890b62d9f3f1c1735503ba27d

Evidence

Identifiers

None

billingoverviewswagger.js

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.Swagger.API\swagger\definitions\billingoverviewswagger.js
MD5: 0928716fe340aa2b9b3addb641ac656e
SHA1: 34fdfd04305ecd018375676efdda2e6f4c9e7fa0
SHA256:c1e29ad5ceb234189f2c426936e87d0e99dbacad15da4e0edd9cd391bad5a0a2

Evidence

Identifiers

None

billingswagger.js

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.Swagger.API\swagger\definitions\billingswagger.js
MD5: c0232c2c861ef4286bc301ce0cbb9374
SHA1: ba1e44c9974a834edaf542fac7eff2b0cb7fc21a
SHA256:7ea9af000601cc2ca55fc541d6e474bee3d7c124f9c0ebc9d2de0240ab6d4b24

Evidence

Identifiers

None

complaintoverviewswagger.js

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.Swagger.API\swagger\definitions\complaintoverviewswagger.js
MD5: bccbe02ff2eaa8e6dccd3e54cc4447f9
SHA1: ccbbbb65c7975b5b9aad7edf3b7c3c0227ffc1c3
SHA256:b355f10a5b8bb6a91f86bbf389dbc14a608ace9bc05d5ff3f8666c8316e2e19a

Evidence

Identifiers

None

complaintswagger.js

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.Swagger.API\swagger\definitions\complaintswagger.js
MD5: 7ee42972cb2d837512a5c1db52facdb4
SHA1: 19dbbe282c4ff627e850da05283b86572521c4dc
SHA256:04f3440028f1c09882ea619830bc6a70b56e6e913181ecfda4e7482f51d7a7be

Evidence

Identifiers

None

lookupswagger.js

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.Swagger.API\swagger\definitions\lookupswagger.js
MD5: 4547fa68dd63827e9c6da82bc69d2e74
SHA1: 736337bc5b23839a9e2c5acd2f6948ec0badd736
SHA256:b1a677b65cfd89bd867be0d043ee81dee8aca8edc06a703478cecf6e104df323

Evidence

Identifiers

None

package.json

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.Swagger.API\package.json
MD5: 2a849ce8e21366cd6bc34e85afe6fd32
SHA1: b50cf55e42ba71183c4308c41802761fd30e82d6
SHA256:9c1d7fb507f40311a6860aeec5e1cc0a8c5211a06c595c943da744cd2986dfb8

Evidence

Identifiers

None

paymentswagger.js

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.Swagger.API\swagger\definitions\paymentswagger.js
MD5: e6da3c30849078ccd441aa0987c1a4b1
SHA1: 6aa4eeaca336f4a2a0dc73f86015a8e7e0276057
SHA256:624f4c007f863c59d1e1a0f1793ca10f71457b40418aaf6ba1d53d9f219b3e04

Evidence

Identifiers

None

stateswagger.js

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.Swagger.API\swagger\definitions\stateswagger.js
MD5: 7cc02fa708b5a64aad52ecc39a41c146
SHA1: 7911f1b6e91c06a5f5145e119f3d9807f3edbb28
SHA256:168a7f11017aa951d53d0ce29f7510920a2d60e5a28325ef3852f64ebc38a87e

Evidence

Identifiers

None

swagger.js

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.Swagger.API\swagger.js
MD5: b3c92ef178e9f20ede9f16590920bcf8
SHA1: 4c693bc1b0ac9810dd10141854ebc6f55f6c732e
SHA256:04c5b2c8afaee159b4b474ed2753db80755dff53d70009aab793d591863ff9be

Evidence

Identifiers

None

swaggerDefinition.js

File Path: D:\Auropayrepos\BharatBillPay\src\BBPS.Swagger.API\swaggerDefinition.js
MD5: a5ee2b2bab7248ca20603ddc79548396
SHA1: da73bcc5a0ca01c66ef06d86abb019efff9e1238
SHA256:d1407b277efc38edaf565bd10d940664fe408d60b7515e1b0b0e034a4e717ae2

Evidence

Identifiers

None

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: Testing

Summary

Dependencies (vulnerable)

AWSSDK.APIGateway:3.7.100.22

Evidence

Related Dependencies

Identifiers

AWSSDK.CodePipeline:3.7.100.22

Evidence

Related Dependencies

Identifiers

AWSSDK.Core:3.7.100.22

Evidence

Related Dependencies

Identifiers

AWSSDK.Extensions.NETCore.Setup:3.7.1

Evidence

Identifiers

AWSSDK.Lambda:3.7.100.2

Evidence

Identifiers

AWSSDK.S3:3.7.100

Evidence

Related Dependencies

Identifiers

AWSSDK.SecurityToken:3.7.100.22

Evidence

Related Dependencies

Identifiers

AWSSDK.SimpleEmail:3.7.0.15

Evidence

Identifiers

AWSSDK.SimpleNotificationService:3.7.100.2

Evidence

Identifiers

AWSSDK.SimpleSystemsManagement:3.7.100.2

Evidence

Related Dependencies

Identifiers

Amazon.Lambda.AspNetCoreServer:8.1.0

Evidence

Identifiers

Amazon.Lambda.Core:2.1.0

Evidence

Related Dependencies

Identifiers

Amazon.Lambda.Serialization.SystemTextJson:2.3.0

Evidence

Related Dependencies

Identifiers

Amazon.Lambda.Serialization.SystemTextJson:2.3.1

Evidence

Identifiers

AspectInjector:2.6.0

Evidence

Identifiers

AutoMapper.Extensions.Microsoft.DependencyInjection:12.0.0

Evidence

Identifiers

AutoMapper:12.0.0

Evidence

Identifiers

AwsParameterStore.Microsoft.Extensions.Configuration:0.7.0

Evidence

Identifiers

BBPS.API.csproj

Evidence

Identifiers

BBPS.csproj

Evidence

Identifiers

BBPSBillerPlanUpdater.csproj

Evidence

Related Dependencies

Identifiers

BBPSCodePipelineDeployAPI.csproj

Evidence

Identifiers

BouncyCastle.Cryptography:2.4.0

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor