Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Scan Information (
show all ):
dependency-check version : 12.1.0Report Generated On : Tue, 4 Mar 2025 13:34:06 +0530Dependencies Scanned : 83 (54 unique)Vulnerable Dependencies : 2 Vulnerabilities Found : 2Vulnerabilities Suppressed : 0 ... NVD API Last Checked : 2025-03-04T10:03:23+0530NVD API Last Modified : 2025-03-04T04:15:15ZSummary Display:
Showing Vulnerable Dependencies (click to show all) APF.Core3.1.API:6.0.0.*File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter.API\PayoutAdapter.API.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id APF Medium Vendor msbuild id APF.Core3.1.API Medium Vendor msbuild id Core3 Low Vendor msbuild id Core3.1.API Low Product msbuild id APF.Core3.1.API Highest Product msbuild id Core3 Medium Product msbuild id Core3.1.API Medium Version msbuild version 6.0.0.* Highest
APF.Core3.1.AWS:6.0.0.*File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\TransactionHandler\TransactionHandler.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id APF Medium Vendor msbuild id APF.Core3.1.AWS Medium Vendor msbuild id Core3 Low Vendor msbuild id Core3.1.AWS Low Product msbuild id APF.Core3.1.AWS Highest Product msbuild id Core3 Medium Product msbuild id Core3.1.AWS Medium Version msbuild version 6.0.0.* Highest
Related Dependencies APF.Core3.1.AWS:6.0.0.*File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter.API\PayoutAdapter.API.csproj pkg:nuget/APF.Core3.1.AWS@6.0.0.%2A APF.Core3.1.AWS:6.0.0.*File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter\PayoutAdapter.csproj pkg:nuget/APF.Core3.1.AWS@6.0.0.%2A APF.Core3.1.AWS:6.0.0.*File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\StatusHandler\StatusHandler.csproj pkg:nuget/APF.Core3.1.AWS@6.0.0.%2A APF.Core3.1:6.0.0.*File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\TransactionHandler\TransactionHandler.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id APF Medium Vendor msbuild id APF.Core3.1 Medium Vendor msbuild id Core3 Low Vendor msbuild id Core3.1 Low Product msbuild id APF.Core3.1 Highest Product msbuild id Core3 Medium Product msbuild id Core3.1 Medium Version msbuild version 6.0.0.* Highest
Related Dependencies APF.Core3.1:6.0.0.*File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter.API\PayoutAdapter.API.csproj pkg:nuget/APF.Core3.1@6.0.0.%2A APF.Core3.1:6.0.0.*File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter\PayoutAdapter.csproj pkg:nuget/APF.Core3.1@6.0.0.%2A APF.Core3.1:6.0.0.12File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\StatusHandler\StatusHandler.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id APF Medium Vendor msbuild id APF.Core3.1 Medium Vendor msbuild id Core3 Low Vendor msbuild id Core3.1 Low Product msbuild id APF.Core3.1 Highest Product msbuild id Core3 Medium Product msbuild id Core3.1 Medium Version msbuild version 6.0.0.12 Highest
APF.Core3.1:6.0.0.8File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id APF Medium Vendor msbuild id APF.Core3.1 Medium Vendor msbuild id Core3 Low Vendor msbuild id Core3.1 Low Product msbuild id APF.Core3.1 Highest Product msbuild id Core3 Medium Product msbuild id Core3.1 Medium Version msbuild version 6.0.0.8 Highest
AWSSDK.APIGateway:3.7.100.22File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id APIGateway Low Vendor msbuild id AWSSDK Medium Vendor msbuild id AWSSDK.APIGateway Medium Product msbuild id APIGateway Medium Product msbuild id AWSSDK.APIGateway Highest Version msbuild version 3.7.100.22 Highest
AWSSDK.CodePipeline:3.7.100.22File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id AWSSDK Medium Vendor msbuild id AWSSDK.CodePipeline Medium Vendor msbuild id CodePipeline Low Product msbuild id AWSSDK.CodePipeline Highest Product msbuild id CodePipeline Medium Version msbuild version 3.7.100.22 Highest
AWSSDK.Core:3.7.100.22File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id AWSSDK Medium Vendor msbuild id AWSSDK.Core Medium Vendor msbuild id Core Low Product msbuild id AWSSDK.Core Highest Product msbuild id Core Medium Version msbuild version 3.7.100.22 Highest
Related Dependencies AWSSDK.Core:3.7.100.22File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\StatusHandler\StatusHandler.csproj pkg:nuget/AWSSDK.Core@3.7.100.22 AWSSDK.Core:3.7.100.22File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\TransactionHandler\TransactionHandler.csproj pkg:nuget/AWSSDK.Core@3.7.100.22 AWSSDK.Extensions.NETCore.Setup:3.7.2File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter\PayoutAdapter.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id AWSSDK Medium Vendor msbuild id AWSSDK.Extensions.NETCore.Setup Medium Vendor msbuild id Extensions Low Vendor msbuild id Extensions.NETCore.Setup Low Product msbuild id AWSSDK.Extensions.NETCore.Setup Highest Product msbuild id Extensions Medium Product msbuild id Extensions.NETCore.Setup Medium Version msbuild version 3.7.2 Highest
AWSSDK.S3:3.7.100File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id AWSSDK Medium Vendor msbuild id AWSSDK.S3 Medium Vendor msbuild id S3 Low Product msbuild id AWSSDK.S3 Highest Product msbuild id S3 Medium Version msbuild version 3.7.100 Highest
AWSSDK.S3:3.7.9.23File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\StatusHandler\StatusHandler.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id AWSSDK Medium Vendor msbuild id AWSSDK.S3 Medium Vendor msbuild id S3 Low Product msbuild id AWSSDK.S3 Highest Product msbuild id S3 Medium Version msbuild version 3.7.9.23 Highest
Related Dependencies AWSSDK.S3:3.7.9.23File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\TransactionHandler\TransactionHandler.csproj pkg:nuget/AWSSDK.S3@3.7.9.23 AWSSDK.SecurityToken:3.7.100.22File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id AWSSDK Medium Vendor msbuild id AWSSDK.SecurityToken Medium Vendor msbuild id SecurityToken Low Product msbuild id AWSSDK.SecurityToken Highest Product msbuild id SecurityToken Medium Version msbuild version 3.7.100.22 Highest
AWSSDK.SimpleSystemsManagement:3.7.100.2File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id AWSSDK Medium Vendor msbuild id AWSSDK.SimpleSystemsManagement Medium Vendor msbuild id SimpleSystemsManagement Low Product msbuild id AWSSDK.SimpleSystemsManagement Highest Product msbuild id SimpleSystemsManagement Medium Version msbuild version 3.7.100.2 Highest
Amazon.Lambda.AspNetCoreServer:6.1.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter.API\PayoutAdapter.API.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id Amazon Medium Vendor msbuild id Amazon.Lambda.AspNetCoreServer Medium Vendor msbuild id Lambda Low Vendor msbuild id Lambda.AspNetCoreServer Low Product msbuild id Amazon.Lambda.AspNetCoreServer Highest Product msbuild id Lambda Medium Product msbuild id Lambda.AspNetCoreServer Medium Version msbuild version 6.1.0 Highest
Amazon.Lambda.Core:2.1.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id Amazon Medium Vendor msbuild id Amazon.Lambda.Core Medium Vendor msbuild id Lambda Low Vendor msbuild id Lambda.Core Low Product msbuild id Amazon.Lambda.Core Highest Product msbuild id Lambda Medium Product msbuild id Lambda.Core Medium Version msbuild version 2.1.0 Highest
Related Dependencies Amazon.Lambda.Core:2.1.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\StatusHandler\StatusHandler.csproj pkg:nuget/Amazon.Lambda.Core@2.1.0 Amazon.Lambda.Core:2.1.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\TransactionHandler\TransactionHandler.csproj pkg:nuget/Amazon.Lambda.Core@2.1.0 Amazon.Lambda.S3Events:2.0.1File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\StatusHandler\StatusHandler.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id Amazon Medium Vendor msbuild id Amazon.Lambda.S3Events Medium Vendor msbuild id Lambda Low Vendor msbuild id Lambda.S3Events Low Product msbuild id Amazon.Lambda.S3Events Highest Product msbuild id Lambda Medium Product msbuild id Lambda.S3Events Medium Version msbuild version 2.0.1 Highest
Related Dependencies Amazon.Lambda.S3Events:2.0.1File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\TransactionHandler\TransactionHandler.csproj pkg:nuget/Amazon.Lambda.S3Events@2.0.1 Amazon.Lambda.SNSEvents:2.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\StatusHandler\StatusHandler.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id Amazon Medium Vendor msbuild id Amazon.Lambda.SNSEvents Medium Vendor msbuild id Lambda Low Vendor msbuild id Lambda.SNSEvents Low Product msbuild id Amazon.Lambda.SNSEvents Highest Product msbuild id Lambda Medium Product msbuild id Lambda.SNSEvents Medium Version msbuild version 2.0.0 Highest
Related Dependencies Amazon.Lambda.SNSEvents:2.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\TransactionHandler\TransactionHandler.csproj pkg:nuget/Amazon.Lambda.SNSEvents@2.0.0 Amazon.Lambda.Serialization.Json:2.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\StatusHandler\StatusHandler.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id Amazon Medium Vendor msbuild id Amazon.Lambda.Serialization.Json Medium Vendor msbuild id Lambda Low Vendor msbuild id Lambda.Serialization.Json Low Product msbuild id Amazon.Lambda.Serialization.Json Highest Product msbuild id Lambda Medium Product msbuild id Lambda.Serialization.Json Medium Version msbuild version 2.0.0 Highest
Related Dependencies Amazon.Lambda.Serialization.Json:2.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\TransactionHandler\TransactionHandler.csproj pkg:nuget/Amazon.Lambda.Serialization.Json@2.0.0 Amazon.Lambda.Serialization.SystemTextJson:2.3.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id Amazon Medium Vendor msbuild id Amazon.Lambda.Serialization.SystemTextJson Medium Vendor msbuild id Lambda Low Vendor msbuild id Lambda.Serialization.SystemTextJson Low Product msbuild id Amazon.Lambda.Serialization.SystemTextJson Highest Product msbuild id Lambda Medium Product msbuild id Lambda.Serialization.SystemTextJson Medium Version msbuild version 2.3.0 Highest
AutoMapper.Extensions.Microsoft.DependencyInjection:12.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter\PayoutAdapter.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id AutoMapper Medium Vendor msbuild id AutoMapper.Extensions.Microsoft.DependencyInjection Medium Vendor msbuild id Extensions Low Vendor msbuild id Extensions.Microsoft.DependencyInjection Low Product msbuild id AutoMapper.Extensions.Microsoft.DependencyInjection Highest Product msbuild id Extensions Medium Product msbuild id Extensions.Microsoft.DependencyInjection Medium Version msbuild version 12.0.0 Highest
AutoMapper:12.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter\PayoutAdapter.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id AutoMapper Medium Vendor msbuild id AutoMapper Low Product msbuild id AutoMapper Highest Version msbuild version 12.0.0 Highest
AwsParameterStore.Microsoft.Extensions.Configuration:0.7.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\StatusHandler\StatusHandler.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id AwsParameterStore Medium Vendor msbuild id AwsParameterStore.Microsoft.Extensions.Configuration Medium Vendor msbuild id Microsoft Low Vendor msbuild id Microsoft.Extensions.Configuration Low Product msbuild id AwsParameterStore.Microsoft.Extensions.Configuration Highest Product msbuild id Microsoft Medium Product msbuild id Microsoft.Extensions.Configuration Medium Version msbuild version 0.7.0 Highest
Related Dependencies AwsParameterStore.Microsoft.Extensions.Configuration:0.7.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj pkg:nuget/AwsParameterStore.Microsoft.Extensions.Configuration@0.7.0 AwsParameterStore.Microsoft.Extensions.Configuration:0.7.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\TransactionHandler\TransactionHandler.csproj pkg:nuget/AwsParameterStore.Microsoft.Extensions.Configuration@0.7.0 FluentValidation.DependencyInjectionExtensions:11.9.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter\PayoutAdapter.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id DependencyInjectionExtensions Low Vendor msbuild id FluentValidation Medium Vendor msbuild id FluentValidation.DependencyInjectionExtensions Medium Product msbuild id DependencyInjectionExtensions Medium Product msbuild id FluentValidation.DependencyInjectionExtensions Highest Version msbuild version 11.9.0 Highest
FluentValidation:11.9.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter\PayoutAdapter.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id FluentValidation Medium Vendor msbuild id FluentValidation Low Product msbuild id FluentValidation Highest Version msbuild version 11.9.0 Highest
Hashids.net:1.3.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter\PayoutAdapter.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id Hashids Medium Vendor msbuild id Hashids.net Medium Vendor msbuild id net Low Product msbuild id Hashids.net Highest Product msbuild id net Medium Version msbuild version 1.3.0 Highest
Lumigo.DotNET:1.0.45File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter.API\PayoutAdapter.API.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id DotNET Low Vendor msbuild id Lumigo Medium Vendor msbuild id Lumigo.DotNET Medium Product msbuild id DotNET Medium Product msbuild id Lumigo.DotNET Highest Version msbuild version 1.0.45 Highest
Related Dependencies Lumigo.DotNET:1.0.45File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\StatusHandler\StatusHandler.csproj pkg:nuget/Lumigo.DotNET@1.0.45 Lumigo.DotNET:1.0.45File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\TransactionHandler\TransactionHandler.csproj pkg:nuget/Lumigo.DotNET@1.0.45 Microsoft.AspNetCore.Authentication.JwtBearer:3.1.3File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter.API\PayoutAdapter.API.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id AspNetCore Low Vendor msbuild id AspNetCore.Authentication.JwtBearer Low Vendor msbuild id Microsoft Medium Vendor msbuild id Microsoft.AspNetCore.Authentication.JwtBearer Medium Product msbuild id AspNetCore Medium Product msbuild id AspNetCore.Authentication.JwtBearer Medium Product msbuild id Microsoft.AspNetCore.Authentication.JwtBearer Highest Version msbuild version 3.1.3 Highest
Related Dependencies Microsoft.AspNetCore.Authentication.JwtBearer:3.1.3File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter\PayoutAdapter.csproj pkg:nuget/Microsoft.AspNetCore.Authentication.JwtBearer@3.1.3 CVE-2021-34532 (OSSINDEX) suppress
ASP.NET Core and Visual Studio Information Disclosure Vulnerability CWE-noinfo
CVSSv2:
Base Score: LOW (2.0999999046325684) Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:*:Microsoft.AspNetCore.Authentication.JwtBearer:3.1.3:*:*:*:*:*:*:* Microsoft.AspNetCore.Mvc.NewtonsoftJson:6.0.24File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter.API\PayoutAdapter.API.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id AspNetCore Low Vendor msbuild id AspNetCore.Mvc.NewtonsoftJson Low Vendor msbuild id Microsoft Medium Vendor msbuild id Microsoft.AspNetCore.Mvc.NewtonsoftJson Medium Product msbuild id AspNetCore Medium Product msbuild id AspNetCore.Mvc.NewtonsoftJson Medium Product msbuild id Microsoft.AspNetCore.Mvc.NewtonsoftJson Highest Version msbuild version 6.0.24 Highest
Microsoft.AspNetCore.Mvc.Versioning:5.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter.API\PayoutAdapter.API.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id AspNetCore Low Vendor msbuild id AspNetCore.Mvc.Versioning Low Vendor msbuild id Microsoft Medium Vendor msbuild id Microsoft.AspNetCore.Mvc.Versioning Medium Product msbuild id AspNetCore Medium Product msbuild id AspNetCore.Mvc.Versioning Medium Product msbuild id Microsoft.AspNetCore.Mvc.Versioning Highest Version msbuild version 5.0.0 Highest
Microsoft.EntityFrameworkCore.Design:8.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter.API\PayoutAdapter.API.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id EntityFrameworkCore Low Vendor msbuild id EntityFrameworkCore.Design Low Vendor msbuild id Microsoft Medium Vendor msbuild id Microsoft.EntityFrameworkCore.Design Medium Product msbuild id EntityFrameworkCore Medium Product msbuild id EntityFrameworkCore.Design Medium Product msbuild id Microsoft.EntityFrameworkCore.Design Highest Version msbuild version 8.0.0 Highest
Microsoft.EntityFrameworkCore.SqlServer:8.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter\PayoutAdapter.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id EntityFrameworkCore Low Vendor msbuild id EntityFrameworkCore.SqlServer Low Vendor msbuild id Microsoft Medium Vendor msbuild id Microsoft.EntityFrameworkCore.SqlServer Medium Product msbuild id EntityFrameworkCore Medium Product msbuild id EntityFrameworkCore.SqlServer Medium Product msbuild id Microsoft.EntityFrameworkCore.SqlServer Highest Version msbuild version 8.0.0 Highest
Related Dependencies Microsoft.EntityFrameworkCore.SqlServer:8.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter.API\PayoutAdapter.API.csproj pkg:nuget/Microsoft.EntityFrameworkCore.SqlServer@8.0.0 Microsoft.EntityFrameworkCore.Tools:8.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter.API\PayoutAdapter.API.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id EntityFrameworkCore Low Vendor msbuild id EntityFrameworkCore.Tools Low Vendor msbuild id Microsoft Medium Vendor msbuild id Microsoft.EntityFrameworkCore.Tools Medium Product msbuild id EntityFrameworkCore Medium Product msbuild id EntityFrameworkCore.Tools Medium Product msbuild id Microsoft.EntityFrameworkCore.Tools Highest Version msbuild version 8.0.0 Highest
Related Dependencies Microsoft.EntityFrameworkCore.Tools:8.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter\PayoutAdapter.csproj pkg:nuget/Microsoft.EntityFrameworkCore.Tools@8.0.0 Microsoft.Extensions.Configuration.EnvironmentVariables:6.0.1File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id Extensions Low Vendor msbuild id Extensions.Configuration.EnvironmentVariables Low Vendor msbuild id Microsoft Medium Vendor msbuild id Microsoft.Extensions.Configuration.EnvironmentVariables Medium Product msbuild id Extensions Medium Product msbuild id Extensions.Configuration.EnvironmentVariables Medium Product msbuild id Microsoft.Extensions.Configuration.EnvironmentVariables Highest Version msbuild version 6.0.1 Highest
Related Dependencies Microsoft.Extensions.Configuration.EnvironmentVariables:6.0.1File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\StatusHandler\StatusHandler.csproj pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@6.0.1 Microsoft.Extensions.Configuration.EnvironmentVariables:6.0.1File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\TransactionHandler\TransactionHandler.csproj pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@6.0.1 Microsoft.Extensions.Configuration.Json:6.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id Extensions Low Vendor msbuild id Extensions.Configuration.Json Low Vendor msbuild id Microsoft Medium Vendor msbuild id Microsoft.Extensions.Configuration.Json Medium Product msbuild id Extensions Medium Product msbuild id Extensions.Configuration.Json Medium Product msbuild id Microsoft.Extensions.Configuration.Json Highest Version msbuild version 6.0.0 Highest
Related Dependencies Microsoft.Extensions.Configuration.Json:6.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\StatusHandler\StatusHandler.csproj pkg:nuget/Microsoft.Extensions.Configuration.Json@6.0.0 Microsoft.Extensions.Configuration.Json:6.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\TransactionHandler\TransactionHandler.csproj pkg:nuget/Microsoft.Extensions.Configuration.Json@6.0.0 Microsoft.Extensions.Configuration:6.0.1File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\StatusHandler\StatusHandler.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id Extensions Low Vendor msbuild id Extensions.Configuration Low Vendor msbuild id Microsoft Medium Vendor msbuild id Microsoft.Extensions.Configuration Medium Product msbuild id Extensions Medium Product msbuild id Extensions.Configuration Medium Product msbuild id Microsoft.Extensions.Configuration Highest Version msbuild version 6.0.1 Highest
Related Dependencies Microsoft.Extensions.Configuration:6.0.1File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj pkg:nuget/Microsoft.Extensions.Configuration@6.0.1 Microsoft.Extensions.Configuration:6.0.1File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\TransactionHandler\TransactionHandler.csproj pkg:nuget/Microsoft.Extensions.Configuration@6.0.1 Microsoft.Extensions.DependencyInjection:6.0.1File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id Extensions Low Vendor msbuild id Extensions.DependencyInjection Low Vendor msbuild id Microsoft Medium Vendor msbuild id Microsoft.Extensions.DependencyInjection Medium Product msbuild id Extensions Medium Product msbuild id Extensions.DependencyInjection Medium Product msbuild id Microsoft.Extensions.DependencyInjection Highest Version msbuild version 6.0.1 Highest
Microsoft.Extensions.Logging.Console:6.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\StatusHandler\StatusHandler.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id Extensions Low Vendor msbuild id Extensions.Logging.Console Low Vendor msbuild id Microsoft Medium Vendor msbuild id Microsoft.Extensions.Logging.Console Medium Product msbuild id Extensions Medium Product msbuild id Extensions.Logging.Console Medium Product msbuild id Microsoft.Extensions.Logging.Console Highest Version msbuild version 6.0.0 Highest
Related Dependencies Microsoft.Extensions.Logging.Console:6.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\TransactionHandler\TransactionHandler.csproj pkg:nuget/Microsoft.Extensions.Logging.Console@6.0.0 Microsoft.Extensions.Logging:6.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id Extensions Low Vendor msbuild id Extensions.Logging Low Vendor msbuild id Microsoft Medium Vendor msbuild id Microsoft.Extensions.Logging Medium Product msbuild id Extensions Medium Product msbuild id Extensions.Logging Medium Product msbuild id Microsoft.Extensions.Logging Highest Version msbuild version 6.0.0 Highest
Newtonsoft.Json:13.0.3File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id Json Low Vendor msbuild id Newtonsoft Medium Vendor msbuild id Newtonsoft.Json Medium Product hint analyzer vendor net Medium Product msbuild id Json Medium Product msbuild id Newtonsoft.Json Highest Version msbuild version 13.0.3 Highest
PayoutAdapter.API.csprojFile Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter.API\PayoutAdapter.API.csprojMD5: 49b686017356691fd3958ccee59617bbSHA1: 6a8fda55f69a630ffdfbfb786da1a3baafb2c1bfSHA256: 54690e3f255983ca7b28f56f015830c0386d55e97720417d3ba7aee2ac799899
Evidence Type Source Name Value Confidence Vendor file name PayoutAdapter.API High Product file name PayoutAdapter.API High
PayoutAdapter.csprojFile Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter\PayoutAdapter.csprojMD5: 475c32e8f585c0c67a47cde7619fae14SHA1: 771b7e38d81c5be9d0b21df7ff44b74c7db158fbSHA256: 409d0fca7f447c231a56b48f2237e055585efced4868bd740aec55ce2217824e
Evidence Type Source Name Value Confidence Vendor file name PayoutAdapter High Product file name PayoutAdapter High
PayoutCodePipelineDeployAPI.csprojFile Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csprojMD5: b6fce2c49bc94a08111bd72e9493b86aSHA1: d1ebdd80916fb7d6291b6cc6e0cca95414f2fd40SHA256: ed64a4ee108f6cc22f5d7f46c94c9406df76cc59df01ef13a45c76f710172aed
Evidence Type Source Name Value Confidence Vendor file name PayoutCodePipelineDeployAPI High Product file name PayoutCodePipelineDeployAPI High
PayoutEntity.dllDescription:
PayoutEntity File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter.API\libs\PayoutEntity.dllMD5: f0695e5669da6523a7b22d93111bf489SHA1: bfff569d31b69001bd5ed312522f04cb1f9e4e1dSHA256: 2f1495cbe72386f2ecdfb9eb8d8fbcac43bdf8612a6686724d9d78b14cd1a5c8
Evidence Type Source Name Value Confidence Vendor file name PayoutEntity High Vendor grokassembly CompanyName PayoutEntity Highest Vendor grokassembly FileDescription PayoutEntity Low Vendor grokassembly InternalName PayoutEntity.dll Low Vendor grokassembly OriginalFilename PayoutEntity.dll Low Vendor grokassembly ProductName PayoutEntity Medium Product file name PayoutEntity High Product grokassembly CompanyName PayoutEntity Low Product grokassembly FileDescription PayoutEntity High Product grokassembly InternalName PayoutEntity.dll Medium Product grokassembly OriginalFilename PayoutEntity.dll Medium Product grokassembly ProductName PayoutEntity Highest Version AssemblyAnalyzer FilteredVersion 1.0.0 Highest
Related Dependencies PayoutEntity.dllFile Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter\libs\PayoutEntity.dll MD5: f0695e5669da6523a7b22d93111bf489 SHA1: bfff569d31b69001bd5ed312522f04cb1f9e4e1d SHA256: 2f1495cbe72386f2ecdfb9eb8d8fbcac43bdf8612a6686724d9d78b14cd1a5c8 Pomelo.EntityFrameworkCore.MySql:8.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter\PayoutAdapter.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id EntityFrameworkCore Low Vendor msbuild id EntityFrameworkCore.MySql Low Vendor msbuild id Pomelo Medium Vendor msbuild id Pomelo.EntityFrameworkCore.MySql Medium Product msbuild id EntityFrameworkCore Medium Product msbuild id EntityFrameworkCore.MySql Medium Product msbuild id Pomelo.EntityFrameworkCore.MySql Highest Version msbuild version 8.0.0 Highest
Related Dependencies Pomelo.EntityFrameworkCore.MySql:8.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter.API\PayoutAdapter.API.csproj pkg:nuget/Pomelo.EntityFrameworkCore.MySql@8.0.0 SSH.NET:2016.1.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\StatusHandler\StatusHandler.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id NET Low Vendor msbuild id SSH Medium Vendor msbuild id SSH.NET Medium Product msbuild id NET Medium Product msbuild id SSH.NET Highest Version msbuild version 2016.1.0 Highest
pkg:nuget/SSH.NET@2016.1.0 (Confidence :Highest)cpe:2.3:a:ssh:ssh:2016.1.0:*:*:*:*:*:*:* (Confidence :Low) suppress cpe:2.3:a:ssh.net_project:ssh.net:2016.1.0:*:*:*:*:*:*:* (Confidence :Low) suppress SSH.NET:2020.0.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\TransactionHandler\TransactionHandler.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id NET Low Vendor msbuild id SSH Medium Vendor msbuild id SSH.NET Medium Product msbuild id NET Medium Product msbuild id SSH.NET Highest Version msbuild version 2020.0.0 Highest
CVE-2022-29245 suppress
SSH.NET is a Secure Shell (SSH) library for .NET. In versions 2020.0.0 and 2020.0.1, during an `X25519` key exchange, the client’s private key is generated with `System.Random`. `System.Random` is not a cryptographically secure random number generator, it must therefore not be used for cryptographic purposes. When establishing an SSH connection to a remote host, during the X25519 key exchange, the private key is generated with a weak random number generator whose seed can be brute forced. This allows an attacker who is able to eavesdrop on the communications to decrypt them. Version 2020.0.2 contains a patch for this issue. As a workaround, one may disable support for `curve25519-sha256` and `curve25519-sha256@libssh.org` key exchange algorithms. CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVSSv3:
Base Score: MEDIUM (5.9) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:2.2/RC:R/MAV:A CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:P/I:N/A:N References:
OSSINDEX - [CVE-2022-29245] CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-29245 OSSIndex - https://github.com/sshnet/SSH.NET/releases/tag/2020.0.2 OSSIndex - https://github.com/sshnet/SSH.NET/security/advisories/GHSA-72p8-v4hg-v45p af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,MITIGATION,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - RELEASE_NOTES,THIRD_PARTY_ADVISORY security-advisories@github.com - EXPLOIT,MITIGATION,THIRD_PARTY_ADVISORY security-advisories@github.com - EXPLOIT,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - RELEASE_NOTES,THIRD_PARTY_ADVISORY Vulnerable Software & Versions: (show all )
StatusHandler.csprojFile Path: D:\Auropayrepos\Payout\PayoutAdapter\src\StatusHandler\StatusHandler.csprojMD5: fd5f26048a2f021ae85ad9b78bdfdd2dSHA1: efd618d49c08346bd1187c32cd98d4b629b50663SHA256: 166a5726f8ec5932919a5d0d6a51475fca3c978498c5d57b7335e1feac499fd8
Evidence Type Source Name Value Confidence Vendor file name StatusHandler High Product file name StatusHandler High
SwaggerController.jsFile Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutMerchant.Swagger.API\swagger\controller\SwaggerController.jsMD5: ea5c6a29560ad544f6eef7cc8fa98f53SHA1: 8de53cd42626b49cd7055cdfc14d47a94e0332e0SHA256: 6e9d16cae89824286bcc50bd1f73dc228360ecd0d324c2afd2ec89df607afbc6
Evidence Type Source Name Value Confidence
Swashbuckle.AspNetCore:6.4.0File Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutAdapter.API\PayoutAdapter.API.csproj
Evidence Type Source Name Value Confidence Vendor msbuild id AspNetCore Low Vendor msbuild id Swashbuckle Medium Vendor msbuild id Swashbuckle.AspNetCore Medium Product msbuild id AspNetCore Medium Product msbuild id Swashbuckle.AspNetCore Highest Version msbuild version 6.4.0 Highest
TransactionHandler.csprojFile Path: D:\Auropayrepos\Payout\PayoutAdapter\src\TransactionHandler\TransactionHandler.csprojMD5: 3fb28547731008206780cfc63acb416fSHA1: 981940220de738a977c071bbd2ddb2be83124f19SHA256: cac5ffdd5873c43dd6a1c31c4b2c838227294fd0edc040970570cce9a7951434
Evidence Type Source Name Value Confidence Vendor file name TransactionHandler High Product file name TransactionHandler High
TransactionSwagger.jsFile Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutMerchant.Swagger.API\swagger\definitions\TransactionSwagger.jsMD5: 50758a2d9ab92dd7b82cc4b07bb5eed5SHA1: fdad1e72ecd75473e452974f9aa673a1d5915e36SHA256: 6dbd2c1c59e15c173ca456709a3a2d3a28bad5b1deb1efcdfe4b9ed321a49341
Evidence Type Source Name Value Confidence
package.jsonFile Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutMerchant.Swagger.API\package.jsonMD5: 99e15b5d9858b477442716c33d83de34SHA1: 26b0c01ac4525b39abcbecee02ca4339aa86f73aSHA256: 6a6435019db1810ef7343576b579d934d28d9239b2113d761f877c9abbd6f6dd
Evidence Type Source Name Value Confidence
swagger.jsFile Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutMerchant.Swagger.API\swagger.jsMD5: 8c966df86ee27632be72505b900f5916SHA1: 9763a3faecb7eb413fff25dc9b64d48180ad717dSHA256: 2361cc5e66651683d9f2ad44475939cb656919330e9eda7752d39bceeb20a068
Evidence Type Source Name Value Confidence
swaggerDefinition.jsFile Path: D:\Auropayrepos\Payout\PayoutAdapter\src\PayoutMerchant.Swagger.API\swaggerDefinition.jsMD5: 0cd7e8876e33919f448540bf11161400SHA1: a9183fdafd7f3f5887b2d40ba03d6aa5be4f31b2SHA256: 72d7732d9443d9e7c9292e7af5a03d52cfc88e87cc5f8928570df931bb82b024
Evidence Type Source Name Value Confidence