Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.1.0
Report Generated On: Tue, 4 Mar 2025 13:36:18 +0530
Dependencies Scanned: 17 (14 unique)
Vulnerable Dependencies: 1
Vulnerabilities Found: 1
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2025-03-04T10:03:23+0530
NVD API Last Modified: 2025-03-04T04:15:15Z

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Highest Severity	CVE Count	Confidence	Evidence Count
APF.Core3.1.AWS:6.0.0.*		pkg:nuget/APF.Core3.1.AWS@6.0.0.%2A		0		8
APF.Core3.1:6.0.0.*		pkg:nuget/APF.Core3.1@6.0.0.%2A		0		8
AWSSDK.Extensions.NETCore.Setup:3.7.2		pkg:nuget/AWSSDK.Extensions.NETCore.Setup@3.7.2		0		8
AutoMapper.Extensions.Microsoft.DependencyInjection:12.0.0		pkg:nuget/AutoMapper.Extensions.Microsoft.DependencyInjection@12.0.0		0		8
AutoMapper:12.0.0		pkg:nuget/AutoMapper@12.0.0		0		4
FluentValidation.DependencyInjectionExtensions:11.9.0		pkg:nuget/FluentValidation.DependencyInjectionExtensions@11.9.0		0		6
FluentValidation:11.9.0		pkg:nuget/FluentValidation@11.9.0		0		4
Hashids.net:1.3.0		pkg:nuget/Hashids.net@1.3.0		0		6
Microsoft.AspNetCore.Authentication.JwtBearer:3.1.3	cpe:2.3:a:asp-project:asp-project:3.1.3:::::::*	pkg:nuget/Microsoft.AspNetCore.Authentication.JwtBearer@3.1.3	LOW	1	Low	8
Microsoft.EntityFrameworkCore.SqlServer:8.0.0	cpe:2.3:a:www-sql_project:www-sql:8.0.0:::::::*	pkg:nuget/Microsoft.EntityFrameworkCore.SqlServer@8.0.0		0	Low	8
Microsoft.EntityFrameworkCore.Tools:8.0.0		pkg:nuget/Microsoft.EntityFrameworkCore.Tools@8.0.0		0		8
PayoutEntity.csproj				0		2
PayoutEntity.dll		pkg:generic/PayoutEntity@1.0.0		0		13
Pomelo.EntityFrameworkCore.MySql:8.0.0	cpe:2.3:a:mysql:mysql:8.0.0:::::::* cpe:2.3:a:www-sql_project:www-sql:8.0.0:::::::*	pkg:nuget/Pomelo.EntityFrameworkCore.MySql@8.0.0		0	Low	8

Dependencies (vulnerable)

APF.Core3.1.AWS:6.0.0.*

File Path: D:\Auropayrepos\Payout\PayoutEntity\src\PayoutEntity.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	APF	Medium
Vendor	msbuild	id	APF.Core3.1.AWS	Medium
Vendor	msbuild	id	Core3	Low
Vendor	msbuild	id	Core3.1.AWS	Low
Product	msbuild	id	APF.Core3.1.AWS	Highest
Product	msbuild	id	Core3	Medium
Product	msbuild	id	Core3.1.AWS	Medium
Version	msbuild	version	6.0.0.*	Highest

Identifiers

pkg:nuget/APF.Core3.1.AWS@6.0.0.%2A (Confidence:Highest)

APF.Core3.1:6.0.0.*

File Path: D:\Auropayrepos\Payout\PayoutEntity\src\PayoutEntity.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	APF	Medium
Vendor	msbuild	id	APF.Core3.1	Medium
Vendor	msbuild	id	Core3	Low
Vendor	msbuild	id	Core3.1	Low
Product	msbuild	id	APF.Core3.1	Highest
Product	msbuild	id	Core3	Medium
Product	msbuild	id	Core3.1	Medium
Version	msbuild	version	6.0.0.*	Highest

Identifiers

pkg:nuget/APF.Core3.1@6.0.0.%2A (Confidence:Highest)

AWSSDK.Extensions.NETCore.Setup:3.7.2

File Path: D:\Auropayrepos\Payout\PayoutEntity\src\PayoutEntity.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AWSSDK	Medium
Vendor	msbuild	id	AWSSDK.Extensions.NETCore.Setup	Medium
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.NETCore.Setup	Low
Product	msbuild	id	AWSSDK.Extensions.NETCore.Setup	Highest
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.NETCore.Setup	Medium
Version	msbuild	version	3.7.2	Highest

Identifiers

pkg:nuget/AWSSDK.Extensions.NETCore.Setup@3.7.2 (Confidence:Highest)

AutoMapper.Extensions.Microsoft.DependencyInjection:12.0.0

File Path: D:\Auropayrepos\Payout\PayoutEntity\src\PayoutEntity.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AutoMapper	Medium
Vendor	msbuild	id	AutoMapper.Extensions.Microsoft.DependencyInjection	Medium
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.Microsoft.DependencyInjection	Low
Product	msbuild	id	AutoMapper.Extensions.Microsoft.DependencyInjection	Highest
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.Microsoft.DependencyInjection	Medium
Version	msbuild	version	12.0.0	Highest

Identifiers

pkg:nuget/AutoMapper.Extensions.Microsoft.DependencyInjection@12.0.0 (Confidence:Highest)

AutoMapper:12.0.0

File Path: D:\Auropayrepos\Payout\PayoutEntity\src\PayoutEntity.csproj

Evidence

Identifiers

pkg:nuget/AutoMapper@12.0.0 (Confidence:Highest)

FluentValidation.DependencyInjectionExtensions:11.9.0

File Path: D:\Auropayrepos\Payout\PayoutEntity\src\PayoutEntity.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	DependencyInjectionExtensions	Low
Vendor	msbuild	id	FluentValidation	Medium
Vendor	msbuild	id	FluentValidation.DependencyInjectionExtensions	Medium
Product	msbuild	id	DependencyInjectionExtensions	Medium
Product	msbuild	id	FluentValidation.DependencyInjectionExtensions	Highest
Version	msbuild	version	11.9.0	Highest

Identifiers

pkg:nuget/FluentValidation.DependencyInjectionExtensions@11.9.0 (Confidence:Highest)

FluentValidation:11.9.0

File Path: D:\Auropayrepos\Payout\PayoutEntity\src\PayoutEntity.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	FluentValidation	Medium
Vendor	msbuild	id	FluentValidation	Low
Product	msbuild	id	FluentValidation	Highest
Version	msbuild	version	11.9.0	Highest

Identifiers

pkg:nuget/FluentValidation@11.9.0 (Confidence:Highest)

Hashids.net:1.3.0

File Path: D:\Auropayrepos\Payout\PayoutEntity\src\PayoutEntity.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Hashids	Medium
Vendor	msbuild	id	Hashids.net	Medium
Vendor	msbuild	id	net	Low
Product	msbuild	id	Hashids.net	Highest
Product	msbuild	id	net	Medium
Version	msbuild	version	1.3.0	Highest

Identifiers

pkg:nuget/Hashids.net@1.3.0 (Confidence:Highest)

Microsoft.AspNetCore.Authentication.JwtBearer:3.1.3

File Path: D:\Auropayrepos\Payout\PayoutEntity\src\PayoutEntity.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AspNetCore	Low
Vendor	msbuild	id	AspNetCore.Authentication.JwtBearer	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.AspNetCore.Authentication.JwtBearer	Medium
Product	msbuild	id	AspNetCore	Medium
Product	msbuild	id	AspNetCore.Authentication.JwtBearer	Medium
Product	msbuild	id	Microsoft.AspNetCore.Authentication.JwtBearer	Highest
Version	msbuild	version	3.1.3	Highest

Identifiers

pkg:nuget/Microsoft.AspNetCore.Authentication.JwtBearer@3.1.3 (Confidence:Highest)
cpe:2.3:a:asp-project:asp-project:3.1.3:*:*:*:*:*:*:* (Confidence:Low)

Published Vulnerabilities

CVE-2021-34532 (OSSINDEX)

ASP.NET Core and Visual Studio Information Disclosure Vulnerability

CWE-noinfo

CVSSv2:

Base Score: LOW (2.0999999046325684)
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

References:

OSSINDEX - [CVE-2021-34532] CWE-noinfo
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-34532
OSSIndex - https://bugzilla.redhat.com/show_bug.cgi?id=1990300
OSSIndex - https://github.com/dotnet/announcements/issues/195
OSSIndex - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34532

Vulnerable Software & Versions (OSSINDEX):

cpe:2.3:a:*:Microsoft.AspNetCore.Authentication.JwtBearer:3.1.3:*:*:*:*:*:*:*

Microsoft.EntityFrameworkCore.SqlServer:8.0.0

File Path: D:\Auropayrepos\Payout\PayoutEntity\src\PayoutEntity.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	EntityFrameworkCore	Low
Vendor	msbuild	id	EntityFrameworkCore.SqlServer	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.EntityFrameworkCore.SqlServer	Medium
Product	msbuild	id	EntityFrameworkCore	Medium
Product	msbuild	id	EntityFrameworkCore.SqlServer	Medium
Product	msbuild	id	Microsoft.EntityFrameworkCore.SqlServer	Highest
Version	msbuild	version	8.0.0	Highest

Identifiers

pkg:nuget/Microsoft.EntityFrameworkCore.SqlServer@8.0.0 (Confidence:Highest)
cpe:2.3:a:www-sql_project:www-sql:8.0.0:*:*:*:*:*:*:* (Confidence:Low)

Microsoft.EntityFrameworkCore.Tools:8.0.0

File Path: D:\Auropayrepos\Payout\PayoutEntity\src\PayoutEntity.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	EntityFrameworkCore	Low
Vendor	msbuild	id	EntityFrameworkCore.Tools	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.EntityFrameworkCore.Tools	Medium
Product	msbuild	id	EntityFrameworkCore	Medium
Product	msbuild	id	EntityFrameworkCore.Tools	Medium
Product	msbuild	id	Microsoft.EntityFrameworkCore.Tools	Highest
Version	msbuild	version	8.0.0	Highest

Identifiers

pkg:nuget/Microsoft.EntityFrameworkCore.Tools@8.0.0 (Confidence:Highest)

PayoutEntity.csproj

File Path: D:\Auropayrepos\Payout\PayoutEntity\src\PayoutEntity.csproj
MD5: 34aa6d834b1301c22227dd6963b684d1
SHA1: 11f94c66c79713fe4d432eb853a6d4bef752b01b
SHA256:d0932001e269b521e7f61deab38a44e30328a9ca884e589578c1f03ed1fd43b7

Evidence

Identifiers

None

PayoutEntity.dll

Description:

PayoutEntity

File Path: D:\Auropayrepos\Payout\PayoutEntity\src\bin\Debug\net8.0\PayoutEntity.dll
MD5: 75f70f9969cf6fe47a36279517f8d6d9
SHA1: 6795550a606ff2c4fe6a54b49e417d5875e7401c
SHA256:8215c4193772b1ac5290482582fd3eaafd7ebfa888924eba26f7f88bef1dcf6b

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	PayoutEntity	High
Vendor	grokassembly	CompanyName	PayoutEntity	Highest
Vendor	grokassembly	FileDescription	PayoutEntity	Low
Vendor	grokassembly	InternalName	PayoutEntity.dll	Low
Vendor	grokassembly	OriginalFilename	PayoutEntity.dll	Low
Vendor	grokassembly	ProductName	PayoutEntity	Medium
Product	file	name	PayoutEntity	High
Product	grokassembly	CompanyName	PayoutEntity	Low
Product	grokassembly	FileDescription	PayoutEntity	High
Product	grokassembly	InternalName	PayoutEntity.dll	Medium
Product	grokassembly	OriginalFilename	PayoutEntity.dll	Medium
Product	grokassembly	ProductName	PayoutEntity	Highest
Version	AssemblyAnalyzer	FilteredVersion	1.0.0	Highest

Related Dependencies

Identifiers

pkg:generic/PayoutEntity@1.0.0 (Confidence:Medium)

Pomelo.EntityFrameworkCore.MySql:8.0.0

File Path: D:\Auropayrepos\Payout\PayoutEntity\src\PayoutEntity.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	EntityFrameworkCore	Low
Vendor	msbuild	id	EntityFrameworkCore.MySql	Low
Vendor	msbuild	id	Pomelo	Medium
Vendor	msbuild	id	Pomelo.EntityFrameworkCore.MySql	Medium
Product	msbuild	id	EntityFrameworkCore	Medium
Product	msbuild	id	EntityFrameworkCore.MySql	Medium
Product	msbuild	id	Pomelo.EntityFrameworkCore.MySql	Highest
Version	msbuild	version	8.0.0	Highest

Identifiers

pkg:nuget/Pomelo.EntityFrameworkCore.MySql@8.0.0 (Confidence:Highest)
cpe:2.3:a:mysql:mysql:8.0.0:*:*:*:*:*:*:* (Confidence:Low)
cpe:2.3:a:www-sql_project:www-sql:8.0.0:*:*:*:*:*:*:* (Confidence:Low)

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: Testing

Summary

Dependencies (vulnerable)

APF.Core3.1.AWS:6.0.0.*

Evidence

Identifiers

APF.Core3.1:6.0.0.*

Evidence

Identifiers

AWSSDK.Extensions.NETCore.Setup:3.7.2

Evidence

Identifiers

AutoMapper.Extensions.Microsoft.DependencyInjection:12.0.0

Evidence

Identifiers

AutoMapper:12.0.0

Evidence

Identifiers

FluentValidation.DependencyInjectionExtensions:11.9.0

Evidence

Identifiers

FluentValidation:11.9.0

Evidence

Identifiers

Hashids.net:1.3.0

Evidence

Identifiers

Microsoft.AspNetCore.Authentication.JwtBearer:3.1.3

Evidence

Identifiers

Published Vulnerabilities

Microsoft.EntityFrameworkCore.SqlServer:8.0.0

Evidence

Identifiers

Microsoft.EntityFrameworkCore.Tools:8.0.0

Evidence

Identifiers

PayoutEntity.csproj

Evidence

Identifiers

PayoutEntity.dll

Evidence

Related Dependencies

Identifiers

Pomelo.EntityFrameworkCore.MySql:8.0.0

Evidence

Identifiers

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor