Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.1.0
Report Generated On: Tue, 4 Mar 2025 13:41:04 +0530
Dependencies Scanned: 61 (50 unique)
Vulnerable Dependencies: 1
Vulnerabilities Found: 1
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2025-03-04T10:03:23+0530
NVD API Last Modified: 2025-03-04T04:15:15Z

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Highest Severity	CVE Count	Confidence	Evidence Count
APF.Core3.1.API:6.0.0.*		pkg:nuget/APF.Core3.1.API@6.0.0.%2A		0		8
APF.Core3.1.AWS:6.0.0.*		pkg:nuget/APF.Core3.1.AWS@6.0.0.%2A		0		8
APF.Core3.1:6.0.0.*		pkg:nuget/APF.Core3.1@6.0.0.%2A		0		8
APF.Core3.1:6.0.0.8		pkg:nuget/APF.Core3.1@6.0.0.8		0		8
AWSSDK.APIGateway:3.7.100.22		pkg:nuget/AWSSDK.APIGateway@3.7.100.22		0		6
AWSSDK.CodePipeline:3.7.100.22		pkg:nuget/AWSSDK.CodePipeline@3.7.100.22		0		6
AWSSDK.Core:3.7.100.22		pkg:nuget/AWSSDK.Core@3.7.100.22		0		6
AWSSDK.Extensions.NETCore.Setup:3.7.2		pkg:nuget/AWSSDK.Extensions.NETCore.Setup@3.7.2		0		8
AWSSDK.S3:3.7.100		pkg:nuget/AWSSDK.S3@3.7.100		0		6
AWSSDK.S3:3.7.9.23		pkg:nuget/AWSSDK.S3@3.7.9.23		0		6
AWSSDK.SecurityToken:3.7.100.22		pkg:nuget/AWSSDK.SecurityToken@3.7.100.22		0		6
AWSSDK.SimpleSystemsManagement:3.7.100.2		pkg:nuget/AWSSDK.SimpleSystemsManagement@3.7.100.2		0		6
Amazon.Lambda.AspNetCoreServer:6.1.0	cpe:2.3:a:asp-project:asp-project:6.1.0:::::::*	pkg:nuget/Amazon.Lambda.AspNetCoreServer@6.1.0		0	Low	8
Amazon.Lambda.Core:2.1.0		pkg:nuget/Amazon.Lambda.Core@2.1.0		0		8
Amazon.Lambda.Serialization.SystemTextJson:2.3.0		pkg:nuget/Amazon.Lambda.Serialization.SystemTextJson@2.3.0		0		8
AutoMapper.Extensions.Microsoft.DependencyInjection:12.0.0		pkg:nuget/AutoMapper.Extensions.Microsoft.DependencyInjection@12.0.0		0		8
AutoMapper:12.0.0		pkg:nuget/AutoMapper@12.0.0		0		4
AwsParameterStore.Microsoft.Extensions.Configuration:0.7.0		pkg:nuget/AwsParameterStore.Microsoft.Extensions.Configuration@0.7.0		0		8
FluentValidation.DependencyInjectionExtensions:11.9.0		pkg:nuget/FluentValidation.DependencyInjectionExtensions@11.9.0		0		6
FluentValidation:11.9.0		pkg:nuget/FluentValidation@11.9.0		0		4
Hashids.net:1.3.0		pkg:nuget/Hashids.net@1.3.0		0		6
Lumigo.DotNET:1.0.45		pkg:nuget/Lumigo.DotNET@1.0.45		0		6
Microsoft.AspNetCore.Authentication.JwtBearer:3.1.3	cpe:2.3:a:asp-project:asp-project:3.1.3:::::::*	pkg:nuget/Microsoft.AspNetCore.Authentication.JwtBearer@3.1.3	LOW	1	Low	8
Microsoft.AspNetCore.Mvc.NewtonsoftJson:6.0.24	cpe:2.3:a:asp-project:asp-project:6.0.24:::::::*	pkg:nuget/Microsoft.AspNetCore.Mvc.NewtonsoftJson@6.0.24		0	Low	8
Microsoft.AspNetCore.Mvc.Versioning.ApiExplorer:5.1.0	cpe:2.3:a:asp-project:asp-project:5.1.0:::::::*	pkg:nuget/Microsoft.AspNetCore.Mvc.Versioning.ApiExplorer@5.1.0		0	Low	8
Microsoft.EntityFrameworkCore.Design:8.0.0		pkg:nuget/Microsoft.EntityFrameworkCore.Design@8.0.0		0		8
Microsoft.EntityFrameworkCore.SqlServer:8.0.0	cpe:2.3:a:www-sql_project:www-sql:8.0.0:::::::*	pkg:nuget/Microsoft.EntityFrameworkCore.SqlServer@8.0.0		0	Low	8
Microsoft.EntityFrameworkCore.Tools:8.0.0		pkg:nuget/Microsoft.EntityFrameworkCore.Tools@8.0.0		0		8
Microsoft.Extensions.Configuration.EnvironmentVariables:6.0.1		pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@6.0.1		0		8
Microsoft.Extensions.Configuration.Json:6.0.0		pkg:nuget/Microsoft.Extensions.Configuration.Json@6.0.0		0		8
Microsoft.Extensions.Configuration:6.0.1		pkg:nuget/Microsoft.Extensions.Configuration@6.0.1		0		8
Microsoft.Extensions.DependencyInjection:6.0.1		pkg:nuget/Microsoft.Extensions.DependencyInjection@6.0.1		0		8
Microsoft.Extensions.Logging:6.0.0		pkg:nuget/Microsoft.Extensions.Logging@6.0.0		0		8
Newtonsoft.Json:13.0.3		pkg:nuget/Newtonsoft.Json@13.0.3		0		7
PayeeBeneficiarySwagger.js				0		0
PayeeBeneficiaryVersion2Swagger.js				0		0
PayeeSwagger.js				0		0
PayeeVersion2Swagger.js				0		0
PayoutCodePipelineDeployAPI.csproj				0		2
PayoutEntity.dll		pkg:generic/PayoutEntity@1.0.0		0		13
PayoutPayee.API.csproj				0		2
PayoutPayee.csproj				0		2
Pomelo.EntityFrameworkCore.MySql:8.0.0	cpe:2.3:a:mysql:mysql:8.0.0:::::::* cpe:2.3:a:www-sql_project:www-sql:8.0.0:::::::*	pkg:nuget/Pomelo.EntityFrameworkCore.MySql@8.0.0		0	Low	8
SwaggerController.js				0		0
Swashbuckle.AspNetCore:6.4.0		pkg:nuget/Swashbuckle.AspNetCore@6.4.0		0		6
itext7.bouncy-castle-adapter:8.0.1		pkg:nuget/itext7.bouncy-castle-adapter@8.0.1		0		6
itext7:8.0.1		pkg:nuget/itext7@8.0.1		0		4
package.json				0		0
swagger.js				0		0
swaggerDefinition.js				0		0

Dependencies (vulnerable)

APF.Core3.1.API:6.0.0.*

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.API\PayoutPayee.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	APF	Medium
Vendor	msbuild	id	APF.Core3.1.API	Medium
Vendor	msbuild	id	Core3	Low
Vendor	msbuild	id	Core3.1.API	Low
Product	msbuild	id	APF.Core3.1.API	Highest
Product	msbuild	id	Core3	Medium
Product	msbuild	id	Core3.1.API	Medium
Version	msbuild	version	6.0.0.*	Highest

Identifiers

pkg:nuget/APF.Core3.1.API@6.0.0.%2A (Confidence:Highest)

APF.Core3.1.AWS:6.0.0.*

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee\PayoutPayee.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	APF	Medium
Vendor	msbuild	id	APF.Core3.1.AWS	Medium
Vendor	msbuild	id	Core3	Low
Vendor	msbuild	id	Core3.1.AWS	Low
Product	msbuild	id	APF.Core3.1.AWS	Highest
Product	msbuild	id	Core3	Medium
Product	msbuild	id	Core3.1.AWS	Medium
Version	msbuild	version	6.0.0.*	Highest

Related Dependencies

Identifiers

pkg:nuget/APF.Core3.1.AWS@6.0.0.%2A (Confidence:Highest)

APF.Core3.1:6.0.0.*

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee\PayoutPayee.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	APF	Medium
Vendor	msbuild	id	APF.Core3.1	Medium
Vendor	msbuild	id	Core3	Low
Vendor	msbuild	id	Core3.1	Low
Product	msbuild	id	APF.Core3.1	Highest
Product	msbuild	id	Core3	Medium
Product	msbuild	id	Core3.1	Medium
Version	msbuild	version	6.0.0.*	Highest

Related Dependencies

Identifiers

pkg:nuget/APF.Core3.1@6.0.0.%2A (Confidence:Highest)

APF.Core3.1:6.0.0.8

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	APF	Medium
Vendor	msbuild	id	APF.Core3.1	Medium
Vendor	msbuild	id	Core3	Low
Vendor	msbuild	id	Core3.1	Low
Product	msbuild	id	APF.Core3.1	Highest
Product	msbuild	id	Core3	Medium
Product	msbuild	id	Core3.1	Medium
Version	msbuild	version	6.0.0.8	Highest

Identifiers

pkg:nuget/APF.Core3.1@6.0.0.8 (Confidence:Highest)

AWSSDK.APIGateway:3.7.100.22

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	APIGateway	Low
Vendor	msbuild	id	AWSSDK	Medium
Vendor	msbuild	id	AWSSDK.APIGateway	Medium
Product	msbuild	id	APIGateway	Medium
Product	msbuild	id	AWSSDK.APIGateway	Highest
Version	msbuild	version	3.7.100.22	Highest

Identifiers

pkg:nuget/AWSSDK.APIGateway@3.7.100.22 (Confidence:Highest)

AWSSDK.CodePipeline:3.7.100.22

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AWSSDK	Medium
Vendor	msbuild	id	AWSSDK.CodePipeline	Medium
Vendor	msbuild	id	CodePipeline	Low
Product	msbuild	id	AWSSDK.CodePipeline	Highest
Product	msbuild	id	CodePipeline	Medium
Version	msbuild	version	3.7.100.22	Highest

Identifiers

pkg:nuget/AWSSDK.CodePipeline@3.7.100.22 (Confidence:Highest)

AWSSDK.Core:3.7.100.22

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AWSSDK	Medium
Vendor	msbuild	id	AWSSDK.Core	Medium
Vendor	msbuild	id	Core	Low
Product	msbuild	id	AWSSDK.Core	Highest
Product	msbuild	id	Core	Medium
Version	msbuild	version	3.7.100.22	Highest

Identifiers

pkg:nuget/AWSSDK.Core@3.7.100.22 (Confidence:Highest)

AWSSDK.Extensions.NETCore.Setup:3.7.2

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee\PayoutPayee.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AWSSDK	Medium
Vendor	msbuild	id	AWSSDK.Extensions.NETCore.Setup	Medium
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.NETCore.Setup	Low
Product	msbuild	id	AWSSDK.Extensions.NETCore.Setup	Highest
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.NETCore.Setup	Medium
Version	msbuild	version	3.7.2	Highest

Identifiers

pkg:nuget/AWSSDK.Extensions.NETCore.Setup@3.7.2 (Confidence:Highest)

AWSSDK.S3:3.7.100

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj

Evidence

Identifiers

pkg:nuget/AWSSDK.S3@3.7.100 (Confidence:Highest)

AWSSDK.S3:3.7.9.23

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee\PayoutPayee.csproj

Evidence

Identifiers

pkg:nuget/AWSSDK.S3@3.7.9.23 (Confidence:Highest)

AWSSDK.SecurityToken:3.7.100.22

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AWSSDK	Medium
Vendor	msbuild	id	AWSSDK.SecurityToken	Medium
Vendor	msbuild	id	SecurityToken	Low
Product	msbuild	id	AWSSDK.SecurityToken	Highest
Product	msbuild	id	SecurityToken	Medium
Version	msbuild	version	3.7.100.22	Highest

Identifiers

pkg:nuget/AWSSDK.SecurityToken@3.7.100.22 (Confidence:Highest)

AWSSDK.SimpleSystemsManagement:3.7.100.2

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AWSSDK	Medium
Vendor	msbuild	id	AWSSDK.SimpleSystemsManagement	Medium
Vendor	msbuild	id	SimpleSystemsManagement	Low
Product	msbuild	id	AWSSDK.SimpleSystemsManagement	Highest
Product	msbuild	id	SimpleSystemsManagement	Medium
Version	msbuild	version	3.7.100.2	Highest

Identifiers

pkg:nuget/AWSSDK.SimpleSystemsManagement@3.7.100.2 (Confidence:Highest)

Amazon.Lambda.AspNetCoreServer:6.1.0

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.API\PayoutPayee.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Amazon	Medium
Vendor	msbuild	id	Amazon.Lambda.AspNetCoreServer	Medium
Vendor	msbuild	id	Lambda	Low
Vendor	msbuild	id	Lambda.AspNetCoreServer	Low
Product	msbuild	id	Amazon.Lambda.AspNetCoreServer	Highest
Product	msbuild	id	Lambda	Medium
Product	msbuild	id	Lambda.AspNetCoreServer	Medium
Version	msbuild	version	6.1.0	Highest

Identifiers

pkg:nuget/Amazon.Lambda.AspNetCoreServer@6.1.0 (Confidence:Highest)
cpe:2.3:a:asp-project:asp-project:6.1.0:*:*:*:*:*:*:* (Confidence:Low)

Amazon.Lambda.Core:2.1.0

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Amazon	Medium
Vendor	msbuild	id	Amazon.Lambda.Core	Medium
Vendor	msbuild	id	Lambda	Low
Vendor	msbuild	id	Lambda.Core	Low
Product	msbuild	id	Amazon.Lambda.Core	Highest
Product	msbuild	id	Lambda	Medium
Product	msbuild	id	Lambda.Core	Medium
Version	msbuild	version	2.1.0	Highest

Identifiers

pkg:nuget/Amazon.Lambda.Core@2.1.0 (Confidence:Highest)

Amazon.Lambda.Serialization.SystemTextJson:2.3.0

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Amazon	Medium
Vendor	msbuild	id	Amazon.Lambda.Serialization.SystemTextJson	Medium
Vendor	msbuild	id	Lambda	Low
Vendor	msbuild	id	Lambda.Serialization.SystemTextJson	Low
Product	msbuild	id	Amazon.Lambda.Serialization.SystemTextJson	Highest
Product	msbuild	id	Lambda	Medium
Product	msbuild	id	Lambda.Serialization.SystemTextJson	Medium
Version	msbuild	version	2.3.0	Highest

Identifiers

pkg:nuget/Amazon.Lambda.Serialization.SystemTextJson@2.3.0 (Confidence:Highest)

AutoMapper.Extensions.Microsoft.DependencyInjection:12.0.0

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee\PayoutPayee.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AutoMapper	Medium
Vendor	msbuild	id	AutoMapper.Extensions.Microsoft.DependencyInjection	Medium
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.Microsoft.DependencyInjection	Low
Product	msbuild	id	AutoMapper.Extensions.Microsoft.DependencyInjection	Highest
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.Microsoft.DependencyInjection	Medium
Version	msbuild	version	12.0.0	Highest

Identifiers

pkg:nuget/AutoMapper.Extensions.Microsoft.DependencyInjection@12.0.0 (Confidence:Highest)

AutoMapper:12.0.0

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee\PayoutPayee.csproj

Evidence

Identifiers

pkg:nuget/AutoMapper@12.0.0 (Confidence:Highest)

AwsParameterStore.Microsoft.Extensions.Configuration:0.7.0

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AwsParameterStore	Medium
Vendor	msbuild	id	AwsParameterStore.Microsoft.Extensions.Configuration	Medium
Vendor	msbuild	id	Microsoft	Low
Vendor	msbuild	id	Microsoft.Extensions.Configuration	Low
Product	msbuild	id	AwsParameterStore.Microsoft.Extensions.Configuration	Highest
Product	msbuild	id	Microsoft	Medium
Product	msbuild	id	Microsoft.Extensions.Configuration	Medium
Version	msbuild	version	0.7.0	Highest

Identifiers

pkg:nuget/AwsParameterStore.Microsoft.Extensions.Configuration@0.7.0 (Confidence:Highest)

FluentValidation.DependencyInjectionExtensions:11.9.0

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee\PayoutPayee.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	DependencyInjectionExtensions	Low
Vendor	msbuild	id	FluentValidation	Medium
Vendor	msbuild	id	FluentValidation.DependencyInjectionExtensions	Medium
Product	msbuild	id	DependencyInjectionExtensions	Medium
Product	msbuild	id	FluentValidation.DependencyInjectionExtensions	Highest
Version	msbuild	version	11.9.0	Highest

Identifiers

pkg:nuget/FluentValidation.DependencyInjectionExtensions@11.9.0 (Confidence:Highest)

FluentValidation:11.9.0

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee\PayoutPayee.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	FluentValidation	Medium
Vendor	msbuild	id	FluentValidation	Low
Product	msbuild	id	FluentValidation	Highest
Version	msbuild	version	11.9.0	Highest

Identifiers

pkg:nuget/FluentValidation@11.9.0 (Confidence:Highest)

Hashids.net:1.3.0

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee\PayoutPayee.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Hashids	Medium
Vendor	msbuild	id	Hashids.net	Medium
Vendor	msbuild	id	net	Low
Product	msbuild	id	Hashids.net	Highest
Product	msbuild	id	net	Medium
Version	msbuild	version	1.3.0	Highest

Identifiers

pkg:nuget/Hashids.net@1.3.0 (Confidence:Highest)

Lumigo.DotNET:1.0.45

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.API\PayoutPayee.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	DotNET	Low
Vendor	msbuild	id	Lumigo	Medium
Vendor	msbuild	id	Lumigo.DotNET	Medium
Product	msbuild	id	DotNET	Medium
Product	msbuild	id	Lumigo.DotNET	Highest
Version	msbuild	version	1.0.45	Highest

Identifiers

pkg:nuget/Lumigo.DotNET@1.0.45 (Confidence:Highest)

Microsoft.AspNetCore.Authentication.JwtBearer:3.1.3

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.API\PayoutPayee.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AspNetCore	Low
Vendor	msbuild	id	AspNetCore.Authentication.JwtBearer	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.AspNetCore.Authentication.JwtBearer	Medium
Product	msbuild	id	AspNetCore	Medium
Product	msbuild	id	AspNetCore.Authentication.JwtBearer	Medium
Product	msbuild	id	Microsoft.AspNetCore.Authentication.JwtBearer	Highest
Version	msbuild	version	3.1.3	Highest

Related Dependencies

Identifiers

pkg:nuget/Microsoft.AspNetCore.Authentication.JwtBearer@3.1.3 (Confidence:Highest)
cpe:2.3:a:asp-project:asp-project:3.1.3:*:*:*:*:*:*:* (Confidence:Low)

Published Vulnerabilities

CVE-2021-34532 (OSSINDEX)

ASP.NET Core and Visual Studio Information Disclosure Vulnerability

CWE-noinfo

CVSSv2:

Base Score: LOW (2.0999999046325684)
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

References:

OSSINDEX - [CVE-2021-34532] CWE-noinfo
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-34532
OSSIndex - https://bugzilla.redhat.com/show_bug.cgi?id=1990300
OSSIndex - https://github.com/dotnet/announcements/issues/195
OSSIndex - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34532

Vulnerable Software & Versions (OSSINDEX):

cpe:2.3:a:*:Microsoft.AspNetCore.Authentication.JwtBearer:3.1.3:*:*:*:*:*:*:*

Microsoft.AspNetCore.Mvc.NewtonsoftJson:6.0.24

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.API\PayoutPayee.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AspNetCore	Low
Vendor	msbuild	id	AspNetCore.Mvc.NewtonsoftJson	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.AspNetCore.Mvc.NewtonsoftJson	Medium
Product	msbuild	id	AspNetCore	Medium
Product	msbuild	id	AspNetCore.Mvc.NewtonsoftJson	Medium
Product	msbuild	id	Microsoft.AspNetCore.Mvc.NewtonsoftJson	Highest
Version	msbuild	version	6.0.24	Highest

Identifiers

pkg:nuget/Microsoft.AspNetCore.Mvc.NewtonsoftJson@6.0.24 (Confidence:Highest)
cpe:2.3:a:asp-project:asp-project:6.0.24:*:*:*:*:*:*:* (Confidence:Low)

Microsoft.AspNetCore.Mvc.Versioning.ApiExplorer:5.1.0

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.API\PayoutPayee.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AspNetCore	Low
Vendor	msbuild	id	AspNetCore.Mvc.Versioning.ApiExplorer	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.AspNetCore.Mvc.Versioning.ApiExplorer	Medium
Product	msbuild	id	AspNetCore	Medium
Product	msbuild	id	AspNetCore.Mvc.Versioning.ApiExplorer	Medium
Product	msbuild	id	Microsoft.AspNetCore.Mvc.Versioning.ApiExplorer	Highest
Version	msbuild	version	5.1.0	Highest

Related Dependencies

Identifiers

pkg:nuget/Microsoft.AspNetCore.Mvc.Versioning.ApiExplorer@5.1.0 (Confidence:Highest)
cpe:2.3:a:asp-project:asp-project:5.1.0:*:*:*:*:*:*:* (Confidence:Low)

Microsoft.EntityFrameworkCore.Design:8.0.0

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.API\PayoutPayee.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	EntityFrameworkCore	Low
Vendor	msbuild	id	EntityFrameworkCore.Design	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.EntityFrameworkCore.Design	Medium
Product	msbuild	id	EntityFrameworkCore	Medium
Product	msbuild	id	EntityFrameworkCore.Design	Medium
Product	msbuild	id	Microsoft.EntityFrameworkCore.Design	Highest
Version	msbuild	version	8.0.0	Highest

Identifiers

pkg:nuget/Microsoft.EntityFrameworkCore.Design@8.0.0 (Confidence:Highest)

Microsoft.EntityFrameworkCore.SqlServer:8.0.0

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.API\PayoutPayee.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	EntityFrameworkCore	Low
Vendor	msbuild	id	EntityFrameworkCore.SqlServer	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.EntityFrameworkCore.SqlServer	Medium
Product	msbuild	id	EntityFrameworkCore	Medium
Product	msbuild	id	EntityFrameworkCore.SqlServer	Medium
Product	msbuild	id	Microsoft.EntityFrameworkCore.SqlServer	Highest
Version	msbuild	version	8.0.0	Highest

Related Dependencies

Identifiers

pkg:nuget/Microsoft.EntityFrameworkCore.SqlServer@8.0.0 (Confidence:Highest)
cpe:2.3:a:www-sql_project:www-sql:8.0.0:*:*:*:*:*:*:* (Confidence:Low)

Microsoft.EntityFrameworkCore.Tools:8.0.0

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.API\PayoutPayee.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	EntityFrameworkCore	Low
Vendor	msbuild	id	EntityFrameworkCore.Tools	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.EntityFrameworkCore.Tools	Medium
Product	msbuild	id	EntityFrameworkCore	Medium
Product	msbuild	id	EntityFrameworkCore.Tools	Medium
Product	msbuild	id	Microsoft.EntityFrameworkCore.Tools	Highest
Version	msbuild	version	8.0.0	Highest

Related Dependencies

Identifiers

pkg:nuget/Microsoft.EntityFrameworkCore.Tools@8.0.0 (Confidence:Highest)

Microsoft.Extensions.Configuration.EnvironmentVariables:6.0.1

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.Configuration.EnvironmentVariables	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.Extensions.Configuration.EnvironmentVariables	Medium
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.Configuration.EnvironmentVariables	Medium
Product	msbuild	id	Microsoft.Extensions.Configuration.EnvironmentVariables	Highest
Version	msbuild	version	6.0.1	Highest

Identifiers

pkg:nuget/Microsoft.Extensions.Configuration.EnvironmentVariables@6.0.1 (Confidence:Highest)

Microsoft.Extensions.Configuration.Json:6.0.0

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.Configuration.Json	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.Extensions.Configuration.Json	Medium
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.Configuration.Json	Medium
Product	msbuild	id	Microsoft.Extensions.Configuration.Json	Highest
Version	msbuild	version	6.0.0	Highest

Identifiers

pkg:nuget/Microsoft.Extensions.Configuration.Json@6.0.0 (Confidence:Highest)

Microsoft.Extensions.Configuration:6.0.1

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.Configuration	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.Extensions.Configuration	Medium
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.Configuration	Medium
Product	msbuild	id	Microsoft.Extensions.Configuration	Highest
Version	msbuild	version	6.0.1	Highest

Identifiers

pkg:nuget/Microsoft.Extensions.Configuration@6.0.1 (Confidence:Highest)

Microsoft.Extensions.DependencyInjection:6.0.1

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.DependencyInjection	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.Extensions.DependencyInjection	Medium
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.DependencyInjection	Medium
Product	msbuild	id	Microsoft.Extensions.DependencyInjection	Highest
Version	msbuild	version	6.0.1	Highest

Identifiers

pkg:nuget/Microsoft.Extensions.DependencyInjection@6.0.1 (Confidence:Highest)

Microsoft.Extensions.Logging:6.0.0

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Extensions	Low
Vendor	msbuild	id	Extensions.Logging	Low
Vendor	msbuild	id	Microsoft	Medium
Vendor	msbuild	id	Microsoft.Extensions.Logging	Medium
Product	msbuild	id	Extensions	Medium
Product	msbuild	id	Extensions.Logging	Medium
Product	msbuild	id	Microsoft.Extensions.Logging	Highest
Version	msbuild	version	6.0.0	Highest

Identifiers

pkg:nuget/Microsoft.Extensions.Logging@6.0.0 (Confidence:Highest)

Newtonsoft.Json:13.0.3

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	Json	Low
Vendor	msbuild	id	Newtonsoft	Medium
Vendor	msbuild	id	Newtonsoft.Json	Medium
Product	hint analyzer	vendor	net	Medium
Product	msbuild	id	Json	Medium
Product	msbuild	id	Newtonsoft.Json	Highest
Version	msbuild	version	13.0.3	Highest

Identifiers

pkg:nuget/Newtonsoft.Json@13.0.3 (Confidence:Highest)

PayeeBeneficiarySwagger.js

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.Swagger.API\swagger\definitions\PayeeBeneficiarySwagger.js
MD5: 91b2418ae65917151d7687ae940d8e11
SHA1: b9015c8828be95d2fee5322897fa7af375e5c08a
SHA256:768c4a79003b26647061ce56581301510eb9262091e3fc1a3bac5182083d9d20

Evidence

Identifiers

None

PayeeBeneficiaryVersion2Swagger.js

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.Swagger.API\swagger\definitions\PayeeBeneficiaryVersion2Swagger.js
MD5: d102426710e187423fb69947c6f02371
SHA1: ac1b116bd5985b21d9ca70d24161d7a940e6e36b
SHA256:abca69705be3dd7357af9a1e47a172875939f5bdfba469a03042883ab0b63ff5

Evidence

Identifiers

None

PayeeSwagger.js

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.Swagger.API\swagger\definitions\PayeeSwagger.js
MD5: 8207e9293b1547cb2330b8eeb6fec19c
SHA1: bf5a3454e741e8f4f71f2a3975a68a27571e117e
SHA256:c0bb95f26dfcca10730926b3c2cdabee1a55b65d178516a1f6d21040f112612c

Evidence

Identifiers

None

PayeeVersion2Swagger.js

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.Swagger.API\swagger\definitions\PayeeVersion2Swagger.js
MD5: 4737253d494a1e898e9cdbb863d97f6c
SHA1: f931845d7e8ecd8dc9a2c01173134e3002cd08ad
SHA256:439c02ce61e79090f654df6837ed717d9f8aafb4db115e2bae34bf3565689cfd

Evidence

Identifiers

None

PayoutCodePipelineDeployAPI.csproj

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutCodePipelineDeployAPI\PayoutCodePipelineDeployAPI.csproj
MD5: b6fce2c49bc94a08111bd72e9493b86a
SHA1: d1ebdd80916fb7d6291b6cc6e0cca95414f2fd40
SHA256:ed64a4ee108f6cc22f5d7f46c94c9406df76cc59df01ef13a45c76f710172aed

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	PayoutCodePipelineDeployAPI	High
Product	file	name	PayoutCodePipelineDeployAPI	High

Identifiers

None

PayoutEntity.dll

Description:

PayoutEntity

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.API\libs\PayoutEntity.dll
MD5: 75f70f9969cf6fe47a36279517f8d6d9
SHA1: 6795550a606ff2c4fe6a54b49e417d5875e7401c
SHA256:8215c4193772b1ac5290482582fd3eaafd7ebfa888924eba26f7f88bef1dcf6b

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	PayoutEntity	High
Vendor	grokassembly	CompanyName	PayoutEntity	Highest
Vendor	grokassembly	FileDescription	PayoutEntity	Low
Vendor	grokassembly	InternalName	PayoutEntity.dll	Low
Vendor	grokassembly	OriginalFilename	PayoutEntity.dll	Low
Vendor	grokassembly	ProductName	PayoutEntity	Medium
Product	file	name	PayoutEntity	High
Product	grokassembly	CompanyName	PayoutEntity	Low
Product	grokassembly	FileDescription	PayoutEntity	High
Product	grokassembly	InternalName	PayoutEntity.dll	Medium
Product	grokassembly	OriginalFilename	PayoutEntity.dll	Medium
Product	grokassembly	ProductName	PayoutEntity	Highest
Version	AssemblyAnalyzer	FilteredVersion	1.0.0	Highest

Related Dependencies

Identifiers

pkg:generic/PayoutEntity@1.0.0 (Confidence:Medium)

PayoutPayee.API.csproj

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.API\PayoutPayee.API.csproj
MD5: f08428076b2a46319f16d636ccae2add
SHA1: f0c9062ab04af6f68d48187045ad8797e41c327f
SHA256:5780ed4151d46c13ff96c6af75b30e1a3c0a7093f82031177f6ff48482f686ff

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	PayoutPayee.API	High
Product	file	name	PayoutPayee.API	High

Identifiers

None

PayoutPayee.csproj

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee\PayoutPayee.csproj
MD5: 43a441fce8fe8a3ad632f05f8a312399
SHA1: ffa9612a62406891c82083ce7421e8949e8ecbd0
SHA256:47ef0ddf4ac2b48a27a62741dc09f0587c41392b4598542a2ed73aeef159f3a0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	PayoutPayee	High
Product	file	name	PayoutPayee	High

Identifiers

None

Pomelo.EntityFrameworkCore.MySql:8.0.0

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.API\PayoutPayee.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	EntityFrameworkCore	Low
Vendor	msbuild	id	EntityFrameworkCore.MySql	Low
Vendor	msbuild	id	Pomelo	Medium
Vendor	msbuild	id	Pomelo.EntityFrameworkCore.MySql	Medium
Product	msbuild	id	EntityFrameworkCore	Medium
Product	msbuild	id	EntityFrameworkCore.MySql	Medium
Product	msbuild	id	Pomelo.EntityFrameworkCore.MySql	Highest
Version	msbuild	version	8.0.0	Highest

Related Dependencies

Identifiers

pkg:nuget/Pomelo.EntityFrameworkCore.MySql@8.0.0 (Confidence:Highest)
cpe:2.3:a:mysql:mysql:8.0.0:*:*:*:*:*:*:* (Confidence:Low)
cpe:2.3:a:www-sql_project:www-sql:8.0.0:*:*:*:*:*:*:* (Confidence:Low)

SwaggerController.js

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.Swagger.API\swagger\controller\SwaggerController.js
MD5: 22ddde44a3f3a9a60d452dea2fa4713c
SHA1: 6205b671856ff03813165e0569e7f60f8734ac4f
SHA256:4d24101ee0a5c7907de75294f3df277a277c5111c3e4981bb65de438e69bb292

Evidence

Identifiers

None

Swashbuckle.AspNetCore:6.4.0

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.API\PayoutPayee.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	AspNetCore	Low
Vendor	msbuild	id	Swashbuckle	Medium
Vendor	msbuild	id	Swashbuckle.AspNetCore	Medium
Product	msbuild	id	AspNetCore	Medium
Product	msbuild	id	Swashbuckle.AspNetCore	Highest
Version	msbuild	version	6.4.0	Highest

Identifiers

pkg:nuget/Swashbuckle.AspNetCore@6.4.0 (Confidence:Highest)

itext7.bouncy-castle-adapter:8.0.1

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.API\PayoutPayee.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	bouncy-castle-adapter	Low
Vendor	msbuild	id	itext7	Medium
Vendor	msbuild	id	itext7.bouncy-castle-adapter	Medium
Product	msbuild	id	bouncy-castle-adapter	Medium
Product	msbuild	id	itext7.bouncy-castle-adapter	Highest
Version	msbuild	version	8.0.1	Highest

Related Dependencies

Identifiers

pkg:nuget/itext7.bouncy-castle-adapter@8.0.1 (Confidence:Highest)

itext7:8.0.1

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.API\PayoutPayee.API.csproj

Evidence

Type	Source	Name	Value	Confidence
Vendor	msbuild	id	itext7	Medium
Vendor	msbuild	id	itext7	Low
Product	msbuild	id	itext7	Highest
Version	msbuild	version	8.0.1	Highest

Related Dependencies

Identifiers

pkg:nuget/itext7@8.0.1 (Confidence:Highest)

package.json

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.Swagger.API\package.json
MD5: 506aa9d95b70678bbe1da665c814778f
SHA1: 2dc7dcc47337b5ab142c70dd65424a9dfa524a39
SHA256:1f81241e01a47e423396a1318bcdcace9ec65288ffddd113de4693a8e2b84998

Evidence

Identifiers

None

swagger.js

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.Swagger.API\swagger.js
MD5: 8c966df86ee27632be72505b900f5916
SHA1: 9763a3faecb7eb413fff25dc9b64d48180ad717d
SHA256:2361cc5e66651683d9f2ad44475939cb656919330e9eda7752d39bceeb20a068

Evidence

Identifiers

None

swaggerDefinition.js

File Path: D:\Auropayrepos\Payout\PayoutPayee\src\PayoutPayee.Swagger.API\swaggerDefinition.js
MD5: 0cd7e8876e33919f448540bf11161400
SHA1: a9183fdafd7f3f5887b2d40ba03d6aa5be4f31b2
SHA256:72d7732d9443d9e7c9292e7af5a03d52cfc88e87cc5f8928570df931bb82b024

Evidence

Identifiers

None

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: Testing

Summary

Dependencies (vulnerable)

APF.Core3.1.API:6.0.0.*

Evidence

Identifiers

APF.Core3.1.AWS:6.0.0.*

Evidence

Related Dependencies

Identifiers

APF.Core3.1:6.0.0.*

Evidence

Related Dependencies

Identifiers

APF.Core3.1:6.0.0.8

Evidence

Identifiers

AWSSDK.APIGateway:3.7.100.22

Evidence

Identifiers

AWSSDK.CodePipeline:3.7.100.22

Evidence

Identifiers

AWSSDK.Core:3.7.100.22

Evidence

Identifiers

AWSSDK.Extensions.NETCore.Setup:3.7.2

Evidence

Identifiers

AWSSDK.S3:3.7.100

Evidence

Identifiers

AWSSDK.S3:3.7.9.23

Evidence

Identifiers

AWSSDK.SecurityToken:3.7.100.22

Evidence

Identifiers

AWSSDK.SimpleSystemsManagement:3.7.100.2

Evidence

Identifiers

Amazon.Lambda.AspNetCoreServer:6.1.0

Evidence

Identifiers

Amazon.Lambda.Core:2.1.0

Evidence

Identifiers

Amazon.Lambda.Serialization.SystemTextJson:2.3.0

Evidence

Identifiers

AutoMapper.Extensions.Microsoft.DependencyInjection:12.0.0

Evidence

Identifiers

AutoMapper:12.0.0

Evidence

Identifiers

AwsParameterStore.Microsoft.Extensions.Configuration:0.7.0

Evidence

Identifiers

FluentValidation.DependencyInjectionExtensions:11.9.0

Evidence

Identifiers

FluentValidation:11.9.0

Evidence

Identifiers

Hashids.net:1.3.0

Evidence

Identifiers

Lumigo.DotNET:1.0.45

Evidence

Identifiers

Microsoft.AspNetCore.Authentication.JwtBearer:3.1.3

Evidence

Related Dependencies

Identifiers

Published Vulnerabilities

Microsoft.AspNetCore.Mvc.NewtonsoftJson:6.0.24

Evidence

Identifiers

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor