You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
*For some transitive vulnerabilities, there is no version of direct dependency with a fix. Check the "Details" section below to see if there is a version of transitive dependency where vulnerability is fixed.
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
mend-bolt-for-githubbot
changed the title
system.windows.extensions.5.0.0.nupkg: 1 vulnerabilities (highest severity is: 9.8)
system.windows.extensions.5.0.0.nupkg: 1 vulnerabilities (highest severity is: 8.1)
Mar 24, 2024
Vulnerable Library - system.windows.extensions.5.0.0.nupkg
Path to dependency file: /TheWheel.ETL.CyberArk/TheWheel.ETL.CyberArk.csproj
Path to vulnerable library: /home/wss-scanner/.nuget/packages/system.drawing.common/5.0.0/system.drawing.common.5.0.0.nupkg
Found in HEAD commit: 4523a90c162a002998acd7d6510bd4bdea60b7e9
Vulnerabilities
*For some transitive vulnerabilities, there is no version of direct dependency with a fix. Check the "Details" section below to see if there is a version of transitive dependency where vulnerability is fixed.
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
Details
CVE-2021-24112
Vulnerable Library - system.drawing.common.5.0.0.nupkg
Provides access to GDI+ graphics functionality.
Commonly Used Types:
System.Drawing.Bitmap
System.D...
Library home page: https://api.nuget.org/packages/system.drawing.common.5.0.0.nupkg
Path to dependency file: /TheWheel.ETL.CyberArk/TheWheel.ETL.CyberArk.csproj
Path to vulnerable library: /home/wss-scanner/.nuget/packages/system.drawing.common/5.0.0/system.drawing.common.5.0.0.nupkg
Dependency Hierarchy:
Found in HEAD commit: 4523a90c162a002998acd7d6510bd4bdea60b7e9
Found in base branch: main
Vulnerability Details
.NET Core Remote Code Execution Vulnerability
Publish Date: 2021-02-25
URL: CVE-2021-24112
CVSS 3 Score Details (8.1)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: GHSA-rxg9-xrhp-64gj
Release Date: 2021-02-25
Fix Resolution: System.Drawing.Common - 4.7.2,5.0.3
Step up your Open Source Security Game with Mend here
The text was updated successfully, but these errors were encountered: