Issues

Issues

• SCS0016: False positive on ApiController / ControllerBase

  security-code-scan/security-code-scan#298 · opened on Jul 3, 2024
  3

• .NET8 - No findings found

  security-code-scan/security-code-scan#296 · opened on May 28, 2024
  1

• Msbuild failed when processing the file --csproj file path -- with message: C:\Windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.WinFx.targets: (268, 9): Unknown build error, 'Object reference not set to an instance of an object.'

  security-code-scan/security-code-scan#294 · opened on Apr 25, 2024
  1

• Standalone runner not working in .NET 7 on Bitbucket pipelines

  security-code-scan/security-code-scan#291 · opened on Oct 31, 2023

• Security-scan4x.zip build fails due to Method not found: 'System.ReadOnlySpan1<Char> Microsoft.IO.Path.GetFileName(System.ReadOnlySpan1<Char>)

  security-code-scan/security-code-scan#290 · opened on Oct 30, 2023
  1

• New exceptions thrown for SCS extension after upgrading VS

  security-code-scan/security-code-scan#289 · opened on Sep 19, 2023
  2

• VS 17.6.2 many errors started to appear for Security Code Scan 5.6.7

  security-code-scan/security-code-scan#282 · opened on May 29, 2023
  3

• Analyzer 'SecurityCodeScan.Analyzers.XxeDiagnosticAnalyzerCSharp' threw an exception

  security-code-scan/security-code-scan#279 · opened on Mar 30, 2023

• SCS0012 after upgrading from net6.0 to net7.0

  security-code-scan/security-code-scan#277 · opened on Feb 17, 2023
  1

• security-scan /your/solution.sln throws up error.

  security-code-scan/security-code-scan#275 · opened on Dec 8, 2022
  5

• The analyzer fails to detect a vulnerability when an interface is used as declaring type

  security-code-scan/security-code-scan#270 · opened on Oct 27, 2022

• Scanning an intentionally vulnerable .NET 6 project with the stand-alone runner does not yield any detection results

  security-code-scan/security-code-scan#269 · opened on Oct 26, 2022
  11

• SCS0016 False positive for ODataController

  security-code-scan/security-code-scan#264 · opened on Oct 5, 2022

• Security Code Scan Standalone Tool throws Method not found: Microsoft.IO.Path.GetFileName(System.ReadOnlySpan`1)' with VS2022 17.3 MSBuild

  security-code-scan/security-code-scan#259 · opened on Aug 23, 2022
  4

• ReflectionTypeLoadException on startup

  security-code-scan/security-code-scan#251 · opened on Jun 24, 2022
  3

• False positive SCS0018 with DbContext inheritance

  security-code-scan/security-code-scan#250 · opened on Jun 23, 2022
  1

• Investigate if double scanning with SCS tool can be avoided

  security-code-scan/security-code-scan#221 · opened on Aug 5, 2021

• Insecure Cookie not reported with AppendCookie/SetCookie

  security-code-scan/security-code-scan#216 · opened on Jul 19, 2021

• Add new issues and customizable content without recompiling

  security-code-scan/security-code-scan#215 · opened on Jul 15, 2021

• Missing full documentation on YAML rules

  security-code-scan/security-code-scan#214 · opened on Jul 15, 2021

• CWE in SARIF

  security-code-scan/security-code-scan#194 · opened on Mar 21, 2021

• No SCS0029 (XSS) on return from an action

  security-code-scan/security-code-scan#190 · opened on Mar 3, 2021
  3

• [Improvement] Flag CORS misconfigurations

  security-code-scan/security-code-scan#189 · opened on Mar 3, 2021

• Superseded web.config files (a cause for false positives)

  security-code-scan/security-code-scan#170 · opened on Jun 2, 2020
  1

• Investigate if .Redirect should be always html escaped to prevent dom xss

  security-code-scan/security-code-scan#95 · opened on Nov 23, 2018