RKonduru685626 (Community Member) asked a question.
Microsoft .Azure.Services.AppAuthentication dll shows as very high vulnerability in veracode report which is not a direct added nuget being referenced by some other nuget(Microsoft.Azure.Servicebus)
We are using Azure Service bus nuget package which is internally adding a dependency App Authentication nuget package of version 1.0.3 which is showing as a vulnerability in the veracode report .Azure service bus is mandatory nuget for us without that we cannot complete our application, and very high vulnerability showing up how can we proceed further .Please let me know if you have more questions
.png){kind=logo}
Hello @RKonduru685626 (Community Member) ,
I would suggest mitigating mitigating those possible flaws using one of the mitigating factors and approved by the mitigation approver. For questions on certain flaws, it would be best to schedule a Consultation call with one of our ASC's to review in the full context of your application or open a support case to review the application but I would recommend the consultation first.
Jason
Veracode Support Engineer