Search code examples
c#securitypackagenuget

Scanning Multiple Nuget Package.config files for vunerabilities


I've a few c# MVC asp.NET projects and have gone through them all and updated a few of the packages to patch the security flaws raised in github through the package manager.

Whilst that's all well and good I'm looking for something 'quick and dirty' where I can supply a list of all my packages.config files and it tell me any that require patching as well as the project / path the package.config came from.

Is there anything out there that could do this?


Solution

  • I don't normally do this but with the options being quite limited I've created a small application that in effect does what I want. I've commited a version that can be found here. You need to down the files and create the console solution - however should all work. https://github.com/rhousham/NugetMeta/tree/main In affect you can pass in a file parameter that has a list of all of your packages.config and it will go and get any vunerabilities from the Nuget platform.

    The solution isn't great - however suits my needs.