{
    "$schema": "https://schemastore.azurewebsites.net/schemas/json/sarif-2.1.0-rtm.6.json",
    "version": "2.1.0",
    "runs": [
        {
            "tool": {
                "driver": {
                    "name": "devskim",
                    "fullName": "Microsoft DevSkim Command Line Interface",
                    "version": "1.0.20+1e79b24a91",
                    "informationUri": "https://github.com/microsoft/DevSkim/",
                    "rules": [
                        {
                            "id": "DS144436",
                            "name": "DoNotUseOutdatedSsltlsProtocols",
                            "fullDescription": {
                                "text": "Do not use outdated SSL/TLS protocols: It's usually better to rely on the operating system configuration, rather than hardcoding a specific SecurityProtocolType."
                            },
                            "help": {
                                "text": "Either leave off or set to SecurityProtocolType.Tls12;",
                                "markdown": "Visit [https://github.com/Microsoft/DevSkim/blob/main/guidance/DS144436.md](https://github.com/Microsoft/DevSkim/blob/main/guidance/DS144436.md) for guidance on this issue."
                            },
                            "shortDescription": {
                                "text": "It's usually better to rely on the operating system configuration, rather than hardcoding a specific SecurityProtocolType."
                            },
                            "defaultConfiguration": {
                                "level": "error"
                            },
                            "helpUri": "https://github.com/Microsoft/DevSkim/blob/main/guidance/DS144436.md",
                            "properties": {
                                "DevSkimSeverity": "Important",
                                "DevSkimConfidence": "Unspecified"
                            },
                            "__uid": "fb823f1560b0",
                            "__guid": "d11622209ef3"
                        },
                        {
                            "id": "DS440020",
                            "name": "NetDoNotHardcodeSsltlsVersionsWithinAnApplication",
                            "fullDescription": {
                                "text": ".NET - Do not hardcode SSL/TLS versions within an application.: .NET- Do not hardcode SSL/TLS versions within an application."
                            },
                            "help": {
                                "text": ".NET- Do not hardcode SSL/TLS versions within an application.",
                                "markdown": "Visit [https://github.com/Microsoft/DevSkim/blob/main/guidance/DS440000.md](https://github.com/Microsoft/DevSkim/blob/main/guidance/DS440000.md) for guidance on this issue."
                            },
                            "shortDescription": {
                                "text": ".NET- Do not hardcode SSL/TLS versions within an application."
                            },
                            "defaultConfiguration": {
                                "level": "error"
                            },
                            "helpUri": "https://github.com/Microsoft/DevSkim/blob/main/guidance/DS440000.md",
                            "properties": {
                                "DevSkimSeverity": "Important",
                                "DevSkimConfidence": "Unspecified"
                            },
                            "__uid": "91dab2fb05a4",
                            "__guid": "588c61d1a743"
                        },
                        {
                            "id": "DS440001",
                            "name": "GenericHardcodedSsltlsProtocol",
                            "fullDescription": {
                                "text": "Generic: Hard-coded SSL/TLS Protocol: Generic: Hard-coded SSL/TLS Protocol"
                            },
                            "help": {
                                "text": "Review to ensure that a TLS protocol agility is maintained.",
                                "markdown": "Visit [https://github.com/Microsoft/DevSkim/blob/main/guidance/DS440001.md](https://github.com/Microsoft/DevSkim/blob/main/guidance/DS440001.md) for guidance on this issue."
                            },
                            "shortDescription": {
                                "text": "Generic: Hard-coded SSL/TLS Protocol"
                            },
                            "defaultConfiguration": {
                                "level": "note"
                            },
                            "helpUri": "https://github.com/Microsoft/DevSkim/blob/main/guidance/DS440001.md",
                            "properties": {
                                "DevSkimSeverity": "ManualReview",
                                "DevSkimConfidence": "Unspecified"
                            },
                            "__uid": "1e5fff194c38",
                            "__guid": "d3298c918c91"
                        },
                        {
                            "id": "DS173237",
                            "name": "DoNotStoreTokensOrKeysInSourceCode",
                            "fullDescription": {
                                "text": "Do not store tokens or keys in source code.: A token or key was found in source code. If this represents a secret, it should be moved somewhere else."
                            },
                            "help": {
                                "text": "A token or key was found in source code. If this represents a secret, it should be moved somewhere else.",
                                "markdown": "Visit [https://github.com/Microsoft/DevSkim/blob/main/guidance/DS173237.md](https://github.com/Microsoft/DevSkim/blob/main/guidance/DS173237.md) for guidance on this issue."
                            },
                            "shortDescription": {
                                "text": "A token or key was found in source code. If this represents a secret, it should be moved somewhere else."
                            },
                            "defaultConfiguration": {
                                "level": "error"
                            },
                            "helpUri": "https://github.com/Microsoft/DevSkim/blob/main/guidance/DS173237.md",
                            "properties": {
                                "DevSkimSeverity": "Important",
                                "DevSkimConfidence": "Unspecified"
                            },
                            "__uid": "14b736debb40",
                            "__guid": "4239e6ebf9be"
                        },
                        {
                            "id": "DS187371",
                            "name": "AWeakCipherModeOfOperationWasUsed",
                            "fullDescription": {
                                "text": "A weak cipher mode of operation was used: A potentially weak cipher mode of operation was used."
                            },
                            "help": {
                                "text": "Consider using CBC, CTR, or GCM.",
                                "markdown": "Visit [https://github.com/Microsoft/DevSkim/blob/main/guidance/DS187371.md](https://github.com/Microsoft/DevSkim/blob/main/guidance/DS187371.md) for guidance on this issue."
                            },
                            "shortDescription": {
                                "text": "A potentially weak cipher mode of operation was used."
                            },
                            "defaultConfiguration": {
                                "level": "error"
                            },
                            "helpUri": "https://github.com/Microsoft/DevSkim/blob/main/guidance/DS187371.md",
                            "properties": {
                                "DevSkimSeverity": "Important",
                                "DevSkimConfidence": "Unspecified"
                            },
                            "__uid": "9267d0a29a3e",
                            "__guid": "715bfbb05494"
                        },
                        {
                            "id": "DS168931",
                            "name": "DoNotUseBrokenweakCryptographicHashAlgorithms",
                            "fullDescription": {
                                "text": "Do not use broken/weak cryptographic hash algorithms: A potentially weak hashing algorithm was used."
                            },
                            "help": {
                                "text": "Use SHA-256 instead.",
                                "markdown": "Visit [https://github.com/Microsoft/DevSkim/blob/main/guidance/DS168931.md](https://github.com/Microsoft/DevSkim/blob/main/guidance/DS168931.md) for guidance on this issue."
                            },
                            "shortDescription": {
                                "text": "A potentially weak hashing algorithm was used."
                            },
                            "defaultConfiguration": {
                                "level": "error"
                            },
                            "helpUri": "https://github.com/Microsoft/DevSkim/blob/main/guidance/DS168931.md",
                            "properties": {
                                "DevSkimSeverity": "Critical",
                                "DevSkimConfidence": "Unspecified"
                            },
                            "__uid": "0a9c5238f3e3",
                            "__guid": "da05f083a268"
                        },
                        {
                            "id": "DS137138",
                            "name": "InsecureUrl",
                            "fullDescription": {
                                "text": "Insecure URL: An HTTP-based URL without TLS was detected."
                            },
                            "help": {
                                "text": "Update to an HTTPS-based URL if possible.",
                                "markdown": "Visit [https://github.com/Microsoft/DevSkim/blob/main/guidance/DS137138.md](https://github.com/Microsoft/DevSkim/blob/main/guidance/DS137138.md) for guidance on this issue."
                            },
                            "shortDescription": {
                                "text": "An HTTP-based URL without TLS was detected."
                            },
                            "helpUri": "https://github.com/Microsoft/DevSkim/blob/main/guidance/DS137138.md",
                            "properties": {
                                "DevSkimSeverity": "Moderate",
                                "DevSkimConfidence": "Unspecified"
                            },
                            "defaultConfiguration": {
                                "level": "warning"
                            },
                            "__uid": "4c8b8f2ff6e1",
                            "__guid": "1c44378f62cb"
                        },
                        {
                            "id": "DS112835",
                            "name": "NetHardcodedSsltlsProtocol",
                            "fullDescription": {
                                "text": ".NET - Hard-coded SSL/TLS Protocol: .NET - Hard-coded SSL/TLS Protocol"
                            },
                            "help": {
                                "text": "Review to ensure that a TLS protocol agility is maintained.",
                                "markdown": "Visit [https://github.com/Microsoft/DevSkim/blob/main/guidance/DS112835.md](https://github.com/Microsoft/DevSkim/blob/main/guidance/DS112835.md) for guidance on this issue."
                            },
                            "shortDescription": {
                                "text": ".NET - Hard-coded SSL/TLS Protocol"
                            },
                            "defaultConfiguration": {
                                "level": "note"
                            },
                            "helpUri": "https://github.com/Microsoft/DevSkim/blob/main/guidance/DS112835.md",
                            "properties": {
                                "DevSkimSeverity": "ManualReview",
                                "DevSkimConfidence": "Unspecified"
                            },
                            "__uid": "03769458d9b2",
                            "__guid": "7f646b251962"
                        },
                        {
                            "id": "DS154189",
                            "name": "BannedCFunctionDetected",
                            "fullDescription": {
                                "text": "Banned C function detected: These functions are historically error-prone and have been associated with a significant number of vulnerabilities. Most of these functions have safer alternatives, such as replacing 'strcpy' with 'strlcpy' or 'strcpy_s'."
                            },
                            "help": {
                                "text": "These functions are historically error-prone and have been associated with a significant number of vulnerabilities. Most of these functions have safer alternatives, such as replacing 'strcpy' with 'strlcpy' or 'strcpy_s'.",
                                "markdown": "Visit [https://github.com/Microsoft/DevSkim/blob/main/guidance/DS154189.md](https://github.com/Microsoft/DevSkim/blob/main/guidance/DS154189.md) for guidance on this issue."
                            },
                            "shortDescription": {
                                "text": "These functions are historically error-prone and have been associated with a significant number of vulnerabilities. Most of these functions have safer alternatives, such as replacing 'strcpy' with 'strlcpy' or 'strcpy_s'."
                            },
                            "helpUri": "https://github.com/Microsoft/DevSkim/blob/main/guidance/DS154189.md",
                            "properties": {
                                "DevSkimSeverity": "Moderate",
                                "DevSkimConfidence": "Unspecified"
                            },
                            "defaultConfiguration": {
                                "level": "warning"
                            },
                            "__uid": "20f1c303e1d1",
                            "__guid": "f493c6b87ead"
                        },
                        {
                            "id": "DS126858",
                            "name": "WeakbrokenHashAlgorithm",
                            "fullDescription": {
                                "text": "Weak/Broken Hash Algorithm: A weak or broken hash algorithm was detected."
                            },
                            "help": {
                                "text": "Consider switching to use SHA-256 or SHA-512 instead.",
                                "markdown": "Visit [https://github.com/Microsoft/DevSkim/blob/main/guidance/DS126858.md](https://github.com/Microsoft/DevSkim/blob/main/guidance/DS126858.md) for guidance on this issue."
                            },
                            "shortDescription": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "defaultConfiguration": {
                                "level": "error"
                            },
                            "helpUri": "https://github.com/Microsoft/DevSkim/blob/main/guidance/DS126858.md",
                            "properties": {
                                "DevSkimSeverity": "Critical",
                                "DevSkimConfidence": "Unspecified"
                            },
                            "__uid": "ecedbab77917",
                            "__guid": "e131f2b65c08"
                        },
                        {
                            "id": "DS148264",
                            "name": "DoNotUseWeaknoncryptographicRandomNumberGenerators",
                            "fullDescription": {
                                "text": "Do not use weak/non-cryptographic random number generators: Use cryptographic random numbers generators for anything even close to a security function."
                            },
                            "help": {
                                "text": "Replacements depend on language.",
                                "markdown": "Visit [https://github.com/Microsoft/DevSkim/blob/main/guidance/DS148264.md](https://github.com/Microsoft/DevSkim/blob/main/guidance/DS148264.md) for guidance on this issue."
                            },
                            "shortDescription": {
                                "text": "Use cryptographic random numbers generators for anything even close to a security function."
                            },
                            "defaultConfiguration": {
                                "level": "error"
                            },
                            "helpUri": "https://github.com/Microsoft/DevSkim/blob/main/guidance/DS148264.md",
                            "properties": {
                                "DevSkimSeverity": "Important",
                                "DevSkimConfidence": "Unspecified"
                            },
                            "__uid": "a50527ebaef3",
                            "__guid": "a9fbe198ec9d"
                        }
                    ]
                }
            },
            "results": [
                {
                    "ruleId": "DS137138",
                    "message": {
                        "text": "Insecure URL"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePass/DataExchange/Formats/LastPassCsv2.cs"
                                },
                                "region": {
                                    "startLine": 76,
                                    "startColumn": 23,
                                    "endLine": 76,
                                    "endColumn": 32,
                                    "charOffset": 2683,
                                    "charLength": 9,
                                    "snippet": {
                                        "text": "http://sn",
                                        "rendered": {
                                            "text": "http://sn",
                                            "markdown": "`http://sn`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "An HTTP-based URL without TLS was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/DataExchange/Formats/LastPassCsv2.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 2683,
                                                "charLength": 9
                                            },
                                            "insertedContent": {
                                                "text": "https://sn"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "ThreatModel.Integration.HTTP"
                        ],
                        "DevSkimSeverity": "Moderate",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "level": "warning",
                    "__guid": "6498cacb2460"
                },
                {
                    "ruleId": "DS126858",
                    "level": "error",
                    "message": {
                        "text": "Weak/Broken Hash Algorithm"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePass/Forms/OtpGeneratorForm.cs"
                                },
                                "region": {
                                    "startLine": 56,
                                    "startColumn": 18,
                                    "endLine": 56,
                                    "endColumn": 22,
                                    "charOffset": 1972,
                                    "charLength": 4,
                                    "snippet": {
                                        "text": "Sha1",
                                        "rendered": {
                                            "text": "Sha1",
                                            "markdown": "`Sha1`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [],
                    "properties": {
                        "tags": [
                            "Cryptography.BannedHashAlgorithm"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "1681f7d21806"
                },
                {
                    "ruleId": "DS137138",
                    "message": {
                        "text": "Insecure URL"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePass/DataExchange/Formats/KeePassHtml2x.cs"
                                },
                                "region": {
                                    "startLine": 79,
                                    "startColumn": 28,
                                    "endLine": 79,
                                    "endColumn": 45,
                                    "charOffset": 2507,
                                    "charLength": 17,
                                    "snippet": {
                                        "text": "http://www.w3.org",
                                        "rendered": {
                                            "text": "http://www.w3.org",
                                            "markdown": "`http://www.w3.org`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "An HTTP-based URL without TLS was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/DataExchange/Formats/KeePassHtml2x.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 2507,
                                                "charLength": 17
                                            },
                                            "insertedContent": {
                                                "text": "https://www.w3.org"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "ThreatModel.Integration.HTTP"
                        ],
                        "DevSkimSeverity": "Moderate",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "level": "warning",
                    "__guid": "b1e5ce27886b"
                },
                {
                    "ruleId": "DS173237",
                    "level": "error",
                    "message": {
                        "text": "Do not store tokens or keys in source code."
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePass/Ecas/EcasDefaultConditionProvider.cs"
                                },
                                "region": {
                                    "startLine": 139,
                                    "startColumn": 28,
                                    "endLine": 139,
                                    "endColumn": 62,
                                    "charOffset": 5327,
                                    "charLength": 34,
                                    "snippet": {
                                        "text": "\"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"",
                                        "rendered": {
                                            "text": "\"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"",
                                            "markdown": "`\"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Implementation.Privacy.Token"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "f0622401a54e"
                },
                {
                    "ruleId": "DS126858",
                    "level": "error",
                    "message": {
                        "text": "Weak/Broken Hash Algorithm"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePass/Util/IpcBroadcast.cs"
                                },
                                "region": {
                                    "startLine": 96,
                                    "startColumn": 29,
                                    "endLine": 96,
                                    "endColumn": 33,
                                    "charOffset": 3135,
                                    "charLength": 4,
                                    "snippet": {
                                        "text": "SHA1",
                                        "rendered": {
                                            "text": "SHA1",
                                            "markdown": "`SHA1`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Util/IpcBroadcast.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 3135,
                                                "charLength": 4
                                            },
                                            "insertedContent": {
                                                "text": "SHA256"
                                            }
                                        }
                                    ]
                                }
                            ]
                        },
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Util/IpcBroadcast.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 3135,
                                                "charLength": 4
                                            },
                                            "insertedContent": {
                                                "text": "SHA512"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.BannedHashAlgorithm"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "64a375497435"
                },
                {
                    "ruleId": "DS126858",
                    "level": "error",
                    "message": {
                        "text": "Weak/Broken Hash Algorithm"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePass/Util/IpcBroadcast.cs"
                                },
                                "region": {
                                    "startLine": 96,
                                    "startColumn": 9,
                                    "endLine": 96,
                                    "endColumn": 13,
                                    "charOffset": 3115,
                                    "charLength": 4,
                                    "snippet": {
                                        "text": "SHA1",
                                        "rendered": {
                                            "text": "SHA1",
                                            "markdown": "`SHA1`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Util/IpcBroadcast.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 3115,
                                                "charLength": 4
                                            },
                                            "insertedContent": {
                                                "text": "SHA256"
                                            }
                                        }
                                    ]
                                }
                            ]
                        },
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Util/IpcBroadcast.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 3115,
                                                "charLength": 4
                                            },
                                            "insertedContent": {
                                                "text": "SHA512"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.BannedHashAlgorithm"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "c78f0c664bab"
                },
                {
                    "ruleId": "DS126858",
                    "level": "error",
                    "message": {
                        "text": "Weak/Broken Hash Algorithm"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePass/Util/EntryUtil.cs"
                                },
                                "region": {
                                    "startLine": 556,
                                    "startColumn": 29,
                                    "endLine": 556,
                                    "endColumn": 33,
                                    "charOffset": 17610,
                                    "charLength": 4,
                                    "snippet": {
                                        "text": "Sha1",
                                        "rendered": {
                                            "text": "Sha1",
                                            "markdown": "`Sha1`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [],
                    "properties": {
                        "tags": [
                            "Cryptography.BannedHashAlgorithm"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "388864900e27"
                },
                {
                    "ruleId": "DS126858",
                    "level": "error",
                    "message": {
                        "text": "Weak/Broken Hash Algorithm"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePass/Util/EntryUtil.cs"
                                },
                                "region": {
                                    "startLine": 556,
                                    "startColumn": 7,
                                    "endLine": 556,
                                    "endColumn": 11,
                                    "charOffset": 17588,
                                    "charLength": 4,
                                    "snippet": {
                                        "text": "SHA1",
                                        "rendered": {
                                            "text": "SHA1",
                                            "markdown": "`SHA1`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Util/EntryUtil.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 17588,
                                                "charLength": 4
                                            },
                                            "insertedContent": {
                                                "text": "SHA256"
                                            }
                                        }
                                    ]
                                }
                            ]
                        },
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Util/EntryUtil.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 17588,
                                                "charLength": 4
                                            },
                                            "insertedContent": {
                                                "text": "SHA512"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.BannedHashAlgorithm"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "0e6d3552312c"
                },
                {
                    "ruleId": "DS187371",
                    "level": "error",
                    "message": {
                        "text": "A weak cipher mode of operation was used"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/KeyDerivation/AesKdf.cs"
                                },
                                "region": {
                                    "startLine": 236,
                                    "startColumn": 24,
                                    "endLine": 236,
                                    "endColumn": 27,
                                    "charOffset": 6626,
                                    "charLength": 3,
                                    "snippet": {
                                        "text": "ECB",
                                        "rendered": {
                                            "text": "ECB",
                                            "markdown": "`ECB`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.Symmetric.CipherMode.Weak"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "9f3d1a3481e6"
                },
                {
                    "ruleId": "DS187371",
                    "level": "error",
                    "message": {
                        "text": "A weak cipher mode of operation was used"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/KeyDerivation/AesKdf.cs"
                                },
                                "region": {
                                    "startLine": 171,
                                    "startColumn": 24,
                                    "endLine": 171,
                                    "endColumn": 27,
                                    "charOffset": 5103,
                                    "charLength": 3,
                                    "snippet": {
                                        "text": "ECB",
                                        "rendered": {
                                            "text": "ECB",
                                            "markdown": "`ECB`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.Symmetric.CipherMode.Weak"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "8a6874f4526e"
                },
                {
                    "ruleId": "DS126858",
                    "level": "error",
                    "message": {
                        "text": "Weak/Broken Hash Algorithm"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                },
                                "region": {
                                    "startLine": 345,
                                    "startColumn": 58,
                                    "endLine": 345,
                                    "endColumn": 61,
                                    "charOffset": 11023,
                                    "charLength": 3,
                                    "snippet": {
                                        "text": "MD5",
                                        "rendered": {
                                            "text": "MD5",
                                            "markdown": "`MD5`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 11023,
                                                "charLength": 3
                                            },
                                            "insertedContent": {
                                                "text": "SHA256"
                                            }
                                        }
                                    ]
                                }
                            ]
                        },
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 11023,
                                                "charLength": 3
                                            },
                                            "insertedContent": {
                                                "text": "SHA512"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.BannedHashAlgorithm"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "79d52db3ab5f"
                },
                {
                    "ruleId": "DS126858",
                    "level": "error",
                    "message": {
                        "text": "Weak/Broken Hash Algorithm"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                },
                                "region": {
                                    "startLine": 344,
                                    "startColumn": 21,
                                    "endLine": 344,
                                    "endColumn": 24,
                                    "charOffset": 10931,
                                    "charLength": 3,
                                    "snippet": {
                                        "text": "md5",
                                        "rendered": {
                                            "text": "md5",
                                            "markdown": "`md5`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 10931,
                                                "charLength": 3
                                            },
                                            "insertedContent": {
                                                "text": "sha512"
                                            }
                                        }
                                    ]
                                }
                            ]
                        },
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 10931,
                                                "charLength": 3
                                            },
                                            "insertedContent": {
                                                "text": "sha256"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.BannedHashAlgorithm"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "e4a5933e0ecf"
                },
                {
                    "ruleId": "DS440020",
                    "level": "error",
                    "message": {
                        "text": ".NET - Do not hardcode SSL/TLS versions within an application."
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Serialization/IOConnection.cs"
                                },
                                "region": {
                                    "startLine": 524,
                                    "startColumn": 14,
                                    "endLine": 524,
                                    "endColumn": 34,
                                    "charOffset": 13674,
                                    "charLength": 20,
                                    "snippet": {
                                        "text": "SecurityProtocolType",
                                        "rendered": {
                                            "text": "SecurityProtocolType",
                                            "markdown": "`SecurityProtocolType`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.Protocol.TLS.Hardcoded"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "a5731e89b9d8"
                },
                {
                    "ruleId": "DS440001",
                    "level": "note",
                    "message": {
                        "text": "Generic: Hard-coded SSL/TLS Protocol"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Serialization/IOConnection.cs"
                                },
                                "region": {
                                    "startLine": 523,
                                    "startColumn": 21,
                                    "endLine": 523,
                                    "endColumn": 26,
                                    "charOffset": 13627,
                                    "charLength": 5,
                                    "snippet": {
                                        "text": "Tls13",
                                        "rendered": {
                                            "text": "Tls13",
                                            "markdown": "`Tls13`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.Protocol.TLS.Hard-Coded"
                        ],
                        "DevSkimSeverity": "ManualReview",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "0ba95ca68e0f"
                },
                {
                    "ruleId": "DS126858",
                    "level": "error",
                    "message": {
                        "text": "Weak/Broken Hash Algorithm"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                },
                                "region": {
                                    "startLine": 344,
                                    "startColumn": 15,
                                    "endLine": 344,
                                    "endColumn": 18,
                                    "charOffset": 10925,
                                    "charLength": 3,
                                    "snippet": {
                                        "text": "MD5",
                                        "rendered": {
                                            "text": "MD5",
                                            "markdown": "`MD5`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 10925,
                                                "charLength": 3
                                            },
                                            "insertedContent": {
                                                "text": "SHA256"
                                            }
                                        }
                                    ]
                                }
                            ]
                        },
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 10925,
                                                "charLength": 3
                                            },
                                            "insertedContent": {
                                                "text": "SHA512"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.BannedHashAlgorithm"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "62c6f7eaa068"
                },
                {
                    "ruleId": "DS440001",
                    "level": "note",
                    "message": {
                        "text": "Generic: Hard-coded SSL/TLS Protocol"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Serialization/IOConnection.cs"
                                },
                                "region": {
                                    "startLine": 522,
                                    "startColumn": 21,
                                    "endLine": 522,
                                    "endColumn": 26,
                                    "charOffset": 13571,
                                    "charLength": 5,
                                    "snippet": {
                                        "text": "Tls12",
                                        "rendered": {
                                            "text": "Tls12",
                                            "markdown": "`Tls12`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.Protocol.TLS.Hard-Coded"
                        ],
                        "DevSkimSeverity": "ManualReview",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "443cd157eafc"
                },
                {
                    "ruleId": "DS440001",
                    "level": "note",
                    "message": {
                        "text": "Generic: Hard-coded SSL/TLS Protocol"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Serialization/IOConnection.cs"
                                },
                                "region": {
                                    "startLine": 521,
                                    "startColumn": 23,
                                    "endLine": 521,
                                    "endColumn": 28,
                                    "charOffset": 13515,
                                    "charLength": 5,
                                    "snippet": {
                                        "text": "Tls11",
                                        "rendered": {
                                            "text": "Tls11",
                                            "markdown": "`Tls11`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.Protocol.TLS.Hard-Coded"
                        ],
                        "DevSkimSeverity": "ManualReview",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "7de2ac0713cc"
                },
                {
                    "ruleId": "DS440020",
                    "level": "error",
                    "message": {
                        "text": ".NET - Do not hardcode SSL/TLS versions within an application."
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Serialization/IOConnection.cs"
                                },
                                "region": {
                                    "startLine": 517,
                                    "startColumn": 23,
                                    "endLine": 517,
                                    "endColumn": 43,
                                    "charOffset": 13383,
                                    "charLength": 20,
                                    "snippet": {
                                        "text": "SecurityProtocolType",
                                        "rendered": {
                                            "text": "SecurityProtocolType",
                                            "markdown": "`SecurityProtocolType`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.Protocol.TLS.Hardcoded"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "a516460db6ee"
                },
                {
                    "ruleId": "DS440020",
                    "level": "error",
                    "message": {
                        "text": ".NET - Do not hardcode SSL/TLS versions within an application."
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Serialization/IOConnection.cs"
                                },
                                "region": {
                                    "startLine": 512,
                                    "startColumn": 5,
                                    "endLine": 512,
                                    "endColumn": 25,
                                    "charOffset": 13129,
                                    "charLength": 20,
                                    "snippet": {
                                        "text": "SecurityProtocolType",
                                        "rendered": {
                                            "text": "SecurityProtocolType",
                                            "markdown": "`SecurityProtocolType`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.Protocol.TLS.Hardcoded"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "d6dda01d99fc"
                },
                {
                    "ruleId": "DS144436",
                    "level": "error",
                    "message": {
                        "text": "Do not use outdated SSL/TLS protocols"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Serialization/IOConnection.cs"
                                },
                                "region": {
                                    "startLine": 512,
                                    "startColumn": 5,
                                    "endLine": 512,
                                    "endColumn": 29,
                                    "charOffset": 13129,
                                    "charLength": 24,
                                    "snippet": {
                                        "text": "SecurityProtocolType.Tls",
                                        "rendered": {
                                            "text": "SecurityProtocolType.Tls",
                                            "markdown": "`SecurityProtocolType.Tls`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "It's usually better to rely on the operating system configuration, rather than hardcoding a specific SecurityProtocolType."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePassLib/Serialization/IOConnection.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 13129,
                                                "charLength": 24
                                            },
                                            "insertedContent": {
                                                "text": "SecurityProtocolType.Tls12"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.Protocol.TLS"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "e196e453e377"
                },
                {
                    "ruleId": "DS112835",
                    "level": "note",
                    "message": {
                        "text": ".NET - Hard-coded SSL/TLS Protocol"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Serialization/IOConnection.cs"
                                },
                                "region": {
                                    "startLine": 512,
                                    "startColumn": 5,
                                    "endLine": 512,
                                    "endColumn": 29,
                                    "charOffset": 13129,
                                    "charLength": 24,
                                    "snippet": {
                                        "text": "SecurityProtocolType.Tls",
                                        "rendered": {
                                            "text": "SecurityProtocolType.Tls",
                                            "markdown": "`SecurityProtocolType.Tls`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.Protocol.TLS.Hard-Coded"
                        ],
                        "DevSkimSeverity": "ManualReview",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "58ceca01b098"
                },
                {
                    "ruleId": "DS168931",
                    "level": "error",
                    "message": {
                        "text": "Do not use broken/weak cryptographic hash algorithms"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                },
                                "region": {
                                    "startLine": 342,
                                    "startColumn": 46,
                                    "endLine": 342,
                                    "endColumn": 70,
                                    "charOffset": 10873,
                                    "charLength": 24,
                                    "snippet": {
                                        "text": "MD5CryptoServiceProvider",
                                        "rendered": {
                                            "text": "MD5CryptoServiceProvider",
                                            "markdown": "`MD5CryptoServiceProvider`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "A potentially weak hashing algorithm was used."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 10873,
                                                "charLength": 24
                                            },
                                            "insertedContent": {
                                                "text": "SHA256CryptoServiceProvider"
                                            }
                                        }
                                    ]
                                }
                            ]
                        },
                        {
                            "description": {
                                "text": "A potentially weak hashing algorithm was used."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 10873,
                                                "charLength": 24
                                            },
                                            "insertedContent": {
                                                "text": "SHA512CryptoServiceProvider"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.HashAlgorithm.BrokenOrWeak"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "18c18084fb79"
                },
                {
                    "ruleId": "DS440020",
                    "level": "error",
                    "message": {
                        "text": ".NET - Do not hardcode SSL/TLS versions within an application."
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Serialization/IOConnection.cs"
                                },
                                "region": {
                                    "startLine": 511,
                                    "startColumn": 32,
                                    "endLine": 511,
                                    "endColumn": 52,
                                    "charOffset": 13095,
                                    "charLength": 20,
                                    "snippet": {
                                        "text": "SecurityProtocolType",
                                        "rendered": {
                                            "text": "SecurityProtocolType",
                                            "markdown": "`SecurityProtocolType`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.Protocol.TLS.Hardcoded"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "0332b7b502f2"
                },
                {
                    "ruleId": "DS144436",
                    "level": "error",
                    "message": {
                        "text": "Do not use outdated SSL/TLS protocols"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Serialization/IOConnection.cs"
                                },
                                "region": {
                                    "startLine": 511,
                                    "startColumn": 32,
                                    "endLine": 511,
                                    "endColumn": 57,
                                    "charOffset": 13095,
                                    "charLength": 25,
                                    "snippet": {
                                        "text": "SecurityProtocolType.Ssl3",
                                        "rendered": {
                                            "text": "SecurityProtocolType.Ssl3",
                                            "markdown": "`SecurityProtocolType.Ssl3`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "It's usually better to rely on the operating system configuration, rather than hardcoding a specific SecurityProtocolType."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePassLib/Serialization/IOConnection.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 13095,
                                                "charLength": 25
                                            },
                                            "insertedContent": {
                                                "text": "SecurityProtocolType.Tls12"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.Protocol.TLS"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "e7736804ce17"
                },
                {
                    "ruleId": "DS126858",
                    "level": "error",
                    "message": {
                        "text": "Weak/Broken Hash Algorithm"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                },
                                "region": {
                                    "startLine": 342,
                                    "startColumn": 36,
                                    "endLine": 342,
                                    "endColumn": 39,
                                    "charOffset": 10863,
                                    "charLength": 3,
                                    "snippet": {
                                        "text": "md5",
                                        "rendered": {
                                            "text": "md5",
                                            "markdown": "`md5`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 10863,
                                                "charLength": 3
                                            },
                                            "insertedContent": {
                                                "text": "sha512"
                                            }
                                        }
                                    ]
                                }
                            ]
                        },
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 10863,
                                                "charLength": 3
                                            },
                                            "insertedContent": {
                                                "text": "sha256"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.BannedHashAlgorithm"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "30141456f5a6"
                },
                {
                    "ruleId": "DS112835",
                    "level": "note",
                    "message": {
                        "text": ".NET - Hard-coded SSL/TLS Protocol"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Serialization/IOConnection.cs"
                                },
                                "region": {
                                    "startLine": 511,
                                    "startColumn": 32,
                                    "endLine": 511,
                                    "endColumn": 57,
                                    "charOffset": 13095,
                                    "charLength": 25,
                                    "snippet": {
                                        "text": "SecurityProtocolType.Ssl3",
                                        "rendered": {
                                            "text": "SecurityProtocolType.Ssl3",
                                            "markdown": "`SecurityProtocolType.Ssl3`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.Protocol.TLS.Hard-Coded"
                        ],
                        "DevSkimSeverity": "ManualReview",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "0ea84d7eb91b"
                },
                {
                    "ruleId": "DS440020",
                    "level": "error",
                    "message": {
                        "text": ".NET - Do not hardcode SSL/TLS versions within an application."
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Serialization/IOConnection.cs"
                                },
                                "region": {
                                    "startLine": 511,
                                    "startColumn": 4,
                                    "endLine": 511,
                                    "endColumn": 24,
                                    "charOffset": 13067,
                                    "charLength": 20,
                                    "snippet": {
                                        "text": "SecurityProtocolType",
                                        "rendered": {
                                            "text": "SecurityProtocolType",
                                            "markdown": "`SecurityProtocolType`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.Protocol.TLS.Hardcoded"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "3336827d77b4"
                },
                {
                    "ruleId": "DS168931",
                    "level": "error",
                    "message": {
                        "text": "Do not use broken/weak cryptographic hash algorithms"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                },
                                "region": {
                                    "startLine": 342,
                                    "startColumn": 11,
                                    "endLine": 342,
                                    "endColumn": 35,
                                    "charOffset": 10838,
                                    "charLength": 24,
                                    "snippet": {
                                        "text": "MD5CryptoServiceProvider",
                                        "rendered": {
                                            "text": "MD5CryptoServiceProvider",
                                            "markdown": "`MD5CryptoServiceProvider`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "A potentially weak hashing algorithm was used."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 10838,
                                                "charLength": 24
                                            },
                                            "insertedContent": {
                                                "text": "SHA256CryptoServiceProvider"
                                            }
                                        }
                                    ]
                                }
                            ]
                        },
                        {
                            "description": {
                                "text": "A potentially weak hashing algorithm was used."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/Plugins/PlgxPlugin.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 10838,
                                                "charLength": 24
                                            },
                                            "insertedContent": {
                                                "text": "SHA512CryptoServiceProvider"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.HashAlgorithm.BrokenOrWeak"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "e75bee4bfa1e"
                },
                {
                    "ruleId": "DS137138",
                    "message": {
                        "text": "Insecure URL"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Utility/XmlUtilEx.cs"
                                },
                                "region": {
                                    "startLine": 160,
                                    "startColumn": 37,
                                    "endLine": 160,
                                    "endColumn": 54,
                                    "charOffset": 4837,
                                    "charLength": 17,
                                    "snippet": {
                                        "text": "http://www.w3.org",
                                        "rendered": {
                                            "text": "http://www.w3.org",
                                            "markdown": "`http://www.w3.org`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "An HTTP-based URL without TLS was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePassLib/Utility/XmlUtilEx.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 4837,
                                                "charLength": 17
                                            },
                                            "insertedContent": {
                                                "text": "https://www.w3.org"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "ThreatModel.Integration.HTTP"
                        ],
                        "DevSkimSeverity": "Moderate",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "level": "warning",
                    "__guid": "5c6e7e453ac7"
                },
                {
                    "ruleId": "DS137138",
                    "message": {
                        "text": "Insecure URL"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Utility/XmlUtilEx.cs"
                                },
                                "region": {
                                    "startLine": 156,
                                    "startColumn": 37,
                                    "endLine": 156,
                                    "endColumn": 54,
                                    "charOffset": 4645,
                                    "charLength": 17,
                                    "snippet": {
                                        "text": "http://www.w3.org",
                                        "rendered": {
                                            "text": "http://www.w3.org",
                                            "markdown": "`http://www.w3.org`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "An HTTP-based URL without TLS was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePassLib/Utility/XmlUtilEx.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 4645,
                                                "charLength": 17
                                            },
                                            "insertedContent": {
                                                "text": "https://www.w3.org"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "ThreatModel.Integration.HTTP"
                        ],
                        "DevSkimSeverity": "Moderate",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "level": "warning",
                    "__guid": "050a8415d79d"
                },
                {
                    "ruleId": "DS173237",
                    "level": "error",
                    "message": {
                        "text": "Do not store tokens or keys in source code."
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/SelfTest.cs"
                                },
                                "region": {
                                    "startLine": 915,
                                    "startColumn": 4,
                                    "endLine": 915,
                                    "endColumn": 38,
                                    "charOffset": 30026,
                                    "charLength": 34,
                                    "snippet": {
                                        "text": "\"39303132333435363738393031323334\"",
                                        "rendered": {
                                            "text": "\"39303132333435363738393031323334\"",
                                            "markdown": "`\"39303132333435363738393031323334\"`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Implementation.Privacy.Token"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "963fb424ff40"
                },
                {
                    "ruleId": "DS173237",
                    "level": "error",
                    "message": {
                        "text": "Do not store tokens or keys in source code."
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/SelfTest.cs"
                                },
                                "region": {
                                    "startLine": 914,
                                    "startColumn": 4,
                                    "endLine": 914,
                                    "endColumn": 70,
                                    "charOffset": 29952,
                                    "charLength": 66,
                                    "snippet": {
                                        "text": "\"3738393031323334353637383930313233343536373839303132333435363738\"",
                                        "rendered": {
                                            "text": "\"3738393031323334353637383930313233343536373839303132333435363738\"",
                                            "markdown": "`\"3738393031323334353637383930313233343536373839303132333435363738\"`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Implementation.Privacy.Token"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "8e958cafc477"
                },
                {
                    "ruleId": "DS173237",
                    "level": "error",
                    "message": {
                        "text": "Do not store tokens or keys in source code."
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/SelfTest.cs"
                                },
                                "region": {
                                    "startLine": 913,
                                    "startColumn": 43,
                                    "endLine": 913,
                                    "endColumn": 77,
                                    "charOffset": 29910,
                                    "charLength": 34,
                                    "snippet": {
                                        "text": "\"31323334353637383930313233343536\"",
                                        "rendered": {
                                            "text": "\"31323334353637383930313233343536\"",
                                            "markdown": "`\"31323334353637383930313233343536\"`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Implementation.Privacy.Token"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "6f8c9057d213"
                },
                {
                    "ruleId": "DS173237",
                    "level": "error",
                    "message": {
                        "text": "Do not store tokens or keys in source code."
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/SelfTest.cs"
                                },
                                "region": {
                                    "startLine": 903,
                                    "startColumn": 4,
                                    "endLine": 903,
                                    "endColumn": 38,
                                    "charOffset": 29417,
                                    "charLength": 34,
                                    "snippet": {
                                        "text": "\"37383930313233343536373839303132\"",
                                        "rendered": {
                                            "text": "\"37383930313233343536373839303132\"",
                                            "markdown": "`\"37383930313233343536373839303132\"`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Implementation.Privacy.Token"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "c0a63e78af1d"
                },
                {
                    "ruleId": "DS173237",
                    "level": "error",
                    "message": {
                        "text": "Do not store tokens or keys in source code."
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/SelfTest.cs"
                                },
                                "region": {
                                    "startLine": 902,
                                    "startColumn": 43,
                                    "endLine": 902,
                                    "endColumn": 77,
                                    "charOffset": 29375,
                                    "charLength": 34,
                                    "snippet": {
                                        "text": "\"31323334353637383930313233343536\"",
                                        "rendered": {
                                            "text": "\"31323334353637383930313233343536\"",
                                            "markdown": "`\"31323334353637383930313233343536\"`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Implementation.Privacy.Token"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "0f25d48a61c1"
                },
                {
                    "ruleId": "DS126858",
                    "level": "error",
                    "message": {
                        "text": "Weak/Broken Hash Algorithm"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/SelfTest.cs"
                                },
                                "region": {
                                    "startLine": 900,
                                    "startColumn": 41,
                                    "endLine": 900,
                                    "endColumn": 45,
                                    "charOffset": 29319,
                                    "charLength": 4,
                                    "snippet": {
                                        "text": "SHA1",
                                        "rendered": {
                                            "text": "SHA1",
                                            "markdown": "`SHA1`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePassLib/Cryptography/SelfTest.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 29319,
                                                "charLength": 4
                                            },
                                            "insertedContent": {
                                                "text": "SHA256"
                                            }
                                        }
                                    ]
                                }
                            ]
                        },
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePassLib/Cryptography/SelfTest.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 29319,
                                                "charLength": 4
                                            },
                                            "insertedContent": {
                                                "text": "SHA512"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.BannedHashAlgorithm"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "527dd3f8f9e0"
                },
                {
                    "ruleId": "DS126858",
                    "level": "error",
                    "message": {
                        "text": "Weak/Broken Hash Algorithm"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/SelfTest.cs"
                                },
                                "region": {
                                    "startLine": 896,
                                    "startColumn": 41,
                                    "endLine": 896,
                                    "endColumn": 45,
                                    "charOffset": 29123,
                                    "charLength": 4,
                                    "snippet": {
                                        "text": "SHA1",
                                        "rendered": {
                                            "text": "SHA1",
                                            "markdown": "`SHA1`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePassLib/Cryptography/SelfTest.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 29123,
                                                "charLength": 4
                                            },
                                            "insertedContent": {
                                                "text": "SHA256"
                                            }
                                        }
                                    ]
                                }
                            ]
                        },
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePassLib/Cryptography/SelfTest.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 29123,
                                                "charLength": 4
                                            },
                                            "insertedContent": {
                                                "text": "SHA512"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.BannedHashAlgorithm"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "06160ebff9a3"
                },
                {
                    "ruleId": "DS173237",
                    "level": "error",
                    "message": {
                        "text": "Do not store tokens or keys in source code."
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/SelfTest.cs"
                                },
                                "region": {
                                    "startLine": 892,
                                    "startColumn": 43,
                                    "endLine": 892,
                                    "endColumn": 85,
                                    "charOffset": 28896,
                                    "charLength": 42,
                                    "snippet": {
                                        "text": "\"3132333435363738393031323334353637383930\"",
                                        "rendered": {
                                            "text": "\"3132333435363738393031323334353637383930\"",
                                            "markdown": "`\"3132333435363738393031323334353637383930\"`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Implementation.Privacy.Token"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "11e859731ace"
                },
                {
                    "ruleId": "DS187371",
                    "level": "error",
                    "message": {
                        "text": "A weak cipher mode of operation was used"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/SelfTest.cs"
                                },
                                "region": {
                                    "startLine": 152,
                                    "startColumn": 24,
                                    "endLine": 152,
                                    "endColumn": 27,
                                    "charOffset": 4316,
                                    "charLength": 3,
                                    "snippet": {
                                        "text": "ECB",
                                        "rendered": {
                                            "text": "ECB",
                                            "markdown": "`ECB`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.Symmetric.CipherMode.Weak"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "b2db70d65dc3"
                },
                {
                    "ruleId": "DS187371",
                    "level": "error",
                    "message": {
                        "text": "A weak cipher mode of operation was used"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/SelfTest.cs"
                                },
                                "region": {
                                    "startLine": 127,
                                    "startColumn": 28,
                                    "endLine": 127,
                                    "endColumn": 31,
                                    "charOffset": 3549,
                                    "charLength": 3,
                                    "snippet": {
                                        "text": "ECB",
                                        "rendered": {
                                            "text": "ECB",
                                            "markdown": "`ECB`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.Symmetric.CipherMode.Weak"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "b84465b31404"
                },
                {
                    "ruleId": "DS137138",
                    "message": {
                        "text": "Insecure URL"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePass/App/Configuration/AppConfigEx.cs"
                                },
                                "region": {
                                    "startLine": 746,
                                    "startColumn": 17,
                                    "endLine": 746,
                                    "endColumn": 34,
                                    "charOffset": 22253,
                                    "charLength": 17,
                                    "snippet": {
                                        "text": "http://www.w3.org",
                                        "rendered": {
                                            "text": "http://www.w3.org",
                                            "markdown": "`http://www.w3.org`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "An HTTP-based URL without TLS was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/App/Configuration/AppConfigEx.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 22253,
                                                "charLength": 17
                                            },
                                            "insertedContent": {
                                                "text": "https://www.w3.org"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "ThreatModel.Integration.HTTP"
                        ],
                        "DevSkimSeverity": "Moderate",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "level": "warning",
                    "__guid": "1c18e8d52946"
                },
                {
                    "ruleId": "DS137138",
                    "message": {
                        "text": "Insecure URL"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePass/App/Configuration/AppConfigEx.cs"
                                },
                                "region": {
                                    "startLine": 745,
                                    "startColumn": 41,
                                    "endLine": 745,
                                    "endColumn": 58,
                                    "charOffset": 22196,
                                    "charLength": 17,
                                    "snippet": {
                                        "text": "http://www.w3.org",
                                        "rendered": {
                                            "text": "http://www.w3.org",
                                            "markdown": "`http://www.w3.org`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "An HTTP-based URL without TLS was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePass/App/Configuration/AppConfigEx.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 22196,
                                                "charLength": 17
                                            },
                                            "insertedContent": {
                                                "text": "https://www.w3.org"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "ThreatModel.Integration.HTTP"
                        ],
                        "DevSkimSeverity": "Moderate",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "level": "warning",
                    "__guid": "0834862f76b3"
                },
                {
                    "ruleId": "DS148264",
                    "level": "error",
                    "message": {
                        "text": "Do not use weak/non-cryptographic random number generators"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/CryptoRandom.cs"
                                },
                                "region": {
                                    "startLine": 382,
                                    "startColumn": 14,
                                    "endLine": 382,
                                    "endColumn": 21,
                                    "charOffset": 10173,
                                    "charLength": 7,
                                    "snippet": {
                                        "text": "Random(",
                                        "rendered": {
                                            "text": "Random(",
                                            "markdown": "`Random(`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.PRNG.Weak"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "e5e0c98a28c8"
                },
                {
                    "ruleId": "DS126858",
                    "level": "error",
                    "message": {
                        "text": "Weak/Broken Hash Algorithm"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/HmacOtp.cs"
                                },
                                "region": {
                                    "startLine": 71,
                                    "startColumn": 31,
                                    "endLine": 71,
                                    "endColumn": 35,
                                    "charOffset": 2528,
                                    "charLength": 4,
                                    "snippet": {
                                        "text": "SHA1",
                                        "rendered": {
                                            "text": "SHA1",
                                            "markdown": "`SHA1`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePassLib/Cryptography/HmacOtp.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 2528,
                                                "charLength": 4
                                            },
                                            "insertedContent": {
                                                "text": "SHA256"
                                            }
                                        }
                                    ]
                                }
                            ]
                        },
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePassLib/Cryptography/HmacOtp.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 2528,
                                                "charLength": 4
                                            },
                                            "insertedContent": {
                                                "text": "SHA512"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.BannedHashAlgorithm"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "9be9c05973e6"
                },
                {
                    "ruleId": "DS126858",
                    "level": "error",
                    "message": {
                        "text": "Weak/Broken Hash Algorithm"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/HmacOtp.cs"
                                },
                                "region": {
                                    "startLine": 71,
                                    "startColumn": 14,
                                    "endLine": 71,
                                    "endColumn": 18,
                                    "charOffset": 2511,
                                    "charLength": 4,
                                    "snippet": {
                                        "text": "SHA1",
                                        "rendered": {
                                            "text": "SHA1",
                                            "markdown": "`SHA1`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePassLib/Cryptography/HmacOtp.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 2511,
                                                "charLength": 4
                                            },
                                            "insertedContent": {
                                                "text": "SHA256"
                                            }
                                        }
                                    ]
                                }
                            ]
                        },
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePassLib/Cryptography/HmacOtp.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 2511,
                                                "charLength": 4
                                            },
                                            "insertedContent": {
                                                "text": "SHA512"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.BannedHashAlgorithm"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "172039f532a7"
                },
                {
                    "ruleId": "DS126858",
                    "level": "error",
                    "message": {
                        "text": "Weak/Broken Hash Algorithm"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/HmacOtp.cs"
                                },
                                "region": {
                                    "startLine": 69,
                                    "startColumn": 56,
                                    "endLine": 69,
                                    "endColumn": 60,
                                    "charOffset": 2483,
                                    "charLength": 4,
                                    "snippet": {
                                        "text": "Sha1",
                                        "rendered": {
                                            "text": "Sha1",
                                            "markdown": "`Sha1`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [],
                    "properties": {
                        "tags": [
                            "Cryptography.BannedHashAlgorithm"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "9be3cc1241fe"
                },
                {
                    "ruleId": "DS126858",
                    "level": "error",
                    "message": {
                        "text": "Weak/Broken Hash Algorithm"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/HmacOtp.cs"
                                },
                                "region": {
                                    "startLine": 45,
                                    "startColumn": 48,
                                    "endLine": 45,
                                    "endColumn": 52,
                                    "charOffset": 1537,
                                    "charLength": 4,
                                    "snippet": {
                                        "text": "Sha1",
                                        "rendered": {
                                            "text": "Sha1",
                                            "markdown": "`Sha1`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [],
                    "properties": {
                        "tags": [
                            "Cryptography.BannedHashAlgorithm"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "9c24def4affa"
                },
                {
                    "ruleId": "DS126858",
                    "level": "error",
                    "message": {
                        "text": "Weak/Broken Hash Algorithm"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/HmacOtp.cs"
                                },
                                "region": {
                                    "startLine": 40,
                                    "startColumn": 44,
                                    "endLine": 40,
                                    "endColumn": 49,
                                    "charOffset": 1315,
                                    "charLength": 5,
                                    "snippet": {
                                        "text": "SHA-1",
                                        "rendered": {
                                            "text": "SHA-1",
                                            "markdown": "`SHA-1`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePassLib/Cryptography/HmacOtp.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 1315,
                                                "charLength": 5
                                            },
                                            "insertedContent": {
                                                "text": "SHA256"
                                            }
                                        }
                                    ]
                                }
                            ]
                        },
                        {
                            "description": {
                                "text": "A weak or broken hash algorithm was detected."
                            },
                            "artifactChanges": [
                                {
                                    "artifactLocation": {
                                        "uri": "KeePassLib/Cryptography/HmacOtp.cs"
                                    },
                                    "replacements": [
                                        {
                                            "deletedRegion": {
                                                "charOffset": 1315,
                                                "charLength": 5
                                            },
                                            "insertedContent": {
                                                "text": "SHA512"
                                            }
                                        }
                                    ]
                                }
                            ]
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.BannedHashAlgorithm"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "b2881bce21b1"
                },
                {
                    "ruleId": "DS126858",
                    "level": "error",
                    "message": {
                        "text": "Weak/Broken Hash Algorithm"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePassLib/Cryptography/HmacOtp.cs"
                                },
                                "region": {
                                    "startLine": 40,
                                    "startColumn": 31,
                                    "endLine": 40,
                                    "endColumn": 35,
                                    "charOffset": 1302,
                                    "charLength": 4,
                                    "snippet": {
                                        "text": "Sha1",
                                        "rendered": {
                                            "text": "Sha1",
                                            "markdown": "`Sha1`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "fixes": [],
                    "properties": {
                        "tags": [
                            "Cryptography.BannedHashAlgorithm"
                        ],
                        "DevSkimSeverity": "Critical",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "d95da21ceef7"
                },
                {
                    "ruleId": "DS148264",
                    "level": "error",
                    "message": {
                        "text": "Do not use weak/non-cryptographic random number generators"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "KeePass/Util/SendInputExt/SiObf.cs"
                                },
                                "region": {
                                    "startLine": 89,
                                    "startColumn": 18,
                                    "endLine": 89,
                                    "endColumn": 25,
                                    "charOffset": 2569,
                                    "charLength": 7,
                                    "snippet": {
                                        "text": "Random(",
                                        "rendered": {
                                            "text": "Random(",
                                            "markdown": "`Random(`"
                                        }
                                    },
                                    "sourceLanguage": "csharp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "Cryptography.PRNG.Weak"
                        ],
                        "DevSkimSeverity": "Important",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "__guid": "42db3ff213c3"
                },
                {
                    "ruleId": "DS154189",
                    "message": {
                        "text": "Banned C function detected"
                    },
                    "locations": [
                        {
                            "physicalLocation": {
                                "artifactLocation": {
                                    "uri": "ShInstUtil/ShInstUtil.cpp"
                                },
                                "region": {
                                    "startLine": 192,
                                    "startColumn": 30,
                                    "endLine": 192,
                                    "endColumn": 37,
                                    "charOffset": 5749,
                                    "charLength": 7,
                                    "snippet": {
                                        "text": "_tcslen",
                                        "rendered": {
                                            "text": "_tcslen",
                                            "markdown": "`_tcslen`"
                                        }
                                    },
                                    "sourceLanguage": "cpp"
                                }
                            }
                        }
                    ],
                    "properties": {
                        "tags": [
                            "API.DangerousAPI.BannedFunction"
                        ],
                        "DevSkimSeverity": "Moderate",
                        "DevSkimConfidence": "Unspecified"
                    },
                    "level": "warning",
                    "__guid": "5b14bc03f0e5"
                }
            ],
            "columnKind": "utf16CodeUnits"
        }
    ]
}