Does anyone know of a
.dll scanner that searches for known vulnerabilities?
At work, we have a project which uses Nuget packages, and other
.dll dependencies. I know there are databases of known vulnerabilities (1, 2), but does anyone know of a tool that will scan a build output folder for
.dll names/versions/etc. to spot
.dlls with known vulnerabilities?
The goal will be to have this tool run periodically, and alert me if a vulnerability is found in one of our dependencies so that we can update it. Always staying up to date is a testing burden (still working on comprehensive automated testing!) so not updating our dependencies more than we have to is very necessary still for us.
Other information about the environment:
- C# project/solution with VS 2015 Update 1
- Does not have to be open source, and if it's pricey the business can probably afford it.