Owasp.Analyzers
1.0.0
dotnet add package Owasp.Analyzers --version 1.0.0
NuGet\Install-Package Owasp.Analyzers -Version 1.0.0
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package.
<PackageReference Include="Owasp.Analyzers" Version="1.0.0"> <PrivateAssets>all</PrivateAssets> <IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets> </PackageReference>
For projects that support PackageReference, copy this XML node into the project file to reference the package.
<PackageVersion Include="Owasp.Analyzers" Version="1.0.0" />
<PackageReference Include="Owasp.Analyzers"> <PrivateAssets>all</PrivateAssets> <IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets> </PackageReference>
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package.
paket add Owasp.Analyzers --version 1.0.0
The NuGet Team does not provide support for this client. Please contact its maintainers for support.
#r "nuget: Owasp.Analyzers, 1.0.0"
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package.
#:package Owasp.Analyzers@1.0.0
#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package.
#addin nuget:?package=Owasp.Analyzers&version=1.0.0
#tool nuget:?package=Owasp.Analyzers&version=1.0.0
The NuGet Team does not provide support for this client. Please contact its maintainers for support.
Owasp.Analyzers
Roslyn analyzers covering the OWASP Top 10 2021 for C#/.NET projects.
Installation
dotnet add package Owasp.Analyzers
Rules
| ID | Category | Severity | Description |
|---|---|---|---|
| OWASPA01001 | A01 Broken Access Control | Warning | Controller action missing authorization |
| OWASPA01002 | A01 Broken Access Control | Warning | CORS wildcard origin |
| OWASPA01003 | A01 Broken Access Control | Warning | Hardcoded role string |
| OWASPA01004 | A01 Broken Access Control | Warning | Missing antiforgery token |
| OWASPA02001–004 | A02 Cryptographic Failures | Error/Warning | Weak crypto, hardcoded secrets |
| OWASPA03001–003 | A03 Injection | Error | SQL/command/LDAP injection via taint |
| OWASPA04001–002 | A04 Insecure Design | Warning | Insecure design patterns |
| OWASPA05001 | A05 Security Misconfiguration | Warning | Security misconfiguration |
| OWASPA06001–002 | A06 Vulnerable Components | Warning | Vulnerable/deprecated NuGet packages |
| OWASPA07001–005 | A07 Auth Failures | Warning/Error | Authentication failures |
| OWASPA08001–004 | A08 Data Integrity | Warning/Error | Data integrity failures |
| OWASPA09001–004 | A09 Logging Failures | Warning | Logging and monitoring failures |
| OWASPA10001–003 | A10 SSRF | Error/Warning | Server-side request forgery |
License
MIT
There are no supported framework assets in this package.
Learn more about Target Frameworks and .NET Standard.
-
net10.0
- Microsoft.CodeAnalysis.CSharp (>= 5.0.0)
NuGet packages
This package is not used by any NuGet packages.
GitHub repositories
This package is not used by any popular GitHub repositories.
| Version | Downloads | Last Updated |
|---|---|---|
| 1.0.0 | 77 | 4/1/2026 |