Dear Support Team,
I hope this message finds you well.
We are currently utilizing the Snyk tool to scan our application for security vulnerabilities. During a recent scan, Snyk identified a vulnerability related to System.Security.Cryptography.Pkcs in [email protected]. Please refer to the attached screenshot for further details.
Could you please advise on the recommended steps or provide a solution to resolve this vulnerability? We would also appreciate guidance on how to prevent this issue from recurring in future scans.
Thank you for your assistance.
Login to view the files attached to this post.
-
anil.kumar.52 - Posts: 3
- Joined: Fri Sep 05, 2025 5:07 am
Hello,
Thank you for your inquiry.
Please note that version 8.2.0 was released two years ago, and our latest version of Spire.Presentation is now 10.8.2. During this period, we have made significant upgrades and improvements to its dependencies. Could you please verify the issue again using the latest version?
May we ask under which framework you conducted the testing? System.Security.Cryptography.Pkcs is one of the dependencies we use. You also can try to upgrade its version via NuGet.
Thank you for your inquiry.
Please note that version 8.2.0 was released two years ago, and our latest version of Spire.Presentation is now 10.8.2. During this period, we have made significant upgrades and improvements to its dependencies. Could you please verify the issue again using the latest version?
May we ask under which framework you conducted the testing? System.Security.Cryptography.Pkcs is one of the dependencies we use. You also can try to upgrade its version via NuGet.
Sincerely,
Talia
E-iceblue support team
Talia
E-iceblue support team
-
talia.liu - Posts: 341
- Joined: Mon Apr 14, 2025 3:33 am
Hi team,
Thank you for your reply.
We have purchased the licensed Spire.Presentation Pro Edition Version 9.12 in February 2025. we have received the license.elic.xml file to use it and it is showing version installed in VS is 8.2.0. so, if i upgrade it to latest 10.8.2 version via NuGet as suggested by you then will it work fine with same license.elic.xml file or we need to purchase new license to use it?
We use Snyk tool to conduct the security vulnerabilities testing on server for our application.
Please let me know if you have any questions.
Thank you for your reply.
We have purchased the licensed Spire.Presentation Pro Edition Version 9.12 in February 2025. we have received the license.elic.xml file to use it and it is showing version installed in VS is 8.2.0. so, if i upgrade it to latest 10.8.2 version via NuGet as suggested by you then will it work fine with same license.elic.xml file or we need to purchase new license to use it?
We use Snyk tool to conduct the security vulnerabilities testing on server for our application.
Please let me know if you have any questions.
-
anil.kumar.52 - Posts: 3
- Joined: Fri Sep 05, 2025 5:07 am
Hello,
Thank you for your inquiry.
According to your license purchase record dated January 31, 2025, your free update entitlement covers all versions released before January 31, 2026. Your license remains valid for the latest version of Spire. Presentation (10.8.2).
After updating to the newest version of Spire. Presentation, you may also consider updating System.Security.Cryptography.Pkcs to its latest version separately, as newer releases include additional vulnerability fixes and security enhancements.
We look forward to your test feedback.
Thank you for your inquiry.
According to your license purchase record dated January 31, 2025, your free update entitlement covers all versions released before January 31, 2026. Your license remains valid for the latest version of Spire. Presentation (10.8.2).
After updating to the newest version of Spire. Presentation, you may also consider updating System.Security.Cryptography.Pkcs to its latest version separately, as newer releases include additional vulnerability fixes and security enhancements.
We look forward to your test feedback.
Sincerely,
Talia
E-iceblue support team
Talia
E-iceblue support team
-
talia.liu - Posts: 341
- Joined: Mon Apr 14, 2025 3:33 am
Dear Support Team,
I hope this message finds you well.
We use Snyk tool to conduct the security vulnerabilities testing on server for our application.
We are currently utilizing the Snyk tool to scan our application for security vulnerabilities. During a recent scan, It looks like Snyk found critical vulnerabilities in [email protected]. I’m guessing it needs to be upgraded as we did updated it in last year from 8.2.0 to 10.8.2 as suggested by you.
We have purchased the licensed Spire.Presentation Pro Edition Version 10.12 in 20th January 2026. we have received the license.elic.xml file to use it and it is showing version installed in VS is 10.8.2. so, if i upgrade it to from 10.8.2 → 11.7.6 version via NuGet as 11.7.6 is the latest version then will it work fine with same license.elic.xml file ?
Could you please advise on the recommended steps or provide a solution to resolve this vulnerability? We would also appreciate guidance on how to prevent this issue from recurring in future scans.
Thank you for your assistance.
I hope this message finds you well.
We use Snyk tool to conduct the security vulnerabilities testing on server for our application.
We are currently utilizing the Snyk tool to scan our application for security vulnerabilities. During a recent scan, It looks like Snyk found critical vulnerabilities in [email protected]. I’m guessing it needs to be upgraded as we did updated it in last year from 8.2.0 to 10.8.2 as suggested by you.
We have purchased the licensed Spire.Presentation Pro Edition Version 10.12 in 20th January 2026. we have received the license.elic.xml file to use it and it is showing version installed in VS is 10.8.2. so, if i upgrade it to from 10.8.2 → 11.7.6 version via NuGet as 11.7.6 is the latest version then will it work fine with same license.elic.xml file ?
Could you please advise on the recommended steps or provide a solution to resolve this vulnerability? We would also appreciate guidance on how to prevent this issue from recurring in future scans.
Thank you for your assistance.
-
anil.kumar.52 - Posts: 3
- Joined: Fri Sep 05, 2025 5:07 am
Hello,
Sorry for the delayed response due to the weekend on our end.
Our licenses are valid for one year from the date of purchase. During this period, you are entitled to free access to all product updates and new versions. Since your license is valid for any version released before January 21, 2027, you can safely upgrade to Spire.Presentation 11.7.6.
Regarding the Snyk vulnerability warnings, we have removed the System.Security.Cryptography.Pkcs, System.Security.Permissions, and System.Security.Cryptography.Xml dependencies starting from Spire.Presentation 10.10.7. Therefore, after upgrading to the latest version, the vulnerability warning for System.Security.Cryptography.Pkcs should disappear.
If you need any further assistance, just feel free to write back.
Sorry for the delayed response due to the weekend on our end.
Our licenses are valid for one year from the date of purchase. During this period, you are entitled to free access to all product updates and new versions. Since your license is valid for any version released before January 21, 2027, you can safely upgrade to Spire.Presentation 11.7.6.
Regarding the Snyk vulnerability warnings, we have removed the System.Security.Cryptography.Pkcs, System.Security.Permissions, and System.Security.Cryptography.Xml dependencies starting from Spire.Presentation 10.10.7. Therefore, after upgrading to the latest version, the vulnerability warning for System.Security.Cryptography.Pkcs should disappear.
If you need any further assistance, just feel free to write back.
Sincerely,
Talia
E-iceblue support team
Talia
E-iceblue support team
-
talia.liu - Posts: 341
- Joined: Mon Apr 14, 2025 3:33 am
Page 1 of 1