syncfusion-wpf-tabbed-mdi-form
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
SecuritySecurityreferences/state-persistence.md
MEDIUMSecurityMEDIUM
references/state-persistence.md
The fragment is benign persistence documentation, with no evidence of malware, exfiltration, backdoors, or sabotage. It presents a significant security warning because loading attacker-modifiable data with BinaryFormatter or SoapFormatter can enable unsafe deserialization, and profileName is used in file paths without traversal protection. Use a safe, explicitly constrained serialization format, validate and canonicalize profile paths, and avoid deserializing untrusted state files.
Confidence: 98%Severity: 70%
Audit Metadata