syncfusion-wpf-tabbed-mdi-form

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
references/state-persistence.md

The fragment is benign persistence documentation, with no evidence of malware, exfiltration, backdoors, or sabotage. It presents a significant security warning because loading attacker-modifiable data with BinaryFormatter or SoapFormatter can enable unsafe deserialization, and profileName is used in file paths without traversal protection. Use a safe, explicitly constrained serialization format, validate and canonicalize profile paths, and avoid deserializing untrusted state files.

Confidence: 98%Severity: 70%
Audit Metadata
Analyzed At
Sep 14, 2026, 03:58 PM
Package URL
pkg:socket/skills-sh/syncfusion%2Fwpf-ui-components-skills%2Fsyncfusion-wpf-tabbed-mdi-form%2F@3a2ba02f4764562070f035f4d7ac87c097e06ce82fb9bdf00dd9f307e159a933
Security Audit — socket — syncfusion-wpf-tabbed-mdi-form