Snyk Code: Improved Accuracy for CSRF Detection in C# WebAPI Applications

Improved

Starting July 14, 2025, Snyk Code will release an update to improve the accuracy of CSRF (CWE-352) detection in C# WebAPI applications.

  • This fix significantly reduces false positives, helping developers focus on real issues without being distracted by incorrect CSRF findings. Other vulnerability results are unaffected.

The update will roll out as part of Snyk Code’s General Availability (GA) support for C#.

Headshot of Sebastian Roth

Sebastian Roth | Senior Product Manager

Tags:
SAST