Created by James Hurrell, last modified on Jun 19, 2023

Summary: this page describes the new features and bugs that have been fixed in CAST Report Generator 1.24.x.

Content matrix

VersionSummary of content
1.24.2Fixes a CVE.
1.24.1Minor bug fixing.
1.24.0
  • .NET 6.0 is now required instead of .NET Core 3.1
  • New reports for checking the CWE (2022) Top 25 quality standard:
    • CWE (2022) Top 25 Compliance Report.docx
    • CWE (2022) Top 25 Detailed Report.docx
    • CWE (2022) Top 25 Full Detailed Report.xls
  • Minor bug fixing.

Compatibility matrix

This release of Report Generator GUI and for Report Generator for Dashboards functions with the following:

CAST RestAPI≥ 2.4.xMandatory
MIPS Reduction Index≥ 20200518

These extensions are required for Compliance Report generation. Depending on what "standard" you are targeting in your Compliance Report, you can install a combination of extensions:

  • To generate Compliance Reports for MIPS standards, you MUST always install the MIPS Reduction Index extension.
  • To generate Compliance Reports for CISQ, ISO-5055 and Security standards, you can install either the CISQ, ISO-5055 and Security Standards extensions or the Quality Standards Mapping extension. If the CISQ, ISO-5055 and Security Standards extensions and the Quality Standards Mapping extension are installed, data is automatically taken from the CISQ, ISO-5055 and Security Standards extensions at all times.
  • If you are using CAST Console ≥ 1.14.0, the Quality Standards Mapping extension is installed with all new source code versions, however, you should ensure that the correct release of the extension is used.
  • If you are using CAST Console ≥ 1.24.0, the ISO-5055 extension is installed with all new source code versions, however, you should ensure that the correct release of the extension is used.
CISQ Index≥ 20220725.0.0-funcrel
ISO-5055 Index≥ 20220725.0.0-funcrel
Security Standards≥ 20220725.0.0-funcrel
Quality Standards Mapping extension≥ 20220725.0.0-funcrel
OMG Technical Debt≥ 2.0.0-funcrel
.NET SDK6.0-

Component documentation

1.24.2-funcrel

Other Updates

Internal IdDetails
REPORTGEN-1143Fixes a .NET Denial of Service vulnerability: CVE-2023-29331 (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29331).

1.24.1-funcrel

Other Updates

Internal IdDetails
REPORTGEN-1136Fixes a CVE (https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-24112) found in the System.Drawing.Common component used by CAST Report Generator.

Resolved Issues

Customer Ticket IdDetails
40233Fixes an issue where an ISO Compliance report generation was failing due to the error "Object reference not set to an instance of an object".

1.24.0-funcrel

New Features

SummaryDetails
New compliance reportsThe following reports have been added for checking the quality standard CWE (2022) Top 25: CWE (2022) Top 25 Compliance Report.docx, CWE (2022) Top 25 Detailed Report.docx, CWE (2022) Top 25 Full Detailed Report.xlsx.

Other Updates

Internal IdDetails
REPORTGEN-1106Bug fixing to resolved violations reported by CAST.
REPORTGEN-1111CAST Report Generator now requires .NET 6.0 (instead of .NET Core 3.1 required in previous releases). See https://doc.castsoftware.com/display/DOCCOM/CAST+Report+Generator+-+Installation+process#CASTReportGeneratorInstallationprocess-.NETrequirements and https://doc.castsoftware.com/display/DOCCOM/CAST+Report+Generator+-+CAST+Report+Generator+for+Dashboards#CASTReportGeneratorCASTReportGeneratorforDashboards-.NET/.NETCore. Note that as a side effect of this change, the folder "zh-CN" has been renamed to "zh-Hans" (see https://doc.castsoftware.com/display/DOCCOM/CAST+Report+Generator+-+Templates+and+output+options).