{
  "WorkItem": {
    "AffectedComponent": {
      "Name": "",
      "DisplayName": ""
    },
    "ClosedComment": "",
    "ClosedDate": null,
    "CommentCount": 0,
    "Custom": null,
    "Description": "Several places (e.g. in  method InternalExtract() in ZipEntry.Extract.cs) stores sensitive data in an insecure manner (a string), making it possible to extract the data via inspecting the heap.\n\n```\n               string p = password ?? this._Password ?? this._container.Password;\n \n```\n\nRecommedation:  Instead of storing sensitive data in objects like Strings, store them in a SecureString object.  Each object stores its contents in an encrypted format in memory at all times.",
    "LastUpdatedDate": "2015-09-02T08:07:52.653-07:00",
    "PlannedForRelease": "",
    "ReleaseVisibleToPublic": false,
    "Priority": {
      "Name": "Unassigned",
      "Severity": 0,
      "Id": 0
    },
    "ProjectName": "DotNetZip",
    "ReportedDate": "2015-09-02T08:07:52.653-07:00",
    "Status": {
      "Name": "Proposed",
      "Id": 1
    },
    "ReasonClosed": {
      "Name": "Unassigned"
    },
    "Summary": "HeapInspection possible",
    "Type": {
      "Name": "Unassigned",
      "Id": 5
    },
    "VoteCount": 1,
    "Id": 17507
  },
  "FileAttachments": [],
  "Comments": []
}