I am trying the Magento Security Scanner in our projects however the scanner fails to detect that
SUPEE-8788 is applied. We are using Magento 126.96.36.199 installed via composer with a clean install.
Your Magento installation is vulnerable to the vulnerabilities addressed in SUPEE-8788. /js/mage/adminhtml/uploader/instance.js /fustyFlowFactory/ /skin/adminhtml/default/default/boxes.css ~background:url(images/blank.gif) repeat;~
I've confirmed that all files that were patched by
SUPEE-8788 are equal to the ones in the zip file that you can download from magento.com. As an example, MageReport does not have an error in the same patch and I've read the document that details their detection method.
The issue eventually disappeared. I believe it was a bug in the scanner that was fixed by Magento.