.NET Query with list as sql parameter

Question

public SqlDataReader GetDataReader(List<SqlParameter> parameterValues){

    System.Data.SqlClient.SqlConnection cn = new System.Data.SqlClient.SqlConnection();
    cn.ConnectionString = SQLConnectionObj.ConnectionString;
    cn.Open();
    System.Data.SqlClient.SqlCommand cmd = new System.Data.SqlClient.SqlCommand();
    cmd.Parameters.AddRange(parameterValues.ToArray());
    cmd.Connection = cn;
    cmd.CommandText = SelectStatement;
    cmd.CommandType = CommandType.Text;
    return sReader = cmd.ExecuteReader(); 
}

When I try to add this for IN condition variable in select query,it fails. Need to use this only for Fortify fix.Tried with dictionary Sql parameter.It works but increases the issue count up.

Please help me with this.And also if there is anything new which you want to add feel free to add those too.

But the following code works:-

   public SqlDataReader GetDataReader(Dictionary<string, string> qParams)
    {
    SqlCommand SQLCommandObj = new SqlCommand(SelectStatement, 
    SQLConnectionObj);
     string query=SelectStatement;

    if (qParams.Count > 0)
    {
        foreach (string key in qParams.Keys)
        {
            string value = qParams[key];
            SqlParameter par = new SqlParameter();
            par.ParameterName = key;
            par.Value = value;
            SQLCommandObj.Parameters.Add(par);
          }
    }

    foreach(SqlParameter par in SQLCommandObj.Parameters)
    {
        string key = par.ParameterName;
        string value = par.Value as string;
        query=query.Replace(key, value);
    }
    if (qParams.Count > 0)
    {
        SQLCommandObj.CommandText = "";
        SQLCommandObj.CommandText = query;
    }

    SQLCommandObj.CommandTimeout = CustomCommandTimeout;
    return SQLCommandObj.ExecuteReader(CommandBehavior.CloseConnection);
}