{ "scan": { "analyzer": { "id": "semgrep", "name": "Semgrep", "url": "https://gitlab.com/gitlab-org/security-products/analyzers/semgrep", "vendor": { "name": "GitLab" }, "version": "6.18.2" }, "scanner": { "id": "semgrep", "name": "Semgrep", "url": "https://github.com/returntocorp/semgrep", "vendor": { "name": "GitLab" }, "version": "1.145.0" }, "primary_identifiers": [ { "type": "semgrep_id", "name": "bandit.B101", "value": "bandit.B101" }, { "type": "semgrep_id", "name": "bandit.B102", "value": "bandit.B102" }, { "type": "semgrep_id", "name": "bandit.B103", "value": "bandit.B103" }, { "type": "semgrep_id", "name": "bandit.B104", "value": "bandit.B104" }, { "type": "semgrep_id", "name": "bandit.B108", "value": "bandit.B108" }, { "type": "semgrep_id", "name": "bandit.B113", "value": "bandit.B113" }, { "type": "semgrep_id", "name": "bandit.B201", "value": "bandit.B201" }, { "type": "semgrep_id", "name": "bandit.B202", "value": "bandit.B202" }, { "type": "semgrep_id", "name": "bandit.B301-1", "value": "bandit.B301-1" }, { "type": "semgrep_id", "name": "bandit.B301-2", "value": "bandit.B301-2" }, { "type": "semgrep_id", "name": "bandit.B301-3", "value": "bandit.B301-3" }, { "type": "semgrep_id", "name": "bandit.B301-4", "value": "bandit.B301-4" }, { "type": "semgrep_id", "name": "bandit.B302", "value": "bandit.B302" }, { "type": "semgrep_id", "name": "bandit.B303-1", "value": "bandit.B303-1" }, { "type": "semgrep_id", "name": "bandit.B303-2", "value": "bandit.B303-2" }, { "type": "semgrep_id", "name": "bandit.B303-7", "value": "bandit.B303-7" }, { "type": "semgrep_id", "name": "bandit.B303-8", "value": "bandit.B303-8" }, { "type": "semgrep_id", "name": "bandit.B304-1", "value": "bandit.B304-1" }, { "type": "semgrep_id", "name": "bandit.B304-10", "value": "bandit.B304-10" }, { "type": "semgrep_id", "name": "bandit.B304-11", "value": "bandit.B304-11" }, { "type": "semgrep_id", "name": "bandit.B304-12", "value": "bandit.B304-12" }, { "type": "semgrep_id", "name": "bandit.B304-2", "value": "bandit.B304-2" }, { "type": "semgrep_id", "name": "bandit.B304-3", "value": "bandit.B304-3" }, { "type": "semgrep_id", "name": "bandit.B304-4", "value": "bandit.B304-4" }, { "type": "semgrep_id", "name": "bandit.B304-5", "value": "bandit.B304-5" }, { "type": "semgrep_id", "name": "bandit.B304-6", "value": "bandit.B304-6" }, { "type": "semgrep_id", "name": "bandit.B304-7", "value": "bandit.B304-7" }, { "type": "semgrep_id", "name": "bandit.B304-8", "value": "bandit.B304-8" }, { "type": "semgrep_id", "name": "bandit.B304-9", "value": "bandit.B304-9" }, { "type": "semgrep_id", "name": "bandit.B305", "value": "bandit.B305" }, { "type": "semgrep_id", "name": "bandit.B306", "value": "bandit.B306" }, { "type": "semgrep_id", "name": "bandit.B307", "value": "bandit.B307" }, { "type": "semgrep_id", "name": "bandit.B310-1", "value": "bandit.B310-1" }, { "type": "semgrep_id", "name": "bandit.B311", "value": "bandit.B311" }, { "type": "semgrep_id", "name": "bandit.B313", "value": "bandit.B313" }, { "type": "semgrep_id", "name": "bandit.B314", "value": "bandit.B314" }, { "type": "semgrep_id", "name": "bandit.B315", "value": "bandit.B315" }, { "type": "semgrep_id", "name": "bandit.B316", "value": "bandit.B316" }, { "type": "semgrep_id", "name": "bandit.B317", "value": "bandit.B317" }, { "type": "semgrep_id", "name": "bandit.B318", "value": "bandit.B318" }, { "type": "semgrep_id", "name": "bandit.B319", "value": "bandit.B319" }, { "type": "semgrep_id", "name": "bandit.B320", "value": "bandit.B320" }, { "type": "semgrep_id", "name": "bandit.B323", "value": "bandit.B323" }, { "type": "semgrep_id", "name": "bandit.B324", "value": "bandit.B324" }, { "type": "semgrep_id", "name": "bandit.B401", "value": "bandit.B401" }, { "type": "semgrep_id", "name": "bandit.B413", "value": "bandit.B413" }, { "type": "semgrep_id", "name": "bandit.B501", "value": "bandit.B501" }, { "type": "semgrep_id", "name": "bandit.B502", "value": "bandit.B502" }, { "type": "semgrep_id", "name": "bandit.B504", "value": "bandit.B504" }, { "type": "semgrep_id", "name": "bandit.B505-1", "value": "bandit.B505-1" }, { "type": "semgrep_id", "name": "bandit.B505-2", "value": "bandit.B505-2" }, { "type": "semgrep_id", "name": "bandit.B506", "value": "bandit.B506" }, { "type": "semgrep_id", "name": "bandit.B507", "value": "bandit.B507" }, { "type": "semgrep_id", "name": "bandit.B508", "value": "bandit.B508" }, { "type": "semgrep_id", "name": "bandit.B509", "value": "bandit.B509" }, { "type": "semgrep_id", "name": "bandit.B602", "value": "bandit.B602" }, { "type": "semgrep_id", "name": "bandit.B603", "value": "bandit.B603" }, { "type": "semgrep_id", "name": "bandit.B604", "value": "bandit.B604" }, { "type": "semgrep_id", "name": "bandit.B605", "value": "bandit.B605" }, { "type": "semgrep_id", "name": "bandit.B606", "value": "bandit.B606" }, { "type": "semgrep_id", "name": "bandit.B607", "value": "bandit.B607" }, { "type": "semgrep_id", "name": "bandit.B608", "value": "bandit.B608" }, { "type": "semgrep_id", "name": "bandit.B609", "value": "bandit.B609" }, { "type": "semgrep_id", "name": "bandit.B610", "value": "bandit.B610" }, { "type": "semgrep_id", "name": "bandit.B611", "value": "bandit.B611" }, { "type": "semgrep_id", "name": "bandit.B611", "value": "bandit.B611" }, { "type": "semgrep_id", "name": "bandit.B612", "value": "bandit.B612" }, { "type": "semgrep_id", "name": "bandit.B701", "value": "bandit.B701" }, { "type": "semgrep_id", "name": "bandit.B702", "value": "bandit.B702" }, { "type": "semgrep_id", "name": "bandit.B703", "value": "bandit.B703" }, { "type": "semgrep_id", "name": "brakeman.ruby_cookie_rule-CheckCookieStoreSessionSecurityAttributes", "value": "brakeman.ruby_cookie_rule-CheckCookieStoreSessionSecurityAttributes" }, { "type": "semgrep_id", "name": "brakeman.ruby_cookie_rule-CookieSerialization", "value": "brakeman.ruby_cookie_rule-CookieSerialization" }, { "type": "semgrep_id", "name": "brakeman.ruby_crypto_rule-InsufficientRSAKeySize", "value": "brakeman.ruby_crypto_rule-InsufficientRSAKeySize" }, { "type": "semgrep_id", "name": "brakeman.ruby_crypto_rule-WeakHashesMD5", "value": "brakeman.ruby_crypto_rule-WeakHashesMD5" }, { "type": "semgrep_id", "name": "brakeman.ruby_crypto_rule-WeakHashesSHA1", "value": "brakeman.ruby_crypto_rule-WeakHashesSHA1" }, { "type": "semgrep_id", "name": "brakeman.ruby_csrf_rule-MissingCSRFProtection", "value": "brakeman.ruby_csrf_rule-MissingCSRFProtection" }, { "type": "semgrep_id", "name": "brakeman.ruby_deserialization_rule-BadDeserialization", "value": "brakeman.ruby_deserialization_rule-BadDeserialization" }, { "type": "semgrep_id", "name": "brakeman.ruby_deserialization_rule-BadDeserializationEnv", "value": "brakeman.ruby_deserialization_rule-BadDeserializationEnv" }, { "type": "semgrep_id", "name": "brakeman.ruby_deserialization_rule-BadDeserializationYAML", "value": "brakeman.ruby_deserialization_rule-BadDeserializationYAML" }, { "type": "semgrep_id", "name": "brakeman.ruby_error_rule-DivideByZero", "value": "brakeman.ruby_error_rule-DivideByZero" }, { "type": "semgrep_id", "name": "brakeman.ruby_escaping_rule-JSONEntityEscape", "value": "brakeman.ruby_escaping_rule-JSONEntityEscape" }, { "type": "semgrep_id", "name": "brakeman.ruby_eval_rule-NoEval", "value": "brakeman.ruby_eval_rule-NoEval" }, { "type": "semgrep_id", "name": "brakeman.ruby_exceptions_rule-DetailedExceptions", "value": "brakeman.ruby_exceptions_rule-DetailedExceptions" }, { "type": "semgrep_id", "name": "brakeman.ruby_file_rule-AvoidTaintedFileAccess", "value": "brakeman.ruby_file_rule-AvoidTaintedFileAccess" }, { "type": "semgrep_id", "name": "brakeman.ruby_file_rule-CheckRenderLocalFileInclude", "value": "brakeman.ruby_file_rule-CheckRenderLocalFileInclude" }, { "type": "semgrep_id", "name": "brakeman.ruby_file_rule-CheckSendFile", "value": "brakeman.ruby_file_rule-CheckSendFile" }, { "type": "semgrep_id", "name": "brakeman.ruby_filter_rule-CheckBeforeFilter", "value": "brakeman.ruby_filter_rule-CheckBeforeFilter" }, { "type": "semgrep_id", "name": "brakeman.ruby_find_rule-CheckUnscopedFind", "value": "brakeman.ruby_find_rule-CheckUnscopedFind" }, { "type": "semgrep_id", "name": "brakeman.ruby_ftp_rule-AvoidTaintedFTPCall", "value": "brakeman.ruby_ftp_rule-AvoidTaintedFTPCall" }, { "type": "semgrep_id", "name": "brakeman.ruby_http_rule-AvoidTaintedHTTPRequest", "value": "brakeman.ruby_http_rule-AvoidTaintedHTTPRequest" }, { "type": "semgrep_id", "name": "brakeman.ruby_http_rule-CheckHTTPVerbConfusion", "value": "brakeman.ruby_http_rule-CheckHTTPVerbConfusion" }, { "type": "semgrep_id", "name": "brakeman.ruby_injection_rule-AvoidTaintedShellCall", "value": "brakeman.ruby_injection_rule-AvoidTaintedShellCall" }, { "type": "semgrep_id", "name": "brakeman.ruby_injection_rule-BadSend", "value": "brakeman.ruby_injection_rule-BadSend" }, { "type": "semgrep_id", "name": "brakeman.ruby_injection_rule-DangerousExec", "value": "brakeman.ruby_injection_rule-DangerousExec" }, { "type": "semgrep_id", "name": "brakeman.ruby_mass_assignment_rule-ModelAttrAccessible", "value": "brakeman.ruby_mass_assignment_rule-ModelAttrAccessible" }, { "type": "semgrep_id", "name": "brakeman.ruby_mass_assignment_rule-UnprotectedMassAssign", "value": "brakeman.ruby_mass_assignment_rule-UnprotectedMassAssign" }, { "type": "semgrep_id", "name": "brakeman.ruby_redirect_rule-CheckRedirectTo", "value": "brakeman.ruby_redirect_rule-CheckRedirectTo" }, { "type": "semgrep_id", "name": "brakeman.ruby_reflection_rule-CheckUnsafeReflection", "value": "brakeman.ruby_reflection_rule-CheckUnsafeReflection" }, { "type": "semgrep_id", "name": "brakeman.ruby_reflection_rule-CheckUnsafeReflectionMethods", "value": "brakeman.ruby_reflection_rule-CheckUnsafeReflectionMethods" }, { "type": "semgrep_id", "name": "brakeman.ruby_regex_rule-CheckRegexDOS", "value": "brakeman.ruby_regex_rule-CheckRegexDOS" }, { "type": "semgrep_id", "name": "brakeman.ruby_regex_rule-CheckValidationRegex", "value": "brakeman.ruby_regex_rule-CheckValidationRegex" }, { "type": "semgrep_id", "name": "brakeman.ruby_routes_rule-AvoidDefaultRoutes", "value": "brakeman.ruby_routes_rule-AvoidDefaultRoutes" }, { "type": "semgrep_id", "name": "brakeman.ruby_session_rule-AvoidSessionManipulation", "value": "brakeman.ruby_session_rule-AvoidSessionManipulation" }, { "type": "semgrep_id", "name": "brakeman.ruby_sql_rule-CheckSQL", "value": "brakeman.ruby_sql_rule-CheckSQL" }, { "type": "semgrep_id", "name": "brakeman.ruby_ssl_rule-ForceSSLFalse", "value": "brakeman.ruby_ssl_rule-ForceSSLFalse" }, { "type": "semgrep_id", "name": "brakeman.ruby_ssl_rule-SSLModeNoVerify", "value": "brakeman.ruby_ssl_rule-SSLModeNoVerify" }, { "type": "semgrep_id", "name": "brakeman.ruby_xss_rule-AvoidLinkTo", "value": "brakeman.ruby_xss_rule-AvoidLinkTo" }, { "type": "semgrep_id", "name": "brakeman.ruby_xss_rule-AvoidRenderInline", "value": "brakeman.ruby_xss_rule-AvoidRenderInline" }, { "type": "semgrep_id", "name": "brakeman.ruby_xss_rule-AvoidRenderText", "value": "brakeman.ruby_xss_rule-AvoidRenderText" }, { "type": "semgrep_id", "name": "brakeman.ruby_xss_rule-ManualTemplateCreation", "value": "brakeman.ruby_xss_rule-ManualTemplateCreation" }, { "type": "semgrep_id", "name": "eslint.detect-buffer-noassert-read", "value": "eslint.detect-buffer-noassert-read", "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-buffer-noassert.js" }, { "type": "semgrep_id", "name": "eslint.detect-buffer-noassert-write", "value": "eslint.detect-buffer-noassert-write", "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-buffer-noassert.js" }, { "type": "semgrep_id", "name": "eslint.detect-disable-mustache-escape", "value": "eslint.detect-disable-mustache-escape" }, { "type": "semgrep_id", "name": "eslint.detect-eval-with-expression", "value": "eslint.detect-eval-with-expression", "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-eval-with-expression.js" }, { "type": "semgrep_id", "name": "eslint.detect-new-buffer", "value": "eslint.detect-new-buffer", "url": "https://github.com/eslint-community/eslint-plugin-security/blob/main/rules/detect-new-buffer.js" }, { "type": "semgrep_id", "name": "eslint.detect-non-literal-fs-filename", "value": "eslint.detect-non-literal-fs-filename" }, { "type": "semgrep_id", "name": "eslint.detect-non-literal-regexp", "value": "eslint.detect-non-literal-regexp" }, { "type": "semgrep_id", "name": "eslint.detect-non-literal-require", "value": "eslint.detect-non-literal-require", "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-non-literal-require.js" }, { "type": "semgrep_id", "name": "eslint.detect-possible-timing-attacks", "value": "eslint.detect-possible-timing-attacks" }, { "type": "semgrep_id", "name": "eslint.detect-pseudoRandomBytes", "value": "eslint.detect-pseudoRandomBytes", "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-pseudoRandomBytes.js" }, { "type": "semgrep_id", "name": "eslint.react-dangerouslysetinnerhtml", "value": "eslint.react-dangerouslysetinnerhtml" }, { "type": "semgrep_id", "name": "find_sec_bugs.BAD_HEXA_CONVERSION-1", "value": "find_sec_bugs.BAD_HEXA_CONVERSION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.BLOWFISH_KEY_SIZE-1", "value": "find_sec_bugs.BLOWFISH_KEY_SIZE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.CIPHER_INTEGRITY-1", "value": "find_sec_bugs.CIPHER_INTEGRITY-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.COMMAND_INJECTION-1", "value": "find_sec_bugs.COMMAND_INJECTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.CUSTOM_MESSAGE_DIGEST-1", "value": "find_sec_bugs.CUSTOM_MESSAGE_DIGEST-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.DANGEROUS_PERMISSION_COMBINATION-1", "value": "find_sec_bugs.DANGEROUS_PERMISSION_COMBINATION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.DEFAULT_HTTP_CLIENT-1", "value": "find_sec_bugs.DEFAULT_HTTP_CLIENT-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.DES_USAGE-1", "value": "find_sec_bugs.DES_USAGE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.DMI_CONSTANT_DB_PASSWORD-1.HARD_CODE_PASSWORD-3", "value": "find_sec_bugs.DMI_CONSTANT_DB_PASSWORD-1.HARD_CODE_PASSWORD-3" }, { "type": "semgrep_id", "name": "find_sec_bugs.DMI_EMPTY_DB_PASSWORD-1.HARD_CODE_PASSWORD-2", "value": "find_sec_bugs.DMI_EMPTY_DB_PASSWORD-1.HARD_CODE_PASSWORD-2" }, { "type": "semgrep_id", "name": "find_sec_bugs.ECB_MODE-1", "value": "find_sec_bugs.ECB_MODE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.EL_INJECTION-1", "value": "find_sec_bugs.EL_INJECTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.EXTERNAL_CONFIG_CONTROL-1", "value": "find_sec_bugs.EXTERNAL_CONFIG_CONTROL-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.FILE_UPLOAD_FILENAME-1", "value": "find_sec_bugs.FILE_UPLOAD_FILENAME-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.FORMAT_STRING_MANIPULATION-1", "value": "find_sec_bugs.FORMAT_STRING_MANIPULATION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.HARD_CODE_PASSWORD-1", "value": "find_sec_bugs.HARD_CODE_PASSWORD-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.HAZELCAST_SYMMETRIC_ENCRYPTION-1", "value": "find_sec_bugs.HAZELCAST_SYMMETRIC_ENCRYPTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.HRS_REQUEST_PARAMETER_TO_HTTP_HEADER-1", "value": "find_sec_bugs.HRS_REQUEST_PARAMETER_TO_HTTP_HEADER-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.HTTP_PARAMETER_POLLUTION-1", "value": "find_sec_bugs.HTTP_PARAMETER_POLLUTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.HTTP_RESPONSE_SPLITTING-1", "value": "find_sec_bugs.HTTP_RESPONSE_SPLITTING-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.INSECURE_COOKIE-1", "value": "find_sec_bugs.INSECURE_COOKIE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.INSECURE_SMTP_SSL-1", "value": "find_sec_bugs.INSECURE_SMTP_SSL-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.LDAP_ANONYMOUS-1", "value": "find_sec_bugs.LDAP_ANONYMOUS-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.LDAP_INJECTION-1", "value": "find_sec_bugs.LDAP_INJECTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.MALICIOUS_XSLT-1", "value": "find_sec_bugs.MALICIOUS_XSLT-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.MODIFICATION_AFTER_VALIDATION-1", "value": "find_sec_bugs.MODIFICATION_AFTER_VALIDATION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.NORMALIZATION_AFTER_VALIDATION-1", "value": "find_sec_bugs.NORMALIZATION_AFTER_VALIDATION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.NULL_CIPHER-1", "value": "find_sec_bugs.NULL_CIPHER-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.OGNL_INJECTION-1", "value": "find_sec_bugs.OGNL_INJECTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.OVERLY_PERMISSIVE_FILE_PERMISSION-1", "value": "find_sec_bugs.OVERLY_PERMISSIVE_FILE_PERMISSION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.PADDING_ORACLE-1", "value": "find_sec_bugs.PADDING_ORACLE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.PERMISSIVE_CORS-2", "value": "find_sec_bugs.PERMISSIVE_CORS-2" }, { "type": "semgrep_id", "name": "find_sec_bugs.PT_ABSOLUTE_PATH_TRAVERSAL-1", "value": "find_sec_bugs.PT_ABSOLUTE_PATH_TRAVERSAL-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.REQUESTDISPATCHER_FILE_DISCLOSURE-1", "value": "find_sec_bugs.REQUESTDISPATCHER_FILE_DISCLOSURE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.RSA_KEY_SIZE-1", "value": "find_sec_bugs.RSA_KEY_SIZE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.RSA_NO_PADDING-1", "value": "find_sec_bugs.RSA_NO_PADDING-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.SAML_IGNORE_COMMENTS-1", "value": "find_sec_bugs.SAML_IGNORE_COMMENTS-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.SCRIPT_ENGINE_INJECTION-1.SPEL_INJECTION-1.EL_INJECTION-2.SEAM_LOG_INJECTION-1", "value": "find_sec_bugs.SCRIPT_ENGINE_INJECTION-1.SPEL_INJECTION-1.EL_INJECTION-2.SEAM_LOG_INJECTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.SCRIPT_ENGINE_INJECTION-2", "value": "find_sec_bugs.SCRIPT_ENGINE_INJECTION-2" }, { "type": "semgrep_id", "name": "find_sec_bugs.SMTP_HEADER_INJECTION-1", "value": "find_sec_bugs.SMTP_HEADER_INJECTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.SPRING_FILE_DISCLOSURE-1", "value": "find_sec_bugs.SPRING_FILE_DISCLOSURE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.SSL_CONTEXT-1", "value": "find_sec_bugs.SSL_CONTEXT-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.SSL_CONTEXT-2", "value": "find_sec_bugs.SSL_CONTEXT-2" }, { "type": "semgrep_id", "name": "find_sec_bugs.TDES_USAGE-1", "value": "find_sec_bugs.TDES_USAGE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.TEMPLATE_INJECTION_PEBBLE-1.TEMPLATE_INJECTION_FREEMARKER-1.TEMPLATE_INJECTION_VELOCITY-1", "value": "find_sec_bugs.TEMPLATE_INJECTION_PEBBLE-1.TEMPLATE_INJECTION_FREEMARKER-1.TEMPLATE_INJECTION_VELOCITY-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.UNVALIDATED_REDIRECT-1.URL_REWRITING-1", "value": "find_sec_bugs.UNVALIDATED_REDIRECT-1.URL_REWRITING-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.URLCONNECTION_SSRF_FD-1", "value": "find_sec_bugs.URLCONNECTION_SSRF_FD-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.WEAK_FILENAMEUTILS-1", "value": "find_sec_bugs.WEAK_FILENAMEUTILS-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.WEAK_HOSTNAME_VERIFIER", "value": "find_sec_bugs.WEAK_HOSTNAME_VERIFIER" }, { "type": "semgrep_id", "name": "find_sec_bugs.WEAK_MESSAGE_DIGEST_MD5-1.WEAK_MESSAGE_DIGEST_SHA1-1", "value": "find_sec_bugs.WEAK_MESSAGE_DIGEST_MD5-1.WEAK_MESSAGE_DIGEST_SHA1-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.WEAK_TRUST_MANAGER", "value": "find_sec_bugs.WEAK_TRUST_MANAGER" }, { "type": "semgrep_id", "name": "find_sec_bugs.WICKET_XSS1-1", "value": "find_sec_bugs.WICKET_XSS1-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.XML_DECODER-1", "value": "find_sec_bugs.XML_DECODER-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.XSS_REQUEST_PARAMETER_TO_SERVLET_WRITER-1", "value": "find_sec_bugs.XSS_REQUEST_PARAMETER_TO_SERVLET_WRITER-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.XXE_XMLREADER-1", "value": "find_sec_bugs.XXE_XMLREADER-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.BAD_HEXA_CONVERSION-1", "value": "find_sec_bugs.BAD_HEXA_CONVERSION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.BLOWFISH_KEY_SIZE-1", "value": "find_sec_bugs.BLOWFISH_KEY_SIZE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.CIPHER_INTEGRITY-1", "value": "find_sec_bugs.CIPHER_INTEGRITY-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.COMMAND_INJECTION-1", "value": "find_sec_bugs.COMMAND_INJECTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.CUSTOM_MESSAGE_DIGEST-1", "value": "find_sec_bugs.CUSTOM_MESSAGE_DIGEST-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.DANGEROUS_PERMISSION_COMBINATION-1", "value": "find_sec_bugs.DANGEROUS_PERMISSION_COMBINATION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.DES_USAGE-1", "value": "find_sec_bugs.DES_USAGE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.DMI_CONSTANT_DB_PASSWORD-1.HARD_CODE_PASSWORD-3", "value": "find_sec_bugs.DMI_CONSTANT_DB_PASSWORD-1.HARD_CODE_PASSWORD-3" }, { "type": "semgrep_id", "name": "find_sec_bugs.DMI_EMPTY_DB_PASSWORD-1.HARD_CODE_PASSWORD-2", "value": "find_sec_bugs.DMI_EMPTY_DB_PASSWORD-1.HARD_CODE_PASSWORD-2" }, { "type": "semgrep_id", "name": "find_sec_bugs.ECB_MODE-1", "value": "find_sec_bugs.ECB_MODE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.EL_INJECTION-1", "value": "find_sec_bugs.EL_INJECTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.EXTERNAL_CONFIG_CONTROL-1", "value": "find_sec_bugs.EXTERNAL_CONFIG_CONTROL-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.FILE_UPLOAD_FILENAME-1", "value": "find_sec_bugs.FILE_UPLOAD_FILENAME-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.FORMAT_STRING_MANIPULATION-1", "value": "find_sec_bugs.FORMAT_STRING_MANIPULATION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.HARD_CODE_PASSWORD-1", "value": "find_sec_bugs.HARD_CODE_PASSWORD-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.HAZELCAST_SYMMETRIC_ENCRYPTION-1", "value": "find_sec_bugs.HAZELCAST_SYMMETRIC_ENCRYPTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.HRS_REQUEST_PARAMETER_TO_HTTP_HEADER-1", "value": "find_sec_bugs.HRS_REQUEST_PARAMETER_TO_HTTP_HEADER-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.HTTPONLY_COOKIE-1", "value": "find_sec_bugs.HTTPONLY_COOKIE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.HTTP_PARAMETER_POLLUTION-1", "value": "find_sec_bugs.HTTP_PARAMETER_POLLUTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.HTTP_RESPONSE_SPLITTING-1", "value": "find_sec_bugs.HTTP_RESPONSE_SPLITTING-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.INSECURE_COOKIE-1", "value": "find_sec_bugs.INSECURE_COOKIE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.INSECURE_SMTP_SSL-1", "value": "find_sec_bugs.INSECURE_SMTP_SSL-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.LDAP_ANONYMOUS-1", "value": "find_sec_bugs.LDAP_ANONYMOUS-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.LDAP_INJECTION-1", "value": "find_sec_bugs.LDAP_INJECTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.MALICIOUS_XSLT-1", "value": "find_sec_bugs.MALICIOUS_XSLT-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.MODIFICATION_AFTER_VALIDATION-1", "value": "find_sec_bugs.MODIFICATION_AFTER_VALIDATION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.NORMALIZATION_AFTER_VALIDATION-1", "value": "find_sec_bugs.NORMALIZATION_AFTER_VALIDATION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.NULL_CIPHER-1", "value": "find_sec_bugs.NULL_CIPHER-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.OGNL_INJECTION-1", "value": "find_sec_bugs.OGNL_INJECTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.OVERLY_PERMISSIVE_FILE_PERMISSION-1", "value": "find_sec_bugs.OVERLY_PERMISSIVE_FILE_PERMISSION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.PADDING_ORACLE-1", "value": "find_sec_bugs.PADDING_ORACLE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.PERMISSIVE_CORS-2", "value": "find_sec_bugs.PERMISSIVE_CORS-2" }, { "type": "semgrep_id", "name": "find_sec_bugs.PT_ABSOLUTE_PATH_TRAVERSAL-1", "value": "find_sec_bugs.PT_ABSOLUTE_PATH_TRAVERSAL-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.REQUESTDISPATCHER_FILE_DISCLOSURE-1.STRUTS_FILE_DISCLOSURE-1.SPRING_FILE_DISCLOSURE-1", "value": "find_sec_bugs.REQUESTDISPATCHER_FILE_DISCLOSURE-1.STRUTS_FILE_DISCLOSURE-1.SPRING_FILE_DISCLOSURE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.RSA_KEY_SIZE-1", "value": "find_sec_bugs.RSA_KEY_SIZE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.RSA_NO_PADDING-1", "value": "find_sec_bugs.RSA_NO_PADDING-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.SAML_IGNORE_COMMENTS-1", "value": "find_sec_bugs.SAML_IGNORE_COMMENTS-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.SCRIPT_ENGINE_INJECTION-1.SPEL_INJECTION-1.EL_INJECTION-2.SEAM_LOG_INJECTION-1", "value": "find_sec_bugs.SCRIPT_ENGINE_INJECTION-1.SPEL_INJECTION-1.EL_INJECTION-2.SEAM_LOG_INJECTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.SMTP_HEADER_INJECTION-1", "value": "find_sec_bugs.SMTP_HEADER_INJECTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.SPRING_CSRF_PROTECTION_DISABLED-1", "value": "find_sec_bugs.SPRING_CSRF_PROTECTION_DISABLED-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.SQL_INJECTION_SPRING_JDBC-1.SQL_INJECTION_JPA-1.SQL_INJECTION_JDO-1.SQL_INJECTION_JDBC-1.SQL_NONCONSTANT_STRING_PASSED_TO_EXECUTE-1.SQL_INJECTION-1.SQL_INJECTION_HIBERNATE-1.SQL_INJECTION_VERTX-1.SQL_PREPARED_STATEMENT_GENERATED_FROM_NONCONSTANT_STRING-1", "value": "find_sec_bugs.SQL_INJECTION_SPRING_JDBC-1.SQL_INJECTION_JPA-1.SQL_INJECTION_JDO-1.SQL_INJECTION_JDBC-1.SQL_NONCONSTANT_STRING_PASSED_TO_EXECUTE-1.SQL_INJECTION-1.SQL_INJECTION_HIBERNATE-1.SQL_INJECTION_VERTX-1.SQL_PREPARED_STATEMENT_GENERATED_FROM_NONCONSTANT_STRING-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.SSL_CONTEXT-1", "value": "find_sec_bugs.SSL_CONTEXT-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.SSL_CONTEXT-2", "value": "find_sec_bugs.SSL_CONTEXT-2" }, { "type": "semgrep_id", "name": "find_sec_bugs.TDES_USAGE-1", "value": "find_sec_bugs.TDES_USAGE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.TEMPLATE_INJECTION_PEBBLE-1.TEMPLATE_INJECTION_FREEMARKER-1.TEMPLATE_INJECTION_VELOCITY-1", "value": "find_sec_bugs.TEMPLATE_INJECTION_PEBBLE-1.TEMPLATE_INJECTION_FREEMARKER-1.TEMPLATE_INJECTION_VELOCITY-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.UNVALIDATED_REDIRECT-1.URL_REWRITING-1", "value": "find_sec_bugs.UNVALIDATED_REDIRECT-1.URL_REWRITING-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.URLCONNECTION_SSRF_FD-1", "value": "find_sec_bugs.URLCONNECTION_SSRF_FD-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.WEAK_FILENAMEUTILS-1", "value": "find_sec_bugs.WEAK_FILENAMEUTILS-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.WEAK_HOSTNAME_VERIFIER-1.WEAK_TRUST_MANAGER-1", "value": "find_sec_bugs.WEAK_HOSTNAME_VERIFIER-1.WEAK_TRUST_MANAGER-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.WEAK_MESSAGE_DIGEST_MD5-1.WEAK_MESSAGE_DIGEST_SHA1-1", "value": "find_sec_bugs.WEAK_MESSAGE_DIGEST_MD5-1.WEAK_MESSAGE_DIGEST_SHA1-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.WICKET_XSS1-1", "value": "find_sec_bugs.WICKET_XSS1-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.XML_DECODER-1", "value": "find_sec_bugs.XML_DECODER-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.XPATH_INJECTION-1", "value": "find_sec_bugs.XPATH_INJECTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.XSS_REQUEST_PARAMETER_TO_SERVLET_WRITER-1", "value": "find_sec_bugs.XSS_REQUEST_PARAMETER_TO_SERVLET_WRITER-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.XXE_SAXPARSER-1", "value": "find_sec_bugs.XXE_SAXPARSER-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.XXE_XMLREADER-1", "value": "find_sec_bugs.XXE_XMLREADER-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.XXE_XMLSTREAMREADER-1", "value": "find_sec_bugs.XXE_XMLSTREAMREADER-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.AWS_QUERY_INJECTION", "value": "find_sec_bugs.AWS_QUERY_INJECTION" }, { "type": "semgrep_id", "name": "find_sec_bugs.BAD_HEXA_CONVERSION", "value": "find_sec_bugs.BAD_HEXA_CONVERSION" }, { "type": "semgrep_id", "name": "find_sec_bugs.BEAN_PROPERTY_INJECTION", "value": "find_sec_bugs.BEAN_PROPERTY_INJECTION" }, { "type": "semgrep_id", "name": "find_sec_bugs.BLOWFISH_KEY_SIZE", "value": "find_sec_bugs.BLOWFISH_KEY_SIZE" }, { "type": "semgrep_id", "name": "find_sec_bugs.CIPHER_INTEGRITY", "value": "find_sec_bugs.CIPHER_INTEGRITY" }, { "type": "semgrep_id", "name": "find_sec_bugs.COMMAND_INJECTION-1.SCALA_COMMAND_INJECTION-1", "value": "find_sec_bugs.COMMAND_INJECTION-1.SCALA_COMMAND_INJECTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.COOKIE_PERSISTENT", "value": "find_sec_bugs.COOKIE_PERSISTENT" }, { "type": "semgrep_id", "name": "find_sec_bugs.COOKIE_USAGE", "value": "find_sec_bugs.COOKIE_USAGE" }, { "type": "semgrep_id", "name": "find_sec_bugs.CRLF_INJECTION_LOGS", "value": "find_sec_bugs.CRLF_INJECTION_LOGS" }, { "type": "semgrep_id", "name": "find_sec_bugs.CUSTOM_INJECTION", "value": "find_sec_bugs.CUSTOM_INJECTION" }, { "type": "semgrep_id", "name": "find_sec_bugs.CUSTOM_INJECTION-2", "value": "find_sec_bugs.CUSTOM_INJECTION-2" }, { "type": "semgrep_id", "name": "find_sec_bugs.CUSTOM_MESSAGE_DIGEST", "value": "find_sec_bugs.CUSTOM_MESSAGE_DIGEST" }, { "type": "semgrep_id", "name": "find_sec_bugs.DANGEROUS_PERMISSION_COMBINATION", "value": "find_sec_bugs.DANGEROUS_PERMISSION_COMBINATION" }, { "type": "semgrep_id", "name": "find_sec_bugs.DEFAULT_HTTP_CLIENT", "value": "find_sec_bugs.DEFAULT_HTTP_CLIENT" }, { "type": "semgrep_id", "name": "find_sec_bugs.DES_USAGE", "value": "find_sec_bugs.DES_USAGE" }, { "type": "semgrep_id", "name": "find_sec_bugs.DMI_CONSTANT_DB_PASSWORD-1.HARD_CODE_PASSWORD-3", "value": "find_sec_bugs.DMI_CONSTANT_DB_PASSWORD-1.HARD_CODE_PASSWORD-3" }, { "type": "semgrep_id", "name": "find_sec_bugs.DMI_EMPTY_DB_PASSWORD-1.HARD_CODE_PASSWORD-2", "value": "find_sec_bugs.DMI_EMPTY_DB_PASSWORD-1.HARD_CODE_PASSWORD-2" }, { "type": "semgrep_id", "name": "find_sec_bugs.ECB_MODE", "value": "find_sec_bugs.ECB_MODE" }, { "type": "semgrep_id", "name": "find_sec_bugs.EL_INJECTION", "value": "find_sec_bugs.EL_INJECTION" }, { "type": "semgrep_id", "name": "find_sec_bugs.EXTERNAL_CONFIG_CONTROL", "value": "find_sec_bugs.EXTERNAL_CONFIG_CONTROL" }, { "type": "semgrep_id", "name": "find_sec_bugs.FILE_UPLOAD_FILENAME", "value": "find_sec_bugs.FILE_UPLOAD_FILENAME" }, { "type": "semgrep_id", "name": "find_sec_bugs.FORMAT_STRING_MANIPULATION", "value": "find_sec_bugs.FORMAT_STRING_MANIPULATION" }, { "type": "semgrep_id", "name": "find_sec_bugs.HARD_CODE_PASSWORD", "value": "find_sec_bugs.HARD_CODE_PASSWORD" }, { "type": "semgrep_id", "name": "find_sec_bugs.HAZELCAST_SYMMETRIC_ENCRYPTION", "value": "find_sec_bugs.HAZELCAST_SYMMETRIC_ENCRYPTION" }, { "type": "semgrep_id", "name": "find_sec_bugs.HRS_REQUEST_PARAMETER_TO_COOKIE", "value": "find_sec_bugs.HRS_REQUEST_PARAMETER_TO_COOKIE" }, { "type": "semgrep_id", "name": "find_sec_bugs.HRS_REQUEST_PARAMETER_TO_HTTP_HEADER", "value": "find_sec_bugs.HRS_REQUEST_PARAMETER_TO_HTTP_HEADER" }, { "type": "semgrep_id", "name": "find_sec_bugs.HTTPONLY_COOKIE", "value": "find_sec_bugs.HTTPONLY_COOKIE" }, { "type": "semgrep_id", "name": "find_sec_bugs.HTTP_PARAMETER_POLLUTION", "value": "find_sec_bugs.HTTP_PARAMETER_POLLUTION" }, { "type": "semgrep_id", "name": "find_sec_bugs.HTTP_RESPONSE_SPLITTING", "value": "find_sec_bugs.HTTP_RESPONSE_SPLITTING" }, { "type": "semgrep_id", "name": "find_sec_bugs.IMPROPER_UNICODE", "value": "find_sec_bugs.IMPROPER_UNICODE" }, { "type": "semgrep_id", "name": "find_sec_bugs.INFORMATION_EXPOSURE_THROUGH_AN_ERROR_MESSAGE", "value": "find_sec_bugs.INFORMATION_EXPOSURE_THROUGH_AN_ERROR_MESSAGE" }, { "type": "semgrep_id", "name": "find_sec_bugs.INSECURE_COOKIE", "value": "find_sec_bugs.INSECURE_COOKIE" }, { "type": "semgrep_id", "name": "find_sec_bugs.INSECURE_SMTP_SSL", "value": "find_sec_bugs.INSECURE_SMTP_SSL" }, { "type": "semgrep_id", "name": "find_sec_bugs.JAXRS_ENDPOINT", "value": "find_sec_bugs.JAXRS_ENDPOINT" }, { "type": "semgrep_id", "name": "find_sec_bugs.JAXWS_ENDPOINT", "value": "find_sec_bugs.JAXWS_ENDPOINT" }, { "type": "semgrep_id", "name": "find_sec_bugs.LDAP_ANONYMOUS", "value": "find_sec_bugs.LDAP_ANONYMOUS" }, { "type": "semgrep_id", "name": "find_sec_bugs.LDAP_ENTRY_POISONING", "value": "find_sec_bugs.LDAP_ENTRY_POISONING" }, { "type": "semgrep_id", "name": "find_sec_bugs.LDAP_INJECTION", "value": "find_sec_bugs.LDAP_INJECTION" }, { "type": "semgrep_id", "name": "find_sec_bugs.MALICIOUS_XSLT", "value": "find_sec_bugs.MALICIOUS_XSLT" }, { "type": "semgrep_id", "name": "find_sec_bugs.MODIFICATION_AFTER_VALIDATION", "value": "find_sec_bugs.MODIFICATION_AFTER_VALIDATION" }, { "type": "semgrep_id", "name": "find_sec_bugs.NORMALIZATION_AFTER_VALIDATION", "value": "find_sec_bugs.NORMALIZATION_AFTER_VALIDATION" }, { "type": "semgrep_id", "name": "find_sec_bugs.NULL_CIPHER", "value": "find_sec_bugs.NULL_CIPHER" }, { "type": "semgrep_id", "name": "find_sec_bugs.OGNL_INJECTION", "value": "find_sec_bugs.OGNL_INJECTION" }, { "type": "semgrep_id", "name": "find_sec_bugs.OVERLY_PERMISSIVE_FILE_PERMISSION", "value": "find_sec_bugs.OVERLY_PERMISSIVE_FILE_PERMISSION" }, { "type": "semgrep_id", "name": "find_sec_bugs.OVERLY_PERMISSIVE_FILE_PERMISSION-2", "value": "find_sec_bugs.OVERLY_PERMISSIVE_FILE_PERMISSION-2" }, { "type": "semgrep_id", "name": "find_sec_bugs.PADDING_ORACLE", "value": "find_sec_bugs.PADDING_ORACLE" }, { "type": "semgrep_id", "name": "find_sec_bugs.PATH_TRAVERSAL_IN-1.SCALA_PATH_TRAVERSAL_IN-1", "value": "find_sec_bugs.PATH_TRAVERSAL_IN-1.SCALA_PATH_TRAVERSAL_IN-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.PATH_TRAVERSAL_OUT", "value": "find_sec_bugs.PATH_TRAVERSAL_OUT" }, { "type": "semgrep_id", "name": "find_sec_bugs.PERMISSIVE_CORS", "value": "find_sec_bugs.PERMISSIVE_CORS" }, { "type": "semgrep_id", "name": "find_sec_bugs.PERMISSIVE_CORS-2", "value": "find_sec_bugs.PERMISSIVE_CORS-2" }, { "type": "semgrep_id", "name": "find_sec_bugs.PT_ABSOLUTE_PATH_TRAVERSAL", "value": "find_sec_bugs.PT_ABSOLUTE_PATH_TRAVERSAL" }, { "type": "semgrep_id", "name": "find_sec_bugs.PT_RELATIVE_PATH_TRAVERSAL", "value": "find_sec_bugs.PT_RELATIVE_PATH_TRAVERSAL" }, { "type": "semgrep_id", "name": "find_sec_bugs.REQUESTDISPATCHER_FILE_DISCLOSURE-1.STRUTS_FILE_DISCLOSURE-1.SPRING_FILE_DISCLOSURE-1", "value": "find_sec_bugs.REQUESTDISPATCHER_FILE_DISCLOSURE-1.STRUTS_FILE_DISCLOSURE-1.SPRING_FILE_DISCLOSURE-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.RPC_ENABLED_EXTENSIONS", "value": "find_sec_bugs.RPC_ENABLED_EXTENSIONS" }, { "type": "semgrep_id", "name": "find_sec_bugs.RSA_KEY_SIZE", "value": "find_sec_bugs.RSA_KEY_SIZE" }, { "type": "semgrep_id", "name": "find_sec_bugs.RSA_NO_PADDING", "value": "find_sec_bugs.RSA_NO_PADDING" }, { "type": "semgrep_id", "name": "find_sec_bugs.SAML_IGNORE_COMMENTS", "value": "find_sec_bugs.SAML_IGNORE_COMMENTS" }, { "type": "semgrep_id", "name": "find_sec_bugs.SCALA_PLAY_SSRF", "value": "find_sec_bugs.SCALA_PLAY_SSRF" }, { "type": "semgrep_id", "name": "find_sec_bugs.SCALA_SENSITIVE_DATA_EXPOSURE", "value": "find_sec_bugs.SCALA_SENSITIVE_DATA_EXPOSURE" }, { "type": "semgrep_id", "name": "find_sec_bugs.SCALA_XSS_MVC_API", "value": "find_sec_bugs.SCALA_XSS_MVC_API" }, { "type": "semgrep_id", "name": "find_sec_bugs.SCRIPT_ENGINE_INJECTION-1.SPEL_INJECTION-1.EL_INJECTION-2.SEAM_LOG_INJECTION-1", "value": "find_sec_bugs.SCRIPT_ENGINE_INJECTION-1.SPEL_INJECTION-1.EL_INJECTION-2.SEAM_LOG_INJECTION-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.SCRIPT_ENGINE_INJECTION-2", "value": "find_sec_bugs.SCRIPT_ENGINE_INJECTION-2" }, { "type": "semgrep_id", "name": "find_sec_bugs.SMTP_HEADER_INJECTION", "value": "find_sec_bugs.SMTP_HEADER_INJECTION" }, { "type": "semgrep_id", "name": "find_sec_bugs.SQL_INJECTION_SPRING_JDBC-1.SQL_INJECTION_JPA-1.SQL_INJECTION_JDO-1.SQL_INJECTION_JDBC-1.SQL_NONCONSTANT_STRING_PASSED_TO_EXECUTE-1.SCALA_SQL_INJECTION_SLICK-1", "value": "find_sec_bugs.SQL_INJECTION_SPRING_JDBC-1.SQL_INJECTION_JPA-1.SQL_INJECTION_JDO-1.SQL_INJECTION_JDBC-1.SQL_NONCONSTANT_STRING_PASSED_TO_EXECUTE-1.SCALA_SQL_INJECTION_SLICK-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.SSL_CONTEXT", "value": "find_sec_bugs.SSL_CONTEXT" }, { "type": "semgrep_id", "name": "find_sec_bugs.STRUTS_FORM_VALIDATION", "value": "find_sec_bugs.STRUTS_FORM_VALIDATION" }, { "type": "semgrep_id", "name": "find_sec_bugs.TDES_USAGE", "value": "find_sec_bugs.TDES_USAGE" }, { "type": "semgrep_id", "name": "find_sec_bugs.TEMPLATE_INJECTION_PEBBLE-1.TEMPLATE_INJECTION_FREEMARKER-1.TEMPLATE_INJECTION_VELOCITY-1", "value": "find_sec_bugs.TEMPLATE_INJECTION_PEBBLE-1.TEMPLATE_INJECTION_FREEMARKER-1.TEMPLATE_INJECTION_VELOCITY-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.TRUST_BOUNDARY_VIOLATION", "value": "find_sec_bugs.TRUST_BOUNDARY_VIOLATION" }, { "type": "semgrep_id", "name": "find_sec_bugs.UNENCRYPTED_SOCKET-1.UNENCRYPTED_SERVER_SOCKET-1", "value": "find_sec_bugs.UNENCRYPTED_SOCKET-1.UNENCRYPTED_SERVER_SOCKET-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.UNVALIDATED_REDIRECT-1.URL_REWRITING-1", "value": "find_sec_bugs.UNVALIDATED_REDIRECT-1.URL_REWRITING-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.URLCONNECTION_SSRF_FD", "value": "find_sec_bugs.URLCONNECTION_SSRF_FD" }, { "type": "semgrep_id", "name": "find_sec_bugs.WEAK_FILENAMEUTILS", "value": "find_sec_bugs.WEAK_FILENAMEUTILS" }, { "type": "semgrep_id", "name": "find_sec_bugs.WEAK_HOSTNAME_VERIFIER-1.WEAK_TRUST_MANAGER-1", "value": "find_sec_bugs.WEAK_HOSTNAME_VERIFIER-1.WEAK_TRUST_MANAGER-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.WEAK_MESSAGE_DIGEST_MD5-1.WEAK_MESSAGE_DIGEST_SHA1-1", "value": "find_sec_bugs.WEAK_MESSAGE_DIGEST_MD5-1.WEAK_MESSAGE_DIGEST_SHA1-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.WICKET_XSS1", "value": "find_sec_bugs.WICKET_XSS1" }, { "type": "semgrep_id", "name": "find_sec_bugs.XML_DECODER", "value": "find_sec_bugs.XML_DECODER" }, { "type": "semgrep_id", "name": "find_sec_bugs.XPATH_INJECTION", "value": "find_sec_bugs.XPATH_INJECTION" }, { "type": "semgrep_id", "name": "find_sec_bugs.XSS_REQUEST_PARAMETER_TO_SERVLET_WRITER", "value": "find_sec_bugs.XSS_REQUEST_PARAMETER_TO_SERVLET_WRITER" }, { "type": "semgrep_id", "name": "find_sec_bugs.XSS_REQUEST_WRAPPER", "value": "find_sec_bugs.XSS_REQUEST_WRAPPER" }, { "type": "semgrep_id", "name": "find_sec_bugs.XSS_SERVLET", "value": "find_sec_bugs.XSS_SERVLET" }, { "type": "semgrep_id", "name": "find_sec_bugs.XXE_DOCUMENT", "value": "find_sec_bugs.XXE_DOCUMENT" }, { "type": "semgrep_id", "name": "find_sec_bugs.XXE_DTD_TRANSFORM_FACTORY-1.XXE_XSLT_TRANSFORM_FACTORY-1", "value": "find_sec_bugs.XXE_DTD_TRANSFORM_FACTORY-1.XXE_XSLT_TRANSFORM_FACTORY-1" }, { "type": "semgrep_id", "name": "find_sec_bugs.XXE_SAXPARSER", "value": "find_sec_bugs.XXE_SAXPARSER" }, { "type": "semgrep_id", "name": "find_sec_bugs.XXE_XMLREADER", "value": "find_sec_bugs.XXE_XMLREADER" }, { "type": "semgrep_id", "name": "find_sec_bugs.XXE_XMLSTREAMREADER", "value": "find_sec_bugs.XXE_XMLSTREAMREADER" }, { "type": "semgrep_id", "name": "find_sec_bugs.XXE_XPATH", "value": "find_sec_bugs.XXE_XPATH" }, { "type": "semgrep_id", "name": "flawfinder.AddAccessAllowedAce-1", "value": "flawfinder.AddAccessAllowedAce-1" }, { "type": "semgrep_id", "name": "flawfinder.CreateProcess-1", "value": "flawfinder.CreateProcess-1" }, { "type": "semgrep_id", "name": "flawfinder.CreateProcessAsUser-1.CreateProcessWithLogon-1", "value": "flawfinder.CreateProcessAsUser-1.CreateProcessWithLogon-1" }, { "type": "semgrep_id", "name": "flawfinder.EVP_des_ecb-1.EVP_des_cbc-1.EVP_des_cfb-1.EVP_des_ofb-1.EVP_desx_cbc-1", "value": "flawfinder.EVP_des_ecb-1.EVP_des_cbc-1.EVP_des_cfb-1.EVP_des_ofb-1.EVP_desx_cbc-1" }, { "type": "semgrep_id", "name": "flawfinder.EVP_rc4_40-1.EVP_rc2_40_cbc-1.EVP_rc2_64_cbc-1", "value": "flawfinder.EVP_rc4_40-1.EVP_rc2_40_cbc-1.EVP_rc2_64_cbc-1" }, { "type": "semgrep_id", "name": "flawfinder.GetTempFileName-1", "value": "flawfinder.GetTempFileName-1" }, { "type": "semgrep_id", "name": "flawfinder.LoadLibrary-1", "value": "flawfinder.LoadLibrary-1" }, { "type": "semgrep_id", "name": "flawfinder.LoadLibraryEx-1", "value": "flawfinder.LoadLibraryEx-1" }, { "type": "semgrep_id", "name": "flawfinder.MultiByteToWideChar-1", "value": "flawfinder.MultiByteToWideChar-1" }, { "type": "semgrep_id", "name": "flawfinder.RpcImpersonateClient-1.ImpersonateLoggedOnUser-1.CoImpersonateClient-1.ImpersonateNamedPipeClient-1.ImpersonateDdeClientWindow-1.ImpersonateSecurityContext-1.SetThreadToken-1", "value": "flawfinder.RpcImpersonateClient-1.ImpersonateLoggedOnUser-1.CoImpersonateClient-1.ImpersonateNamedPipeClient-1.ImpersonateDdeClientWindow-1.ImpersonateSecurityContext-1.SetThreadToken-1" }, { "type": "semgrep_id", "name": "flawfinder.SetSecurityDescriptorDacl-1", "value": "flawfinder.SetSecurityDescriptorDacl-1" }, { "type": "semgrep_id", "name": "flawfinder.StrCat-1.StrCatA-1.StrcatW-1.lstrcatA-1.lstrcatW-1.strCatBuff-1.StrCatBuffA-1.StrCatBuffW-1.StrCatChainW-1._tccat-1._mbccat-1._ftcscat-1.StrCatN-1.StrCatNA-1.StrCatNW-1.StrNCat-1.StrNCatA-1.StrNCatW-1.lstrncat-1.lstrcatnA-1.lstrcatnW-1", "value": "flawfinder.StrCat-1.StrCatA-1.StrcatW-1.lstrcatA-1.lstrcatW-1.strCatBuff-1.StrCatBuffA-1.StrCatBuffW-1.StrCatChainW-1._tccat-1._mbccat-1._ftcscat-1.StrCatN-1.StrCatNA-1.StrCatNW-1.StrNCat-1.StrNCatA-1.StrNCatW-1.lstrncat-1.lstrcatnA-1.lstrcatnW-1" }, { "type": "semgrep_id", "name": "flawfinder.access-1", "value": "flawfinder.access-1" }, { "type": "semgrep_id", "name": "flawfinder.atoi-1.atol-1._wtoi-1._wtoi64-1", "value": "flawfinder.atoi-1.atol-1._wtoi-1._wtoi64-1" }, { "type": "semgrep_id", "name": "flawfinder.chmod-1", "value": "flawfinder.chmod-1" }, { "type": "semgrep_id", "name": "flawfinder.chown-1", "value": "flawfinder.chown-1" }, { "type": "semgrep_id", "name": "flawfinder.crypt-1.crypt_r-1", "value": "flawfinder.crypt-1.crypt_r-1" }, { "type": "semgrep_id", "name": "flawfinder.cuserid-1", "value": "flawfinder.cuserid-1" }, { "type": "semgrep_id", "name": "flawfinder.drand48-1.erand48-1.jrand48-1.lcong48-1.lrand48-1.mrand48-1.nrand48-1.random-1.seed48-1.setstate-1.srand-1.strfry-1.srandom-1.g_rand_boolean-1.g_rand_int-1.g_rand_int_range-1.g_rand_double-1.g_rand_double_range-1.g_random_boolean-1.g_random_int-1.g_random_int_range-1.g_random_double-1.g_random_double_range-1", "value": "flawfinder.drand48-1.erand48-1.jrand48-1.lcong48-1.lrand48-1.mrand48-1.nrand48-1.random-1.seed48-1.setstate-1.srand-1.strfry-1.srandom-1.g_rand_boolean-1.g_rand_int-1.g_rand_int_range-1.g_rand_double-1.g_rand_double_range-1.g_random_boolean-1.g_random_int-1.g_random_int_range-1.g_random_double-1.g_random_double_range-1" }, { "type": "semgrep_id", "name": "flawfinder.execl-1.execlp-1.execle-1.execv-1.execvp-1.popen-1.WinExec-1.ShellExecute-1", "value": "flawfinder.execl-1.execlp-1.execle-1.execv-1.execvp-1.popen-1.WinExec-1.ShellExecute-1" }, { "type": "semgrep_id", "name": "flawfinder.fopen-1.open-1", "value": "flawfinder.fopen-1.open-1" }, { "type": "semgrep_id", "name": "flawfinder.fprintf-1.vfprintf-1._ftprintf-1._vftprintf-1.fwprintf-1.fvwprintf-1", "value": "flawfinder.fprintf-1.vfprintf-1._ftprintf-1._vftprintf-1.fwprintf-1.fvwprintf-1" }, { "type": "semgrep_id", "name": "flawfinder.fscanf-1.sscanf-1.vsscanf-1.vfscanf-1._ftscanf-1.fwscanf-1.vfwscanf-1.vswscanf-1", "value": "flawfinder.fscanf-1.sscanf-1.vsscanf-1.vfscanf-1._ftscanf-1.fwscanf-1.vfwscanf-1.vswscanf-1" }, { "type": "semgrep_id", "name": "flawfinder.g_get_home_dir-1", "value": "flawfinder.g_get_home_dir-1" }, { "type": "semgrep_id", "name": "flawfinder.g_get_tmp_dir-1", "value": "flawfinder.g_get_tmp_dir-1" }, { "type": "semgrep_id", "name": "flawfinder.getenv-1.curl_getenv-1", "value": "flawfinder.getenv-1.curl_getenv-1" }, { "type": "semgrep_id", "name": "flawfinder.getlogin-1", "value": "flawfinder.getlogin-1" }, { "type": "semgrep_id", "name": "flawfinder.getpass-1", "value": "flawfinder.getpass-1" }, { "type": "semgrep_id", "name": "flawfinder.gets-1._getts-1", "value": "flawfinder.gets-1._getts-1" }, { "type": "semgrep_id", "name": "flawfinder.getwd-1", "value": "flawfinder.getwd-1" }, { "type": "semgrep_id", "name": "flawfinder.gsignal-1.ssignal-1", "value": "flawfinder.gsignal-1.ssignal-1" }, { "type": "semgrep_id", "name": "flawfinder.lstrcat-1.wcscat-1._tcscat-1._mbscat-1", "value": "flawfinder.lstrcat-1.wcscat-1._tcscat-1._mbscat-1" }, { "type": "semgrep_id", "name": "flawfinder.lstrcatn-1.wcsncat-1._tcsncat-1._mbsnbcat-1", "value": "flawfinder.lstrcatn-1.wcsncat-1._tcsncat-1._mbsnbcat-1" }, { "type": "semgrep_id", "name": "flawfinder.lstrcpy-1.wcscpy-1._tcscpy-1._mbscpy-1", "value": "flawfinder.lstrcpy-1.wcscpy-1._tcscpy-1._mbscpy-1" }, { "type": "semgrep_id", "name": "flawfinder.lstrcpyn-1.wcsncpy-1._tcsncpy-1._mbsnbcpy-1", "value": "flawfinder.lstrcpyn-1.wcsncpy-1._tcsncpy-1._mbsnbcpy-1" }, { "type": "semgrep_id", "name": "flawfinder.memalign-1", "value": "flawfinder.memalign-1" }, { "type": "semgrep_id", "name": "flawfinder.memcpy-1.CopyMemory-1.bcopy-1", "value": "flawfinder.memcpy-1.CopyMemory-1.bcopy-1" }, { "type": "semgrep_id", "name": "flawfinder.mkstemp-1", "value": "flawfinder.mkstemp-1" }, { "type": "semgrep_id", "name": "flawfinder.mktemp-1", "value": "flawfinder.mktemp-1" }, { "type": "semgrep_id", "name": "flawfinder.printf-1.vprintf-1.vwprintf-1.vfwprintf-1._vtprintf-1.wprintf-1", "value": "flawfinder.printf-1.vprintf-1.vwprintf-1.vfwprintf-1._vtprintf-1.wprintf-1" }, { "type": "semgrep_id", "name": "flawfinder.readlink-1", "value": "flawfinder.readlink-1" }, { "type": "semgrep_id", "name": "flawfinder.realpath-1", "value": "flawfinder.realpath-1" }, { "type": "semgrep_id", "name": "flawfinder.scanf-1.vscanf-1.wscanf-1._tscanf-1.vwscanf-1", "value": "flawfinder.scanf-1.vscanf-1.wscanf-1._tscanf-1.vwscanf-1" }, { "type": "semgrep_id", "name": "flawfinder.snprintf-1.vsnprintf-1._snprintf-1._sntprintf-1._vsntprintf-1", "value": "flawfinder.snprintf-1.vsnprintf-1._snprintf-1._sntprintf-1._vsntprintf-1" }, { "type": "semgrep_id", "name": "flawfinder.sprintf-1.vsprintf-1.swprintf-1.vswprintf-1._stprintf-1._vstprintf-1", "value": "flawfinder.sprintf-1.vsprintf-1.swprintf-1.vswprintf-1._stprintf-1._vstprintf-1" }, { "type": "semgrep_id", "name": "flawfinder.strcat-1", "value": "flawfinder.strcat-1" }, { "type": "semgrep_id", "name": "flawfinder.strccpy-1.strcadd-1", "value": "flawfinder.strccpy-1.strcadd-1" }, { "type": "semgrep_id", "name": "flawfinder.strcpy-1", "value": "flawfinder.strcpy-1" }, { "type": "semgrep_id", "name": "flawfinder.strcpyA-1.strcpyW-1.StrCpy-1.StrCpyA-1.lstrcpyA-1.lstrcpyW-1._tccpy-1._mbccpy-1._ftcscpy-1._mbsncpy-1.StrCpyN-1.StrCpyNA-1.StrCpyNW-1.StrNCpy-1.strcpynA-1.StrNCpyA-1.StrNCpyW-1.lstrcpynA-1.lstrcpynW-1", "value": "flawfinder.strcpyA-1.strcpyW-1.StrCpy-1.StrCpyA-1.lstrcpyA-1.lstrcpyW-1._tccpy-1._mbccpy-1._ftcscpy-1._mbsncpy-1.StrCpyN-1.StrCpyNA-1.StrCpyNW-1.StrNCpy-1.strcpynA-1.StrNCpyA-1.StrNCpyW-1.lstrcpynA-1.lstrcpynW-1" }, { "type": "semgrep_id", "name": "flawfinder.streadd-1.strecpy-1", "value": "flawfinder.streadd-1.strecpy-1" }, { "type": "semgrep_id", "name": "flawfinder.strlen-1.wcslen-1._tcslen-1._mbslen-1", "value": "flawfinder.strlen-1.wcslen-1._tcslen-1._mbslen-1" }, { "type": "semgrep_id", "name": "flawfinder.strncat-1", "value": "flawfinder.strncat-1" }, { "type": "semgrep_id", "name": "flawfinder.strncpy-1", "value": "flawfinder.strncpy-1" }, { "type": "semgrep_id", "name": "flawfinder.strtrns-1", "value": "flawfinder.strtrns-1" }, { "type": "semgrep_id", "name": "flawfinder.syslog-1", "value": "flawfinder.syslog-1" }, { "type": "semgrep_id", "name": "flawfinder.system-1", "value": "flawfinder.system-1" }, { "type": "semgrep_id", "name": "flawfinder.tmpfile-1", "value": "flawfinder.tmpfile-1" }, { "type": "semgrep_id", "name": "flawfinder.tmpnam-1.tempnam-1", "value": "flawfinder.tmpnam-1.tempnam-1" }, { "type": "semgrep_id", "name": "flawfinder.ulimit-1", "value": "flawfinder.ulimit-1" }, { "type": "semgrep_id", "name": "flawfinder.umask-1", "value": "flawfinder.umask-1" }, { "type": "semgrep_id", "name": "flawfinder.usleep-1", "value": "flawfinder.usleep-1" }, { "type": "semgrep_id", "name": "flawfinder.vfork-1", "value": "flawfinder.vfork-1" }, { "type": "semgrep_id", "name": "generic_injection_rule-BiDiTrojanSource", "value": "generic_injection_rule-BiDiTrojanSource" }, { "type": "semgrep_id", "name": "gosec.G102-1", "value": "gosec.G102-1" }, { "type": "semgrep_id", "name": "gosec.G103-1", "value": "gosec.G103-1" }, { "type": "semgrep_id", "name": "gosec.G106-1", "value": "gosec.G106-1" }, { "type": "semgrep_id", "name": "gosec.G107-1", "value": "gosec.G107-1" }, { "type": "semgrep_id", "name": "gosec.G108-1", "value": "gosec.G108-1" }, { "type": "semgrep_id", "name": "gosec.G109-1", "value": "gosec.G109-1" }, { "type": "semgrep_id", "name": "gosec.G110-1", "value": "gosec.G110-1" }, { "type": "semgrep_id", "name": "gosec.G111-1", "value": "gosec.G111-1" }, { "type": "semgrep_id", "name": "gosec.G114-1", "value": "gosec.G114-1" }, { "type": "semgrep_id", "name": "gosec.G202-1", "value": "gosec.G202-1" }, { "type": "semgrep_id", "name": "gosec.G203-1", "value": "gosec.G203-1" }, { "type": "semgrep_id", "name": "gosec.G204-1", "value": "gosec.G204-1" }, { "type": "semgrep_id", "name": "gosec.G301-1", "value": "gosec.G301-1" }, { "type": "semgrep_id", "name": "gosec.G302-1", "value": "gosec.G302-1" }, { "type": "semgrep_id", "name": "gosec.G303-1", "value": "gosec.G303-1" }, { "type": "semgrep_id", "name": "gosec.G304-1", "value": "gosec.G304-1" }, { "type": "semgrep_id", "name": "gosec.G305-1", "value": "gosec.G305-1" }, { "type": "semgrep_id", "name": "gosec.G306-1", "value": "gosec.G306-1" }, { "type": "semgrep_id", "name": "gosec.G402-1", "value": "gosec.G402-1" }, { "type": "semgrep_id", "name": "gosec.G402-2", "value": "gosec.G402-2" }, { "type": "semgrep_id", "name": "gosec.G403-1", "value": "gosec.G403-1" }, { "type": "semgrep_id", "name": "gosec.G404-1", "value": "gosec.G404-1" }, { "type": "semgrep_id", "name": "gosec.G501-1", "value": "gosec.G501-1" }, { "type": "semgrep_id", "name": "gosec.G502-1", "value": "gosec.G502-1" }, { "type": "semgrep_id", "name": "gosec.G503-1", "value": "gosec.G503-1" }, { "type": "semgrep_id", "name": "gosec.G505-1", "value": "gosec.G505-1" }, { "type": "semgrep_id", "name": "gosec.G601-1", "value": "gosec.G601-1" }, { "type": "semgrep_id", "name": "java_cookie_rule-CookieHTTPOnly", "value": "java_cookie_rule-CookieHTTPOnly" }, { "type": "semgrep_id", "name": "java_crypto_rule-DisallowOldTLSVersion", "value": "java_crypto_rule-DisallowOldTLSVersion" }, { "type": "semgrep_id", "name": "java_crypto_rule-GCMNonceReuse", "value": "java_crypto_rule-GCMNonceReuse" }, { "type": "semgrep_id", "name": "java_crypto_rule-HTTPUrlConnectionHTTPRequest", "value": "java_crypto_rule-HTTPUrlConnectionHTTPRequest" }, { "type": "semgrep_id", "name": "java_crypto_rule-HttpComponentsRequest", "value": "java_crypto_rule-HttpComponentsRequest" }, { "type": "semgrep_id", "name": "java_crypto_rule-HttpGetHTTPRequest", "value": "java_crypto_rule-HttpGetHTTPRequest" }, { "type": "semgrep_id", "name": "java_crypto_rule-SocketRequestUnsafeProtocols", "value": "java_crypto_rule-SocketRequestUnsafeProtocols" }, { "type": "semgrep_id", "name": "java_crypto_rule-SpringFTPRequest", "value": "java_crypto_rule-SpringFTPRequest" }, { "type": "semgrep_id", "name": "java_crypto_rule-SpringHTTPRequestRestTemplate", "value": "java_crypto_rule-SpringHTTPRequestRestTemplate" }, { "type": "semgrep_id", "name": "java_crypto_rule-TLSUnsafeRenegotiation", "value": "java_crypto_rule-TLSUnsafeRenegotiation" }, { "type": "semgrep_id", "name": "java_crypto_rule-TelnetRequest", "value": "java_crypto_rule-TelnetRequest" }, { "type": "semgrep_id", "name": "java_crypto_rule-UnirestHTTPRequest", "value": "java_crypto_rule-UnirestHTTPRequest" }, { "type": "semgrep_id", "name": "java_crypto_rule-UseOfRC2", "value": "java_crypto_rule-UseOfRC2" }, { "type": "semgrep_id", "name": "java_crypto_rule-UseOfRC4", "value": "java_crypto_rule-UseOfRC4" }, { "type": "semgrep_id", "name": "java_crypto_rule_JwtDecodeWithoutVerify", "value": "java_crypto_rule_JwtDecodeWithoutVerify", "url": "https://semgrep.dev/blog/2020/hardcoded-secrets-unverified-tokens-and-other-common-jwt-mistakes/" }, { "type": "semgrep_id", "name": "java_crypto_rule_JwtNoneAlgorithm", "value": "java_crypto_rule_JwtNoneAlgorithm", "url": "https://semgrep.dev/blog/2020/hardcoded-secrets-unverified-tokens-and-other-common-jwt-mistakes/" }, { "type": "semgrep_id", "name": "java_csrf_rule-SpringCSRFDisabled", "value": "java_csrf_rule-SpringCSRFDisabled" }, { "type": "semgrep_id", "name": "java_csrf_rule-UnrestrictedRequestMapping", "value": "java_csrf_rule-UnrestrictedRequestMapping", "url": "https://find-sec-bugs.github.io/bugs.htm#SPRING_CSRF_UNRESTRICTED_REQUEST_MAPPING" }, { "type": "semgrep_id", "name": "java_deserialization_rule-InsecureDeserialization", "value": "java_deserialization_rule-InsecureDeserialization" }, { "type": "semgrep_id", "name": "java_deserialization_rule-InsecureJmsDeserialization", "value": "java_deserialization_rule-InsecureJmsDeserialization" }, { "type": "semgrep_id", "name": "java_deserialization_rule-JacksonUnsafeDeserialization", "value": "java_deserialization_rule-JacksonUnsafeDeserialization" }, { "type": "semgrep_id", "name": "java_deserialization_rule-ServerDangerousObjectDeserialization", "value": "java_deserialization_rule-ServerDangerousObjectDeserialization" }, { "type": "semgrep_id", "name": "java_deserialization_rule-SnakeYamlConstructor", "value": "java_deserialization_rule-SnakeYamlConstructor" }, { "type": "semgrep_id", "name": "java_endpoint_rule-ManuallyConstructedURLs", "value": "java_endpoint_rule-ManuallyConstructedURLs" }, { "type": "semgrep_id", "name": "java_file_rule-FilePathTraversalHttpServlet", "value": "java_file_rule-FilePathTraversalHttpServlet", "url": "https://find-sec-bugs.github.io/bugs.htm#PATH_TRAVERSAL_IN" }, { "type": "semgrep_id", "name": "java_ftp_rule-FTPInsecureTransport", "value": "java_ftp_rule-FTPInsecureTransport" }, { "type": "semgrep_id", "name": "java_inject_rule-DangerousGroovyShell", "value": "java_inject_rule-DangerousGroovyShell", "url": "https://find-sec-bugs.github.io/bugs.htm#GROOVY_SHELL" }, { "type": "semgrep_id", "name": "java_inject_rule-EnvInjection", "value": "java_inject_rule-EnvInjection" }, { "type": "semgrep_id", "name": "java_inject_rule-MongodbNoSQLi", "value": "java_inject_rule-MongodbNoSQLi" }, { "type": "semgrep_id", "name": "java_inject_rule-SeamLogInjection", "value": "java_inject_rule-SeamLogInjection" }, { "type": "semgrep_id", "name": "java_inject_rule-SqlInjection", "value": "java_inject_rule-SqlInjection" }, { "type": "semgrep_id", "name": "java_traversal_rule-RelativePathTraversal", "value": "java_traversal_rule-RelativePathTraversal" }, { "type": "semgrep_id", "name": "java_xpathi_rule-XpathInjection", "value": "java_xpathi_rule-XpathInjection" }, { "type": "semgrep_id", "name": "java_xxe_rule-DisallowDoctypeDeclFalse", "value": "java_xxe_rule-DisallowDoctypeDeclFalse" }, { "type": "semgrep_id", "name": "java_xxe_rule-DocumentBuilderFactoryDisallowDoctypeDeclMissing", "value": "java_xxe_rule-DocumentBuilderFactoryDisallowDoctypeDeclMissing" }, { "type": "semgrep_id", "name": "java_xxe_rule-ExternalGeneralEntitiesTrue", "value": "java_xxe_rule-ExternalGeneralEntitiesTrue" }, { "type": "semgrep_id", "name": "java_xxe_rule-ExternalParameterEntitiesTrue", "value": "java_xxe_rule-ExternalParameterEntitiesTrue" }, { "type": "semgrep_id", "name": "java_xxe_rule-SAXParserFactoryDisallowDoctypeDeclMissing", "value": "java_xxe_rule-SAXParserFactoryDisallowDoctypeDeclMissing" }, { "type": "semgrep_id", "name": "java_xxe_rule-TransformerfactoryDTDNotDisabled", "value": "java_xxe_rule-TransformerfactoryDTDNotDisabled" }, { "type": "semgrep_id", "name": "java_xxe_rule-XMLInputFactoryExternalEntitiesEnabled", "value": "java_xxe_rule-XMLInputFactoryExternalEntitiesEnabled" }, { "type": "semgrep_id", "name": "java_xxe_rule-XMLStreamRdr", "value": "java_xxe_rule-XMLStreamRdr" }, { "type": "semgrep_id", "name": "javascript_crypto_rule-NodeLibcurlSSLVerificationDisable", "value": "javascript_crypto_rule-NodeLibcurlSSLVerificationDisable" }, { "type": "semgrep_id", "name": "javascript_exec_rule-child-process", "value": "javascript_exec_rule-child-process", "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-child-process.js" }, { "type": "semgrep_id", "name": "kotlin_pathtraversal_rule-FilePathTraversal", "value": "kotlin_pathtraversal_rule-FilePathTraversal" }, { "type": "semgrep_id", "name": "mobsf.java-webview-rule-ignore_ssl_certificate_errors", "value": "mobsf.java-webview-rule-ignore_ssl_certificate_errors" }, { "type": "semgrep_id", "name": "mobsf.java-webview-rule-webview_debugging", "value": "mobsf.java-webview-rule-webview_debugging" }, { "type": "semgrep_id", "name": "mobsf.java-webview-rule-webview_external_storage", "value": "mobsf.java-webview-rule-webview_external_storage" }, { "type": "semgrep_id", "name": "mobsf.java-webview-rule-webview_set_allow_file_access", "value": "mobsf.java-webview-rule-webview_set_allow_file_access" }, { "type": "semgrep_id", "name": "mobsf.kotlin-webview-rule-android_kotlin_webview_debug", "value": "mobsf.kotlin-webview-rule-android_kotlin_webview_debug" }, { "type": "semgrep_id", "name": "mobsf.oc-other-rule-ios_self_signed_ssl", "value": "mobsf.oc-other-rule-ios_self_signed_ssl" }, { "type": "semgrep_id", "name": "mobsf.oc-other-rule-ios_webview_ignore_ssl", "value": "mobsf.oc-other-rule-ios_webview_ignore_ssl" }, { "type": "semgrep_id", "name": "mobsf.swift-other-rule-ios_biometric_acl", "value": "mobsf.swift-other-rule-ios_biometric_acl" }, { "type": "semgrep_id", "name": "mobsf.swift-other-rule-ios_dtls1_used", "value": "mobsf.swift-other-rule-ios_dtls1_used" }, { "type": "semgrep_id", "name": "mobsf.swift-other-rule-ios_file_no_special", "value": "mobsf.swift-other-rule-ios_file_no_special" }, { "type": "semgrep_id", "name": "mobsf.swift-other-rule-ios_keychain_weak_accessibility_value", "value": "mobsf.swift-other-rule-ios_keychain_weak_accessibility_value" }, { "type": "semgrep_id", "name": "mobsf.swift-other-rule-ios_tls3_not_used", "value": "mobsf.swift-other-rule-ios_tls3_not_used" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-crypto-rule-node_aes_ecb", "value": "nodejs_scan.javascript-crypto-rule-node_aes_ecb" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-crypto-rule-node_aes_noiv", "value": "nodejs_scan.javascript-crypto-rule-node_aes_noiv" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-crypto-rule-node_insecure_random_generator", "value": "nodejs_scan.javascript-crypto-rule-node_insecure_random_generator" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-crypto-rule-node_md5", "value": "nodejs_scan.javascript-crypto-rule-node_md5" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-crypto-rule-node_sha1", "value": "nodejs_scan.javascript-crypto-rule-node_sha1" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-crypto-rule-node_timing_attack", "value": "nodejs_scan.javascript-crypto-rule-node_timing_attack" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-crypto-rule-node_tls_reject", "value": "nodejs_scan.javascript-crypto-rule-node_tls_reject" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-crypto-rule-node_weak_crypto", "value": "nodejs_scan.javascript-crypto-rule-node_weak_crypto" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-database-rule-node_knex_sqli_injection", "value": "nodejs_scan.javascript-database-rule-node_knex_sqli_injection" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-database-rule-node_nosqli_injection", "value": "nodejs_scan.javascript-database-rule-node_nosqli_injection" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-database-rule-node_nosqli_js_injection", "value": "nodejs_scan.javascript-database-rule-node_nosqli_js_injection" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-database-rule-node_sqli_injection", "value": "nodejs_scan.javascript-database-rule-node_sqli_injection" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-database-rule-sequelize_tls", "value": "nodejs_scan.javascript-database-rule-sequelize_tls" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-database-rule-sequelize_tls_cert_validation", "value": "nodejs_scan.javascript-database-rule-sequelize_tls_cert_validation" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-database-rule-sequelize_weak_tls", "value": "nodejs_scan.javascript-database-rule-sequelize_weak_tls" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-dos-rule-layer7_object_dos", "value": "nodejs_scan.javascript-dos-rule-layer7_object_dos" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-dos-rule-regex_dos", "value": "nodejs_scan.javascript-dos-rule-regex_dos" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-electronjs-rule-electron_allow_http", "value": "nodejs_scan.javascript-electronjs-rule-electron_allow_http" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-electronjs-rule-electron_blink_integration", "value": "nodejs_scan.javascript-electronjs-rule-electron_blink_integration" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-electronjs-rule-electron_context_isolation", "value": "nodejs_scan.javascript-electronjs-rule-electron_context_isolation" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-electronjs-rule-electron_disable_websecurity", "value": "nodejs_scan.javascript-electronjs-rule-electron_disable_websecurity" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-electronjs-rule-electron_experimental_features", "value": "nodejs_scan.javascript-electronjs-rule-electron_experimental_features" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-electronjs-rule-electron_nodejs_integration", "value": "nodejs_scan.javascript-electronjs-rule-electron_nodejs_integration" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-eval-rule-eval_nodejs", "value": "nodejs_scan.javascript-eval-rule-eval_nodejs" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-eval-rule-eval_require", "value": "nodejs_scan.javascript-eval-rule-eval_require" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-eval-rule-grpc_insecure_connection", "value": "nodejs_scan.javascript-eval-rule-grpc_insecure_connection" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-eval-rule-node_deserialize", "value": "nodejs_scan.javascript-eval-rule-node_deserialize" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-eval-rule-sandbox_code_injection", "value": "nodejs_scan.javascript-eval-rule-sandbox_code_injection" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-eval-rule-serializetojs_deserialize", "value": "nodejs_scan.javascript-eval-rule-serializetojs_deserialize" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-eval-rule-server_side_template_injection", "value": "nodejs_scan.javascript-eval-rule-server_side_template_injection" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-eval-rule-vm2_code_injection", "value": "nodejs_scan.javascript-eval-rule-vm2_code_injection" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-eval-rule-vm2_context_injection", "value": "nodejs_scan.javascript-eval-rule-vm2_context_injection" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-eval-rule-vm_code_injection", "value": "nodejs_scan.javascript-eval-rule-vm_code_injection" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-eval-rule-vm_compilefunction_injection", "value": "nodejs_scan.javascript-eval-rule-vm_compilefunction_injection" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-eval-rule-vm_runincontext_injection", "value": "nodejs_scan.javascript-eval-rule-vm_runincontext_injection" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-eval-rule-vm_runinnewcontext_injection", "value": "nodejs_scan.javascript-eval-rule-vm_runinnewcontext_injection" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-eval-rule-yaml_deserialize", "value": "nodejs_scan.javascript-eval-rule-yaml_deserialize" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-exec-rule-shelljs_os_command_exec", "value": "nodejs_scan.javascript-exec-rule-shelljs_os_command_exec" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-headers-rule-cookie_session_default", "value": "nodejs_scan.javascript-headers-rule-cookie_session_default" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-headers-rule-cookie_session_no_domain", "value": "nodejs_scan.javascript-headers-rule-cookie_session_no_domain" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-headers-rule-cookie_session_no_httponly", "value": "nodejs_scan.javascript-headers-rule-cookie_session_no_httponly" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-headers-rule-cookie_session_no_maxage", "value": "nodejs_scan.javascript-headers-rule-cookie_session_no_maxage" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-headers-rule-cookie_session_no_path", "value": "nodejs_scan.javascript-headers-rule-cookie_session_no_path" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-headers-rule-cookie_session_no_samesite", "value": "nodejs_scan.javascript-headers-rule-cookie_session_no_samesite" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-headers-rule-cookie_session_no_secure", "value": "nodejs_scan.javascript-headers-rule-cookie_session_no_secure" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-headers-rule-express_cors", "value": "nodejs_scan.javascript-headers-rule-express_cors" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-headers-rule-generic_cors", "value": "nodejs_scan.javascript-headers-rule-generic_cors" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-headers-rule-generic_header_injection", "value": "nodejs_scan.javascript-headers-rule-generic_header_injection" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-headers-rule-header_xss_generic", "value": "nodejs_scan.javascript-headers-rule-header_xss_generic" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-headers-rule-header_xss_lusca", "value": "nodejs_scan.javascript-headers-rule-header_xss_lusca" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-headers-rule-helmet_feature_disabled", "value": "nodejs_scan.javascript-headers-rule-helmet_feature_disabled" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-headers-rule-host_header_injection", "value": "nodejs_scan.javascript-headers-rule-host_header_injection" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-jwt-rule-hardcoded_jwt_secret", "value": "nodejs_scan.javascript-jwt-rule-hardcoded_jwt_secret" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-jwt-rule-jwt_exposed_credentials", "value": "nodejs_scan.javascript-jwt-rule-jwt_exposed_credentials" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-jwt-rule-jwt_exposed_data", "value": "nodejs_scan.javascript-jwt-rule-jwt_exposed_data" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-jwt-rule-jwt_express_hardcoded", "value": "nodejs_scan.javascript-jwt-rule-jwt_express_hardcoded" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-jwt-rule-jwt_not_revoked", "value": "nodejs_scan.javascript-jwt-rule-jwt_not_revoked" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-jwt-rule-node_jwt_none_algorithm", "value": "nodejs_scan.javascript-jwt-rule-node_jwt_none_algorithm" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-redirect-rule-express_open_redirect", "value": "nodejs_scan.javascript-redirect-rule-express_open_redirect" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-redirect-rule-express_open_redirect2", "value": "nodejs_scan.javascript-redirect-rule-express_open_redirect2" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-ssrf-rule-node_ssrf", "value": "nodejs_scan.javascript-ssrf-rule-node_ssrf" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-ssrf-rule-phantom_ssrf", "value": "nodejs_scan.javascript-ssrf-rule-phantom_ssrf" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-ssrf-rule-playwright_ssrf", "value": "nodejs_scan.javascript-ssrf-rule-playwright_ssrf" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-ssrf-rule-puppeteer_ssrf", "value": "nodejs_scan.javascript-ssrf-rule-puppeteer_ssrf" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-ssrf-rule-wkhtmltoimage_ssrf", "value": "nodejs_scan.javascript-ssrf-rule-wkhtmltoimage_ssrf" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-ssrf-rule-wkhtmltopdf_ssrf", "value": "nodejs_scan.javascript-ssrf-rule-wkhtmltopdf_ssrf" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-traversal-rule-admzip_path_overwrite", "value": "nodejs_scan.javascript-traversal-rule-admzip_path_overwrite" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-traversal-rule-express_lfr", "value": "nodejs_scan.javascript-traversal-rule-express_lfr" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-traversal-rule-express_lfr_warning", "value": "nodejs_scan.javascript-traversal-rule-express_lfr_warning" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-traversal-rule-generic_path_traversal", "value": "nodejs_scan.javascript-traversal-rule-generic_path_traversal" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-traversal-rule-join_resolve_path_traversal", "value": "nodejs_scan.javascript-traversal-rule-join_resolve_path_traversal" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-traversal-rule-tar_path_overwrite", "value": "nodejs_scan.javascript-traversal-rule-tar_path_overwrite" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-traversal-rule-zip_path_overwrite", "value": "nodejs_scan.javascript-traversal-rule-zip_path_overwrite" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-xml-rule-node_entity_expansion", "value": "nodejs_scan.javascript-xml-rule-node_entity_expansion" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-xml-rule-node_xpath_injection", "value": "nodejs_scan.javascript-xml-rule-node_xpath_injection" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-xml-rule-node_xxe", "value": "nodejs_scan.javascript-xml-rule-node_xxe" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-xml-rule-xxe_expat", "value": "nodejs_scan.javascript-xml-rule-xxe_expat" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-xss-rule-express_xss", "value": "nodejs_scan.javascript-xss-rule-express_xss" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-xss-rule-handlebars_noescape", "value": "nodejs_scan.javascript-xss-rule-handlebars_noescape" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-xss-rule-handlebars_safestring", "value": "nodejs_scan.javascript-xss-rule-handlebars_safestring" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-xss-rule-squirrelly_autoescape", "value": "nodejs_scan.javascript-xss-rule-squirrelly_autoescape" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-xss-rule-xss_disable_mustache_escape", "value": "nodejs_scan.javascript-xss-rule-xss_disable_mustache_escape" }, { "type": "semgrep_id", "name": "nodejs_scan.javascript-xss-rule-xss_serialize_javascript", "value": "nodejs_scan.javascript-xss-rule-xss_serialize_javascript" }, { "type": "semgrep_id", "name": "PHPCS_SecurityAudit.BadFunctions.Asserts.WarnFunctionHandling", "value": "PHPCS_SecurityAudit.BadFunctions.Asserts.WarnFunctionHandling" }, { "type": "semgrep_id", "name": "PHPCS_SecurityAudit.BadFunctions.Backticks.WarnSystemExec", "value": "PHPCS_SecurityAudit.BadFunctions.Backticks.WarnSystemExec" }, { "type": "semgrep_id", "name": "PHPCS_SecurityAudit.BadFunctions.CryptoFunctions.WarnCryptoFunc", "value": "PHPCS_SecurityAudit.BadFunctions.CryptoFunctions.WarnCryptoFunc" }, { "type": "semgrep_id", "name": "PHPCS_SecurityAudit.BadFunctions.CryptoFunctions.WarnCryptoFunc", "value": "PHPCS_SecurityAudit.BadFunctions.CryptoFunctions.WarnCryptoFunc" }, { "type": "semgrep_id", "name": "PHPCS_SecurityAudit.BadFunctions.FilesystemFunctions.WarnFilesystem", "value": "PHPCS_SecurityAudit.BadFunctions.FilesystemFunctions.WarnFilesystem" }, { "type": "semgrep_id", "name": "PHPCS_SecurityAudit.BadFunctions.FringeFunctions.WarnFringestuff", "value": "PHPCS_SecurityAudit.BadFunctions.FringeFunctions.WarnFringestuff" }, { "type": "semgrep_id", "name": "PHPCS_SecurityAudit.BadFunctions.NoEvals.NoEvals", "value": "PHPCS_SecurityAudit.BadFunctions.NoEvals.NoEvals" }, { "type": "semgrep_id", "name": "PHPCS_SecurityAudit.BadFunctions.Phpinfos.WarnPhpinfo", "value": "PHPCS_SecurityAudit.BadFunctions.Phpinfos.WarnPhpinfo" }, { "type": "semgrep_id", "name": "PHPCS_SecurityAudit.BadFunctions.SystemExecFunctions.WarnSystemExec", "value": "PHPCS_SecurityAudit.BadFunctions.SystemExecFunctions.WarnSystemExec" }, { "type": "semgrep_id", "name": "properties_spring_rule-SpringActuatorFullyEnabled", "value": "properties_spring_rule-SpringActuatorFullyEnabled" }, { "type": "semgrep_id", "name": "python_crypto_rule-HTTPConnectionPool", "value": "python_crypto_rule-HTTPConnectionPool" }, { "type": "semgrep_id", "name": "python_exec_rule-start-process-partial-path", "value": "python_exec_rule-start-process-partial-path" }, { "type": "semgrep_id", "name": "python_exec_rule-start-process-path", "value": "python_exec_rule-start-process-path" }, { "type": "semgrep_id", "name": "python_exec_rule-subprocess-call-array", "value": "python_exec_rule-subprocess-call-array" }, { "type": "semgrep_id", "name": "python_flask_rule-flask-open-redirect", "value": "python_flask_rule-flask-open-redirect" }, { "type": "semgrep_id", "name": "python_flask_rule-flask-tainted-sql-string", "value": "python_flask_rule-flask-tainted-sql-string" }, { "type": "semgrep_id", "name": "python_flask_rule-path-traversal-open", "value": "python_flask_rule-path-traversal-open" }, { "type": "semgrep_id", "name": "python_jwt_rule-jwt-none-alg", "value": "python_jwt_rule-jwt-none-alg", "url": "https://semgrep.dev/blog/2020/hardcoded-secrets-unverified-tokens-and-other-common-jwt-mistakes/" }, { "type": "semgrep_id", "name": "python_pyramid_rule-pyramid-csrf-origin-check", "value": "python_pyramid_rule-pyramid-csrf-origin-check" }, { "type": "semgrep_id", "name": "scala_unsafe_rule-InformationExposureVariant2", "value": "scala_unsafe_rule-InformationExposureVariant2" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0001-1", "value": "security_code_scan.SCS0001-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0002-1", "value": "security_code_scan.SCS0002-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0003-1", "value": "security_code_scan.SCS0003-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0004-1", "value": "security_code_scan.SCS0004-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0005-1", "value": "security_code_scan.SCS0005-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0006-1", "value": "security_code_scan.SCS0006-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0008-1", "value": "security_code_scan.SCS0008-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0009-1", "value": "security_code_scan.SCS0009-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0010-1", "value": "security_code_scan.SCS0010-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0011-1", "value": "security_code_scan.SCS0011-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0013-1", "value": "security_code_scan.SCS0013-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0016-1", "value": "security_code_scan.SCS0016-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0017-1", "value": "security_code_scan.SCS0017-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0018-1", "value": "security_code_scan.SCS0018-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0026-1.SCS0031-1", "value": "security_code_scan.SCS0026-1.SCS0031-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0027-1", "value": "security_code_scan.SCS0027-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0028-1", "value": "security_code_scan.SCS0028-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0029-1", "value": "security_code_scan.SCS0029-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0029-2", "value": "security_code_scan.SCS0029-2" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0032-1.SCS0033-1.SCS0034-1", "value": "security_code_scan.SCS0032-1.SCS0033-1.SCS0034-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0035-1", "value": "security_code_scan.SCS0035-1" }, { "type": "semgrep_id", "name": "security_code_scan.SCS0035-2", "value": "security_code_scan.SCS0035-2" }, { "type": "semgrep_id", "name": "yaml_spring_rule-SpringActuatorFullyEnabled", "value": "yaml_spring_rule-SpringActuatorFullyEnabled" } ], "type": "sast", "start_time": "2026-07-17T03:06:15", "end_time": "2026-07-17T03:06:29", "status": "success", "observability": { "events": [ { "event": "collect_sast_scan_metrics_from_pipeline", "property": "cb17373c-3951-46b9-a383-af97957283e1", "label": "semgrep", "value": 0, "version": "6.18.2", "exit_code": 0, "override_count": 0, "passthrough_count": 0, "custom_exclude_path_count": 0, "time_s": 13, "file_count": 342 } ] } }, "version": "15.2.2", "vulnerabilities": [ { "id": "64ba85d6c640d9e4d1cdb174027bcf5d1d540d6a3623b30a627ed1f3449d2229", "category": "sast", "name": "Incorrect regular expression", "description": "Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service.\n", "cve": "semgrep_id:nodejs_scan.javascript-dos-rule-regex_dos:17:18", "severity": "Medium", "scanner": { "id": "semgrep", "name": "Semgrep" }, "location": { "file": "lib/parser.js", "start_line": 17, "end_line": 18 }, "identifiers": [ { "type": "semgrep_id", "name": "nodejs_scan.javascript-dos-rule-regex_dos", "value": "nodejs_scan.javascript-dos-rule-regex_dos" }, { "type": "cwe", "name": "CWE-185", "value": "185", "url": "https://cwe.mitre.org/data/definitions/185.html" }, { "type": "owasp", "name": "A05:2021 - Security Misconfiguration", "value": "A05:2021" }, { "type": "owasp", "name": "A6:2017 - Security Misconfiguration", "value": "A6:2017" }, { "type": "njsscan_rule_type", "name": "NodeJS Scan ID javascript-dos-rule-regex_dos", "value": "Ensure that the regex used to compare with user supplied input is safe from regular expression denial of service." } ] } ] }