-
Notifications
You must be signed in to change notification settings - Fork 1
Pull requests: CodeVigilant/codevigilant_semgrep_rules
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
feat(java): detect URLClassLoader construction from a URL list (CWE-94)
#195
opened Sep 16, 2026 by
ai-anant
Loading…
feat(java): detect System.getenv cloned into HashMap for launcher env (CWE-200)
#194
opened Sep 16, 2026 by
ai-anant
Loading…
feat(java): detect UnprotectedRootAction JSON body parse without HMAC header (CWE-306)
#193
opened Sep 15, 2026 by
ai-anant
Loading…
feat(java): detect File.delete/deleteDir on a non-literal path (CWE-22)
#192
opened Sep 14, 2026 by
ai-anant
Loading…
feat(java): detect FilePath.toURI().resolve without containment (CWE-22)
#191
opened Sep 14, 2026 by
ai-anant
Loading…
feat(java): detect MarkupText.addMarkup with a non-literal start tag (CWE-79)
#190
opened Sep 14, 2026 by
ai-anant
Loading…
feat(java): detect cmd.exe ArgumentListBuilder.addTokenized (CWE-78)
#189
opened Sep 13, 2026 by
ai-anant
Loading…
feat(java): detect CredentialsProvider.lookupCredentials with null authentication (CWE-522)
#188
opened Sep 12, 2026 by
ai-anant
Loading…
feat(java): detect direct positive-index access into String.split(...) result without length check (CWE-248/754)
#187
opened Sep 4, 2026 by
ai-anant
Loading…
feat(java): detect non-literal container bind-mount source paths built by concatenation (CWE-22)
#186
opened Sep 4, 2026 by
ai-anant
Loading…
feat(java): detect System.exit() process termination in Jenkins build/plugin execution paths (CWE-248)
#185
opened Sep 4, 2026 by
ai-anant
Loading…
feat(java): detect TLS-verification-disable flag gated by an inverted boolean (CWE-295)
#184
opened Sep 4, 2026 by
ai-anant
Loading…
feat(java): detect non-literal path segments appended to JAX-RS WebTarget (CWE-22)
#183
opened Sep 3, 2026 by
ai-anant
Loading…
feat(java): detect credential lookups with ACL.SYSTEM inside doFill* form handlers (CWE-522)
#182
opened Sep 3, 2026 by
ai-anant
Loading…
feat(java): detect process launch with a workspace-resolved executable path (CWE-427/94)
#181
opened Sep 3, 2026 by
ai-anant
Loading…
feat(java): detect Jenkins MarkupFormatter.translate writing raw, unsanitized markup to the output writer (CWE-79)
#180
opened Aug 30, 2026 by
ai-anant
Loading…
feat(java): detect build-time expansion written unescaped into a generated build/script file (CWE-94/77)
#179
opened Aug 30, 2026 by
ai-anant
Loading…
feat(go): detect symlink-following path traversal through filepath.Join file-open without canonical containment (CWE-22/59)
#178
opened Aug 30, 2026 by
ai-anant
Loading…
feat(java): detect String.indexOf result used as a substring bound without a negative check (CWE-248/754)
#177
opened Aug 30, 2026 by
ai-anant
Loading…
feat(java): detect unguarded Integer/Long parse of a non-literal string (uncaught NumberFormatException DoS, CWE-754)
#176
opened Aug 29, 2026 by
ai-anant
Loading…
feat(javascript): detect regex literals with multiple unbounded quantifiers or backreferences (ReDoS, CWE-1333)
#175
opened Aug 29, 2026 by
ai-anant
Loading…
feat(java): detect unvalidated external-output-derived key/value written into a build environment map (CWE-78/454)
#174
opened Aug 29, 2026 by
ai-anant
Loading…
feat(java): consolidate Apache HttpClient non-literal URL SSRF (HttpGet/Post/Put/Head/Delete/Patch/Options) into one rule (CWE-918)
#173
opened Aug 29, 2026 by
ai-anant
Loading…
feat(java): consolidate unescaped XML-markup detection (concat + placeholder replace) into one rule file (CWE-74)
#172
opened Aug 29, 2026 by
ai-anant
Loading…
feat(java): consolidate credential-plaintext-to-subprocess (argv + env) into one taint rule (CWE-214)
#171
opened Aug 29, 2026 by
ai-anant
Loading…
Previous Next
ProTip!
Follow long discussions with comments:>50.