22 matches found
gradle-static-analysis-plugin
DEPRECATED Gradle static analysis plugin ⚠️ A fork of this project is maintained at https://github.com/GradleUp/static-analysis-plugin/ Please migrate by using com.gradleup.static-analysis plugin id instead. A Gradle plugin to easily apply the same setup of static analysis tools across different...
Security Incentivization: An Empirical Study of How Micropayments Impact Code Security
Security often receives insufficient developer attention because it does not directly generate visible value, leading to underinvestment in practice. We evaluate a countermeasure by team-level incentives tied to measurable security improvements over time. Our semi-automated mechanism aggregates...
CVE-2022-0272
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...
EUVD-2022-1596
Malicious code in bioql PyPI...
XML External Entity (XXE)
detekt-core is vulnerable to XML external entity attacks. The vulnerability exists in the read function in BaselineFormat.kt due to improper validation which allows an attacker to submit a malicious XML document...
com.github.ozsie:detekt-maven-plugin (>=1.0.0-rc14, <=1.19.1), com.smyachenkov:run-detekt-maven-plugin (>=1.4.0.2, <=1.9.1) +11 more potentially affected by CVE-2022-0272 via io.gitlab.arturbosch.detekt:detekt-core (>=1.0.0.rc7-3, <=1.20.0-rc2)
io.gitlab.arturbosch.detekt:detekt-core MAVEN version =1.0.0.rc7-3, =1.0.0-rc14, =1.4.0.2, =1.0.0, =0.9.4, =0.9.6, =0.3.0, =0.3.0, =1.0.0.rc7-3, =1.0.0.rc7-3, =1.0.0.rc7-3, =1.0.0.rc7-3, =2.2.0, =2.6.0 Source cves: CVE-2022-0272 Source advisory: GHSA-2CFC-865J-GM4W...
GHSA-2CFC-865J-GM4W XML External Entity Reference in detekt
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...
com.github.ozsie:detekt-maven-plugin (>=1.0.0-rc14, <=1.19.1), com.smyachenkov:run-detekt-maven-plugin (>=1.4.0.2, <=1.9.1) +11 more potentially affected by CVE-2022-0272 via io.gitlab.arturbosch.detekt:detekt-core (>=1.0.0.rc7-3, <=1.20.0-rc2)
io.gitlab.arturbosch.detekt:detekt-core MAVEN version =1.0.0.rc7-3, =1.0.0-rc14, =1.4.0.2, =1.0.0, =0.9.4, =0.9.6, =0.3.0, =0.3.0, =1.0.0.rc7-3, =1.0.0.rc7-3, =1.0.0.rc7-3, =1.0.0.rc7-3, =2.2.0, =2.6.0 Source cves: CVE-2022-0272 Source advisory: OSV:GHSA-2CFC-865J-GM4W...
CVE-2022-0272
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...
Xxe
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...
CVE-2022-0272 Improper Restriction of XML External Entity Reference in detekt/detekt
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...
CVE-2022-0272
CVE-2022-0272 concerns the Kotlin static analysis tool detekt. Multiple connected sources confirm an XML External Entity (XXE) restriction flaw in detekt/detekt prior to 1.20.0, attributed to the XML processing path (e.g., the read function in BaselineFormat.kt). Impact details in the sources ali...
com.github.ozsie:detekt-maven-plugin (>=1.0.0-rc14, <=1.19.1), com.smyachenkov:run-detekt-maven-plugin (>=1.4.0.2, <=1.9.1) +11 more potentially affected by CVE-2022-0272 via io.gitlab.arturbosch.detekt:detekt-core (>=1.0.0.rc7-3, <=1.20.0-rc2)
io.gitlab.arturbosch.detekt:detekt-core MAVEN version =1.0.0.rc7-3, =1.0.0-rc14, =1.4.0.2, =1.0.0, =0.9.4, =0.9.6, =0.3.0, =0.3.0, =1.0.0.rc7-3, =1.0.0.rc7-3, =1.0.0.rc7-3, =1.0.0.rc7-3, =2.2.0, =2.6.0 Source cves: CVE-2022-0272 Source advisory: MEND:CVE-2022-0272...
CVE-2022-0272
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...
CVE-2022-0272 Improper Restriction of XML External Entity Reference in detekt/detekt
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...
CVE-2022-0272: Improper Restriction of XML External Entity Reference
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...
PT-2022-13086
Name of the Vulnerable Software and Affected Versions detekt versions prior to 1.20.0 Description The issue is related to an improper restriction of XML External Entity Reference in the detekt repository on GitHub. Recommendations For versions prior to 1.20.0, update to version 1.20.0 or later to...
Detekt code issues and vulnerabilities
detekt is a static code analysis tool for the Kotlin programming language. A security vulnerability exists in detekt that stems from an improperly restricted XML external entity reference...
