gradle-static-analysis-plugin

DEPRECATED Gradle static analysis plugin ⚠️ A fork of this project is maintained at https://github.com/GradleUp/static-analysis-plugin/ Please migrate by using com.gradleup.static-analysis plugin id instead. A Gradle plugin to easily apply the same setup of static analysis tools across different...

Security Incentivization: An Empirical Study of How Micropayments Impact Code Security

Security often receives insufficient developer attention because it does not directly generate visible value, leading to underinvestment in practice. We evaluate a countermeasure by team-level incentives tied to measurable security improvements over time. Our semi-automated mechanism aggregates...

CVE-2022-0272

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...

EUVD-2022-1596

Malicious code in bioql PyPI...

XML External Entity (XXE)

detekt-core is vulnerable to XML external entity attacks. The vulnerability exists in the read function in BaselineFormat.kt due to improper validation which allows an attacker to submit a malicious XML document...

GHSA-2CFC-865J-GM4W XML External Entity Reference in detekt

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...

CVE-2022-0272

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...

Xxe

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...

CVE-2022-0272 Improper Restriction of XML External Entity Reference in detekt/detekt

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...

CVE-2022-0272

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...

CVE-2022-0272 Improper Restriction of XML External Entity Reference in detekt/detekt

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...

CVE-2022-0272

CVE-2022-0272 concerns the Kotlin static analysis tool detekt. Multiple connected sources confirm an XML External Entity (XXE) restriction flaw in detekt/detekt prior to 1.20.0, attributed to the XML processing path (e.g., the read function in BaselineFormat.kt). Impact details in the sources ali...

CVE-2022-0272: Improper Restriction of XML External Entity Reference

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...

PT-2022-13086

Name of the Vulnerable Software and Affected Versions detekt versions prior to 1.20.0 Description The issue is related to an improper restriction of XML External Entity Reference in the detekt repository on GitHub. Recommendations For versions prior to 1.20.0, update to version 1.20.0 or later to...

detekt 代码问题漏洞

detekt is a static code analysis tool for the Kotlin programming language. A security vulnerability exists in detekt that stems from an improperly restricted XML external entity reference...

in detekt/detekt

Description The read function makes use of SAXParser generated from a SAXParserFactory with no FEATURESECUREPROCESSING set, allowing for XXE attacks. In...

WS-2019-0062

In detekt there is a security vulnerability where getanalysisprojects.groovy downloaded dependencies over HTTP instead of HTTPS...

WS-2019-0051

Detekt all versions has a security vulnerability where getanalysisprojects.groovy downloaded dependencies over HTTP instead of HTTPS...

Podcast Discussing WordPress Security, Anti-Surveillance

Dennis Fisher and Mike Mimoso talk about the news from the past week, including the out-of-band Microsoft patch, the compromised Joomla and WordPress plug-in attack campaign and the Detekt anti-surveillance tool.​ Download: digitalunderground172.mp3 Music by Chris Gonsalves...