mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
93 lines
2.3 KiB
JSON
93 lines
2.3 KiB
JSON
|
{
|
||
|
|
"version": "pre-push-diagnostic-v1-2026-09-12",
|
||
|
|
"ranking_mode": "evidence",
|
||
|
|
"engine": "joern-4.0.625",
|
||
|
|
"facts": "642d643d5b40a20fe482ace566cc77d132870930ecd2f2e881dcecd7dc9a0641",
|
||
|
|
"queries": "64c1534edb07e770ab8631b48bc156ef54b71ddb8d8ee4357fd5022eb11f0229",
|
||
|
|
"policy": "diagnostic-only-no-admission-v1",
|
||
|
|
"scope": "first-party-only; declared vendor exclusion in graph and targets; exact selected/deferred question IDs required per record",
|
||
|
|
"hardware": "Linux-6.8.0-138-generic-x86_64-with-glibc2.39",
|
||
|
|
"budget_seconds": 30,
|
||
|
|
"core": "7ac2bc93b35ce9d0cdcfc543266025519999ff45339657d4a5d283c67957d682",
|
||
|
|
"targets": {
|
||
|
|
"pmpro-introduce": {
|
||
|
|
"path": "classes/class.memberorder.php",
|
||
|
|
"function": "getMemberOrderByCode",
|
||
|
|
"family": "injection",
|
||
|
|
"lines": [
|
||
|
|
936
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"pmpro-repair": {
|
||
|
|
"path": "classes/class.memberorder.php",
|
||
|
|
"function": "getMemberOrderByCode",
|
||
|
|
"family": "injection",
|
||
|
|
"lines": [
|
||
|
|
937
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"pmpro-benign": {
|
||
|
|
"path": "classes/class.memberorder.php",
|
||
|
|
"function": "getMemberOrderByCode",
|
||
|
|
"family": "injection",
|
||
|
|
"lines": [
|
||
|
|
937
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"nodegoat-introduce": {
|
||
|
|
"path": "app/routes/contributions.js",
|
||
|
|
"function": "handleContributionsUpdate",
|
||
|
|
"family": "injection",
|
||
|
|
"lines": [
|
||
|
|
32,
|
||
|
|
33,
|
||
|
|
34
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"nodegoat-repair": {
|
||
|
|
"path": "app/routes/contributions.js",
|
||
|
|
"function": "handleContributionsUpdate",
|
||
|
|
"family": "injection",
|
||
|
|
"lines": [
|
||
|
|
32,
|
||
|
|
33,
|
||
|
|
34
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"nodegoat-benign": {
|
||
|
|
"path": "app/routes/contributions.js",
|
||
|
|
"function": "handleContributionsUpdate",
|
||
|
|
"family": "injection",
|
||
|
|
"lines": [
|
||
|
|
32,
|
||
|
|
33,
|
||
|
|
34
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"VAmPI-SQLI": {
|
||
|
|
"path": "models/user_model.py",
|
||
|
|
"function": "get_user",
|
||
|
|
"family": "injection",
|
||
|
|
"lines": [
|
||
|
|
73
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"VAmPI-BOLA": {
|
||
|
|
"path": "api_views/users.py",
|
||
|
|
"function": "update_password",
|
||
|
|
"family": "access_control",
|
||
|
|
"lines": [
|
||
|
|
187
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"VAmPI-BOLA-BOOKS": {
|
||
|
|
"path": "api_views/books.py",
|
||
|
|
"function": "get_by_title",
|
||
|
|
"family": "access_control",
|
||
|
|
"lines": [
|
||
|
|
51
|
||
|
|
]
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|