mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
Marius CiepluchandClaude Opus 5.5
ca5caf735f
Equality script (design section 3) records suite outcomes, `ousast pairs --json`, the python-vulnerable quick benchmark, one standard scan and `improve --dry-run` from a frozen export with the harnessx extra absent and no model reachable. Two independent records are byte-identical (determinism.json). Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo
17217 lines
396 KiB
JSON
17217 lines
396 KiB
JSON
{
|
|
"achievable": {
|
|
"agent-vfc": {
|
|
"detected_vuln": 1,
|
|
"labeled_expected": 28,
|
|
"labeled_fix_leaks": 4,
|
|
"labeled_matched": 1,
|
|
"labeled_recall": 0.03571428571428571,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 28,
|
|
"silent_fix": 25,
|
|
"specificity": 0.8928571428571429,
|
|
"vuln_recall": 0.03571428571428571,
|
|
"youden": -0.07142857142857138
|
|
},
|
|
"github": {
|
|
"detected_vuln": 4,
|
|
"labeled_expected": 6,
|
|
"labeled_fix_leaks": 0,
|
|
"labeled_matched": 4,
|
|
"labeled_recall": 0.6666666666666666,
|
|
"pair_correct": 4,
|
|
"pair_pass_rate": 0.6666666666666666,
|
|
"pairs": 6,
|
|
"silent_fix": 6,
|
|
"specificity": 1.0,
|
|
"vuln_recall": 0.6666666666666666,
|
|
"youden": 0.6666666666666666
|
|
},
|
|
"local": {
|
|
"detected_vuln": 3,
|
|
"labeled_expected": 28,
|
|
"labeled_fix_leaks": 0,
|
|
"labeled_matched": 28,
|
|
"labeled_recall": 1.0,
|
|
"pair_correct": 3,
|
|
"pair_pass_rate": 1.0,
|
|
"pairs": 3,
|
|
"silent_fix": 3,
|
|
"specificity": 1.0,
|
|
"vuln_recall": 1.0,
|
|
"youden": 1.0
|
|
},
|
|
"owasp": {
|
|
"detected_vuln": 9,
|
|
"labeled_expected": 40,
|
|
"labeled_fix_leaks": 12,
|
|
"labeled_matched": 9,
|
|
"labeled_recall": 0.225,
|
|
"pair_correct": 2,
|
|
"pair_pass_rate": 0.05,
|
|
"pairs": 40,
|
|
"silent_fix": 28,
|
|
"specificity": 0.7,
|
|
"vuln_recall": 0.225,
|
|
"youden": -0.07500000000000004
|
|
},
|
|
"sast": {
|
|
"detected_vuln": 6,
|
|
"labeled_expected": 10,
|
|
"labeled_fix_leaks": 3,
|
|
"labeled_matched": 6,
|
|
"labeled_recall": 0.6,
|
|
"pair_correct": 4,
|
|
"pair_pass_rate": 0.4,
|
|
"pairs": 10,
|
|
"silent_fix": 7,
|
|
"specificity": 0.7,
|
|
"vuln_recall": 0.6,
|
|
"youden": 0.29999999999999993
|
|
},
|
|
"vfc": {
|
|
"detected_vuln": 9,
|
|
"labeled_expected": 176,
|
|
"labeled_fix_leaks": 66,
|
|
"labeled_matched": 9,
|
|
"labeled_recall": 0.05113636363636364,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 176,
|
|
"silent_fix": 144,
|
|
"specificity": 0.8181818181818182,
|
|
"vuln_recall": 0.05113636363636364,
|
|
"youden": -0.13068181818181812
|
|
},
|
|
"vfc-js": {
|
|
"detected_vuln": 9,
|
|
"labeled_expected": 17,
|
|
"labeled_fix_leaks": 9,
|
|
"labeled_matched": 9,
|
|
"labeled_recall": 0.5294117647058824,
|
|
"pair_correct": 4,
|
|
"pair_pass_rate": 0.23529411764705882,
|
|
"pairs": 17,
|
|
"silent_fix": 10,
|
|
"specificity": 0.5882352941176471,
|
|
"vuln_recall": 0.5294117647058824,
|
|
"youden": 0.11764705882352944
|
|
},
|
|
"vibe-py": {
|
|
"detected_vuln": 15,
|
|
"labeled_expected": 30,
|
|
"labeled_fix_leaks": 0,
|
|
"labeled_matched": 15,
|
|
"labeled_recall": 0.5,
|
|
"pair_correct": 15,
|
|
"pair_pass_rate": 0.5,
|
|
"pairs": 30,
|
|
"silent_fix": 30,
|
|
"specificity": 1.0,
|
|
"vuln_recall": 0.5,
|
|
"youden": 0.5
|
|
}
|
|
},
|
|
"degradations": [
|
|
{
|
|
"pair": "claude-code-seeded-v2-crm-saas-django-partner-console-acct-p",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-crm-saas-django-partner-console-acct-r",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-education-lms-django-course-operati-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-education-lms-django-course-operations",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-fintech-lending-fastapi-loan-operat-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-fintech-lending-fastapi-loan-operation",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-healthcare-clinic-django-patient-op-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-healthcare-clinic-django-patient-opera",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-hr-payroll-django-payroll-operation-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-hr-payroll-django-payroll-operations-p",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-legal-case-django-case-operations-c-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-legal-case-django-case-operations-case",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-logistics-dispatch-fastapi-dispatch-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-logistics-dispatch-fastapi-dispatch-op",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-marketplace-commerce-fastapi-seller-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-marketplace-commerce-fastapi-seller-op",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-property-management-fastapi-tenant--2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-property-management-fastapi-tenant-ope",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-support-desk-fastapi-support-operat-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "claude-code-seeded-v2-support-desk-fastapi-support-operation",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-crm-saas-django-partner-console-acct-fo",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-crm-saas-django-partner-console-acct-va",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-education-lms-django-course-operatio-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-education-lms-django-course-operations-",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-fintech-lending-fastapi-loan-operati-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-fintech-lending-fastapi-loan-operations",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-healthcare-clinic-django-patient-ope-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-healthcare-clinic-django-patient-operat",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-hr-payroll-django-payroll-operations-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-hr-payroll-django-payroll-operations-pa",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-legal-case-django-case-operations-ca-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-legal-case-django-case-operations-case-",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-logistics-dispatch-fastapi-dispatch--2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-logistics-dispatch-fastapi-dispatch-ope",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-marketplace-commerce-fastapi-seller--2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-marketplace-commerce-fastapi-seller-ope",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-property-management-fastapi-tenant-o-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-property-management-fastapi-tenant-oper",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-support-desk-fastapi-support-operati-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-high-seeded-v2-support-desk-fastapi-support-operations",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-crm-saas-django-partner-console-account-wayb",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-crm-saas-django-partner-console-acct-bundle-",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-education-lms-django-course-operations-co-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-education-lms-django-course-operations-cours",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-fintech-lending-fastapi-loan-operations-l-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-fintech-lending-fastapi-loan-operations-loan",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-healthcare-clinic-django-patient-operatio-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-healthcare-clinic-django-patient-operations-",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-hr-payroll-django-payroll-operations-payr-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-hr-payroll-django-payroll-operations-payroll",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-legal-case-django-case-operations-case-bundl",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-legal-case-django-case-operations-case-retur",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-logistics-dispatch-fastapi-dispatch-opera-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-logistics-dispatch-fastapi-dispatch-operatio",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-marketplace-commerce-fastapi-seller-opera-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-marketplace-commerce-fastapi-seller-operatio",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-property-management-fastapi-tenant-operat-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-property-management-fastapi-tenant-operation",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-support-desk-fastapi-support-operations-t-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "codex-seeded-v2-support-desk-fastapi-support-operations-tick",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-crm-saas-django-partner-console-account-",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-crm-saas-django-partner-console-acct-bun",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-education-lms-django-course-operation-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-education-lms-django-course-operations-c",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-fintech-lending-fastapi-loan-operatio-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-fintech-lending-fastapi-loan-operations-",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-healthcare-clinic-django-patient-oper-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-healthcare-clinic-django-patient-operati",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-hr-payroll-django-payroll-operations--2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-hr-payroll-django-payroll-operations-pay",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-legal-case-django-case-operations-case-b",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-legal-case-django-case-operations-case-r",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-logistics-dispatch-fastapi-dispatch-o-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-logistics-dispatch-fastapi-dispatch-oper",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-marketplace-commerce-fastapi-seller-o-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-marketplace-commerce-fastapi-seller-oper",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-property-management-fastapi-tenant-op-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-property-management-fastapi-tenant-opera",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-support-desk-fastapi-support-operatio-2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "kimi-code-seeded-v2-support-desk-fastapi-support-operations-",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "ah-05-07-main-0f68d7",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "ai-file-manager-searcher-2c8f65",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "audienceos-command-center-route-7b2b31",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "backend-gym-main-37aec0",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "bricks-document-viewer-client-8daa7c",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "bushiri-index-bd1c99",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "career-copilot-matches-eaa75e",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "chatpro-index-99dcd3",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "comp-6000-capstone2-index-388195",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "easy-q-api-a31c36",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "ems-contract-analyzer-app-00884c",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "enterprise-ai-lakehouse-platform-main-11e36d",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "findconstructionstaffing-route-24edf4",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "fitnesstracker-communityfoods-115204",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "flytte24-views-8a5f7a",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "fusmle-index-47f075",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "green-mobile-offline-backend-example-482952",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "iterviz-orchestrator-c59620",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "jogo-da-velha-rotas-326bac",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "joidy-main-a2fa2c",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "learnly-page-a4c6b2",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "neutral-server-033e5f",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "niners-initializecollections-b90f9c",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "nuvanx-siteground-validate-page-templates-7ccb5b",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "shift-left-or-die-database-68a00a",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "signaldigest-route-8ca292",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "soulclaw-pw-session-1346a0",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "tabletap-safe-next-33ff1b",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "tracechantier-web-route-cbdafd",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
},
|
|
{
|
|
"pair": "unimart-backend-auth-controller-3ee79a",
|
|
"reason": "pointer_pair_skipped",
|
|
"stage": "pairs"
|
|
}
|
|
],
|
|
"known_limit": [
|
|
"owasp-java-hash",
|
|
"dsvw-dsvw-do-get",
|
|
"python-insecure-app-main-try-hack-me",
|
|
"pythonssti-main-read-root",
|
|
"vampi-books-get-by-title",
|
|
"vulnpy-deserialization-do-pickle-load",
|
|
"lensops-kubernetesmanagement-fe4910"
|
|
],
|
|
"loss": {
|
|
"agent-vfc": {
|
|
"known_limit": 1,
|
|
"parse_failed_files": 0,
|
|
"unadjudicated_proposals": 0,
|
|
"unresolved_function_labels": 0,
|
|
"weak_labels": 0
|
|
},
|
|
"github": {
|
|
"known_limit": 0,
|
|
"parse_failed_files": 0,
|
|
"unadjudicated_proposals": 0,
|
|
"unresolved_function_labels": 0,
|
|
"weak_labels": 0
|
|
},
|
|
"local": {
|
|
"known_limit": 0,
|
|
"parse_failed_files": 0,
|
|
"unadjudicated_proposals": 0,
|
|
"unresolved_function_labels": 0,
|
|
"weak_labels": 0
|
|
},
|
|
"owasp": {
|
|
"known_limit": 0,
|
|
"parse_failed_files": 0,
|
|
"unadjudicated_proposals": 0,
|
|
"unresolved_function_labels": 0,
|
|
"weak_labels": 0
|
|
},
|
|
"sast": {
|
|
"known_limit": 1,
|
|
"parse_failed_files": 0,
|
|
"unadjudicated_proposals": 6,
|
|
"unresolved_function_labels": 0,
|
|
"weak_labels": 0
|
|
},
|
|
"vfc": {
|
|
"known_limit": 0,
|
|
"parse_failed_files": 36,
|
|
"unadjudicated_proposals": 128,
|
|
"unresolved_function_labels": 24,
|
|
"weak_labels": 0
|
|
},
|
|
"vfc-js": {
|
|
"known_limit": 0,
|
|
"parse_failed_files": 0,
|
|
"unadjudicated_proposals": 9,
|
|
"unresolved_function_labels": 0,
|
|
"weak_labels": 0
|
|
},
|
|
"vibe-py": {
|
|
"known_limit": 5,
|
|
"parse_failed_files": 0,
|
|
"unadjudicated_proposals": 14,
|
|
"unresolved_function_labels": 0,
|
|
"weak_labels": 0
|
|
}
|
|
},
|
|
"outcomes": [
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "local-python-vulnerable",
|
|
"origin": "in-tree-fixture",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "reviewed",
|
|
"silent_fix": true,
|
|
"slice": "local",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 12,
|
|
"vuln_findings": 12,
|
|
"vuln_matched": 12,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "local-javascript-vulnerable",
|
|
"origin": "in-tree-fixture",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "reviewed",
|
|
"silent_fix": true,
|
|
"slice": "local",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 10,
|
|
"vuln_findings": 10,
|
|
"vuln_matched": 10,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "local-cpp-buffer",
|
|
"origin": "in-tree-fixture",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "reviewed",
|
|
"silent_fix": true,
|
|
"slice": "local",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 6,
|
|
"vuln_findings": 6,
|
|
"vuln_matched": 6,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/Internet-of-People/titania-os/commit/9b7805119938343fcac9dc929d8882f1d97cf14a",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "sven-cwe-078-os-system",
|
|
"origin": "sven",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "github",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/google/mobly/commit/3862e8ba359040fbdd6e1a6d36e51d07cda8e1ee",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "sven-cwe-078-shell-true",
|
|
"origin": "sven",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "github",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/russ-lewis/ttt_-_python_cgi/commit/6096f43fd4b2d91211eec4614b7960c0816900da",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "sven-cwe-089-execute-percent",
|
|
"origin": "sven",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "github",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/pukkapies/urop2019/commit/3ca2e2c291d2d5fe262d20a8e0520bdfb622432b",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:modules/query_lastfm.py:CWE-89"
|
|
],
|
|
"name": "sven-cwe-089-query-concat",
|
|
"origin": "sven",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "github",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/dromara/hutool/commit/8d7d0b7fb5ea4f7447b40131bffc1ec506a6528e",
|
|
"cve": "CVE-2018-17297",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"path_join_user_input"
|
|
],
|
|
"misses": [
|
|
"-:cn/hutool/core/util/ZipUtil.java:CWE-22"
|
|
],
|
|
"name": "hutool-cve-2018-17297",
|
|
"origin": "cwe-bench-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "github",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5941",
|
|
"cve": "CVE-2017-5941",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "node-serialize-cve-2017-5941",
|
|
"origin": "nvd",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "github",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"python-unsafe-eval:testcode/BenchmarkTest00074.py:CWE-94"
|
|
],
|
|
"name": "owasp-python-codeinj",
|
|
"origin": "owasp-benchmark-python",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "sast",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "owasp-python-deser",
|
|
"origin": "owasp-benchmark-python",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "sast",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [
|
|
"python-shell-true:testcode/BenchmarkTest00165.py:58"
|
|
],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"python-shell-true:testcode/BenchmarkTest00165.py:CWE-78"
|
|
],
|
|
"name": "owasp-python-cmdi",
|
|
"origin": "owasp-benchmark-python",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "sast",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"python-sql-injection:testcode/BenchmarkTest00099.py:CWE-89"
|
|
],
|
|
"name": "owasp-python-sqli",
|
|
"origin": "owasp-benchmark-python",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "sast",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"config_sink_weak_literal"
|
|
],
|
|
"misses": [
|
|
"python-weak-hash:testcode/BenchmarkTest00054.py:CWE-327"
|
|
],
|
|
"name": "owasp-python-hash",
|
|
"origin": "owasp-benchmark-python",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "sast",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"promote"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "owasp-java-cmdi",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "sast",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [
|
|
"overlay-coverage:org/owasp/benchmark/testcode/BenchmarkTest00008.java:54:executeQuery"
|
|
],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "owasp-java-sqli",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "sast",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": "cross_artifact: OWASP labels this true via hashAlg1=MD5 in benchmark.properties, which is not in the vendored file",
|
|
"language": "java",
|
|
"leaks": [
|
|
"overlay-coverage:org/owasp/benchmark/testcode/BenchmarkTest00003.java:100:response.write"
|
|
],
|
|
"mechanisms": [
|
|
"cross_artifact"
|
|
],
|
|
"misses": [
|
|
"java-weak-hash:org/owasp/benchmark/testcode/BenchmarkTest00003.java:CWE-327"
|
|
],
|
|
"name": "owasp-java-hash",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "sast",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"promote"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "juliet-c-cwe134-printf",
|
|
"origin": "juliet-c",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "sast",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-copy:CWE121_char_declare_cpy_01.c:16"
|
|
],
|
|
"mechanisms": [
|
|
"fixed_buffer_capacity"
|
|
],
|
|
"misses": [],
|
|
"name": "juliet-c-cwe121-strcpy",
|
|
"origin": "juliet-c",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "sast",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"promote"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "juliet-java-cwe78-exec",
|
|
"origin": "juliet-java",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "sast",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/96db9023b881d7cd9f379b0c154650d6c108e9a3",
|
|
"cve": "CVE-2014-0160",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:ssl/t1_lib.c:80"
|
|
],
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"misses": [],
|
|
"name": "openssl-cve-2014-0160",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://hg.mozilla.org/mozilla-central/rev/b79b6cc78248eea7fda10bfb76aa273c19c9fa65",
|
|
"cve": "CVE-2020-15667",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:modules/libmar/src/mar_read.c:46"
|
|
],
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"misses": [],
|
|
"name": "firefox-cve-2020-15667",
|
|
"origin": "mozilla-central",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/chromium/chromium/commit/ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449",
|
|
"cve": "CVE-2019-5786",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"uaf"
|
|
],
|
|
"misses": [
|
|
"c-unsafe-memory-copy:third_party/blink/renderer/core/fileapi/file_reader_loader.cc:CWE-416"
|
|
],
|
|
"name": "chromium-cve-2019-5786",
|
|
"origin": "chromium",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4",
|
|
"cve": "CVE-2020-1967",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:ssl/t1_lib.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2020-1967",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/b33c48b75aaf33c93aeda42d7138616b9e6a64cb",
|
|
"cve": "CVE-2020-1971",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/v3_genn.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2020-1971",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/c9fb704cf3af5524eb8e79961e31b60eee8c3c47",
|
|
"cve": "CVE-2021-23840",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 3,
|
|
"fix_leaks": 3,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:crypto/evp/evp_enc.c:60",
|
|
"c-unsafe-memory-copy:crypto/evp/evp_enc.c:78",
|
|
"c-unsafe-memory-copy:crypto/evp/evp_enc.c:97"
|
|
],
|
|
"mechanisms": [
|
|
"signed_size_operand"
|
|
],
|
|
"misses": [
|
|
"-:crypto/evp/evp_enc.c:CWE-190"
|
|
],
|
|
"name": "openssl-cve-2021-23840",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 3,
|
|
"unadjudicated_vuln": 3,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 3,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46",
|
|
"cve": "CVE-2021-3711",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"misses": [
|
|
"-:crypto/sm2/sm2_crypt.c:CWE-120"
|
|
],
|
|
"name": "openssl-cve-2021-3711",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9",
|
|
"cve": "CVE-2021-3712",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/v3_utl.c:CWE-125"
|
|
],
|
|
"name": "openssl-cve-2021-3712",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/9eafb53614bf65797db25f467946e735e1b43dc9",
|
|
"cve": "CVE-2022-0778",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/bn/bn_sqrt.c:CWE-835"
|
|
],
|
|
"name": "openssl-cve-2022-0778",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2",
|
|
"cve": "CVE-2022-1292",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "unknown",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:tools/c_rehash.in:CWE-78"
|
|
],
|
|
"name": "openssl-cve-2022-1292",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332",
|
|
"cve": "CVE-2022-3602",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:crypto/punycode.c:81"
|
|
],
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"misses": [],
|
|
"name": "openssl-cve-2022-3602",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6",
|
|
"cve": "CVE-2022-3786",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:crypto/punycode.c:80"
|
|
],
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"misses": [],
|
|
"name": "openssl-cve-2022-3786",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f",
|
|
"cve": "CVE-2023-0286",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"type_confusion"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/v3_genn.c:CWE-843"
|
|
],
|
|
"name": "openssl-cve-2023-0286",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147",
|
|
"cve": "CVE-2023-38545",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 5,
|
|
"fix_leaks": 5,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:lib/socks.c:197",
|
|
"c-unsafe-memory-copy:lib/socks.c:207",
|
|
"c-unsafe-memory-copy:lib/socks.c:360",
|
|
"c-unsafe-memory-copy:lib/socks.c:367",
|
|
"c-unsafe-memory-copy:lib/socks.c:373"
|
|
],
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"misses": [
|
|
"c-unsafe-memory-copy:lib/socks.c:CWE-122"
|
|
],
|
|
"name": "curl-cve-2023-38545",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 5,
|
|
"unadjudicated_vuln": 5,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 5,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/chromium/chromium/commit/22c61cfae5d1b37c773e638d342488ae11118b51",
|
|
"cve": "CVE-2022-2162",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"validation_strength"
|
|
],
|
|
"misses": [
|
|
"-:content/browser/file_system_access/file_system_chooser.cc:CWE-20"
|
|
],
|
|
"name": "chromium-cve-2022-2162",
|
|
"origin": "chromium",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/2c13bf15286328641a805eb3b7c97e27d42881fb",
|
|
"cve": "CVE-2025-69421",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:crypto/pkcs12/p12_decr.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2025-69421",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/84f73f79af9f69c1527a9a372b7a9e771a394c2a",
|
|
"cve": "CVE-2025-66199",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"unchecked_alloc_size"
|
|
],
|
|
"misses": [
|
|
"-:ssl/statem/statem_lib.c:CWE-770"
|
|
],
|
|
"name": "openssl-cve-2025-66199",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/mozilla-firefox/firefox/commit/e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6",
|
|
"cve": "BUG-2058173",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"unchecked_alloc_size"
|
|
],
|
|
"misses": [
|
|
"-:modules/libmar/src/mar_read.c:CWE-770"
|
|
],
|
|
"name": "firefox-bug-2058173",
|
|
"origin": "mozilla-firefox/firefox",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/70cebd74d3592f5272945501b58a60374c4e13af",
|
|
"cve": "CVE-2026-18798",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/quic/quic_port.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-18798",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e",
|
|
"cve": "CVE-2026-54874",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/record/rec_layer_d1.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-54874",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e",
|
|
"cve": "CVE-2026-54874",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/record/ssl3_record.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-54874-dtls1_process_record",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40",
|
|
"cve": "CVE-2026-54874",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:ssl/record/methods/dtls_meth.c:44"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/record/methods/dtls_meth.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 2,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 2,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382",
|
|
"cve": "CVE-2026-63072",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"misses": [
|
|
"-:crypto/cms/cms_kari.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-63072",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756",
|
|
"cve": "CVE-2026-63072",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"misses": [
|
|
"-:crypto/cms/cms_kemri.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-63072-cms_kek_cipher",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4",
|
|
"cve": "CVE-2026-63073",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/cmp/cmp_vfy.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-63073",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/1e8c398db67404babd3e5af999bb6bd86f720c76",
|
|
"cve": "CVE-2026-14457",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/t1_lib.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-14457",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f",
|
|
"cve": "CVE-2026-63074",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/cmp/cmp_vfy.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-63074",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/c902e5f16d6a9e130e96d3ca6d8f64d71652e393",
|
|
"cve": "CVE-2026-63075",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/quic/quic_txp.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-63075-txp_pkt_commit",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42",
|
|
"cve": "CVE-2026-75803",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:providers/implementations/ciphers/cipher_aes_ocb.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-75803",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42",
|
|
"cve": "CVE-2026-75803",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:providers/implementations/ciphers/cipher_chacha20_poly1305.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-75803-chacha20_poly1305_cipher",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9",
|
|
"cve": "CVE-2026-75803",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-75803-aes_gcm_siv_finish",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9",
|
|
"cve": "CVE-2026-14456",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/quic/quic_port.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-14456-port_default_packet_hand",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/9416706d408bb84deb7cee4647bff3045d2dc7ba",
|
|
"cve": "CVE-2026-14456",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/quic/quic_impl.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-14456-expect_quic_for_value",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/f4129fbe3cde786d363510069fe297234f99be8f",
|
|
"cve": "CVE-2026-45447",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"uaf"
|
|
],
|
|
"misses": [
|
|
"-:crypto/pkcs7/pk7_smime.c:CWE-416"
|
|
],
|
|
"name": "openssl-cve-2026-45447",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721",
|
|
"cve": "CVE-2026-45446",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 3,
|
|
"fix_leaks": 3,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c:46",
|
|
"c-unsafe-memory-copy:providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c:63",
|
|
"c-unsafe-memory-copy:providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c:78"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-45446",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 3,
|
|
"unadjudicated_vuln": 3,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 3,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721",
|
|
"cve": "CVE-2026-45446",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:providers/implementations/ciphers/cipher_aes_siv.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-45446-aes_siv_set_ctx_params",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/f87f0b6a8e04bcdeb98afc82b0da06a2d537f399",
|
|
"cve": "CVE-2026-45445",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:providers/implementations/ciphers/cipher_aes_ocb.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-45445",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/b3a555a0a7aa0028887149f6f973af89a4937bea",
|
|
"cve": "CVE-2026-42771",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/x509_vpm.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-42771",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/c2765d53c2649b56bc1ca1bb799e42002953056a",
|
|
"cve": "CVE-2026-42769",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:crypto/cmp/cmp_genm.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2026-42769",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369",
|
|
"cve": "CVE-2026-42768",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/cms/cms_env.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-42768",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369",
|
|
"cve": "CVE-2026-42768",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/pkcs7/pk7_doit.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/74245170b5a64b234ac4af27c86a25ec251c8b2a",
|
|
"cve": "CVE-2026-42766",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:crypto/cms/cms_pwri.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2026-42766",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/a9af3442290e8a04706a3cd5f284ffd5b486e3f6",
|
|
"cve": "CVE-2026-42765",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/x509_vfy.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2026-42765",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/5097ec4dae239112498abb722e255ea60ef7ac48",
|
|
"cve": "CVE-2026-42764",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:ssl/quic/quic_port.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2026-42764",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/58633b658fe74095c8cdde191e4ce1bf94f8c5f9",
|
|
"cve": "CVE-2026-35188",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/x509_vfy.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-35188",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c",
|
|
"cve": "CVE-2026-34181",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/pkcs12/p12_mutl.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-34181",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/51d1800e95283a8beec85152e35e3634dab8dd82",
|
|
"cve": "CVE-2026-9076",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:crypto/cms/cms_pwri.c:61"
|
|
],
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"misses": [],
|
|
"name": "openssl-cve-2026-9076",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9",
|
|
"cve": "CVE-2026-7383",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/asn1/a_mbstr.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-7383",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/eed200f58cd8645ed77e46b7e9f764e284df379e",
|
|
"cve": "CVE-2026-31790",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:providers/implementations/kem/rsa_kem.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-31790",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/abd8b2eec7e3f3fda60ecfb68498b246b52af482",
|
|
"cve": "CVE-2026-31790",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "unknown",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:providers/implementations/kem/rsa_kem.c.in:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-31790-rsasve_generate",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521",
|
|
"cve": "CVE-2026-31789",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"misses": [
|
|
"-:crypto/o_str.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-31789",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e",
|
|
"cve": "CVE-2026-28388",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/x509_vfy.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2026-28388",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4",
|
|
"cve": "CVE-2026-28389",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:crypto/cms/cms_rsa.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2026-28389",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f",
|
|
"cve": "CVE-2026-28389",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:crypto/cms/cms_dh.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2026-28389-dh_cms_set_shared_info",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f",
|
|
"cve": "CVE-2026-28389",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:crypto/cms/cms_ec.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2026-28389-ecdh_cms_set_shared_info",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34",
|
|
"cve": "CVE-2026-2673",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 2,
|
|
"fix_leaks": 2,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:ssl/t1_lib.c:102",
|
|
"c-unsafe-memory-copy:ssl/t1_lib.c:167"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/t1_lib.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2026-2673",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 2,
|
|
"unadjudicated_vuln": 2,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 2,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/4191043c36f1a50c717a2d0075fc6f3b9bc0afc5",
|
|
"cve": "CVE-2025-69419",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"misses": [
|
|
"-:crypto/pkcs12/p12_utl.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2025-69419",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347",
|
|
"cve": "CVE-2025-69418",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 3,
|
|
"fix_leaks": 3,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:crypto/modes/ocb128.c:57",
|
|
"c-unsafe-memory-copy:crypto/modes/ocb128.c:68",
|
|
"c-unsafe-memory-copy:crypto/modes/ocb128.c:93"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/modes/ocb128.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2025-69418",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 3,
|
|
"unadjudicated_vuln": 3,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 3,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4",
|
|
"cve": "CVE-2025-66199",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/statem/statem_lib.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2025-66199-tls13_process_compressed",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6",
|
|
"cve": "CVE-2025-68160",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 5,
|
|
"fix_leaks": 5,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:48",
|
|
"c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:54",
|
|
"c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:72",
|
|
"c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:111",
|
|
"c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:117"
|
|
],
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"misses": [],
|
|
"name": "openssl-cve-2025-68160",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 5,
|
|
"unadjudicated_vuln": 4,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 4,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61",
|
|
"cve": "CVE-2025-15469",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:apps/dgst.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2025-15469",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e",
|
|
"cve": "CVE-2025-15467",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:crypto/evp/evp_lib.c:26"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/evp/evp_lib.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2025-15467",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206",
|
|
"cve": "CVE-2025-11187",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/pkcs12/p12_mutl.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2025-11187",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b",
|
|
"cve": "CVE-2025-9232",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/http/http_lib.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2025-9232",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def",
|
|
"cve": "CVE-2025-9230",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:crypto/cms/cms_pwri.c:59"
|
|
],
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"misses": [],
|
|
"name": "openssl-cve-2025-9230",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7",
|
|
"cve": "CVE-2024-12797",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/statem/statem_clnt.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2024-12797",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844",
|
|
"cve": "CVE-2024-13176",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/ec/ec_lib.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2024-13176-ec_field_inverse_mod_ord",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6",
|
|
"cve": "CVE-2024-6119",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/v3_utl.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2024-6119",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/4b375b998798dd516d367036773073e1b88e6433",
|
|
"cve": "CVE-2024-5535",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/statem/extensions_clnt.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2024-5535",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/189a7ed3e380e34ea38fe4190a7c9396bace0fb7",
|
|
"cve": "CVE-2024-5535",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/statem/extensions_srvr.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2024-5535-tls_construct_stoc_next_",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/159921152fd4aa91e4c849fd281ad93ac0d0d0ba",
|
|
"cve": "CVE-2024-5535",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:ssl/statem/extensions_clnt.c:57"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/statem/extensions_clnt.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2024-5535-tls_parse_stoc_npn",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c",
|
|
"cve": "CVE-2024-5535",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/ssl_lib.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2024-5535-ssl_select_next_proto",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/6cc511826f09e513b4ec066d9b95acaf4f86d991",
|
|
"cve": "CVE-2024-5535",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/quic/quic_tserver.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2024-5535-alpn_select_cb",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020",
|
|
"cve": "CVE-2024-4741",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:ssl/record/rec_layer_s3.c:67"
|
|
],
|
|
"mechanisms": [
|
|
"uaf"
|
|
],
|
|
"misses": [
|
|
"-:ssl/record/rec_layer_s3.c:CWE-416"
|
|
],
|
|
"name": "openssl-cve-2024-4741",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020",
|
|
"cve": "CVE-2024-4741",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"uaf"
|
|
],
|
|
"misses": [
|
|
"-:ssl/record/ssl3_buffer.c:CWE-416"
|
|
],
|
|
"name": "openssl-cve-2024-4741-ssl3_release_read_buffer",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d",
|
|
"cve": "CVE-2024-4741",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/ssl_lib.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2024-4741-ssl_free_buffers",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/10171e5b511b700c5ecd4fd3e1086b19c34b1ae3",
|
|
"cve": "CVE-2024-4741",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"uaf"
|
|
],
|
|
"misses": [
|
|
"-:ssl/record/methods/tls_common.c:CWE-416"
|
|
],
|
|
"name": "openssl-cve-2024-4741-tls_release_read_buffer",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac",
|
|
"cve": "CVE-2024-4741",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/record/methods/tls_common.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2024-4741-tls_free_buffers",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397",
|
|
"cve": "CVE-2024-4603",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/dsa/dsa_check.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2024-4603",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d",
|
|
"cve": "CVE-2024-2511",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/ssl_lib.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2024-2511",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d",
|
|
"cve": "CVE-2024-2511",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/statem/statem_srvr.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2024-2511-tls_construct_server_hel",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2",
|
|
"cve": "CVE-2024-0727",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:crypto/pkcs12/p12_mutl.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2024-0727",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2",
|
|
"cve": "CVE-2024-0727",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:crypto/pkcs7/pk7_mime.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2024-0727-smime_write_pkcs7",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/0df40630850fb2740e6be6890bb905d3fc623b2d",
|
|
"cve": "CVE-2023-5363",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 5,
|
|
"fix_leaks": 5,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:crypto/evp/evp_enc.c:173",
|
|
"c-unsafe-memory-copy:crypto/evp/evp_enc.c:181",
|
|
"c-unsafe-memory-copy:crypto/evp/evp_enc.c:332",
|
|
"c-unsafe-memory-copy:crypto/evp/evp_enc.c:333",
|
|
"c-unsafe-memory-copy:crypto/evp/evp_enc.c:345"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/evp/evp_enc.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2023-5363",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 5,
|
|
"unadjudicated_vuln": 3,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 3,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/9002fd07327a91f35ba6c1307e71fa6fd4409b7f",
|
|
"cve": "CVE-2023-3817",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/dh/dh_check.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2023-3817-dh_check",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/8780a896543a654e757db1b9396383f9d8095528",
|
|
"cve": "CVE-2023-3446",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/dh/dh_check.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2023-3446",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/00e2f5eea29994d19293ec4e8c8775ba73678598",
|
|
"cve": "CVE-2023-2975",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:providers/implementations/ciphers/cipher_aes_siv.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2023-2975",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/d63b3e7959e79f98d60760a739f7876dc5adc838",
|
|
"cve": "CVE-2023-2650",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/objects/obj_dat.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2023-2650",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/d12cde7fc5561d463badcd8a73079cf92864c31e",
|
|
"cve": "CVE-2022-37454",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:providers/implementations/kdfs/hkdf.c:68"
|
|
],
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"misses": [],
|
|
"name": "openssl-cve-2022-37454",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b",
|
|
"cve": "CVE-2022-4304",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/bn/bn_asm.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2022-4304",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b",
|
|
"cve": "CVE-2022-4304",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/bn/bn_blind.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2022-4304-bn_blinding_invert_ex",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b",
|
|
"cve": "CVE-2022-4304",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/rsa/rsa_ossl.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2022-4304-rsa_blinding_invert",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/b013765abfa80036dc779dd0e50602c57bb3bf95",
|
|
"cve": "CVE-2023-0465",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/x509_vfy.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2023-0465",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/879f7080d7e141f415c79eaa3a8ac4a3dad0348b",
|
|
"cve": "CVE-2023-0464",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509v3/pcy_tree.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2023-0464",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/959c59c7a0164117e7f8366466a32bb1f8d77ff1",
|
|
"cve": "CVE-2023-0464",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/pcy_tree.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2023-0464-tree_init",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6",
|
|
"cve": "CVE-2021-3449",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/record/methods/tls_common.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3449",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6",
|
|
"cve": "CVE-2021-3449",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/ssl_sess.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3449-def_generate_session_id",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6",
|
|
"cve": "CVE-2021-3449",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/statem/extensions_srvr.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3449-tls_parse_ctos_renegotia",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6",
|
|
"cve": "CVE-2021-3449",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 2,
|
|
"fix_leaks": 2,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:ssl/statem/statem_lib.c:84",
|
|
"c-unsafe-memory-copy:ssl/statem/statem_lib.c:88"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/statem/statem_lib.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3449-tls_process_finished",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 2,
|
|
"unadjudicated_vuln": 2,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 2,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/6eebe6c0238178356114a96a7858f36b24172847",
|
|
"cve": "CVE-2023-0401",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/pkcs7/pk7_doit.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2023-0401",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f",
|
|
"cve": "CVE-2023-0286",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/v3_genn.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2023-0286-general_name_cmp",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/bcec03c33cc00a7b5eb89ebeeee59e604570a86a",
|
|
"cve": "CVE-2023-0217",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/ffc/ffc_key_validate.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2023-0217",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/80253dbdc92bec584f4a9866b43f8674156d838a",
|
|
"cve": "CVE-2023-0216",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/pkcs7/pk7_lib.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2023-0216",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/8022a4799fe884b3bf8d538e2b4c4ec323663118",
|
|
"cve": "CVE-2022-4304",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:crypto/rsa/rsa_ossl.c:134"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/rsa/rsa_ossl.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2022-4304-rsa_ossl_private_decrypt",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/7fc67e0a33102aa47bbaa56533eeecb98c0450f7",
|
|
"cve": "CVE-2020-25659",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:crypto/rsa/rsa_ossl.c:217"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/rsa/rsa_ossl.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2020-25659",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7",
|
|
"cve": "CVE-2022-3996",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/pcy_map.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2022-3996",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6",
|
|
"cve": "CVE-2022-3786",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:crypto/punycode.c:80"
|
|
],
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"misses": [
|
|
"-:crypto/punycode.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2022-3786-ossl_punycode_decode",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332",
|
|
"cve": "CVE-2022-3602",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:crypto/punycode.c:81"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/punycode.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2022-3602-ossl_punycode_decode",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b",
|
|
"cve": "CVE-2022-3358",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:crypto/evp/digest.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2022-3358",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b",
|
|
"cve": "CVE-2022-3358",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 3,
|
|
"fix_leaks": 3,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:crypto/evp/evp_enc.c:289",
|
|
"c-unsafe-memory-copy:crypto/evp/evp_enc.c:290",
|
|
"c-unsafe-memory-copy:crypto/evp/evp_enc.c:302"
|
|
],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:crypto/evp/evp_enc.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2022-3358-evp_cipher_init_internal",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 3,
|
|
"unadjudicated_vuln": 3,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 3,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/2c9c35870601b4a44d86ddbf512b38df38285cfa",
|
|
"cve": "CVE-2022-2068",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "unknown",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:tools/c_rehash.in:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2022-2068-hash_dir",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/373de40f3f76c63e4f2684abd86706f3863347ca",
|
|
"cve": "CVE-2022-29242",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/statem/statem_clnt.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2022-29242",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/7d56a74a96828985db7354a55227a511615f732b",
|
|
"cve": "CVE-2022-1434",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:providers/implementations/ciphers/cipher_rc4_hmac_md5.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2022-1434",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/2eda98790c5c2741d76d23cc1e74b0dc4f4b391a",
|
|
"cve": "CVE-2022-1343",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/ocsp/ocsp_vfy.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2022-1343",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/d69ae8a93bfc0f2489c008fcf303a98d77a6df4d",
|
|
"cve": "CVE-2021-4044",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/x509_vfy.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-4044",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/758754966791c537ea95241438454aa86f91f256",
|
|
"cve": "CVE-2021-4044",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/statem/statem_clnt.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-4044-tls_post_process_server_",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/36cf45ef3ba71e44a8be06ee81cb31aa02cb0010",
|
|
"cve": "CVE-2021-3711",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:providers/implementations/asymciphers/sm2_enc.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3711-sm2_asym_decrypt",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3",
|
|
"cve": "CVE-2021-3712",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/asn1/t_spki.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3712-netscape_spki_print",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9",
|
|
"cve": "CVE-2021-3712",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/v3_utl.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3712-append_ia5",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/95f8c1e142df835d03b5b62521383a462fc5470d",
|
|
"cve": "CVE-2021-3712",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/cmp/cmp_hdr.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/d2015a783e64613d8e4a142fa05048d1863df944",
|
|
"cve": "CVE-2021-3712",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/v3_ncons.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3712-ia5ncasecmp",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/918430ba80d94ec8f05383b43b1872b1ebb13e1a",
|
|
"cve": "CVE-2021-3712",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/v3_pci.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3712-i2r_pci",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd",
|
|
"cve": "CVE-2021-3712",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/v3_san.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3712-general_name_print",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/1747d4658b3830951068a6a6c1fa2b45c4731fb3",
|
|
"cve": "CVE-2021-3712",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/v3_cpols.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3712-print_qualifiers",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46",
|
|
"cve": "CVE-2021-3711",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/sm2/sm2_pmeth.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3711-pkey_sm2_decrypt",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a",
|
|
"cve": "CVE-2021-3449",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 2,
|
|
"fix_leaks": 2,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:ssl/s3_lib.c:39",
|
|
"c-unsafe-memory-copy:ssl/s3_lib.c:42"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/s3_lib.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3449-ssl_generate_master_secr",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 2,
|
|
"unadjudicated_vuln": 2,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 2,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a",
|
|
"cve": "CVE-2021-3449",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/ssl_lib.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a",
|
|
"cve": "CVE-2021-3449",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/statem/extensions.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3449-init_sig_algs_cert",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a",
|
|
"cve": "CVE-2021-3449",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/statem/extensions_clnt.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3449-tls_construct_ctos_early",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a",
|
|
"cve": "CVE-2021-3449",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/statem/statem_clnt.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3449-tls_process_certificate_",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a",
|
|
"cve": "CVE-2021-3449",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:ssl/statem/statem_srvr.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3449-tls_handle_alpn",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/02b1636fe3db274497304a3e95a4e32ced7e841b",
|
|
"cve": "CVE-2021-3449",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:ssl/statem/extensions.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2021-3449-init_sig_algs",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/2a40b7bc7b94dd7de897a74571e7024f0cf0d63b",
|
|
"cve": "CVE-2021-3450",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/x509_vfy.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2021-3450",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1",
|
|
"cve": "CVE-2021-23840",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 3,
|
|
"fix_leaks": 3,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:crypto/evp/evp_enc.c:67",
|
|
"c-unsafe-memory-copy:crypto/evp/evp_enc.c:86",
|
|
"c-unsafe-memory-copy:crypto/evp/evp_enc.c:105"
|
|
],
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"misses": [],
|
|
"name": "openssl-cve-2021-23840-evp_encryptdecryptupdate",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 3,
|
|
"unadjudicated_vuln": 3,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 3,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/122a19ab48091c657f7cb1fb3af9fc07bd557bbf",
|
|
"cve": "CVE-2021-23841",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509/x509_cmp.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2021-23841",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/f960d81215ebf3f65e03d4d5d857fb9b666d6920",
|
|
"cve": "CVE-2020-1971",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:crypto/x509v3/v3_genn.c:CWE-119"
|
|
],
|
|
"name": "openssl-cve-2020-1971-general_name_cmp",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4",
|
|
"cve": "CVE-2020-1967",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"misses": [
|
|
"-:ssl/t1_lib.c:CWE-476"
|
|
],
|
|
"name": "openssl-cve-2020-1967-tls1_check_sig_alg",
|
|
"origin": "openssl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc",
|
|
"cve": "CVE-2026-9080",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/multi_ev.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2026-9080",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147",
|
|
"cve": "CVE-2023-38545",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 5,
|
|
"fix_leaks": 5,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:lib/socks.c:197",
|
|
"c-unsafe-memory-copy:lib/socks.c:207",
|
|
"c-unsafe-memory-copy:lib/socks.c:360",
|
|
"c-unsafe-memory-copy:lib/socks.c:367",
|
|
"c-unsafe-memory-copy:lib/socks.c:373"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/socks.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2023-38545-do_socks5",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 5,
|
|
"unadjudicated_vuln": 5,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 5,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/20f9dd6bae50b7223171b17ba7798946e74f877f",
|
|
"cve": "CVE-2022-32207",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/cookie.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2022-32207",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/3a09fbb7f264c67c438d01a30669ce325aa508e2",
|
|
"cve": "CVE-2022-32206",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/content_encoding.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2022-32206",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/6ecdf5136b52af747e7bda08db9a748256b1cd09",
|
|
"cve": "CVE-2022-32208",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/krb5.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2022-32208",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c",
|
|
"cve": "CVE-2022-27782",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/url.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2022-27782-curl_init_userdefined",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c",
|
|
"cve": "CVE-2022-27782",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/vtls/gtls.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2022-27782-gtls_shutdown",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c",
|
|
"cve": "CVE-2022-27782",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 2,
|
|
"fix_leaks": 2,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-memory-copy:lib/vtls/nss.c:292",
|
|
"c-unsafe-memory-copy:lib/vtls/nss.c:297"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/vtls/nss.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2022-27782-nss_setup_connect",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 2,
|
|
"unadjudicated_vuln": 2,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 2,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c",
|
|
"cve": "CVE-2022-27782",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 3,
|
|
"fix_leaks": 3,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-copy:lib/vtls/openssl.c:365",
|
|
"c-unsafe-memory-copy:lib/vtls/openssl.c:224",
|
|
"c-unsafe-memory-copy:lib/vtls/openssl.c:231"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/vtls/openssl.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2022-27782-ossl_connect_step1",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 3,
|
|
"unadjudicated_vuln": 3,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 3,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c",
|
|
"cve": "CVE-2022-27782",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/vtls/vtls.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2022-27782-curl_free_primary_ssl_co",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3",
|
|
"cve": "CVE-2022-27778",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:src/tool_operate.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2022-27778",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/fae6fea209a2d4db1582f608bd8cc8000721733a",
|
|
"cve": "CVE-2022-30115",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/hsts.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2022-30115",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/914aaab9153764ef8fa4178215b8ad89d3ac263a",
|
|
"cve": "CVE-2022-27780",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-copy:lib/urlapi.c:68"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/urlapi.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2022-27780",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/620ea21410030a9977396b4661806bc187231b79",
|
|
"cve": "CVE-2022-27774",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/transfer.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2022-27774",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/6e659993952aa5f90f48864be84a1bbb047fc258",
|
|
"cve": "CVE-2022-27776",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/http.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2022-27776",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/058f98dc3fe595f21dc26a5b9b1699e519ba5705",
|
|
"cve": "CVE-2022-27775",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/conncache.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2022-27775",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/852aa5ad351ea53e5f01d2f44b5b4370c2bf5425",
|
|
"cve": "CVE-2022-22576",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/url.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2022-22576-conn_free",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68",
|
|
"cve": "CVE-2021-22947",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/ftp.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2021-22947",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68",
|
|
"cve": "CVE-2021-22947",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/imap.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2021-22947-imap_state_starttls_resp",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68",
|
|
"cve": "CVE-2021-22947",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/pop3.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2021-22947-pop3_state_starttls_resp",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68",
|
|
"cve": "CVE-2021-22947",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/smtp.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2021-22947-smtp_state_starttls_resp",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca",
|
|
"cve": "CVE-2021-22946",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/ftp.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2021-22946",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca",
|
|
"cve": "CVE-2021-22946",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/imap.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2021-22946-imap_state_capability_re",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca",
|
|
"cve": "CVE-2021-22946",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/pop3.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2021-22946-pop3_state_capa_resp",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/43157490a5054bd24256fe12876931e8abc9df49",
|
|
"cve": "CVE-2021-22945",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/mqtt.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2021-22945",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161",
|
|
"cve": "CVE-2021-22924",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/url.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2021-22924",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161",
|
|
"cve": "CVE-2021-22924",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/vtls/nss.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2021-22924-nss_do_connect",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161",
|
|
"cve": "CVE-2021-22924",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/vtls/openssl.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2021-22924-servercert",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/894f6ec730597eb243618d33cc84d71add8d6a8a",
|
|
"cve": "CVE-2021-22925",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/telnet.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2021-22925",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479",
|
|
"cve": "CVE-2021-22901",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 3,
|
|
"fix_leaks": 3,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"c-unsafe-copy:lib/vtls/openssl.c:364",
|
|
"c-unsafe-memory-copy:lib/vtls/openssl.c:224",
|
|
"c-unsafe-memory-copy:lib/vtls/openssl.c:231"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/vtls/openssl.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2021-22901-ossl_connect_step1",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 3,
|
|
"unadjudicated_vuln": 3,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 3,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde",
|
|
"cve": "CVE-2021-22898",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/telnet.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2021-22898",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/b09c8ee15771c614c4bf3ddac893cdb12187c844",
|
|
"cve": "CVE-2021-22890",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/vtls/bearssl.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2021-22890",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/7214288898f5625a6cc196e22a74232eada7861c",
|
|
"cve": "CVE-2021-22876",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/transfer.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2021-22876",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/d9d01672785b8ac04aab1abb6de95fe3072ae199",
|
|
"cve": "CVE-2020-8286",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/vtls/openssl.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2020-8286",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46",
|
|
"cve": "CVE-2020-8284",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/url.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2020-8284",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 1,
|
|
"parse_failed_vuln": 1,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 1,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46",
|
|
"cve": "CVE-2020-8284",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:src/tool_cfgable.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2020-8284-config_init",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22",
|
|
"cve": "CVE-2020-8231",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/multi.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2020-8231-curl_multi_add_handle",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22",
|
|
"cve": "CVE-2020-8231",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:lib/url.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2020-8231-curl_open",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/curl/curl/commit/8236aba58542c5f89f1d41ca09d84579efb05e22",
|
|
"cve": "CVE-2020-8177",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "c_cpp",
|
|
"leaks": [
|
|
"overlay-coverage:src/tool_cb_hdr.c:180:printf"
|
|
],
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"misses": [
|
|
"-:src/tool_cb_hdr.c:CWE-119"
|
|
],
|
|
"name": "curl-cve-2020-8177",
|
|
"origin": "curl",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application/blob/a961308c02d1fb462b192681c336b0739e432da7/core/views.py#L211",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:core/views.py:CWE-78"
|
|
],
|
|
"name": "damn-vulnerable-graphql-application-views-mutate",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application/blob/a961308c02d1fb462b192681c336b0739e432da7/core/views.py#L320",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "damn-vulnerable-graphql-application-views-resolve-pastes",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application/blob/a961308c02d1fb462b192681c336b0739e432da7/core/views.py#L345",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:core/views.py:CWE-78"
|
|
],
|
|
"name": "damn-vulnerable-graphql-application-views-resolve-system-dia",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/Contrast-Security-OSS/DjanGoat/blob/082c88bfefced508ae083b92b459c808f95e905e/app/models/Analytics/analytics.py#L57",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "djangoat-analytics-hits-by-ip",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/Contrast-Security-OSS/DjanGoat/blob/082c88bfefced508ae083b92b459c808f95e905e/app/views/password_resets/views.py#L84",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"promote"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "djangoat-views-reset-password",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/Contrast-Security-OSS/DjanGoat/blob/082c88bfefced508ae083b92b459c808f95e905e/app/views/users/views.py#L74",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "djangoat-views-user-view",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 5,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/sgabe/DSVPWA/blob/a06abb306ed3699bb2f073e3f41d3d9c57012819/dsvpwa/attacks.py#L39",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"promote"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "dsvpwa-attacks-run",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/sgabe/DSVPWA/blob/a06abb306ed3699bb2f073e3f41d3d9c57012819/dsvpwa.py#L37",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"misses": [
|
|
"-:dsvpwa.py:CWE-326"
|
|
],
|
|
"name": "dsvpwa-dsvpwa-main",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/sgabe/DSVPWA/blob/a06abb306ed3699bb2f073e3f41d3d9c57012819/dsvpwa/handlers.py#L183",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "dsvpwa-handlers-do-bdr",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/stamparm/DSVW/blob/7d40f4b7939c901610ed9b85724552d60e7d63fa/dsvw.py#L30",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"promote"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": "identical_twin",
|
|
"language": "python",
|
|
"leaks": [
|
|
"python-path-traversal:dsvw.py:26"
|
|
],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:dsvw.py:CWE-89"
|
|
],
|
|
"name": "dsvw-dsvw-do-get",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": false,
|
|
"slice": "vibe-py",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 7,
|
|
"unadjudicated_vuln": 7,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/anxolerd/dvpwa/blob/a1d8f89fac2e57093189853c6527c2b01fc1d9c1/sqli/app.py#L35",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"misses": [
|
|
"-:sqli/app.py:CWE-16"
|
|
],
|
|
"name": "dvpwa-app-init",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/anxolerd/dvpwa/blob/a1d8f89fac2e57093189853c6527c2b01fc1d9c1/sqli/middlewares.py#L20",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"misses": [
|
|
"-:sqli/middlewares.py:CWE-1004"
|
|
],
|
|
"name": "dvpwa-middlewares-session-middleware",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/anxolerd/dvpwa/blob/a1d8f89fac2e57093189853c6527c2b01fc1d9c1/sqli/dao/student.py#L42",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "dvpwa-student-create",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/manuelz120/extremely-vulnerable-flask-app/blob/d5d8875559e21222bbbaadb7b9f0af592c6eb7fa/routes/account.py#L118",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:routes/account.py:CWE-502"
|
|
],
|
|
"name": "extremely-vulnerable-flask-app-account-before-request",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/manuelz120/extremely-vulnerable-flask-app/blob/d5d8875559e21222bbbaadb7b9f0af592c6eb7fa/routes/account.py#L33",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:routes/account.py:CWE-89"
|
|
],
|
|
"name": "extremely-vulnerable-flask-app-account-search",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/manuelz120/extremely-vulnerable-flask-app/blob/d5d8875559e21222bbbaadb7b9f0af592c6eb7fa/routes/signup.py#L15",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"promote"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "extremely-vulnerable-flask-app-signup-validate-token",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/kolega-ai/realvuln-python-insecure-app/blob/80b894a2f754590747a31c92b2088be086421953/app/main.py#L41",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": "identical_twin",
|
|
"language": "python",
|
|
"leaks": [
|
|
"overlay-coverage:app/main.py:25:outbound.request"
|
|
],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:app/main.py:CWE-1336"
|
|
],
|
|
"name": "python-insecure-app-main-try-hack-me",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": false,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/TheWation/PythonSSTI/blob/76339c27d5a870c0a81bad6aee5f9bd516592145/main.py#L14",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": "identical_twin",
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:main.py:CWE-79"
|
|
],
|
|
"name": "pythonssti-main-read-root",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/anotherik/ThreatByte/blob/c4db46f72586c4ecb65859051ea037018dbf0e5e/server/api/v1/api_v1.py#L223",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"missing_auth_guard"
|
|
],
|
|
"misses": [
|
|
"-:server/api/v1/api_v1.py:CWE-862"
|
|
],
|
|
"name": "threatbyte-api-v1-delete",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/anotherik/ThreatByte/blob/c4db46f72586c4ecb65859051ea037018dbf0e5e/server/api/v1/api_v1.py#L154",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"missing_auth_guard"
|
|
],
|
|
"misses": [
|
|
"-:server/api/v1/api_v1.py:CWE-639"
|
|
],
|
|
"name": "threatbyte-api-v1-get",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/anotherik/ThreatByte/blob/c4db46f72586c4ecb65859051ea037018dbf0e5e/server/routes.py#L137",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "threatbyte-routes-dashboard",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/erev0s/VAmPI/blob/1713b54b601ad29582581eeda4b31fceb1319874/api_views/books.py#L51",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": "identical_twin",
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"missing_auth_guard"
|
|
],
|
|
"misses": [
|
|
"-:api_views/books.py:CWE-639"
|
|
],
|
|
"name": "vampi-books-get-by-title",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/erev0s/VAmPI/blob/1713b54b601ad29582581eeda4b31fceb1319874/models/user_model.py#L72",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "vampi-user-model-get-user",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 2,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/erev0s/VAmPI/blob/1713b54b601ad29582581eeda4b31fceb1319874/api_views/users.py#L187",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"missing_auth_guard"
|
|
],
|
|
"misses": [
|
|
"-:api_views/users.py:CWE-639"
|
|
],
|
|
"name": "vampi-users-update-password",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/naryal2580/vfapi/blob/f36f177e1a32aa49272f4eb52f8be0af3e8f6bc3/main.py#L231",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:main.py:CWE-89"
|
|
],
|
|
"name": "vfapi-main-delete-user",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/naryal2580/vfapi/blob/f36f177e1a32aa49272f4eb52f8be0af3e8f6bc3/main.py#L188",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:main.py:CWE-89"
|
|
],
|
|
"name": "vfapi-main-put-user",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/naryal2580/vfapi/blob/f36f177e1a32aa49272f4eb52f8be0af3e8f6bc3/main.py#L182",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:main.py:CWE-89"
|
|
],
|
|
"name": "vfapi-main-sql-return-users-from-username",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/LinuxUser255/Vulnerable_Python_Apps/blob/6336c77e6db523a5df34c4b628dff4159110797a/Insecure_Frameworks/bad_mvc.py#L37",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:Insecure_Frameworks/bad_mvc.py:CWE-79"
|
|
],
|
|
"name": "vulnerable-python-apps-bad-mvc-do-get",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/LinuxUser255/Vulnerable_Python_Apps/blob/6336c77e6db523a5df34c4b628dff4159110797a/Directory_Traversal/Dir_Traversal.py#L22",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"path_join_user_input"
|
|
],
|
|
"misses": [
|
|
"-:Directory_Traversal/Dir_Traversal.py:CWE-22"
|
|
],
|
|
"name": "vulnerable-python-apps-dir-traversal-do-get",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/Contrast-Security-OSS/vulnpy/blob/d1d0f64c06f038fe59a049e0e6001bfaf9839697/src/vulnpy/trigger/cmdi.py#L6",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"promote"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "vulnpy-cmdi-do-os-system",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/Contrast-Security-OSS/vulnpy/blob/d1d0f64c06f038fe59a049e0e6001bfaf9839697/src/vulnpy/trigger/cmdi.py#L10",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "vulnpy-cmdi-do-subprocess-popen",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/Contrast-Security-OSS/vulnpy/blob/d1d0f64c06f038fe59a049e0e6001bfaf9839697/src/vulnpy/trigger/deserialization.py#L8",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"promote"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": "identical_twin",
|
|
"language": "python",
|
|
"leaks": [
|
|
"python-unsafe-deserialization:src/vulnpy/trigger/deserialization.py:15"
|
|
],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "vulnpy-deserialization-do-pickle-load",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": false,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/fportantier/vulpy/blob/5249cc8b05a1c37f6b2f757b1cf16a509c327122/bad/libuser.py#L25",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"promote"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "vulpy-libuser-create",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/fportantier/vulpy/blob/5249cc8b05a1c37f6b2f757b1cf16a509c327122/bad/libuser.py#L12",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"promote"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "vulpy-libuser-login",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/fportantier/vulpy/blob/5249cc8b05a1c37f6b2f757b1cf16a509c327122/bad/libuser.py#L53",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"promote"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "vulpy-libuser-password-change",
|
|
"origin": "real-vuln-benchmark",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "seeded",
|
|
"silent_fix": true,
|
|
"slice": "vibe-py",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/simonh1000/angular-http-server/commit/8bafc9577161469f5dea01e0b98ea9c525d063e9",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"path_join_user_input"
|
|
],
|
|
"misses": [
|
|
"-:angular-http-server.js:CWE-22"
|
|
],
|
|
"name": "angular-http-server-1-0-0",
|
|
"origin": "secbench.js",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc-js",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/vincentmorneau/apex-publish-static-files/commit/2209af8f2b65c24aa55ab757e0e05b958c16f063",
|
|
"cve": "CVE-2018-16462",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage",
|
|
"promote"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [
|
|
"overlay-coverage:index.js:22:prototype.merge"
|
|
],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "apex-publish-static-files-2-0-0",
|
|
"origin": "secbench.js",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc-js",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 2,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/nfriedly/node-bestzip/commit/45d4a901478c6a8f396c8b959dd6cf8fd3f955b6",
|
|
"cve": "CVE-2020-7730",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "bestzip-2-1-6",
|
|
"origin": "secbench.js",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc-js",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/kylefarris/clamscan/commit/5f557c970817fe8c578ec3f7ad3bcbcef4cf5538",
|
|
"cve": "CVE-2020-7613",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:index.js:CWE-78"
|
|
],
|
|
"name": "clamscan-1-2-0",
|
|
"origin": "secbench.js",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc-js",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/iximiuz/node-diskusage-ng/commit/48e7e093486b528f0c81ec699573e0e4a431b8d3",
|
|
"cve": "CVE-2020-7631",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"promote"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "diskusage-ng-0-2-6",
|
|
"origin": "secbench.js",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc-js",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/skoranga/node-dns-sync/commit/d9abaae384b198db1095735ad9c1c73d7b890a0d",
|
|
"cve": "CVE-2014-9682",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [
|
|
"js-command-exec:lib/dns-sync.js:28"
|
|
],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "dns-sync-0-1-0",
|
|
"origin": "secbench.js",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc-js",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/jarofghosts/glance/commit/8cfd88e44ebd3f07e3a2eaf376a3e758b6c4ca19",
|
|
"cve": "CVE-2018-3715",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"path_join_user_input"
|
|
],
|
|
"misses": [
|
|
"-:index.js:CWE-22"
|
|
],
|
|
"name": "glance-3-0-0",
|
|
"origin": "secbench.js",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc-js",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/handsontable/formula-parser/commit/396b089738d4bf30eb570a4fe6a188affa95cd5e",
|
|
"cve": "CVE-2020-6836",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"promote"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:src/grammar-parser/grammar-parser.js:CWE-78"
|
|
],
|
|
"name": "hot-formula-parser-3-0-0",
|
|
"origin": "secbench.js",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc-js",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/jas-/node-libnmap/commit/c235b24b0342e12a5dbf502f89daabe95883b6c8",
|
|
"cve": "CVE-2018-16461",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [
|
|
"overlay-coverage:lib/classes/tools.js:26:prototype.merge"
|
|
],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:lib/classes/tools.js:CWE-78"
|
|
],
|
|
"name": "libnmap-0-4-11",
|
|
"origin": "secbench.js",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc-js",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/roest01/node-pdf-image/commit/54679496a89738443917608c2bbe2f6e5dd20e83",
|
|
"cve": "CVE-2018-3757",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"promote"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "pdf-image-1-0-5",
|
|
"origin": "secbench.js",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc-js",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 2,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 2,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/soyuka/pidusage/commit/b70eca15f7ca7f1b82a15f8a5d4bb48737f5a89d",
|
|
"cve": "CVE-2017-16034",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage",
|
|
"promote"
|
|
],
|
|
"fix_findings": 3,
|
|
"fix_leaks": 3,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [
|
|
"js-command-exec:lib/stats.js:119",
|
|
"overlay-coverage:lib/stats.js:29:path.open",
|
|
"overlay-coverage:lib/stats.js:61:path.open"
|
|
],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "pidusage-1-0-0",
|
|
"origin": "secbench.js",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc-js",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 3,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/rrainn/PortProcesses/commit/86811216c9b97b01b5722f879f8c88a7aa4214e1",
|
|
"cve": "CVE-2021-23348",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [
|
|
"js-command-exec:index.js:21"
|
|
],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "portprocesses-1-0-4",
|
|
"origin": "secbench.js",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc-js",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/ChristoPy/serve-here.js/commit/cefb51d03290b6a88dd13143ab2de31b8cf57c39",
|
|
"cve": "CVE-2019-5444",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"path_join_user_input"
|
|
],
|
|
"misses": [
|
|
"-:source/response.js:CWE-22"
|
|
],
|
|
"name": "serve-here-js-1-1-0",
|
|
"origin": "secbench.js",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc-js",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/browserify/static-eval/commit/32f8efd072625e267aa7237d2daff35738c50d2a",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:index.js:CWE-94"
|
|
],
|
|
"name": "static-eval-1-1-1",
|
|
"origin": "secbench.js",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc-js",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/thenables/thenify/commit/0d94a24eb933bc835d568f3009f4d269c4c4c17a",
|
|
"cve": "CVE-2020-7677",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"promote"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "thenify-3-3-0",
|
|
"origin": "secbench.js",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "vfc-js",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/jashkenas/underscore/commit/4c73526d43838ad6ab43a6134728776632adeb66",
|
|
"cve": "CVE-2021-23358",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"inventory"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [
|
|
"js-function-constructor:modules/template.js:63"
|
|
],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:modules/template.js:CWE-94"
|
|
],
|
|
"name": "underscore-1-13-0-0",
|
|
"origin": "secbench.js",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc-js",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 1,
|
|
"unadjudicated_vuln": 1,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/vvo/node-whereis/commit/0f64e3780235004fb6e43bfd153ea3e0e210ee2b",
|
|
"cve": "CVE-2018-3772",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"promote"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [
|
|
"js-command-exec:index.js:23"
|
|
],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "whereis-0-4-0",
|
|
"origin": "secbench.js",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "human",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "vfc-js",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 4,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/Anas329796/Anastasios/commit/14ec1ac50f9e4e255d875236d30129c6207401d4",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "typescript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:extensions/browser/src/browser/pw-session.ts:CWE-918"
|
|
],
|
|
"name": "anastasios-pw-session-14ec1a",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/P1R4N351/astroclaw/commit/1553a8adf123913cf7f1f1c75be4c4e5cd6c796b",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "typescript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:extensions/browser/src/browser/pw-session.ts:CWE-918"
|
|
],
|
|
"name": "astroclaw-pw-session-1553a8",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/Cap-go/capgo.app/commit/4dadd2580d02213d227a331eee0232aa59859b59",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "typescript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"misses": [
|
|
"-:supabase/functions/_backend/utils/hono.ts:CWE-16"
|
|
],
|
|
"name": "capgo-app-hono-4dadd2",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/jfut/dnf-plugin-anyrepo/commit/26d19aeb8884f244e34ccfdc4f49f07055adc4d0",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"path_join_user_input"
|
|
],
|
|
"misses": [
|
|
"-:dnf_plugin_anyrepo/config.py:CWE-22"
|
|
],
|
|
"name": "dnf-plugin-anyrepo-config-26d19a",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/jardimdesoftware/edutrace/commit/ee7ba25fb23ea89cc1b67549cb5e32c8ead92739",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "typescript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"prototype_pollution"
|
|
],
|
|
"misses": [
|
|
"-:front/src/app/editar-anamnese/page.tsx:CWE-1321"
|
|
],
|
|
"name": "edutrace-page-ee7ba2",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/dayflower/etude-lexical-markdown/commit/c61a8bf78fe20d6ae0eab2e4b8b02004508525ed",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "typescript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"prototype_pollution"
|
|
],
|
|
"misses": [
|
|
"-:src/config/editorConfig.ts:CWE-1321"
|
|
],
|
|
"name": "etude-lexical-markdown-editorconfig-c61a8b",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/dayflower/etude-lexical-markdown/commit/db4f54b1ab80ad596de6425e84f90aa781c49999",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "typescript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"prototype_pollution"
|
|
],
|
|
"misses": [
|
|
"-:src/config/editorConfig.ts:CWE-1321"
|
|
],
|
|
"name": "etude-lexical-markdown-editorconfig-db4f54",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/amitknigam84/lensops/commit/fe49109aedfe21dea4d24d4d9f2fa3f1ecfb6c84",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": "client_side_caller",
|
|
"language": "typescript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"missing_auth_guard"
|
|
],
|
|
"misses": [
|
|
"-:components/KubernetesManagement.tsx:CWE-862"
|
|
],
|
|
"name": "lensops-kubernetesmanagement-fe4910",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/navaneethbv/market-cap/commit/4f8ae9be5519ced5a975f1190e3e4bc43f84e4d6",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 2,
|
|
"fix_leaks": 2,
|
|
"known_limit": null,
|
|
"language": "typescript",
|
|
"leaks": [
|
|
"overlay-coverage:app/auth/confirm/route.ts:26:redirect",
|
|
"overlay-coverage:app/auth/confirm/route.ts:30:redirect"
|
|
],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [],
|
|
"name": "market-cap-route-4f8ae9",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 1.0,
|
|
"review_tier": "title",
|
|
"silent_fix": false,
|
|
"slice": "agent-vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 2,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/alexshao3/melodix/commit/089931ef71ea1e5b7586520baf1a5498e2f05b13",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "typescript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"misses": [
|
|
"-:apps/miniapp/src/components/PlayerProvider.tsx:CWE-16"
|
|
],
|
|
"name": "melodix-playerprovider-089931",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/handielson/Mercado-do-vale-news/commit/9b5fcf2dae41e56f5f97952266f2d6ba59598598",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "typescript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"misses": [
|
|
"-:services/catalogMetadataService.ts:CWE-16"
|
|
],
|
|
"name": "mercado-do-vale-news-catalogmetadataservice-9b5fcf",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/andrebubniak/money-track/commit/4d4a5b063278c8b6697c3faae133d7c39fcd01c0",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "typescript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"prototype_pollution"
|
|
],
|
|
"misses": [
|
|
"-:src/lib/category-icons.ts:CWE-1321"
|
|
],
|
|
"name": "money-track-category-icons-4d4a5b",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/DavideCarvalho/nestjs-filter/commit/aa0e600d05997ea3d77538ea1c2db427c439f2e8",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "typescript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"prototype_pollution"
|
|
],
|
|
"misses": [
|
|
"-:packages/core/src/input/normalizer.ts:CWE-1321"
|
|
],
|
|
"name": "nestjs-filter-normalizer-aa0e60",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/Sachin-Salgar/NEW_ERP_FINAL/commit/6e9644c81ce3fb356669157182a5ef09a70c4b59",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "typescript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"misses": [
|
|
"-:src/presentation/http/app.ts:CWE-16"
|
|
],
|
|
"name": "new-erp-final-app-6e9644",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/Irnhakim/nimestream/commit/d17f535bf3012041b056ff3aa991ff6cfa198e43",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:app/api/img/route.js:CWE-918"
|
|
],
|
|
"name": "nimestream-route-d17f53",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/HHHHHejia/openniw/commit/0fc94733f6ca3c6b129a0a8e6d7b3acce19d5a10",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"identity_from_request_body"
|
|
],
|
|
"misses": [
|
|
"-:backend/app/routers/jobs.py:CWE-639"
|
|
],
|
|
"name": "openniw-jobs-0fc947",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/ziyuzuo/openniw/commit/b74de31b0a5f37e4e929ba6aa74dbe0f5e6d9a68",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"identity_from_request_body"
|
|
],
|
|
"misses": [
|
|
"-:backend/app/routers/jobs.py:CWE-639"
|
|
],
|
|
"name": "openniw-jobs-b74de3",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/ZUENS2020/overleaf-with-claude/commit/3980b9e5806defb63e45ae2696e6c1899f3a8431",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"identity_from_request_body"
|
|
],
|
|
"misses": [
|
|
"-:services/web/app/src/Features/Exports/ExportsController.mjs:CWE-639"
|
|
],
|
|
"name": "overleaf-with-claude-exportscontroller-3980b9",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/dayflower/popmark/commit/e5ac407cef37c37178d440541ede301c838640fb",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "typescript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"prototype_pollution"
|
|
],
|
|
"misses": [
|
|
"-:src/lexical-markdown/config/editorConfig.ts:CWE-1321"
|
|
],
|
|
"name": "popmark-editorconfig-e5ac40",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/DevilsDev/rag-pipeline-utils/commit/76e5f0a94d6803d0e463d26a61cedb7da90857a7",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [
|
|
"overlay-coverage:src/cli/handlers/config-handler.js:15:path.open"
|
|
],
|
|
"mechanisms": [
|
|
"prototype_pollution"
|
|
],
|
|
"misses": [
|
|
"-:src/cli/handlers/config-handler.js:CWE-1321"
|
|
],
|
|
"name": "rag-pipeline-utils-config-handler-76e5f0",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": false,
|
|
"slice": "agent-vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/agents-repo/registry-proxy/commit/426847899eb2ee94ae4e5a3aacc50423e36d2dc8",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [
|
|
"overlay-coverage:src/worker.js:30:prototype.merge"
|
|
],
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"misses": [
|
|
"-:src/worker.js:CWE-16"
|
|
],
|
|
"name": "registry-proxy-worker-426847",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": false,
|
|
"slice": "agent-vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/bigfivefoods/supplieradvisor-mvp/commit/387bcf40e984a2ee1832ab7beabf0284c5b627d8",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "typescript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"identity_from_request_body"
|
|
],
|
|
"misses": [
|
|
"-:app/api/customers/claims/route.ts:CWE-639"
|
|
],
|
|
"name": "supplieradvisor-mvp-route-387bcf",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/bigfivefoods/supplieradvisor-mvp/commit/a69e8f27c0f4d402573d16f0612b51155bbc46e1",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "typescript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"identity_from_request_body"
|
|
],
|
|
"misses": [
|
|
"-:app/api/customers/opportunities/route.ts:CWE-639"
|
|
],
|
|
"name": "supplieradvisor-mvp-route-a69e8f",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/D-sorganization/Tools/commit/a96bc0502a3dcdac303e4f0152508886e5c35c0a",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:src/shared/python/ai/tools/cli_tools.py:CWE-78"
|
|
],
|
|
"name": "tools-cli-tools-a96bc0",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/trackly-app/trackly-cli/commit/1c1aed89b07edb04051830c8f086e02b65e961c6",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "javascript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"path_join_user_input"
|
|
],
|
|
"misses": [
|
|
"-:lib/path-diagnostics.js:CWE-22"
|
|
],
|
|
"name": "trackly-cli-path-diagnostics-1c1aed",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/D-sorganization/UpstreamDrift/commit/c3a0787080489b30e2ed0abfac03b51e45da184b",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"path_join_user_input"
|
|
],
|
|
"misses": [
|
|
"-:src/api/local_server.py:CWE-22"
|
|
],
|
|
"name": "upstreamdrift-local-server-c3a078",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/Ahkeratmehilaiset/waggledance-swarm/commit/9a454843aa35332ff2eb3106023eee0c4b5e444b",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "python",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:waggledance/core/v3_13_0/ssrf_host_guard.py:CWE-918"
|
|
],
|
|
"name": "waggledance-swarm-ssrf-host-guard-9a4548",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/G4brym/workers-research/commit/209444eb61cc564c2d6b43267256f85fe3e5e30e",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "typescript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"misses": [
|
|
"-:src/utils.ts:CWE-89"
|
|
],
|
|
"name": "workers-research-utils-209444",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "https://github.com/zoonk/zoonk/commit/bfbf670ccb41d63c407d32c51bd26e626a174f31",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "typescript",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"misses": [
|
|
"-:packages/utils/src/origin.ts:CWE-16"
|
|
],
|
|
"name": "zoonk-origin-bfbf67",
|
|
"origin": "github-agent-trailer",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "agent",
|
|
"recall": 0.0,
|
|
"review_tier": "title",
|
|
"silent_fix": true,
|
|
"slice": "agent-vfc",
|
|
"split": "train",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00013.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00013",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00014.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00014",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00030.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00030",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [
|
|
"overlay-coverage:testcode/BenchmarkTest00036.java:56:response.write"
|
|
],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [],
|
|
"name": "owasp-xss-benchmarktest00036",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [
|
|
"overlay-coverage:testcode/BenchmarkTest00041.java:56:response.write"
|
|
],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00041.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00041",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00144.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00144",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00145.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00145",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00146.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00146",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00148.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00148",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00149.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00149",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00150.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00150",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [
|
|
"overlay-coverage:testcode/BenchmarkTest00152.java:56:response.write"
|
|
],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00152.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00152",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00153.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00153",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [
|
|
"overlay-coverage:testcode/BenchmarkTest00154.java:56:response.write"
|
|
],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00154.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00154",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [
|
|
"overlay-coverage:testcode/BenchmarkTest00155.java:56:response.write"
|
|
],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [],
|
|
"name": "owasp-xss-benchmarktest00155",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00156.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00156",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [],
|
|
"name": "owasp-xss-benchmarktest00157",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [],
|
|
"name": "owasp-xss-benchmarktest00276",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": true,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [
|
|
"overlay-coverage:testcode/BenchmarkTest00279.java:56:response.write"
|
|
],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00279.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00279",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [
|
|
"overlay-coverage:testcode/BenchmarkTest00280.java:56:response.write"
|
|
],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00280.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00280",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [
|
|
"overlay-coverage:testcode/BenchmarkTest00284.java:56:response.write"
|
|
],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [],
|
|
"name": "owasp-xss-benchmarktest00284",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [
|
|
"overlay-coverage:testcode/BenchmarkTest00287.java:56:response.write"
|
|
],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [],
|
|
"name": "owasp-xss-benchmarktest00287",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [
|
|
"overlay-coverage:testcode/BenchmarkTest00290.java:56:response.write"
|
|
],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [],
|
|
"name": "owasp-xss-benchmarktest00290",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [
|
|
"overlay-coverage:testcode/BenchmarkTest00291.java:56:response.write"
|
|
],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [],
|
|
"name": "owasp-xss-benchmarktest00291",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": true,
|
|
"detection_kinds": [
|
|
"coverage"
|
|
],
|
|
"fix_findings": 1,
|
|
"fix_leaks": 1,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [
|
|
"overlay-coverage:testcode/BenchmarkTest00292.java:56:response.write"
|
|
],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [],
|
|
"name": "owasp-xss-benchmarktest00292",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 1.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": false,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 1,
|
|
"vuln_matched": 1,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00301.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00301",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00375.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00375",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00376.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00376",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00378.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00378",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00380.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00380",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00382.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00382",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00383.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00383",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00384.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00384",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00385.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00385",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00387.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00387",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00388.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00388",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00390.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00390",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00392.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00392",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00395.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00395",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
},
|
|
{
|
|
"commit_url": "",
|
|
"cve": "",
|
|
"detected_vuln": false,
|
|
"detection_kinds": [],
|
|
"fix_findings": 0,
|
|
"fix_leaks": 0,
|
|
"known_limit": null,
|
|
"language": "java",
|
|
"leaks": [],
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"misses": [
|
|
"-:testcode/BenchmarkTest00467.java:CWE-79"
|
|
],
|
|
"name": "owasp-xss-benchmarktest00467",
|
|
"origin": "owasp-benchmark-java",
|
|
"pair_correct": false,
|
|
"parse_failed_fixed": 0,
|
|
"parse_failed_vuln": 0,
|
|
"provenance": "synthetic",
|
|
"recall": 0.0,
|
|
"review_tier": "advisory",
|
|
"silent_fix": true,
|
|
"slice": "owasp",
|
|
"split": "holdout",
|
|
"unadjudicated_fixed": 0,
|
|
"unadjudicated_vuln": 0,
|
|
"unresolved_labels": 0,
|
|
"unscorable": null,
|
|
"vuln_expected": 1,
|
|
"vuln_findings": 0,
|
|
"vuln_matched": 0,
|
|
"weak_labels": 0
|
|
}
|
|
],
|
|
"overall": {
|
|
"detected_vuln": 57,
|
|
"labeled_expected": 342,
|
|
"labeled_fix_leaks": 98,
|
|
"labeled_matched": 82,
|
|
"labeled_recall": 0.23976608187134502,
|
|
"pair_correct": 32,
|
|
"pair_pass_rate": 0.10094637223974763,
|
|
"pairs": 317,
|
|
"silent_fix": 256,
|
|
"specificity": 0.807570977917981,
|
|
"vuln_recall": 0.17981072555205047,
|
|
"youden": -0.012618296529968487
|
|
},
|
|
"per_mechanism": {
|
|
"config_sink_weak_literal": {
|
|
"detected_vuln": 0,
|
|
"labeled_expected": 1,
|
|
"labeled_fix_leaks": 0,
|
|
"labeled_matched": 0,
|
|
"labeled_recall": 0.0,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 1,
|
|
"silent_fix": 1,
|
|
"specificity": 1.0,
|
|
"vuln_recall": 0.0,
|
|
"youden": 0.0
|
|
},
|
|
"container_taint": {
|
|
"detected_vuln": 9,
|
|
"labeled_expected": 43,
|
|
"labeled_fix_leaks": 13,
|
|
"labeled_matched": 9,
|
|
"labeled_recall": 0.20930232558139536,
|
|
"pair_correct": 2,
|
|
"pair_pass_rate": 0.046511627906976744,
|
|
"pairs": 43,
|
|
"silent_fix": 30,
|
|
"specificity": 0.6976744186046512,
|
|
"vuln_recall": 0.20930232558139536,
|
|
"youden": -0.09302325581395346
|
|
},
|
|
"cross_artifact": {
|
|
"detected_vuln": 0,
|
|
"labeled_expected": 1,
|
|
"labeled_fix_leaks": 1,
|
|
"labeled_matched": 0,
|
|
"labeled_recall": 0.0,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 1,
|
|
"silent_fix": 0,
|
|
"specificity": 0.0,
|
|
"vuln_recall": 0.0,
|
|
"youden": -1.0
|
|
},
|
|
"fixed_buffer_capacity": {
|
|
"detected_vuln": 1,
|
|
"labeled_expected": 1,
|
|
"labeled_fix_leaks": 1,
|
|
"labeled_matched": 1,
|
|
"labeled_recall": 1.0,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 1,
|
|
"silent_fix": 0,
|
|
"specificity": 0.0,
|
|
"vuln_recall": 1.0,
|
|
"youden": 0.0
|
|
},
|
|
"identity_from_request_body": {
|
|
"detected_vuln": 0,
|
|
"labeled_expected": 5,
|
|
"labeled_fix_leaks": 0,
|
|
"labeled_matched": 0,
|
|
"labeled_recall": 0.0,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 5,
|
|
"silent_fix": 5,
|
|
"specificity": 1.0,
|
|
"vuln_recall": 0.0,
|
|
"youden": 0.0
|
|
},
|
|
"missing_auth_guard": {
|
|
"detected_vuln": 0,
|
|
"labeled_expected": 5,
|
|
"labeled_fix_leaks": 0,
|
|
"labeled_matched": 0,
|
|
"labeled_recall": 0.0,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 5,
|
|
"silent_fix": 5,
|
|
"specificity": 1.0,
|
|
"vuln_recall": 0.0,
|
|
"youden": 0.0
|
|
},
|
|
"null_deref_unguarded": {
|
|
"detected_vuln": 0,
|
|
"labeled_expected": 18,
|
|
"labeled_fix_leaks": 3,
|
|
"labeled_matched": 0,
|
|
"labeled_recall": 0.0,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 18,
|
|
"silent_fix": 17,
|
|
"specificity": 0.9444444444444444,
|
|
"vuln_recall": 0.0,
|
|
"youden": -0.05555555555555558
|
|
},
|
|
"other": {
|
|
"detected_vuln": 0,
|
|
"labeled_expected": 130,
|
|
"labeled_fix_leaks": 38,
|
|
"labeled_matched": 0,
|
|
"labeled_recall": 0.0,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 130,
|
|
"silent_fix": 112,
|
|
"specificity": 0.8615384615384616,
|
|
"vuln_recall": 0.0,
|
|
"youden": -0.1384615384615384
|
|
},
|
|
"path_join_user_input": {
|
|
"detected_vuln": 0,
|
|
"labeled_expected": 8,
|
|
"labeled_fix_leaks": 0,
|
|
"labeled_matched": 0,
|
|
"labeled_recall": 0.0,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 8,
|
|
"silent_fix": 8,
|
|
"specificity": 1.0,
|
|
"vuln_recall": 0.0,
|
|
"youden": 0.0
|
|
},
|
|
"permissive_default": {
|
|
"detected_vuln": 0,
|
|
"labeled_expected": 9,
|
|
"labeled_fix_leaks": 1,
|
|
"labeled_matched": 0,
|
|
"labeled_recall": 0.0,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 9,
|
|
"silent_fix": 8,
|
|
"specificity": 0.8888888888888888,
|
|
"vuln_recall": 0.0,
|
|
"youden": -0.11111111111111116
|
|
},
|
|
"prototype_pollution": {
|
|
"detected_vuln": 0,
|
|
"labeled_expected": 7,
|
|
"labeled_fix_leaks": 1,
|
|
"labeled_matched": 0,
|
|
"labeled_recall": 0.0,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 7,
|
|
"silent_fix": 6,
|
|
"specificity": 0.8571428571428571,
|
|
"vuln_recall": 0.0,
|
|
"youden": -0.1428571428571429
|
|
},
|
|
"signed_size_operand": {
|
|
"detected_vuln": 0,
|
|
"labeled_expected": 1,
|
|
"labeled_fix_leaks": 3,
|
|
"labeled_matched": 0,
|
|
"labeled_recall": 0.0,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 1,
|
|
"silent_fix": 0,
|
|
"specificity": 0.0,
|
|
"vuln_recall": 0.0,
|
|
"youden": -1.0
|
|
},
|
|
"source_reaches_sink": {
|
|
"detected_vuln": 38,
|
|
"labeled_expected": 87,
|
|
"labeled_fix_leaks": 15,
|
|
"labeled_matched": 63,
|
|
"labeled_recall": 0.7241379310344828,
|
|
"pair_correct": 30,
|
|
"pair_pass_rate": 0.4838709677419355,
|
|
"pairs": 62,
|
|
"silent_fix": 50,
|
|
"specificity": 0.8064516129032258,
|
|
"vuln_recall": 0.6129032258064516,
|
|
"youden": 0.4193548387096774
|
|
},
|
|
"type_confusion": {
|
|
"detected_vuln": 0,
|
|
"labeled_expected": 1,
|
|
"labeled_fix_leaks": 0,
|
|
"labeled_matched": 0,
|
|
"labeled_recall": 0.0,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 1,
|
|
"silent_fix": 1,
|
|
"specificity": 1.0,
|
|
"vuln_recall": 0.0,
|
|
"youden": 0.0
|
|
},
|
|
"uaf": {
|
|
"detected_vuln": 0,
|
|
"labeled_expected": 5,
|
|
"labeled_fix_leaks": 1,
|
|
"labeled_matched": 0,
|
|
"labeled_recall": 0.0,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 5,
|
|
"silent_fix": 4,
|
|
"specificity": 0.8,
|
|
"vuln_recall": 0.0,
|
|
"youden": -0.19999999999999996
|
|
},
|
|
"unchecked_alloc_size": {
|
|
"detected_vuln": 0,
|
|
"labeled_expected": 2,
|
|
"labeled_fix_leaks": 0,
|
|
"labeled_matched": 0,
|
|
"labeled_recall": 0.0,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 2,
|
|
"silent_fix": 2,
|
|
"specificity": 1.0,
|
|
"vuln_recall": 0.0,
|
|
"youden": 0.0
|
|
},
|
|
"unchecked_length_copy": {
|
|
"detected_vuln": 9,
|
|
"labeled_expected": 17,
|
|
"labeled_fix_leaks": 21,
|
|
"labeled_matched": 9,
|
|
"labeled_recall": 0.5294117647058824,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 17,
|
|
"silent_fix": 6,
|
|
"specificity": 0.35294117647058826,
|
|
"vuln_recall": 0.5294117647058824,
|
|
"youden": -0.11764705882352933
|
|
},
|
|
"validation_strength": {
|
|
"detected_vuln": 0,
|
|
"labeled_expected": 1,
|
|
"labeled_fix_leaks": 0,
|
|
"labeled_matched": 0,
|
|
"labeled_recall": 0.0,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 1,
|
|
"silent_fix": 1,
|
|
"specificity": 1.0,
|
|
"vuln_recall": 0.0,
|
|
"youden": 0.0
|
|
}
|
|
},
|
|
"per_profile": {
|
|
"agent": {
|
|
"detected_vuln": 1,
|
|
"labeled_expected": 29,
|
|
"labeled_fix_leaks": 4,
|
|
"labeled_matched": 1,
|
|
"labeled_recall": 0.034482758620689655,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 29,
|
|
"silent_fix": 26,
|
|
"specificity": 0.896551724137931,
|
|
"vuln_recall": 0.034482758620689655,
|
|
"youden": -0.0689655172413793
|
|
},
|
|
"human": {
|
|
"detected_vuln": 41,
|
|
"labeled_expected": 262,
|
|
"labeled_fix_leaks": 78,
|
|
"labeled_matched": 66,
|
|
"labeled_recall": 0.25190839694656486,
|
|
"pair_correct": 26,
|
|
"pair_pass_rate": 0.10970464135021098,
|
|
"pairs": 237,
|
|
"silent_fix": 195,
|
|
"specificity": 0.8227848101265823,
|
|
"vuln_recall": 0.1729957805907173,
|
|
"youden": -0.00421940928270037
|
|
},
|
|
"synthetic": {
|
|
"detected_vuln": 15,
|
|
"labeled_expected": 51,
|
|
"labeled_fix_leaks": 16,
|
|
"labeled_matched": 15,
|
|
"labeled_recall": 0.29411764705882354,
|
|
"pair_correct": 6,
|
|
"pair_pass_rate": 0.11764705882352941,
|
|
"pairs": 51,
|
|
"silent_fix": 35,
|
|
"specificity": 0.6862745098039216,
|
|
"vuln_recall": 0.29411764705882354,
|
|
"youden": -0.019607843137254888
|
|
}
|
|
},
|
|
"per_slice": {
|
|
"agent-vfc": {
|
|
"detected_vuln": 1,
|
|
"labeled_expected": 29,
|
|
"labeled_fix_leaks": 4,
|
|
"labeled_matched": 1,
|
|
"labeled_recall": 0.034482758620689655,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 29,
|
|
"silent_fix": 26,
|
|
"specificity": 0.896551724137931,
|
|
"vuln_recall": 0.034482758620689655,
|
|
"youden": -0.0689655172413793
|
|
},
|
|
"github": {
|
|
"detected_vuln": 4,
|
|
"labeled_expected": 6,
|
|
"labeled_fix_leaks": 0,
|
|
"labeled_matched": 4,
|
|
"labeled_recall": 0.6666666666666666,
|
|
"pair_correct": 4,
|
|
"pair_pass_rate": 0.6666666666666666,
|
|
"pairs": 6,
|
|
"silent_fix": 6,
|
|
"specificity": 1.0,
|
|
"vuln_recall": 0.6666666666666666,
|
|
"youden": 0.6666666666666666
|
|
},
|
|
"local": {
|
|
"detected_vuln": 3,
|
|
"labeled_expected": 28,
|
|
"labeled_fix_leaks": 0,
|
|
"labeled_matched": 28,
|
|
"labeled_recall": 1.0,
|
|
"pair_correct": 3,
|
|
"pair_pass_rate": 1.0,
|
|
"pairs": 3,
|
|
"silent_fix": 3,
|
|
"specificity": 1.0,
|
|
"vuln_recall": 1.0,
|
|
"youden": 1.0
|
|
},
|
|
"owasp": {
|
|
"detected_vuln": 9,
|
|
"labeled_expected": 40,
|
|
"labeled_fix_leaks": 12,
|
|
"labeled_matched": 9,
|
|
"labeled_recall": 0.225,
|
|
"pair_correct": 2,
|
|
"pair_pass_rate": 0.05,
|
|
"pairs": 40,
|
|
"silent_fix": 28,
|
|
"specificity": 0.7,
|
|
"vuln_recall": 0.225,
|
|
"youden": -0.07500000000000004
|
|
},
|
|
"sast": {
|
|
"detected_vuln": 6,
|
|
"labeled_expected": 11,
|
|
"labeled_fix_leaks": 4,
|
|
"labeled_matched": 6,
|
|
"labeled_recall": 0.5454545454545454,
|
|
"pair_correct": 4,
|
|
"pair_pass_rate": 0.36363636363636365,
|
|
"pairs": 11,
|
|
"silent_fix": 7,
|
|
"specificity": 0.6363636363636364,
|
|
"vuln_recall": 0.5454545454545454,
|
|
"youden": 0.18181818181818177
|
|
},
|
|
"vfc": {
|
|
"detected_vuln": 9,
|
|
"labeled_expected": 176,
|
|
"labeled_fix_leaks": 66,
|
|
"labeled_matched": 9,
|
|
"labeled_recall": 0.05113636363636364,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 176,
|
|
"silent_fix": 144,
|
|
"specificity": 0.8181818181818182,
|
|
"vuln_recall": 0.05113636363636364,
|
|
"youden": -0.13068181818181812
|
|
},
|
|
"vfc-js": {
|
|
"detected_vuln": 9,
|
|
"labeled_expected": 17,
|
|
"labeled_fix_leaks": 9,
|
|
"labeled_matched": 9,
|
|
"labeled_recall": 0.5294117647058824,
|
|
"pair_correct": 4,
|
|
"pair_pass_rate": 0.23529411764705882,
|
|
"pairs": 17,
|
|
"silent_fix": 10,
|
|
"specificity": 0.5882352941176471,
|
|
"vuln_recall": 0.5294117647058824,
|
|
"youden": 0.11764705882352944
|
|
},
|
|
"vibe-py": {
|
|
"detected_vuln": 16,
|
|
"labeled_expected": 35,
|
|
"labeled_fix_leaks": 3,
|
|
"labeled_matched": 16,
|
|
"labeled_recall": 0.45714285714285713,
|
|
"pair_correct": 15,
|
|
"pair_pass_rate": 0.42857142857142855,
|
|
"pairs": 35,
|
|
"silent_fix": 32,
|
|
"specificity": 0.9142857142857143,
|
|
"vuln_recall": 0.45714285714285713,
|
|
"youden": 0.3714285714285714
|
|
}
|
|
},
|
|
"per_tier": {
|
|
"advisory": {
|
|
"detected_vuln": 37,
|
|
"labeled_expected": 250,
|
|
"labeled_fix_leaks": 91,
|
|
"labeled_matched": 37,
|
|
"labeled_recall": 0.148,
|
|
"pair_correct": 14,
|
|
"pair_pass_rate": 0.056,
|
|
"pairs": 250,
|
|
"silent_fix": 195,
|
|
"specificity": 0.78,
|
|
"vuln_recall": 0.148,
|
|
"youden": -0.07199999999999998
|
|
},
|
|
"reviewed": {
|
|
"detected_vuln": 3,
|
|
"labeled_expected": 28,
|
|
"labeled_fix_leaks": 0,
|
|
"labeled_matched": 28,
|
|
"labeled_recall": 1.0,
|
|
"pair_correct": 3,
|
|
"pair_pass_rate": 1.0,
|
|
"pairs": 3,
|
|
"silent_fix": 3,
|
|
"specificity": 1.0,
|
|
"vuln_recall": 1.0,
|
|
"youden": 1.0
|
|
},
|
|
"seeded": {
|
|
"detected_vuln": 16,
|
|
"labeled_expected": 35,
|
|
"labeled_fix_leaks": 3,
|
|
"labeled_matched": 16,
|
|
"labeled_recall": 0.45714285714285713,
|
|
"pair_correct": 15,
|
|
"pair_pass_rate": 0.42857142857142855,
|
|
"pairs": 35,
|
|
"silent_fix": 32,
|
|
"specificity": 0.9142857142857143,
|
|
"vuln_recall": 0.45714285714285713,
|
|
"youden": 0.3714285714285714
|
|
},
|
|
"title": {
|
|
"detected_vuln": 1,
|
|
"labeled_expected": 29,
|
|
"labeled_fix_leaks": 4,
|
|
"labeled_matched": 1,
|
|
"labeled_recall": 0.034482758620689655,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 29,
|
|
"silent_fix": 26,
|
|
"specificity": 0.896551724137931,
|
|
"vuln_recall": 0.034482758620689655,
|
|
"youden": -0.0689655172413793
|
|
}
|
|
},
|
|
"scorers": {
|
|
"agent-vfc": {
|
|
"inventory": {
|
|
"detected_vuln": 0,
|
|
"labeled_expected": 29,
|
|
"labeled_fix_leaks": 0,
|
|
"labeled_matched": 0,
|
|
"labeled_recall": 0.0,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 29,
|
|
"silent_fix": 29,
|
|
"specificity": 1.0,
|
|
"vuln_recall": 0.0,
|
|
"youden": 0.0
|
|
},
|
|
"overlay": {
|
|
"detected_vuln": 1,
|
|
"labeled_expected": 29,
|
|
"labeled_fix_leaks": 4,
|
|
"labeled_matched": 1,
|
|
"labeled_recall": 0.034482758620689655,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 29,
|
|
"silent_fix": 26,
|
|
"specificity": 0.896551724137931,
|
|
"vuln_recall": 0.034482758620689655,
|
|
"youden": -0.0689655172413793
|
|
}
|
|
},
|
|
"owasp": {
|
|
"inventory": {
|
|
"detected_vuln": 0,
|
|
"labeled_expected": 40,
|
|
"labeled_fix_leaks": 0,
|
|
"labeled_matched": 0,
|
|
"labeled_recall": 0.0,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 40,
|
|
"silent_fix": 40,
|
|
"specificity": 1.0,
|
|
"vuln_recall": 0.0,
|
|
"youden": 0.0
|
|
},
|
|
"overlay": {
|
|
"detected_vuln": 9,
|
|
"labeled_expected": 40,
|
|
"labeled_fix_leaks": 12,
|
|
"labeled_matched": 9,
|
|
"labeled_recall": 0.225,
|
|
"pair_correct": 2,
|
|
"pair_pass_rate": 0.05,
|
|
"pairs": 40,
|
|
"silent_fix": 28,
|
|
"specificity": 0.7,
|
|
"vuln_recall": 0.225,
|
|
"youden": -0.07500000000000004
|
|
}
|
|
},
|
|
"sast": {
|
|
"inventory": {
|
|
"detected_vuln": 6,
|
|
"labeled_expected": 11,
|
|
"labeled_fix_leaks": 5,
|
|
"labeled_matched": 6,
|
|
"labeled_recall": 0.5454545454545454,
|
|
"pair_correct": 2,
|
|
"pair_pass_rate": 0.18181818181818182,
|
|
"pairs": 11,
|
|
"silent_fix": 6,
|
|
"specificity": 0.5454545454545454,
|
|
"vuln_recall": 0.5454545454545454,
|
|
"youden": 0.09090909090909083
|
|
},
|
|
"overlay": {
|
|
"detected_vuln": 6,
|
|
"labeled_expected": 11,
|
|
"labeled_fix_leaks": 4,
|
|
"labeled_matched": 6,
|
|
"labeled_recall": 0.5454545454545454,
|
|
"pair_correct": 4,
|
|
"pair_pass_rate": 0.36363636363636365,
|
|
"pairs": 11,
|
|
"silent_fix": 7,
|
|
"specificity": 0.6363636363636364,
|
|
"vuln_recall": 0.5454545454545454,
|
|
"youden": 0.18181818181818177
|
|
}
|
|
},
|
|
"vfc": {
|
|
"inventory": {
|
|
"detected_vuln": 9,
|
|
"labeled_expected": 176,
|
|
"labeled_fix_leaks": 65,
|
|
"labeled_matched": 9,
|
|
"labeled_recall": 0.05113636363636364,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 176,
|
|
"silent_fix": 145,
|
|
"specificity": 0.8238636363636364,
|
|
"vuln_recall": 0.05113636363636364,
|
|
"youden": -0.125
|
|
},
|
|
"overlay": {
|
|
"detected_vuln": 9,
|
|
"labeled_expected": 176,
|
|
"labeled_fix_leaks": 66,
|
|
"labeled_matched": 9,
|
|
"labeled_recall": 0.05113636363636364,
|
|
"pair_correct": 0,
|
|
"pair_pass_rate": 0.0,
|
|
"pairs": 176,
|
|
"silent_fix": 144,
|
|
"specificity": 0.8181818181818182,
|
|
"vuln_recall": 0.05113636363636364,
|
|
"youden": -0.13068181818181812
|
|
}
|
|
},
|
|
"vfc-js": {
|
|
"inventory": {
|
|
"detected_vuln": 9,
|
|
"labeled_expected": 17,
|
|
"labeled_fix_leaks": 5,
|
|
"labeled_matched": 9,
|
|
"labeled_recall": 0.5294117647058824,
|
|
"pair_correct": 5,
|
|
"pair_pass_rate": 0.29411764705882354,
|
|
"pairs": 17,
|
|
"silent_fix": 12,
|
|
"specificity": 0.7058823529411765,
|
|
"vuln_recall": 0.5294117647058824,
|
|
"youden": 0.23529411764705888
|
|
},
|
|
"overlay": {
|
|
"detected_vuln": 9,
|
|
"labeled_expected": 17,
|
|
"labeled_fix_leaks": 9,
|
|
"labeled_matched": 9,
|
|
"labeled_recall": 0.5294117647058824,
|
|
"pair_correct": 4,
|
|
"pair_pass_rate": 0.23529411764705882,
|
|
"pairs": 17,
|
|
"silent_fix": 10,
|
|
"specificity": 0.5882352941176471,
|
|
"vuln_recall": 0.5294117647058824,
|
|
"youden": 0.11764705882352944
|
|
}
|
|
},
|
|
"vibe-py": {
|
|
"inventory": {
|
|
"detected_vuln": 9,
|
|
"labeled_expected": 35,
|
|
"labeled_fix_leaks": 9,
|
|
"labeled_matched": 9,
|
|
"labeled_recall": 0.2571428571428571,
|
|
"pair_correct": 7,
|
|
"pair_pass_rate": 0.2,
|
|
"pairs": 35,
|
|
"silent_fix": 33,
|
|
"specificity": 0.9428571428571428,
|
|
"vuln_recall": 0.2571428571428571,
|
|
"youden": 0.19999999999999996
|
|
},
|
|
"overlay": {
|
|
"detected_vuln": 16,
|
|
"labeled_expected": 35,
|
|
"labeled_fix_leaks": 3,
|
|
"labeled_matched": 16,
|
|
"labeled_recall": 0.45714285714285713,
|
|
"pair_correct": 15,
|
|
"pair_pass_rate": 0.42857142857142855,
|
|
"pairs": 35,
|
|
"silent_fix": 32,
|
|
"specificity": 0.9142857142857143,
|
|
"vuln_recall": 0.45714285714285713,
|
|
"youden": 0.3714285714285714
|
|
}
|
|
}
|
|
},
|
|
"signals": [
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22901-ossl_connect_step1",
|
|
"path": "c-unsafe-copy:lib/vtls/openssl.c:364",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-27780",
|
|
"path": "c-unsafe-copy:lib/urlapi.c:68",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-27782-ossl_connect_step1",
|
|
"path": "c-unsafe-copy:lib/vtls/openssl.c:365",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"fixed_buffer_capacity"
|
|
],
|
|
"pair": "juliet-c-cwe121-strcpy",
|
|
"path": "c-unsafe-copy:CWE121_char_declare_cpy_01.c:16",
|
|
"profile": "synthetic",
|
|
"rule_id": "c-unsafe-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22901-ossl_connect_step1",
|
|
"path": "c-unsafe-memory-copy:lib/vtls/openssl.c:224",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22901-ossl_connect_step1",
|
|
"path": "c-unsafe-memory-copy:lib/vtls/openssl.c:231",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-27782-nss_setup_connect",
|
|
"path": "c-unsafe-memory-copy:lib/vtls/nss.c:292",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-27782-nss_setup_connect",
|
|
"path": "c-unsafe-memory-copy:lib/vtls/nss.c:297",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-27782-ossl_connect_step1",
|
|
"path": "c-unsafe-memory-copy:lib/vtls/openssl.c:224",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-27782-ossl_connect_step1",
|
|
"path": "c-unsafe-memory-copy:lib/vtls/openssl.c:231",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "curl-cve-2023-38545",
|
|
"path": "c-unsafe-memory-copy:lib/socks.c:197",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "curl-cve-2023-38545",
|
|
"path": "c-unsafe-memory-copy:lib/socks.c:207",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "curl-cve-2023-38545",
|
|
"path": "c-unsafe-memory-copy:lib/socks.c:360",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "curl-cve-2023-38545",
|
|
"path": "c-unsafe-memory-copy:lib/socks.c:367",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "curl-cve-2023-38545",
|
|
"path": "c-unsafe-memory-copy:lib/socks.c:373",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2023-38545-do_socks5",
|
|
"path": "c-unsafe-memory-copy:lib/socks.c:197",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2023-38545-do_socks5",
|
|
"path": "c-unsafe-memory-copy:lib/socks.c:207",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2023-38545-do_socks5",
|
|
"path": "c-unsafe-memory-copy:lib/socks.c:360",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2023-38545-do_socks5",
|
|
"path": "c-unsafe-memory-copy:lib/socks.c:367",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2023-38545-do_socks5",
|
|
"path": "c-unsafe-memory-copy:lib/socks.c:373",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "firefox-cve-2020-15667",
|
|
"path": "c-unsafe-memory-copy:modules/libmar/src/mar_read.c:46",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2014-0160",
|
|
"path": "c-unsafe-memory-copy:ssl/t1_lib.c:80",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2020-25659",
|
|
"path": "c-unsafe-memory-copy:crypto/rsa/rsa_ossl.c:217",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"signed_size_operand"
|
|
],
|
|
"pair": "openssl-cve-2021-23840",
|
|
"path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:60",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"signed_size_operand"
|
|
],
|
|
"pair": "openssl-cve-2021-23840",
|
|
"path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:78",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"signed_size_operand"
|
|
],
|
|
"pair": "openssl-cve-2021-23840",
|
|
"path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:97",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2021-23840-evp_encryptdecryptupdate",
|
|
"path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:67",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2021-23840-evp_encryptdecryptupdate",
|
|
"path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:86",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2021-23840-evp_encryptdecryptupdate",
|
|
"path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:105",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3449-ssl_generate_master_secr",
|
|
"path": "c-unsafe-memory-copy:ssl/s3_lib.c:39",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3449-ssl_generate_master_secr",
|
|
"path": "c-unsafe-memory-copy:ssl/s3_lib.c:42",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3449-tls_process_finished",
|
|
"path": "c-unsafe-memory-copy:ssl/statem/statem_lib.c:84",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3449-tls_process_finished",
|
|
"path": "c-unsafe-memory-copy:ssl/statem/statem_lib.c:88",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2022-3358-evp_cipher_init_internal",
|
|
"path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:289",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2022-3358-evp_cipher_init_internal",
|
|
"path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:290",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2022-3358-evp_cipher_init_internal",
|
|
"path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:302",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2022-3602",
|
|
"path": "c-unsafe-memory-copy:crypto/punycode.c:81",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2022-3602-ossl_punycode_decode",
|
|
"path": "c-unsafe-memory-copy:crypto/punycode.c:81",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2022-37454",
|
|
"path": "c-unsafe-memory-copy:providers/implementations/kdfs/hkdf.c:68",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2022-3786",
|
|
"path": "c-unsafe-memory-copy:crypto/punycode.c:80",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2022-3786-ossl_punycode_decode",
|
|
"path": "c-unsafe-memory-copy:crypto/punycode.c:80",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2022-4304-rsa_ossl_private_decrypt",
|
|
"path": "c-unsafe-memory-copy:crypto/rsa/rsa_ossl.c:134",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2023-5363",
|
|
"path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:173",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2023-5363",
|
|
"path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:181",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2023-5363",
|
|
"path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:332",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2023-5363",
|
|
"path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:333",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2023-5363",
|
|
"path": "c-unsafe-memory-copy:crypto/evp/evp_enc.c:345",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"uaf"
|
|
],
|
|
"pair": "openssl-cve-2024-4741",
|
|
"path": "c-unsafe-memory-copy:ssl/record/rec_layer_s3.c:67",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2024-5535-tls_parse_stoc_npn",
|
|
"path": "c-unsafe-memory-copy:ssl/statem/extensions_clnt.c:57",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2025-15467",
|
|
"path": "c-unsafe-memory-copy:crypto/evp/evp_lib.c:26",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2025-68160",
|
|
"path": "c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:48",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2025-68160",
|
|
"path": "c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:54",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2025-68160",
|
|
"path": "c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:72",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2025-68160",
|
|
"path": "c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:111",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2025-68160",
|
|
"path": "c-unsafe-memory-copy:crypto/bio/bf_lbuf.c:117",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2025-69418",
|
|
"path": "c-unsafe-memory-copy:crypto/modes/ocb128.c:57",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2025-69418",
|
|
"path": "c-unsafe-memory-copy:crypto/modes/ocb128.c:68",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2025-69418",
|
|
"path": "c-unsafe-memory-copy:crypto/modes/ocb128.c:93",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2025-9230",
|
|
"path": "c-unsafe-memory-copy:crypto/cms/cms_pwri.c:59",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-2673",
|
|
"path": "c-unsafe-memory-copy:ssl/t1_lib.c:102",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-2673",
|
|
"path": "c-unsafe-memory-copy:ssl/t1_lib.c:167",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-45446",
|
|
"path": "c-unsafe-memory-copy:providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c:46",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-45446",
|
|
"path": "c-unsafe-memory-copy:providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c:63",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-45446",
|
|
"path": "c-unsafe-memory-copy:providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c:78",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor",
|
|
"path": "c-unsafe-memory-copy:ssl/record/methods/dtls_meth.c:44",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2026-9076",
|
|
"path": "c-unsafe-memory-copy:crypto/cms/cms_pwri.c:61",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "dns-sync-0-1-0",
|
|
"path": "js-command-exec:lib/dns-sync.js:28",
|
|
"profile": "human",
|
|
"rule_id": "js-command-exec",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "pidusage-1-0-0",
|
|
"path": "js-command-exec:lib/stats.js:119",
|
|
"profile": "human",
|
|
"rule_id": "js-command-exec",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "portprocesses-1-0-4",
|
|
"path": "js-command-exec:index.js:21",
|
|
"profile": "human",
|
|
"rule_id": "js-command-exec",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "whereis-0-4-0",
|
|
"path": "js-command-exec:index.js:23",
|
|
"profile": "human",
|
|
"rule_id": "js-command-exec",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "underscore-1-13-0-0",
|
|
"path": "js-function-constructor:modules/template.js:63",
|
|
"profile": "human",
|
|
"rule_id": "js-function-constructor",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "apex-publish-static-files-2-0-0",
|
|
"path": "overlay-coverage:index.js:22:prototype.merge",
|
|
"profile": "human",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2020-8177",
|
|
"path": "overlay-coverage:src/tool_cb_hdr.c:180:printf",
|
|
"profile": "human",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "libnmap-0-4-11",
|
|
"path": "overlay-coverage:lib/classes/tools.js:26:prototype.merge",
|
|
"profile": "human",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "market-cap-route-4f8ae9",
|
|
"path": "overlay-coverage:app/auth/confirm/route.ts:26:redirect",
|
|
"profile": "agent",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "market-cap-route-4f8ae9",
|
|
"path": "overlay-coverage:app/auth/confirm/route.ts:30:redirect",
|
|
"profile": "agent",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "owasp-java-sqli",
|
|
"path": "overlay-coverage:org/owasp/benchmark/testcode/BenchmarkTest00008.java:54:executeQuery",
|
|
"profile": "synthetic",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00036",
|
|
"path": "overlay-coverage:testcode/BenchmarkTest00036.java:56:response.write",
|
|
"profile": "synthetic",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00041",
|
|
"path": "overlay-coverage:testcode/BenchmarkTest00041.java:56:response.write",
|
|
"profile": "synthetic",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00152",
|
|
"path": "overlay-coverage:testcode/BenchmarkTest00152.java:56:response.write",
|
|
"profile": "synthetic",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00154",
|
|
"path": "overlay-coverage:testcode/BenchmarkTest00154.java:56:response.write",
|
|
"profile": "synthetic",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00155",
|
|
"path": "overlay-coverage:testcode/BenchmarkTest00155.java:56:response.write",
|
|
"profile": "synthetic",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00279",
|
|
"path": "overlay-coverage:testcode/BenchmarkTest00279.java:56:response.write",
|
|
"profile": "synthetic",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00280",
|
|
"path": "overlay-coverage:testcode/BenchmarkTest00280.java:56:response.write",
|
|
"profile": "synthetic",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00284",
|
|
"path": "overlay-coverage:testcode/BenchmarkTest00284.java:56:response.write",
|
|
"profile": "synthetic",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00287",
|
|
"path": "overlay-coverage:testcode/BenchmarkTest00287.java:56:response.write",
|
|
"profile": "synthetic",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00290",
|
|
"path": "overlay-coverage:testcode/BenchmarkTest00290.java:56:response.write",
|
|
"profile": "synthetic",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00291",
|
|
"path": "overlay-coverage:testcode/BenchmarkTest00291.java:56:response.write",
|
|
"profile": "synthetic",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00292",
|
|
"path": "overlay-coverage:testcode/BenchmarkTest00292.java:56:response.write",
|
|
"profile": "synthetic",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "pidusage-1-0-0",
|
|
"path": "overlay-coverage:lib/stats.js:29:path.open",
|
|
"profile": "human",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "pidusage-1-0-0",
|
|
"path": "overlay-coverage:lib/stats.js:61:path.open",
|
|
"profile": "human",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"prototype_pollution"
|
|
],
|
|
"pair": "rag-pipeline-utils-config-handler-76e5f0",
|
|
"path": "overlay-coverage:src/cli/handlers/config-handler.js:15:path.open",
|
|
"profile": "agent",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"pair": "registry-proxy-worker-426847",
|
|
"path": "overlay-coverage:src/worker.js:30:prototype.merge",
|
|
"profile": "agent",
|
|
"rule_id": "overlay-coverage",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-python-cmdi",
|
|
"path": "python-shell-true:testcode/BenchmarkTest00165.py:58",
|
|
"profile": "synthetic",
|
|
"rule_id": "python-shell-true",
|
|
"side": "fixed",
|
|
"signal": "fp",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-918",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "anastasios-pw-session-14ec1a",
|
|
"path": "extensions/browser/src/browser/pw-session.ts",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-22",
|
|
"mechanisms": [
|
|
"path_join_user_input"
|
|
],
|
|
"pair": "angular-http-server-1-0-0",
|
|
"path": "angular-http-server.js",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-918",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "astroclaw-pw-session-1553a8",
|
|
"path": "extensions/browser/src/browser/pw-session.ts",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-16",
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"pair": "capgo-app-hono-4dadd2",
|
|
"path": "supabase/functions/_backend/utils/hono.ts",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-20",
|
|
"mechanisms": [
|
|
"validation_strength"
|
|
],
|
|
"pair": "chromium-cve-2022-2162",
|
|
"path": "content/browser/file_system_access/file_system_chooser.cc",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-78",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "clamscan-1-2-0",
|
|
"path": "index.js",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2020-8177",
|
|
"path": "src/tool_cb_hdr.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2020-8231-curl_multi_add_handle",
|
|
"path": "lib/multi.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2020-8231-curl_open",
|
|
"path": "lib/url.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2020-8284",
|
|
"path": "lib/url.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2020-8284-config_init",
|
|
"path": "src/tool_cfgable.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2020-8286",
|
|
"path": "lib/vtls/openssl.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22876",
|
|
"path": "lib/transfer.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22890",
|
|
"path": "lib/vtls/bearssl.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22898",
|
|
"path": "lib/telnet.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22901-ossl_connect_step1",
|
|
"path": "lib/vtls/openssl.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22924",
|
|
"path": "lib/url.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22924-nss_do_connect",
|
|
"path": "lib/vtls/nss.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22924-servercert",
|
|
"path": "lib/vtls/openssl.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22925",
|
|
"path": "lib/telnet.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22945",
|
|
"path": "lib/mqtt.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22946",
|
|
"path": "lib/ftp.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22946-imap_state_capability_re",
|
|
"path": "lib/imap.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22946-pop3_state_capa_resp",
|
|
"path": "lib/pop3.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22947",
|
|
"path": "lib/ftp.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22947-imap_state_starttls_resp",
|
|
"path": "lib/imap.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22947-pop3_state_starttls_resp",
|
|
"path": "lib/pop3.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2021-22947-smtp_state_starttls_resp",
|
|
"path": "lib/smtp.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-22576-conn_free",
|
|
"path": "lib/url.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-27774",
|
|
"path": "lib/transfer.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-27775",
|
|
"path": "lib/conncache.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-27776",
|
|
"path": "lib/http.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-27778",
|
|
"path": "src/tool_operate.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-27780",
|
|
"path": "lib/urlapi.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-27782-curl_free_primary_ssl_co",
|
|
"path": "lib/vtls/vtls.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-27782-curl_init_userdefined",
|
|
"path": "lib/url.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-27782-gtls_shutdown",
|
|
"path": "lib/vtls/gtls.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-27782-nss_setup_connect",
|
|
"path": "lib/vtls/nss.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-27782-ossl_connect_step1",
|
|
"path": "lib/vtls/openssl.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-30115",
|
|
"path": "lib/hsts.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-32206",
|
|
"path": "lib/content_encoding.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-32207",
|
|
"path": "lib/cookie.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2022-32208",
|
|
"path": "lib/krb5.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2023-38545-do_socks5",
|
|
"path": "lib/socks.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "curl-cve-2026-9080",
|
|
"path": "lib/multi_ev.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-78",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "damn-vulnerable-graphql-application-views-mutate",
|
|
"path": "core/views.py",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-78",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "damn-vulnerable-graphql-application-views-resolve-system-dia",
|
|
"path": "core/views.py",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-22",
|
|
"mechanisms": [
|
|
"path_join_user_input"
|
|
],
|
|
"pair": "dnf-plugin-anyrepo-config-26d19a",
|
|
"path": "dnf_plugin_anyrepo/config.py",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-326",
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"pair": "dsvpwa-dsvpwa-main",
|
|
"path": "dsvpwa.py",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-16",
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"pair": "dvpwa-app-init",
|
|
"path": "sqli/app.py",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-1004",
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"pair": "dvpwa-middlewares-session-middleware",
|
|
"path": "sqli/middlewares.py",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-1321",
|
|
"mechanisms": [
|
|
"prototype_pollution"
|
|
],
|
|
"pair": "edutrace-page-ee7ba2",
|
|
"path": "front/src/app/editar-anamnese/page.tsx",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-1321",
|
|
"mechanisms": [
|
|
"prototype_pollution"
|
|
],
|
|
"pair": "etude-lexical-markdown-editorconfig-c61a8b",
|
|
"path": "src/config/editorConfig.ts",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-1321",
|
|
"mechanisms": [
|
|
"prototype_pollution"
|
|
],
|
|
"pair": "etude-lexical-markdown-editorconfig-db4f54",
|
|
"path": "src/config/editorConfig.ts",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-502",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "extremely-vulnerable-flask-app-account-before-request",
|
|
"path": "routes/account.py",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-89",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "extremely-vulnerable-flask-app-account-search",
|
|
"path": "routes/account.py",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-770",
|
|
"mechanisms": [
|
|
"unchecked_alloc_size"
|
|
],
|
|
"pair": "firefox-bug-2058173",
|
|
"path": "modules/libmar/src/mar_read.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-22",
|
|
"mechanisms": [
|
|
"path_join_user_input"
|
|
],
|
|
"pair": "glance-3-0-0",
|
|
"path": "index.js",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-78",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "hot-formula-parser-3-0-0",
|
|
"path": "src/grammar-parser/grammar-parser.js",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-22",
|
|
"mechanisms": [
|
|
"path_join_user_input"
|
|
],
|
|
"pair": "hutool-cve-2018-17297",
|
|
"path": "cn/hutool/core/util/ZipUtil.java",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-78",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "libnmap-0-4-11",
|
|
"path": "lib/classes/tools.js",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-16",
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"pair": "melodix-playerprovider-089931",
|
|
"path": "apps/miniapp/src/components/PlayerProvider.tsx",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-16",
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"pair": "mercado-do-vale-news-catalogmetadataservice-9b5fcf",
|
|
"path": "services/catalogMetadataService.ts",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-1321",
|
|
"mechanisms": [
|
|
"prototype_pollution"
|
|
],
|
|
"pair": "money-track-category-icons-4d4a5b",
|
|
"path": "src/lib/category-icons.ts",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-1321",
|
|
"mechanisms": [
|
|
"prototype_pollution"
|
|
],
|
|
"pair": "nestjs-filter-normalizer-aa0e60",
|
|
"path": "packages/core/src/input/normalizer.ts",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-16",
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"pair": "new-erp-final-app-6e9644",
|
|
"path": "src/presentation/http/app.ts",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-918",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "nimestream-route-d17f53",
|
|
"path": "app/api/img/route.js",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-639",
|
|
"mechanisms": [
|
|
"identity_from_request_body"
|
|
],
|
|
"pair": "openniw-jobs-0fc947",
|
|
"path": "backend/app/routers/jobs.py",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-639",
|
|
"mechanisms": [
|
|
"identity_from_request_body"
|
|
],
|
|
"pair": "openniw-jobs-b74de3",
|
|
"path": "backend/app/routers/jobs.py",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2020-1967",
|
|
"path": "ssl/t1_lib.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2020-1967-tls1_check_sig_alg",
|
|
"path": "ssl/t1_lib.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2020-1971",
|
|
"path": "crypto/x509/v3_genn.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2020-1971-general_name_cmp",
|
|
"path": "crypto/x509v3/v3_genn.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2020-25659",
|
|
"path": "crypto/rsa/rsa_ossl.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-190",
|
|
"mechanisms": [
|
|
"signed_size_operand"
|
|
],
|
|
"pair": "openssl-cve-2021-23840",
|
|
"path": "crypto/evp/evp_enc.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2021-23841",
|
|
"path": "crypto/x509/x509_cmp.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3449",
|
|
"path": "ssl/record/methods/tls_common.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3449-def_generate_session_id",
|
|
"path": "ssl/ssl_sess.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2021-3449-init_sig_algs",
|
|
"path": "ssl/statem/extensions.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3449-init_sig_algs_cert",
|
|
"path": "ssl/statem/extensions.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos",
|
|
"path": "ssl/ssl_lib.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3449-ssl_generate_master_secr",
|
|
"path": "ssl/s3_lib.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3449-tls_construct_ctos_early",
|
|
"path": "ssl/statem/extensions_clnt.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3449-tls_handle_alpn",
|
|
"path": "ssl/statem/statem_srvr.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3449-tls_parse_ctos_renegotia",
|
|
"path": "ssl/statem/extensions_srvr.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3449-tls_process_certificate_",
|
|
"path": "ssl/statem/statem_clnt.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3449-tls_process_finished",
|
|
"path": "ssl/statem/statem_lib.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3450",
|
|
"path": "crypto/x509/x509_vfy.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-120",
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2021-3711",
|
|
"path": "crypto/sm2/sm2_crypt.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3711-pkey_sm2_decrypt",
|
|
"path": "crypto/sm2/sm2_pmeth.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3711-sm2_asym_decrypt",
|
|
"path": "providers/implementations/asymciphers/sm2_enc.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-125",
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2021-3712",
|
|
"path": "crypto/x509/v3_utl.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3712-append_ia5",
|
|
"path": "crypto/x509/v3_utl.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3712-general_name_print",
|
|
"path": "crypto/x509/v3_san.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3712-i2r_pci",
|
|
"path": "crypto/x509/v3_pci.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3712-ia5ncasecmp",
|
|
"path": "crypto/x509/v3_ncons.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3712-netscape_spki_print",
|
|
"path": "crypto/asn1/t_spki.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet",
|
|
"path": "crypto/cmp/cmp_hdr.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-3712-print_qualifiers",
|
|
"path": "crypto/x509/v3_cpols.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-4044",
|
|
"path": "crypto/x509/x509_vfy.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2021-4044-tls_post_process_server_",
|
|
"path": "ssl/statem/statem_clnt.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-835",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2022-0778",
|
|
"path": "crypto/bn/bn_sqrt.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-78",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "openssl-cve-2022-1292",
|
|
"path": "tools/c_rehash.in",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2022-1343",
|
|
"path": "crypto/ocsp/ocsp_vfy.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2022-1434",
|
|
"path": "providers/implementations/ciphers/cipher_rc4_hmac_md5.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2022-2068-hash_dir",
|
|
"path": "tools/c_rehash.in",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2022-29242",
|
|
"path": "ssl/statem/statem_clnt.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2022-3358",
|
|
"path": "crypto/evp/digest.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2022-3358-evp_cipher_init_internal",
|
|
"path": "crypto/evp/evp_enc.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2022-3602-ossl_punycode_decode",
|
|
"path": "crypto/punycode.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2022-3786-ossl_punycode_decode",
|
|
"path": "crypto/punycode.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2022-3996",
|
|
"path": "crypto/x509/pcy_map.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2022-4304",
|
|
"path": "crypto/bn/bn_asm.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2022-4304-bn_blinding_invert_ex",
|
|
"path": "crypto/bn/bn_blind.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2022-4304-rsa_blinding_invert",
|
|
"path": "crypto/rsa/rsa_ossl.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2022-4304-rsa_ossl_private_decrypt",
|
|
"path": "crypto/rsa/rsa_ossl.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2023-0216",
|
|
"path": "crypto/pkcs7/pk7_lib.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2023-0217",
|
|
"path": "crypto/ffc/ffc_key_validate.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-843",
|
|
"mechanisms": [
|
|
"type_confusion"
|
|
],
|
|
"pair": "openssl-cve-2023-0286",
|
|
"path": "crypto/x509/v3_genn.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2023-0286-general_name_cmp",
|
|
"path": "crypto/x509/v3_genn.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2023-0401",
|
|
"path": "crypto/pkcs7/pk7_doit.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2023-0464",
|
|
"path": "crypto/x509v3/pcy_tree.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2023-0464-tree_init",
|
|
"path": "crypto/x509/pcy_tree.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2023-0465",
|
|
"path": "crypto/x509/x509_vfy.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2023-2650",
|
|
"path": "crypto/objects/obj_dat.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2023-2975",
|
|
"path": "providers/implementations/ciphers/cipher_aes_siv.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2023-3446",
|
|
"path": "crypto/dh/dh_check.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2023-3817-dh_check",
|
|
"path": "crypto/dh/dh_check.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2023-5363",
|
|
"path": "crypto/evp/evp_enc.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2024-0727",
|
|
"path": "crypto/pkcs12/p12_mutl.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2024-0727-smime_write_pkcs7",
|
|
"path": "crypto/pkcs7/pk7_mime.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2024-12797",
|
|
"path": "ssl/statem/statem_clnt.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2024-13176-ec_field_inverse_mod_ord",
|
|
"path": "crypto/ec/ec_lib.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2024-2511",
|
|
"path": "ssl/ssl_lib.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2024-2511-tls_construct_server_hel",
|
|
"path": "ssl/statem/statem_srvr.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2024-4603",
|
|
"path": "crypto/dsa/dsa_check.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-416",
|
|
"mechanisms": [
|
|
"uaf"
|
|
],
|
|
"pair": "openssl-cve-2024-4741",
|
|
"path": "ssl/record/rec_layer_s3.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-416",
|
|
"mechanisms": [
|
|
"uaf"
|
|
],
|
|
"pair": "openssl-cve-2024-4741-ssl3_release_read_buffer",
|
|
"path": "ssl/record/ssl3_buffer.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2024-4741-ssl_free_buffers",
|
|
"path": "ssl/ssl_lib.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2024-4741-tls_free_buffers",
|
|
"path": "ssl/record/methods/tls_common.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-416",
|
|
"mechanisms": [
|
|
"uaf"
|
|
],
|
|
"pair": "openssl-cve-2024-4741-tls_release_read_buffer",
|
|
"path": "ssl/record/methods/tls_common.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2024-5535",
|
|
"path": "ssl/statem/extensions_clnt.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2024-5535-alpn_select_cb",
|
|
"path": "ssl/quic/quic_tserver.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2024-5535-ssl_select_next_proto",
|
|
"path": "ssl/ssl_lib.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2024-5535-tls_construct_stoc_next_",
|
|
"path": "ssl/statem/extensions_srvr.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2024-5535-tls_parse_stoc_npn",
|
|
"path": "ssl/statem/extensions_clnt.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2024-6119",
|
|
"path": "crypto/x509/v3_utl.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2025-11187",
|
|
"path": "crypto/pkcs12/p12_mutl.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2025-15467",
|
|
"path": "crypto/evp/evp_lib.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2025-15469",
|
|
"path": "apps/dgst.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-770",
|
|
"mechanisms": [
|
|
"unchecked_alloc_size"
|
|
],
|
|
"pair": "openssl-cve-2025-66199",
|
|
"path": "ssl/statem/statem_lib.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2025-66199-tls13_process_compressed",
|
|
"path": "ssl/statem/statem_lib.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2025-69418",
|
|
"path": "crypto/modes/ocb128.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2025-69419",
|
|
"path": "crypto/pkcs12/p12_utl.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2025-69421",
|
|
"path": "crypto/pkcs12/p12_decr.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2025-9232",
|
|
"path": "crypto/http/http_lib.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-14456-expect_quic_for_value",
|
|
"path": "ssl/quic/quic_impl.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-14456-port_default_packet_hand",
|
|
"path": "ssl/quic/quic_port.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-14457",
|
|
"path": "ssl/t1_lib.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-18798",
|
|
"path": "ssl/quic/quic_port.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-2673",
|
|
"path": "ssl/t1_lib.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2026-28388",
|
|
"path": "crypto/x509/x509_vfy.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2026-28389",
|
|
"path": "crypto/cms/cms_rsa.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2026-28389-dh_cms_set_shared_info",
|
|
"path": "crypto/cms/cms_dh.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2026-28389-ecdh_cms_set_shared_info",
|
|
"path": "crypto/cms/cms_ec.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2026-31789",
|
|
"path": "crypto/o_str.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-31790",
|
|
"path": "providers/implementations/kem/rsa_kem.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-31790-rsasve_generate",
|
|
"path": "providers/implementations/kem/rsa_kem.c.in",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-34181",
|
|
"path": "crypto/pkcs12/p12_mutl.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-35188",
|
|
"path": "crypto/x509/x509_vfy.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2026-42764",
|
|
"path": "ssl/quic/quic_port.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2026-42765",
|
|
"path": "crypto/x509/x509_vfy.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2026-42766",
|
|
"path": "crypto/cms/cms_pwri.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-42768",
|
|
"path": "crypto/cms/cms_env.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo",
|
|
"path": "crypto/pkcs7/pk7_doit.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-476",
|
|
"mechanisms": [
|
|
"null_deref_unguarded"
|
|
],
|
|
"pair": "openssl-cve-2026-42769",
|
|
"path": "crypto/cmp/cmp_genm.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-42771",
|
|
"path": "crypto/x509/x509_vpm.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-45445",
|
|
"path": "providers/implementations/ciphers/cipher_aes_ocb.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-45446",
|
|
"path": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-45446-aes_siv_set_ctx_params",
|
|
"path": "providers/implementations/ciphers/cipher_aes_siv.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-416",
|
|
"mechanisms": [
|
|
"uaf"
|
|
],
|
|
"pair": "openssl-cve-2026-45447",
|
|
"path": "crypto/pkcs7/pk7_smime.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-54874",
|
|
"path": "ssl/record/rec_layer_d1.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-54874-dtls1_process_record",
|
|
"path": "ssl/record/ssl3_record.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor",
|
|
"path": "ssl/record/methods/dtls_meth.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2026-63072",
|
|
"path": "crypto/cms/cms_kari.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "openssl-cve-2026-63072-cms_kek_cipher",
|
|
"path": "crypto/cms/cms_kemri.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-63073",
|
|
"path": "crypto/cmp/cmp_vfy.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-63074",
|
|
"path": "crypto/cmp/cmp_vfy.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-63075-txp_pkt_commit",
|
|
"path": "ssl/quic/quic_txp.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-7383",
|
|
"path": "crypto/asn1/a_mbstr.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-75803",
|
|
"path": "providers/implementations/ciphers/cipher_aes_ocb.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-75803-aes_gcm_siv_finish",
|
|
"path": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-119",
|
|
"mechanisms": [
|
|
"other"
|
|
],
|
|
"pair": "openssl-cve-2026-75803-chacha20_poly1305_cipher",
|
|
"path": "providers/implementations/ciphers/cipher_chacha20_poly1305.c",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-639",
|
|
"mechanisms": [
|
|
"identity_from_request_body"
|
|
],
|
|
"pair": "overleaf-with-claude-exportscontroller-3980b9",
|
|
"path": "services/web/app/src/Features/Exports/ExportsController.mjs",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00013",
|
|
"path": "testcode/BenchmarkTest00013.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00014",
|
|
"path": "testcode/BenchmarkTest00014.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00030",
|
|
"path": "testcode/BenchmarkTest00030.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00041",
|
|
"path": "testcode/BenchmarkTest00041.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00144",
|
|
"path": "testcode/BenchmarkTest00144.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00145",
|
|
"path": "testcode/BenchmarkTest00145.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00146",
|
|
"path": "testcode/BenchmarkTest00146.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00148",
|
|
"path": "testcode/BenchmarkTest00148.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00149",
|
|
"path": "testcode/BenchmarkTest00149.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00150",
|
|
"path": "testcode/BenchmarkTest00150.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00152",
|
|
"path": "testcode/BenchmarkTest00152.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00153",
|
|
"path": "testcode/BenchmarkTest00153.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00154",
|
|
"path": "testcode/BenchmarkTest00154.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00156",
|
|
"path": "testcode/BenchmarkTest00156.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00279",
|
|
"path": "testcode/BenchmarkTest00279.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00280",
|
|
"path": "testcode/BenchmarkTest00280.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00301",
|
|
"path": "testcode/BenchmarkTest00301.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00375",
|
|
"path": "testcode/BenchmarkTest00375.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00376",
|
|
"path": "testcode/BenchmarkTest00376.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00378",
|
|
"path": "testcode/BenchmarkTest00378.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00380",
|
|
"path": "testcode/BenchmarkTest00380.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00382",
|
|
"path": "testcode/BenchmarkTest00382.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00383",
|
|
"path": "testcode/BenchmarkTest00383.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00384",
|
|
"path": "testcode/BenchmarkTest00384.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00385",
|
|
"path": "testcode/BenchmarkTest00385.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00387",
|
|
"path": "testcode/BenchmarkTest00387.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00388",
|
|
"path": "testcode/BenchmarkTest00388.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00390",
|
|
"path": "testcode/BenchmarkTest00390.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00392",
|
|
"path": "testcode/BenchmarkTest00392.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00395",
|
|
"path": "testcode/BenchmarkTest00395.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-xss-benchmarktest00467",
|
|
"path": "testcode/BenchmarkTest00467.java",
|
|
"profile": "synthetic",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-1321",
|
|
"mechanisms": [
|
|
"prototype_pollution"
|
|
],
|
|
"pair": "popmark-editorconfig-e5ac40",
|
|
"path": "src/lexical-markdown/config/editorConfig.ts",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-1321",
|
|
"mechanisms": [
|
|
"prototype_pollution"
|
|
],
|
|
"pair": "rag-pipeline-utils-config-handler-76e5f0",
|
|
"path": "src/cli/handlers/config-handler.js",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-16",
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"pair": "registry-proxy-worker-426847",
|
|
"path": "src/worker.js",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-22",
|
|
"mechanisms": [
|
|
"path_join_user_input"
|
|
],
|
|
"pair": "serve-here-js-1-1-0",
|
|
"path": "source/response.js",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-94",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "static-eval-1-1-1",
|
|
"path": "index.js",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-639",
|
|
"mechanisms": [
|
|
"identity_from_request_body"
|
|
],
|
|
"pair": "supplieradvisor-mvp-route-387bcf",
|
|
"path": "app/api/customers/claims/route.ts",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-639",
|
|
"mechanisms": [
|
|
"identity_from_request_body"
|
|
],
|
|
"pair": "supplieradvisor-mvp-route-a69e8f",
|
|
"path": "app/api/customers/opportunities/route.ts",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-89",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "sven-cwe-089-query-concat",
|
|
"path": "modules/query_lastfm.py",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-862",
|
|
"mechanisms": [
|
|
"missing_auth_guard"
|
|
],
|
|
"pair": "threatbyte-api-v1-delete",
|
|
"path": "server/api/v1/api_v1.py",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-639",
|
|
"mechanisms": [
|
|
"missing_auth_guard"
|
|
],
|
|
"pair": "threatbyte-api-v1-get",
|
|
"path": "server/api/v1/api_v1.py",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-78",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "tools-cli-tools-a96bc0",
|
|
"path": "src/shared/python/ai/tools/cli_tools.py",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-22",
|
|
"mechanisms": [
|
|
"path_join_user_input"
|
|
],
|
|
"pair": "trackly-cli-path-diagnostics-1c1aed",
|
|
"path": "lib/path-diagnostics.js",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-94",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "underscore-1-13-0-0",
|
|
"path": "modules/template.js",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-22",
|
|
"mechanisms": [
|
|
"path_join_user_input"
|
|
],
|
|
"pair": "upstreamdrift-local-server-c3a078",
|
|
"path": "src/api/local_server.py",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-639",
|
|
"mechanisms": [
|
|
"missing_auth_guard"
|
|
],
|
|
"pair": "vampi-users-update-password",
|
|
"path": "api_views/users.py",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-89",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "vfapi-main-delete-user",
|
|
"path": "main.py",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-89",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "vfapi-main-put-user",
|
|
"path": "main.py",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-89",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "vfapi-main-sql-return-users-from-username",
|
|
"path": "main.py",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-79",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "vulnerable-python-apps-bad-mvc-do-get",
|
|
"path": "Insecure_Frameworks/bad_mvc.py",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-22",
|
|
"mechanisms": [
|
|
"path_join_user_input"
|
|
],
|
|
"pair": "vulnerable-python-apps-dir-traversal-do-get",
|
|
"path": "Directory_Traversal/Dir_Traversal.py",
|
|
"profile": "human",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-918",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "waggledance-swarm-ssrf-host-guard-9a4548",
|
|
"path": "waggledance/core/v3_13_0/ssrf_host_guard.py",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-89",
|
|
"mechanisms": [
|
|
"source_reaches_sink"
|
|
],
|
|
"pair": "workers-research-utils-209444",
|
|
"path": "src/utils.ts",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-16",
|
|
"mechanisms": [
|
|
"permissive_default"
|
|
],
|
|
"pair": "zoonk-origin-bfbf67",
|
|
"path": "packages/utils/src/origin.ts",
|
|
"profile": "agent",
|
|
"rule_id": "",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-416",
|
|
"mechanisms": [
|
|
"uaf"
|
|
],
|
|
"pair": "chromium-cve-2019-5786",
|
|
"path": "third_party/blink/renderer/core/fileapi/file_reader_loader.cc",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-122",
|
|
"mechanisms": [
|
|
"unchecked_length_copy"
|
|
],
|
|
"pair": "curl-cve-2023-38545",
|
|
"path": "lib/socks.c",
|
|
"profile": "human",
|
|
"rule_id": "c-unsafe-memory-copy",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-78",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-python-cmdi",
|
|
"path": "testcode/BenchmarkTest00165.py",
|
|
"profile": "synthetic",
|
|
"rule_id": "python-shell-true",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-89",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-python-sqli",
|
|
"path": "testcode/BenchmarkTest00099.py",
|
|
"profile": "synthetic",
|
|
"rule_id": "python-sql-injection",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
},
|
|
{
|
|
"cwe": "CWE-94",
|
|
"mechanisms": [
|
|
"container_taint"
|
|
],
|
|
"pair": "owasp-python-codeinj",
|
|
"path": "testcode/BenchmarkTest00074.py",
|
|
"profile": "synthetic",
|
|
"rule_id": "python-unsafe-eval",
|
|
"signal": "miss",
|
|
"split": "train"
|
|
},
|
|
{
|
|
"cwe": "CWE-327",
|
|
"mechanisms": [
|
|
"config_sink_weak_literal"
|
|
],
|
|
"pair": "owasp-python-hash",
|
|
"path": "testcode/BenchmarkTest00054.py",
|
|
"profile": "synthetic",
|
|
"rule_id": "python-weak-hash",
|
|
"signal": "miss",
|
|
"split": "holdout"
|
|
}
|
|
]
|
|
}
|