mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
Marius CiepluchandClaude Opus 5.5
afff080874
The Joern leak-audit record named spent population v1/v2 repositories, which the reserved-repository guard forbids outside benchmarks/independent/ (no v3 repository was involved: 0 matches). Records now carry counts and SHA-256 digests. With Codex. Co-Authored-By: Claude Opus 5.5 <[email protected]>
21922 lines
646 KiB
JSON
21922 lines
646 KiB
JSON
{
|
|
"by_family": {
|
|
"access_control": {
|
|
"both_asked_pairs": 0,
|
|
"both_asked_signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
}
|
|
}
|
|
},
|
|
"complete_pairs": 28,
|
|
"coverage": {
|
|
"asked-nothing": 0,
|
|
"failed": 0,
|
|
"missing": 0,
|
|
"path": 0,
|
|
"timeout": 0,
|
|
"unsupported": 66
|
|
},
|
|
"pair_asymmetry": {
|
|
"both": 0,
|
|
"fixed_only": 0,
|
|
"neither": 0,
|
|
"not_both_asked": 28,
|
|
"vulnerable_only": 0
|
|
},
|
|
"rows": 66,
|
|
"signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 38,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"deserialization": {
|
|
"both_asked_pairs": 18,
|
|
"both_asked_signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5277777777777778,
|
|
"best_direction_within_pair_accuracy": 0.5277777777777778,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5277777777777778,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5277777777777778
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5324074074074074,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5324074074074074,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 16,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5277777777777778,
|
|
"best_direction_within_pair_accuracy": 0.5277777777777778,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.4722222222222222,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.4722222222222222
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5277777777777778,
|
|
"best_direction_within_pair_accuracy": 0.5277777777777778,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5277777777777778,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5277777777777778
|
|
}
|
|
}
|
|
},
|
|
"complete_pairs": 25,
|
|
"coverage": {
|
|
"asked-nothing": 28,
|
|
"failed": 2,
|
|
"missing": 0,
|
|
"path": 22,
|
|
"timeout": 0,
|
|
"unsupported": 12
|
|
},
|
|
"pair_asymmetry": {
|
|
"both": 4,
|
|
"fixed_only": 0,
|
|
"neither": 13,
|
|
"not_both_asked": 7,
|
|
"vulnerable_only": 1
|
|
},
|
|
"rows": 64,
|
|
"signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5502564102564103,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5502564102564103,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.6507692307692308,
|
|
"best_direction_within_pair_accuracy": 0.52,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.6507692307692308,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 24,
|
|
"within_pair_accuracy": 0.52
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.6523076923076923,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.6523076923076923,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 23,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5071794871794872,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.4928205128205128,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.6507692307692308,
|
|
"best_direction_within_pair_accuracy": 0.52,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.34923076923076923,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 24,
|
|
"within_pair_accuracy": 0.48
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.6666666666666666,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.6666666666666666,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.5,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 25,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5087179487179487,
|
|
"best_direction_within_pair_accuracy": 0.52,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 25,
|
|
"pairs": 25,
|
|
"pooled_auc": 0.49128205128205127,
|
|
"positive": 39,
|
|
"rows": 64,
|
|
"ties": 24,
|
|
"within_pair_accuracy": 0.52
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"injection": {
|
|
"both_asked_pairs": 40,
|
|
"both_asked_signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.525,
|
|
"best_direction_within_pair_accuracy": 0.525,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 2,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.475,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 38,
|
|
"within_pair_accuracy": 0.475
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5021875,
|
|
"best_direction_within_pair_accuracy": 0.55,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 4,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.4978125,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 36,
|
|
"within_pair_accuracy": 0.45
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5125,
|
|
"best_direction_within_pair_accuracy": 0.5125,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5125,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 39,
|
|
"within_pair_accuracy": 0.5125
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5125,
|
|
"best_direction_within_pair_accuracy": 0.5125,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.4875,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 39,
|
|
"within_pair_accuracy": 0.4875
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 40,
|
|
"pairs": 40,
|
|
"pooled_auc": 0.5,
|
|
"positive": 40,
|
|
"rows": 80,
|
|
"ties": 40,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
},
|
|
"complete_pairs": 53,
|
|
"coverage": {
|
|
"asked-nothing": 94,
|
|
"failed": 3,
|
|
"missing": 0,
|
|
"path": 24,
|
|
"timeout": 0,
|
|
"unsupported": 28
|
|
},
|
|
"pair_asymmetry": {
|
|
"both": 4,
|
|
"fixed_only": 0,
|
|
"neither": 36,
|
|
"not_both_asked": 13,
|
|
"vulnerable_only": 0
|
|
},
|
|
"rows": 149,
|
|
"signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.516522210184182,
|
|
"best_direction_within_pair_accuracy": 0.5094339622641509,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.516522210184182,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 52,
|
|
"within_pair_accuracy": 0.49056603773584906
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5327735644637053,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5327735644637053,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5140845070422535,
|
|
"best_direction_within_pair_accuracy": 0.5188679245283019,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 2,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.4859154929577465,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 51,
|
|
"within_pair_accuracy": 0.4811320754716981
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5296135789093536,
|
|
"best_direction_within_pair_accuracy": 0.5377358490566038,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 4,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5296135789093536,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 49,
|
|
"within_pair_accuracy": 0.46226415094339623
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5064102564102564,
|
|
"best_direction_within_pair_accuracy": 0.5094339622641509,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5064102564102564,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 52,
|
|
"within_pair_accuracy": 0.5094339622641509
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5006319971108704,
|
|
"best_direction_within_pair_accuracy": 0.5094339622641509,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.49936800288912964,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 52,
|
|
"within_pair_accuracy": 0.49056603773584906
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5064102564102564,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5064102564102564,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5064102564102564,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5064102564102564,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5128205128205128,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5128205128205128,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5012639942217407,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.4987360057782593,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5327735644637053,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.46722643553629467,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5064102564102564,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5064102564102564,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5006319971108704,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.49936800288912964,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.528169014084507,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.47183098591549294,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5064102564102564,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5064102564102564,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5064102564102564,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5064102564102564,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5070422535211268,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.49295774647887325,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5192307692307693,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5192307692307693,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 71,
|
|
"pairs": 53,
|
|
"pooled_auc": 0.5,
|
|
"positive": 78,
|
|
"rows": 149,
|
|
"ties": 53,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"output_encoding": {
|
|
"both_asked_pairs": 12,
|
|
"both_asked_signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 12,
|
|
"pairs": 12,
|
|
"pooled_auc": 0.5,
|
|
"positive": 12,
|
|
"rows": 24,
|
|
"ties": 12,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
},
|
|
"complete_pairs": 28,
|
|
"coverage": {
|
|
"asked-nothing": 32,
|
|
"failed": 0,
|
|
"missing": 0,
|
|
"path": 5,
|
|
"timeout": 0,
|
|
"unsupported": 32
|
|
},
|
|
"pair_asymmetry": {
|
|
"both": 0,
|
|
"fixed_only": 0,
|
|
"neither": 12,
|
|
"not_both_asked": 16,
|
|
"vulnerable_only": 0
|
|
},
|
|
"rows": 69,
|
|
"signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5905923344947736,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5905923344947736,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5609756097560976,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5609756097560976,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5609756097560976,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5609756097560976,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5609756097560976,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5609756097560976,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5609756097560976,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.43902439024390244,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 28,
|
|
"pairs": 28,
|
|
"pooled_auc": 0.5,
|
|
"positive": 41,
|
|
"rows": 69,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"path": {
|
|
"both_asked_pairs": 18,
|
|
"both_asked_signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5277777777777778,
|
|
"best_direction_within_pair_accuracy": 0.5277777777777778,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5277777777777778,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5277777777777778
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5277777777777778,
|
|
"best_direction_within_pair_accuracy": 0.5277777777777778,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.4722222222222222,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.4722222222222222
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5216049382716049,
|
|
"best_direction_within_pair_accuracy": 0.5277777777777778,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 2,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5216049382716049,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.4722222222222222
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5277777777777778,
|
|
"best_direction_within_pair_accuracy": 0.5277777777777778,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.4722222222222222,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.4722222222222222
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5277777777777778,
|
|
"best_direction_within_pair_accuracy": 0.5277777777777778,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5277777777777778,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5277777777777778
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 18,
|
|
"pairs": 18,
|
|
"pooled_auc": 0.5,
|
|
"positive": 18,
|
|
"rows": 36,
|
|
"ties": 18,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
},
|
|
"complete_pairs": 29,
|
|
"coverage": {
|
|
"asked-nothing": 38,
|
|
"failed": 2,
|
|
"missing": 0,
|
|
"path": 6,
|
|
"timeout": 0,
|
|
"unsupported": 20
|
|
},
|
|
"pair_asymmetry": {
|
|
"both": 2,
|
|
"fixed_only": 0,
|
|
"neither": 15,
|
|
"not_both_asked": 11,
|
|
"vulnerable_only": 1
|
|
},
|
|
"rows": 66,
|
|
"signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5410065237651445,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5410065237651445,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5195712954333644,
|
|
"best_direction_within_pair_accuracy": 0.5172413793103449,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5195712954333644,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5172413793103449
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5172413793103448,
|
|
"best_direction_within_pair_accuracy": 0.5172413793103448,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.4827586206896552,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.4827586206896552
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.516775396085741,
|
|
"best_direction_within_pair_accuracy": 0.5172413793103448,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 2,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.516775396085741,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 26,
|
|
"within_pair_accuracy": 0.4827586206896552
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5037278657968314,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.4962721342031687,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5195712954333644,
|
|
"best_direction_within_pair_accuracy": 0.5172413793103448,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.4804287045666356,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.4827586206896552
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5135135135135135,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5135135135135135,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5037278657968314,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.4962721342031687,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5135135135135135,
|
|
"best_direction_within_pair_accuracy": 0.5172413793103449,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5135135135135135,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.5172413793103449
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 29,
|
|
"pairs": 29,
|
|
"pooled_auc": 0.5,
|
|
"positive": 37,
|
|
"rows": 66,
|
|
"ties": 29,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"untrusted_destination": {
|
|
"both_asked_pairs": 17,
|
|
"both_asked_signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5017301038062284,
|
|
"best_direction_within_pair_accuracy": 0.5294117647058824,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.4982698961937716,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 16,
|
|
"within_pair_accuracy": 0.47058823529411764
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 17,
|
|
"pairs": 17,
|
|
"pooled_auc": 0.5,
|
|
"positive": 17,
|
|
"rows": 34,
|
|
"ties": 17,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
},
|
|
"complete_pairs": 32,
|
|
"coverage": {
|
|
"asked-nothing": 39,
|
|
"failed": 2,
|
|
"missing": 0,
|
|
"path": 15,
|
|
"timeout": 0,
|
|
"unsupported": 31
|
|
},
|
|
"pair_asymmetry": {
|
|
"both": 2,
|
|
"fixed_only": 0,
|
|
"neither": 15,
|
|
"not_both_asked": 15,
|
|
"vulnerable_only": 0
|
|
},
|
|
"rows": 87,
|
|
"signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5932432432432433,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5932432432432433,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5794594594594594,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5794594594594594,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.575945945945946,
|
|
"best_direction_within_pair_accuracy": 0.515625,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.575945945945946,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 31,
|
|
"within_pair_accuracy": 0.484375
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.517027027027027,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.482972972972973,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5794594594594595,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.4205405405405405,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5964864864864865,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5964864864864865,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 37,
|
|
"pairs": 32,
|
|
"pooled_auc": 0.5,
|
|
"positive": 50,
|
|
"rows": 87,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"by_source": {
|
|
"adjudications": {
|
|
"both_asked_pairs": 0,
|
|
"both_asked_signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
}
|
|
}
|
|
},
|
|
"complete_pairs": 0,
|
|
"coverage": {
|
|
"asked-nothing": 11,
|
|
"failed": 1,
|
|
"missing": 0,
|
|
"path": 6,
|
|
"timeout": 0,
|
|
"unsupported": 6
|
|
},
|
|
"pair_asymmetry": {
|
|
"both": 0,
|
|
"fixed_only": 0,
|
|
"neither": 0,
|
|
"not_both_asked": 0,
|
|
"vulnerable_only": 0
|
|
},
|
|
"rows": 24,
|
|
"signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.6521739130434783,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.6521739130434783,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.6304347826086957,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.3695652173913043,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.6304347826086957,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.3695652173913043,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5217391304347826,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.4782608695652174,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.6304347826086957,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.6304347826086957,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5869565217391304,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.41304347826086957,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5217391304347826,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.4782608695652174,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 23,
|
|
"pairs": 0,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 24,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"advisory-fixes": {
|
|
"both_asked_pairs": 33,
|
|
"both_asked_signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5303030303030303,
|
|
"best_direction_within_pair_accuracy": 0.5303030303030303,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 2,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5303030303030303,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 31,
|
|
"within_pair_accuracy": 0.5303030303030303
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5266299357208448,
|
|
"best_direction_within_pair_accuracy": 0.5151515151515151,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 3,
|
|
"higher_on_vulnerable": 2,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5266299357208448,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 28,
|
|
"within_pair_accuracy": 0.48484848484848486
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5303030303030303,
|
|
"best_direction_within_pair_accuracy": 0.5303030303030303,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 2,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.4696969696969697,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 31,
|
|
"within_pair_accuracy": 0.4696969696969697
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 33,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5151515151515151,
|
|
"best_direction_within_pair_accuracy": 0.5151515151515151,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5151515151515151,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5151515151515151
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5151515151515151,
|
|
"best_direction_within_pair_accuracy": 0.5151515151515151,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 33,
|
|
"pairs": 33,
|
|
"pooled_auc": 0.5151515151515151,
|
|
"positive": 33,
|
|
"rows": 66,
|
|
"ties": 32,
|
|
"within_pair_accuracy": 0.5151515151515151
|
|
}
|
|
}
|
|
},
|
|
"complete_pairs": 76,
|
|
"coverage": {
|
|
"asked-nothing": 52,
|
|
"failed": 2,
|
|
"missing": 0,
|
|
"path": 14,
|
|
"timeout": 0,
|
|
"unsupported": 84
|
|
},
|
|
"pair_asymmetry": {
|
|
"both": 6,
|
|
"fixed_only": 0,
|
|
"neither": 25,
|
|
"not_both_asked": 43,
|
|
"vulnerable_only": 2
|
|
},
|
|
"rows": 152,
|
|
"signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5131578947368421,
|
|
"best_direction_within_pair_accuracy": 0.5131578947368421,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 2,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5131578947368421,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 74,
|
|
"within_pair_accuracy": 0.5131578947368421
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5124653739612188,
|
|
"best_direction_within_pair_accuracy": 0.506578947368421,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 3,
|
|
"higher_on_vulnerable": 2,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5124653739612188,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 71,
|
|
"within_pair_accuracy": 0.4934210526315789
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.513157894736842,
|
|
"best_direction_within_pair_accuracy": 0.513157894736842,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 2,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.4868421052631579,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 74,
|
|
"within_pair_accuracy": 0.4868421052631579
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 76,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.506578947368421,
|
|
"best_direction_within_pair_accuracy": 0.506578947368421,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.506578947368421,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 75,
|
|
"within_pair_accuracy": 0.506578947368421
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.506578947368421,
|
|
"best_direction_within_pair_accuracy": 0.506578947368421,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 76,
|
|
"pairs": 76,
|
|
"pooled_auc": 0.506578947368421,
|
|
"positive": 76,
|
|
"rows": 152,
|
|
"ties": 75,
|
|
"within_pair_accuracy": 0.506578947368421
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"advisory-fixes-2": {
|
|
"both_asked_pairs": 35,
|
|
"both_asked_signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5142857142857142,
|
|
"best_direction_within_pair_accuracy": 0.5142857142857142,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.4857142857142857,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 34,
|
|
"within_pair_accuracy": 0.4857142857142857
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5004081632653061,
|
|
"best_direction_within_pair_accuracy": 0.5142857142857142,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.4995918367346939,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 34,
|
|
"within_pair_accuracy": 0.4857142857142857
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 35,
|
|
"pairs": 35,
|
|
"pooled_auc": 0.5,
|
|
"positive": 35,
|
|
"rows": 70,
|
|
"ties": 35,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
},
|
|
"complete_pairs": 72,
|
|
"coverage": {
|
|
"asked-nothing": 66,
|
|
"failed": 4,
|
|
"missing": 0,
|
|
"path": 4,
|
|
"timeout": 0,
|
|
"unsupported": 70
|
|
},
|
|
"pair_asymmetry": {
|
|
"both": 2,
|
|
"fixed_only": 0,
|
|
"neither": 33,
|
|
"not_both_asked": 37,
|
|
"vulnerable_only": 0
|
|
},
|
|
"rows": 144,
|
|
"signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5069444444444444,
|
|
"best_direction_within_pair_accuracy": 0.5069444444444444,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.4930555555555556,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 71,
|
|
"within_pair_accuracy": 0.4930555555555556
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.500096450617284,
|
|
"best_direction_within_pair_accuracy": 0.5069444444444444,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.49990354938271603,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 71,
|
|
"within_pair_accuracy": 0.4930555555555556
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 72,
|
|
"pairs": 72,
|
|
"pooled_auc": 0.5,
|
|
"positive": 72,
|
|
"rows": 144,
|
|
"ties": 72,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"dev-php": {
|
|
"both_asked_pairs": 0,
|
|
"both_asked_signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
}
|
|
}
|
|
},
|
|
"complete_pairs": 0,
|
|
"coverage": {
|
|
"asked-nothing": 0,
|
|
"failed": 0,
|
|
"missing": 0,
|
|
"path": 1,
|
|
"timeout": 0,
|
|
"unsupported": 0
|
|
},
|
|
"pair_asymmetry": {
|
|
"both": 0,
|
|
"fixed_only": 0,
|
|
"neither": 0,
|
|
"not_both_asked": 0,
|
|
"vulnerable_only": 0
|
|
},
|
|
"rows": 1,
|
|
"signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 1,
|
|
"rows": 1,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"population-v1": {
|
|
"both_asked_pairs": 9,
|
|
"both_asked_signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5555555555555556,
|
|
"best_direction_within_pair_accuracy": 0.5555555555555556,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.4444444444444444,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 8,
|
|
"within_pair_accuracy": 0.4444444444444444
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5246913580246914,
|
|
"best_direction_within_pair_accuracy": 0.6666666666666667,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 3,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.47530864197530864,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 6,
|
|
"within_pair_accuracy": 0.3333333333333333
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5555555555555556,
|
|
"best_direction_within_pair_accuracy": 0.5555555555555556,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5555555555555556,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 8,
|
|
"within_pair_accuracy": 0.5555555555555556
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5555555555555556,
|
|
"best_direction_within_pair_accuracy": 0.5555555555555556,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.4444444444444444,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 8,
|
|
"within_pair_accuracy": 0.4444444444444444
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 9,
|
|
"pairs": 9,
|
|
"pooled_auc": 0.5,
|
|
"positive": 9,
|
|
"rows": 18,
|
|
"ties": 9,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
},
|
|
"complete_pairs": 14,
|
|
"coverage": {
|
|
"asked-nothing": 18,
|
|
"failed": 1,
|
|
"missing": 0,
|
|
"path": 6,
|
|
"timeout": 0,
|
|
"unsupported": 10
|
|
},
|
|
"pair_asymmetry": {
|
|
"both": 3,
|
|
"fixed_only": 0,
|
|
"neither": 6,
|
|
"not_both_asked": 5,
|
|
"vulnerable_only": 0
|
|
},
|
|
"rows": 35,
|
|
"signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5357142857142857,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5357142857142857,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5357142857142857,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.4642857142857143,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5357142857142857,
|
|
"best_direction_within_pair_accuracy": 0.5357142857142857,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.4642857142857143,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 13,
|
|
"within_pair_accuracy": 0.4642857142857143
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5425170068027211,
|
|
"best_direction_within_pair_accuracy": 0.6071428571428572,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 3,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.4574829931972789,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.39285714285714285
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5238095238095238,
|
|
"best_direction_within_pair_accuracy": 0.5357142857142857,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5238095238095238,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 13,
|
|
"within_pair_accuracy": 0.5357142857142857
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5357142857142857,
|
|
"best_direction_within_pair_accuracy": 0.5357142857142857,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.4642857142857143,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 13,
|
|
"within_pair_accuracy": 0.4642857142857143
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5238095238095238,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.47619047619047616,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5357142857142857,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5357142857142857,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 14,
|
|
"pairs": 14,
|
|
"pooled_auc": 0.5,
|
|
"positive": 21,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"population-v2": {
|
|
"both_asked_pairs": 11,
|
|
"both_asked_signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 11,
|
|
"pairs": 11,
|
|
"pooled_auc": 0.5,
|
|
"positive": 11,
|
|
"rows": 22,
|
|
"ties": 11,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
},
|
|
"complete_pairs": 15,
|
|
"coverage": {
|
|
"asked-nothing": 27,
|
|
"failed": 1,
|
|
"missing": 0,
|
|
"path": 0,
|
|
"timeout": 0,
|
|
"unsupported": 7
|
|
},
|
|
"pair_asymmetry": {
|
|
"both": 0,
|
|
"fixed_only": 0,
|
|
"neither": 11,
|
|
"not_both_asked": 4,
|
|
"vulnerable_only": 0
|
|
},
|
|
"rows": 35,
|
|
"signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.525,
|
|
"best_direction_within_pair_accuracy": 0.5333333333333333,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.475,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.4666666666666667
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 20,
|
|
"rows": 35,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"vfc": {
|
|
"both_asked_pairs": 0,
|
|
"both_asked_signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": null,
|
|
"best_direction_within_pair_accuracy": null,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 0,
|
|
"pairs": 0,
|
|
"pooled_auc": null,
|
|
"positive": 0,
|
|
"rows": 0,
|
|
"ties": 0,
|
|
"within_pair_accuracy": null
|
|
}
|
|
}
|
|
},
|
|
"complete_pairs": 1,
|
|
"coverage": {
|
|
"asked-nothing": 0,
|
|
"failed": 0,
|
|
"missing": 0,
|
|
"path": 0,
|
|
"timeout": 0,
|
|
"unsupported": 2
|
|
},
|
|
"pair_asymmetry": {
|
|
"both": 0,
|
|
"fixed_only": 0,
|
|
"neither": 0,
|
|
"not_both_asked": 1,
|
|
"vulnerable_only": 0
|
|
},
|
|
"rows": 2,
|
|
"signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 1,
|
|
"pairs": 1,
|
|
"pooled_auc": 0.5,
|
|
"positive": 1,
|
|
"rows": 2,
|
|
"ties": 1,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"vfc-js": {
|
|
"both_asked_pairs": 15,
|
|
"both_asked_signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5333333333333333,
|
|
"best_direction_within_pair_accuracy": 0.5333333333333333,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.4666666666666667,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.4666666666666667
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5022222222222222,
|
|
"best_direction_within_pair_accuracy": 0.5333333333333333,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.49777777777777776,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.4666666666666667
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
},
|
|
"complete_pairs": 15,
|
|
"coverage": {
|
|
"asked-nothing": 28,
|
|
"failed": 0,
|
|
"missing": 0,
|
|
"path": 2,
|
|
"timeout": 0,
|
|
"unsupported": 0
|
|
},
|
|
"pair_asymmetry": {
|
|
"both": 1,
|
|
"fixed_only": 0,
|
|
"neither": 14,
|
|
"not_both_asked": 0,
|
|
"vulnerable_only": 0
|
|
},
|
|
"rows": 30,
|
|
"signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5333333333333333,
|
|
"best_direction_within_pair_accuracy": 0.5333333333333333,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.4666666666666667,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.4666666666666667
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5022222222222222,
|
|
"best_direction_within_pair_accuracy": 0.5333333333333333,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.49777777777777776,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 14,
|
|
"within_pair_accuracy": 0.4666666666666667
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 15,
|
|
"pairs": 15,
|
|
"pooled_auc": 0.5,
|
|
"positive": 15,
|
|
"rows": 30,
|
|
"ties": 15,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"vibe-py": {
|
|
"both_asked_pairs": 2,
|
|
"both_asked_signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 2,
|
|
"rows": 4,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
},
|
|
"complete_pairs": 2,
|
|
"coverage": {
|
|
"asked-nothing": 29,
|
|
"failed": 0,
|
|
"missing": 0,
|
|
"path": 39,
|
|
"timeout": 0,
|
|
"unsupported": 10
|
|
},
|
|
"pair_asymmetry": {
|
|
"both": 0,
|
|
"fixed_only": 0,
|
|
"neither": 2,
|
|
"not_both_asked": 0,
|
|
"vulnerable_only": 0
|
|
},
|
|
"rows": 78,
|
|
"signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5657894736842105,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.4342105263157895,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.756578947368421,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": true,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.756578947368421,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.756578947368421,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": true,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.756578947368421,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5328947368421053,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5328947368421053,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.506578947368421,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.506578947368421,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.506578947368421,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.506578947368421,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5131578947368421,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5131578947368421,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.756578947368421,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": true,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.24342105263157895,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.506578947368421,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.506578947368421,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.506578947368421,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.506578947368421,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5855263157894737,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5855263157894737,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5657894736842105,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5657894736842105,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.506578947368421,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.506578947368421,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.506578947368421,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.506578947368421,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5197368421052632,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5197368421052632,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 2,
|
|
"pairs": 2,
|
|
"pooled_auc": 0.5,
|
|
"positive": 76,
|
|
"rows": 78,
|
|
"ties": 2,
|
|
"within_pair_accuracy": 0.5
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"cost_usd": 0,
|
|
"inputs": {
|
|
"accepted_files": 441,
|
|
"bytes_read": 25558078,
|
|
"files_read": 441,
|
|
"files_sha256": "9b7951f3cb4ff26460a142ba92617d66d253bdd14c3113d47c38187130c921e8",
|
|
"result_rows_read": 501,
|
|
"skipped": 0,
|
|
"stale": 0,
|
|
"unfinished": 0
|
|
},
|
|
"matched_rows": 501,
|
|
"materialization_version": 3,
|
|
"minimum_samples": 10,
|
|
"overall": {
|
|
"both_asked_pairs": 105,
|
|
"both_asked_signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5095238095238095,
|
|
"best_direction_within_pair_accuracy": 0.5095238095238095,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 2,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5095238095238095,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 103,
|
|
"within_pair_accuracy": 0.5095238095238095
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5142857142857142,
|
|
"best_direction_within_pair_accuracy": 0.5142857142857142,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 3,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.4857142857142857,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 102,
|
|
"within_pair_accuracy": 0.4857142857142857
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.507891156462585,
|
|
"best_direction_within_pair_accuracy": 0.5285714285714286,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 8,
|
|
"higher_on_vulnerable": 2,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.507891156462585,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 95,
|
|
"within_pair_accuracy": 0.4714285714285714
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5047619047619047,
|
|
"best_direction_within_pair_accuracy": 0.5047619047619047,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5047619047619047,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 104,
|
|
"within_pair_accuracy": 0.5047619047619047
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5047619047619047,
|
|
"best_direction_within_pair_accuracy": 0.5047619047619047,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.49523809523809526,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 104,
|
|
"within_pair_accuracy": 0.49523809523809526
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5095238095238095,
|
|
"best_direction_within_pair_accuracy": 0.5095238095238095,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 2,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.49047619047619045,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 103,
|
|
"within_pair_accuracy": 0.49047619047619045
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 105,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5047619047619047,
|
|
"best_direction_within_pair_accuracy": 0.5047619047619047,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5047619047619047,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 104,
|
|
"within_pair_accuracy": 0.5047619047619047
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5047619047619047,
|
|
"best_direction_within_pair_accuracy": 0.5047619047619047,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 105,
|
|
"pairs": 105,
|
|
"pooled_auc": 0.5047619047619047,
|
|
"positive": 105,
|
|
"rows": 210,
|
|
"ties": 104,
|
|
"within_pair_accuracy": 0.5047619047619047
|
|
}
|
|
}
|
|
},
|
|
"complete_pairs": 195,
|
|
"coverage": {
|
|
"asked-nothing": 231,
|
|
"failed": 9,
|
|
"missing": 0,
|
|
"path": 72,
|
|
"timeout": 0,
|
|
"unsupported": 189
|
|
},
|
|
"pair_asymmetry": {
|
|
"both": 12,
|
|
"fixed_only": 0,
|
|
"neither": 91,
|
|
"not_both_asked": 90,
|
|
"vulnerable_only": 2
|
|
},
|
|
"rows": 501,
|
|
"signals": {
|
|
"asked": {
|
|
"best_direction_pooled_auc": 0.5399714721042564,
|
|
"best_direction_within_pair_accuracy": 0.5025641025641026,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.5399714721042564,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 194,
|
|
"within_pair_accuracy": 0.49743589743589745
|
|
},
|
|
"guard_present": {
|
|
"best_direction_pooled_auc": 0.5,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.5,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"has_path": {
|
|
"best_direction_pooled_auc": 0.5541219567543035,
|
|
"best_direction_within_pair_accuracy": 0.5051282051282051,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 2,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.5541219567543035,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 193,
|
|
"within_pair_accuracy": 0.5051282051282051
|
|
},
|
|
"sanitized": {
|
|
"best_direction_pooled_auc": 0.5068807339449541,
|
|
"best_direction_within_pair_accuracy": 0.5076923076923077,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 3,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.49311926605504586,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 192,
|
|
"within_pair_accuracy": 0.49230769230769234
|
|
},
|
|
"shortest_path_steps": {
|
|
"best_direction_pooled_auc": 0.5522092910169546,
|
|
"best_direction_within_pair_accuracy": 0.5153846153846153,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 8,
|
|
"higher_on_vulnerable": 2,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.5522092910169546,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 185,
|
|
"within_pair_accuracy": 0.4846153846153846
|
|
},
|
|
"sink_kind": {
|
|
"$wpdb->get_col": {
|
|
"best_direction_pooled_auc": 0.5017667844522968,
|
|
"best_direction_within_pair_accuracy": 0.5025641025641026,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.5017667844522968,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 194,
|
|
"within_pair_accuracy": 0.5025641025641026
|
|
},
|
|
"$wpdb->get_var": {
|
|
"best_direction_pooled_auc": 0.5005267935293545,
|
|
"best_direction_within_pair_accuracy": 0.5025641025641026,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 1,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.49947320647064547,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 194,
|
|
"within_pair_accuracy": 0.49743589743589745
|
|
},
|
|
"HttpResponse": {
|
|
"best_direction_pooled_auc": 0.508833922261484,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.508833922261484,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"MagicLink\\Security\\Serializable\\ActionSerializable::unserialize": {
|
|
"best_direction_pooled_auc": 0.5005267935293545,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.49947320647064547,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"User.objects.raw": {
|
|
"best_direction_pooled_auc": 0.5017667844522968,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.5017667844522968,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cur.execute": {
|
|
"best_direction_pooled_auc": 0.5017667844522968,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.5017667844522968,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"cursor.execute": {
|
|
"best_direction_pooled_auc": 0.5035335689045937,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.5035335689045937,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"db.query": {
|
|
"best_direction_pooled_auc": 0.5010535870587092,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.4989464129412909,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"fs.readFileSync": {
|
|
"best_direction_pooled_auc": 0.5005267935293545,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.49947320647064547,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"header": {
|
|
"best_direction_pooled_auc": 0.502820371511006,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.49717962848899405,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"no-path": {
|
|
"best_direction_pooled_auc": 0.5541219567543034,
|
|
"best_direction_within_pair_accuracy": 0.5051282051282051,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 2,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.4458780432456965,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 193,
|
|
"within_pair_accuracy": 0.4948717948717949
|
|
},
|
|
"open": {
|
|
"best_direction_pooled_auc": 0.5017667844522968,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.5017667844522968,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"os.system": {
|
|
"best_direction_pooled_auc": 0.5017667844522968,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.5017667844522968,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"pickle.loads": {
|
|
"best_direction_pooled_auc": 0.5229681978798587,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.5229681978798587,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"popen": {
|
|
"best_direction_pooled_auc": 0.5005267935293545,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.49947320647064547,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"redirect": {
|
|
"best_direction_pooled_auc": 0.5171410509936136,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.5171410509936136,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"send_from_directory": {
|
|
"best_direction_pooled_auc": 0.5005267935293545,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.49947320647064547,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.exec": {
|
|
"best_direction_pooled_auc": 0.5091743119266054,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.4908256880733945,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"session.execute": {
|
|
"best_direction_pooled_auc": 0.5017667844522968,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.5017667844522968,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"subprocess.Popen": {
|
|
"best_direction_pooled_auc": 0.5017667844522968,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.5017667844522968,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"system": {
|
|
"best_direction_pooled_auc": 0.5022935779816513,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.49770642201834864,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"text": {
|
|
"best_direction_pooled_auc": 0.5053003533568905,
|
|
"best_direction_within_pair_accuracy": 0.5,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 0,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.5053003533568905,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 195,
|
|
"within_pair_accuracy": 0.5
|
|
},
|
|
"unknown": {
|
|
"best_direction_pooled_auc": 0.5017667844522968,
|
|
"best_direction_within_pair_accuracy": 0.5025641025641026,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.5017667844522968,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 194,
|
|
"within_pair_accuracy": 0.5025641025641026
|
|
},
|
|
"unserialize": {
|
|
"best_direction_pooled_auc": 0.5001864038642332,
|
|
"best_direction_within_pair_accuracy": 0.5025641025641026,
|
|
"excluded_rows": 0,
|
|
"flagged": false,
|
|
"higher_on_fixed": 0,
|
|
"higher_on_vulnerable": 1,
|
|
"negative": 218,
|
|
"pairs": 195,
|
|
"pooled_auc": 0.5001864038642332,
|
|
"positive": 283,
|
|
"rows": 501,
|
|
"ties": 194,
|
|
"within_pair_accuracy": 0.5025641025641026
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"semantics": {
|
|
"asked": "path or asked-nothing=1; failed, timeout, unsupported=0; missing excluded from metrics.",
|
|
"asymmetry": "Disjoint categories; not_both_asked takes precedence over path asymmetry.",
|
|
"flags": "Best of both directions, >=0.70 with >=10 pairs for pair accuracy or >=10 rows for AUC.",
|
|
"limits": "Exploratory associations, not proof of leakage; running input snapshot, no multiple-testing correction.",
|
|
"missing": "Coverage only; absent source metadata is unknown. Skipped result units are never consumed.",
|
|
"non_path": "Observed non-path rows score zero; path rows lacking trace evidence have null trace features.",
|
|
"signals": "Shortest nonempty trace (first on ties); its sanitizer, guard and corresponding witness sink call target.",
|
|
"sink_kind": "One binary indicator per observed call target, including no-path/unknown; no ordinal encoding."
|
|
},
|
|
"threshold": 0.7,
|
|
"unit_rows_read": 501,
|
|
"units": [
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "6b0b3cab2df3397b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "0ac37b7154242dfa637140af643fb4595e85510a17ab1a12c111441b9d293238"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "6b0b3cab2df3397b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "6e5e274946d0e8f13a7ef4e37f6c7ed1828d057304a9262db0311413f18e1731"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "c0d0c91757f5ba95",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "285891b16ee6870af50b36dec3c2ca9a90ee15d9e14851c61e66ad443e6eab59"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "c0d0c91757f5ba95",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "f33fb2413edf1499a524c4592b3b2f93d166be845f5b65291969a086a4bec334"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "f56f2a107ae591be",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "350149bf9cafbb547f500b714a164734d2361b22e86fc9819c7bad3507d8458a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "f56f2a107ae591be",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "ad125319dd2d4c9d2d99a1eb34bb4cfab9f099a96e7547d0d59a8ecf1c990347"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "ee577ee4b6076fab",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "2523f55d035d1a772a842090bc335e5d755b2fe15b376dd5b6b9e30b9dae82d1"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "ee577ee4b6076fab",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "ca0f6c160d7839204f6fcc1709bcbc749a02a0b3b8bb648e2a238eacbf22ed78"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "c95b6b01d0c2db2a",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "15540c23be0c42472a49039658ec2ec0bbd8c6b318e35dd040a9d427370e0ef0"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "c95b6b01d0c2db2a",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "542471980417e964182d7d3db59a05fe12bdd072449f3bd77f7daa5515dbc909"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "29252934ef4bcfcf",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "63bae9240b31f9cf1dfe00d9b01d4d0ffda95931c9e7d040df1fd718f04d828b"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "29252934ef4bcfcf",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "cce2af1743834dcc3df58827ac263a2d63296ca1b2a2f9bdb811954fb5767c33"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "unsupported",
|
|
"unit": "bcc636b23dfb5f570d8864b17fe07b6b4fb52b65a40988c32011f1422f74d504"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "unsupported",
|
|
"unit": "dbcf1e67a1be7ccf7d51701f9b8339339164055135443044c23a446b16b3d934"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 9,
|
|
"sink_kind": "cursor.execute",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "50408f68114ecb4de3bebd836d52d9afad86b22dd1843641ac8a49b617c09e33"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 7,
|
|
"sink_kind": "cur.execute",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "cafb0f00f80dc6beeba40eb95c764bf9a3569193070ba321c28677dfa425ec88"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "07317a2258292656",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "a9f292d7cb467def582d9c0b31a397b13cdaefa77380ce971bfe9fbf535bb660"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "07317a2258292656",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "ed363d0dfa620707be477b90eb4b83a901bfd402040b918aeee6f06b2c5b795c"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "deserialization",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "1544b6dfa2299d60",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "failed",
|
|
"unit": "d45018fc4ce3dfd715c7087d4d197ad4108c0c8b6625c02c4d4da0adb9f6a140"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "deserialization",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "1544b6dfa2299d60",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "failed",
|
|
"unit": "f295c7dfb095595a4aa985c58688e4757c29be9e06b7a4ca55035ac5d06b1ef8"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "fe0e104d111c2555",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "088036fab9962be2b96f9162ea4f32190575678d3c5ba96bdfeac178bc22b2c4"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "fe0e104d111c2555",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "7fd2b56a816e25358477eee64487fb2c77f34c652703ad0a7120c368492017a3"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "b6742570f7f0e026",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "7c6c1d27aee6557f1b6bf371b8209003f0d2d1122cfa35b6629eb43f38769cf4"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "b6742570f7f0e026",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "df8300d84dd784d0be46969ea432ef97b8ce611bae7a896ed4f349bd4d6897db"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "0f584bb97a154488",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "222a84ffc7c58d45e8f10df221762b23bf20d0287ecd20f375558134928886ca"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "0f584bb97a154488",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "25e4c9d2941f59f072385a7bde3fd0bd76f9e986ed24b06ce81962ab447f5094"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "b15b924b4f7b1ae1",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "failed",
|
|
"unit": "2fa95fce0751c97db1a12a80ddb249ff5c54ee31c7dc3cd47765099c7b673e52"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "b15b924b4f7b1ae1",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "failed",
|
|
"unit": "52be8128053102eafbee67c2d3aac88c83ca290b943ab2f2cfdcd2630601c7d9"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "d31ca58f2a1d27d1",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "2ae40ea61d691060e7b9f6c8e910e3aa0edf16bc6f88bec81aa9a7dae5cf5603"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "d31ca58f2a1d27d1",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "4876728701698045e65eeae6e11e133c30f43b09029d7777d6d780f7d0855885"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "bb3d7baed62e6bb7",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 20,
|
|
"sink_kind": "redirect",
|
|
"source": "advisory-fixes",
|
|
"status": "path",
|
|
"unit": "e8ae88fd2b677e3f64ac94bddb012e3b903afa294ecc87774d10087c0d50489c"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "bb3d7baed62e6bb7",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 5,
|
|
"sink_kind": "redirect",
|
|
"source": "advisory-fixes",
|
|
"status": "path",
|
|
"unit": "f6b0d241891dc1d897d74d98b6ff7ada2c1f1ce7874ca32097630c06ca53e389"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "d9d8cfa38981847f",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "864f1800617f5218a2300ce390ba7922fe1bd0a182de115952342b61d627bb16"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "d9d8cfa38981847f",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "fdcda2307e20ef1b9247b7082a85337f457dd1f4e648bb8264077bf983c03271"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "1f73ad2576d52a64",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "0bc9634940734cf7f41628f220032fb7e2fd2ff5b584afc519875e90ea0be5a4"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "1f73ad2576d52a64",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "ddb59b2dc39715281a6d48b32e7ca4ec0354b85b953fff55139579f83905b7d6"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "a7326e6daa507b79",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "793ebf4c8e0f46d8ce3b3d090d2f6290d4167931a3b574f8269b90008e3dcde7"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "a7326e6daa507b79",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "b8d25f337fad527544c33c82f473015e08399457276fc480477f3cfcfc9c5b8a"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "211ba072bdfa67b7",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "3217f9d672a4a1d78005c8fb66e1bc60a542cb26bd8c46903402c765c123d60a"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "211ba072bdfa67b7",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "8370f9624baa0d144e56b8087eea897b98e5b2afcd6eb3a029d03e5b4b69d584"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "baccf350d5cc9911",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "50a3ca70700c8b41874c43ba94e6b7ffe0aa28b8930ff941a40767e1057065b5"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "baccf350d5cc9911",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "62927a118d3662c81450e19d49f4146b66f29a58d55ec0d1606ed521b1883f12"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "697f34e19bda57f3",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "775b6d900ec1ba71e4082ed49bb94439f38066628eed91461eecf0658caee78a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "697f34e19bda57f3",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "9e855586c685b3c62ffe32407a82966661d5839e2cff742f2676acaba645a97a"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "143b900b99a46cf4",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "200f96cd784ff5c39d8bba22883f22bc8a7c87c6970a7c871802f48a45548337"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "143b900b99a46cf4",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "7a0d62ec424849ec4681f4333fbb077e8239054d1e964bd99b40847ad7ccdb01"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "4b4e81797ca48cbf",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "a4d17d85973d024a615b89334ad5a2f46afea660ef5d0bcf2b2196c998b1caf2"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "4b4e81797ca48cbf",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "d604e460d8f5291124ba6fab5f9c94c7dfda61ea5f6808e512162334d6d6db4f"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "bcbd06e53147628b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "0b5cfe2d64771e30e50ff92cc409b8dd5e30079c252918ba03774cb5198a73b5"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "bcbd06e53147628b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "b805976c35330452af6c9f814ff4617b7b9ad0e82e1fa4440a443f93f0772c4a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "c12dbc8a50f7fe9b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "04beb8a0fd054b92c2dd0ed83907330fdee6124d86114df948ac72a297a7d51f"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "c12dbc8a50f7fe9b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "c5029016a6fd2e3f9df59dba0ce3c173bbbb0d2b1de22d151086e01e1b272119"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "unsupported",
|
|
"unit": "0e213aeabacf4205db024ea3c557e720c3aba911424555784917e967d6404867"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "e8bc65415bd42e43",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "unsupported",
|
|
"unit": "4920230ef773595a9fd9a92a090dff42b48499a1dc5fc8831f941dae55cb2538"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "e8bc65415bd42e43",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "unsupported",
|
|
"unit": "49209a810f207eb61382e2ceeab7076936838a5652546f21c187d066e220160b"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "unsupported",
|
|
"unit": "9e2964884cdf281fa3f18ee3481aa62f9a8a0a195d605da2df5bd71876fe311a"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "unsupported",
|
|
"unit": "f9cc6f1bbcd59f5dc0de8f96248f722ea0679f8afa47c53f70832151ce7616d3"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "e69463f945f9a0f4",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "5feace7b28e260175f80c682e9009025aea6fae3dc75409cabbb955b560d0372"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "e69463f945f9a0f4",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "799a4f5a5b9324e86c90752f0239f059984f44e8ff1ec0dd518d0d9413e34c66"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "71f56810b8ee6947",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "c659c0e717b7dc1084e1178288f6c9b2e87fbf0ef518ba3bbaedb0fbadae15c1"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "71f56810b8ee6947",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "c8d2e035a6099fb775c8b4ecf00196c1488dbddd9eed3d2d268a4f1d2567b194"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "768fc9db8a75a351",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 2,
|
|
"sink_kind": "MagicLink\\Security\\Serializable\\ActionSerializable::unserialize",
|
|
"source": "advisory-fixes",
|
|
"status": "path",
|
|
"unit": "adc6527469618f72b1dd7776814717cbd0056a0c625e05bef74199171ce73f1a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "768fc9db8a75a351",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 2,
|
|
"sink_kind": "MagicLink\\Security\\Serializable\\ActionSerializable::unserialize",
|
|
"source": "advisory-fixes",
|
|
"status": "path",
|
|
"unit": "da47663a57e370a75cc65b810b8a380aa26d12dcabb1d9b3c02641398ff7d348"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "fab4ce020049724b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "b9be90242be627aa46462143ac85940a906232ebc0b47776b5729475b27d215e"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "fab4ce020049724b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "ece12ea7d87b4a12c4da30faed9eb530b51fc879c271b68ba5304b230cda8e79"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "9126ba83905eb8b4",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "d8dc50b7bb40bbcfc3f3d4f1f8d3a4d17eb1c662d5f759efd18656a482dd2e32"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "9126ba83905eb8b4",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "f426f9307621b3f2d6a8d1669cdb4c19e962b94e34fbb394d4660cbde5921c88"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "deserialization",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "7ac5e21d9d8f4c47",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "1d1efa2fd7323c264290d4d314c957c853e1c7a9c877a54d6f03ab7d2af2ca86"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "deserialization",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "7ac5e21d9d8f4c47",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "b5dc78c7ac0b76803dc98904142c1139083fb9daafb5bff40e7b5c3f14ee03f5"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 5,
|
|
"sink_kind": "pickle.loads",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "0894a7212280bab755cd9d93b1f0ede2c51e4fca76b76e5ed9e24ef8f8cf0b9c"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 8,
|
|
"sink_kind": "User.objects.raw",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "02694b5fb85e9e52bf5eaaab4e0b628f1f44ff3a8d5ad026cc10afdbc4222eaf"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 6,
|
|
"sink_kind": "cursor.execute",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "db9a3e888780501dd3c2c125af2f9d47f68ebf02f0e0db8370b2ea09c6f9d070"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 2,
|
|
"sink_kind": "subprocess.Popen",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "9af96b099dedcc4005e5fcd19ad78f73864e1cfbafbe6953b4edb6260957943d"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 2,
|
|
"sink_kind": "os.system",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "9e7c2a786068a936a6c664cc229d6f39cea1fe57caf0806306f0cfc44515460c"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "07d1dc4d299a7700",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 4,
|
|
"sink_kind": "unserialize",
|
|
"source": "advisory-fixes",
|
|
"status": "path",
|
|
"unit": "0e664e274dfb438d2f721edc81f8469ac48387dbd5c1b43973cd7e651db46db3"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "07d1dc4d299a7700",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 4,
|
|
"sink_kind": "unserialize",
|
|
"source": "advisory-fixes",
|
|
"status": "path",
|
|
"unit": "da55f60378c67e91683b9720f2fa0e6659e28c7b392c050278b40713e47c84a3"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "749eee05a507fe93",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "24fbb1dffcca083382a23e48db232e0d83bbbf2ff2b325f0dc0f4c72dd1a16bc"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "749eee05a507fe93",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "640e1626f8d7d9d5c2478ede48cc7b2780370bda98ae114bae102bba892da90c"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "e36bbaf8f3cfe65c",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "14f7c65fb5621ac5e2068c8695ddbf482103e4320ec3b36886f6e1f08cbc312d"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "e36bbaf8f3cfe65c",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "c96dd379dec2ecfd99051d7a20e6ef5601821f93c46eb34ed087daf5fbed2d47"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "b81c8c63cae892f6",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "5982fe7fa1ea6bfc1c8dcb8c71cd4410de475d25cafa324147649f26a1ae1324"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "b81c8c63cae892f6",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "59916deeb8ba14922eebac61c9eac122e15d1f7590ee3cb1b97f019585fb798f"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "bab3a167ab5ca505",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "5ebea23aee96c80fa0d2d9239964d99614613c4ae36f709811bc19e61ebc720c"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "bab3a167ab5ca505",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "9bfea8d7a6ffa6d79d16f77fc355fc1bb605189513ebad561ee523d577a1498b"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "5a91049be21aa611",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "1ab9936627aa59c3a60ea44074ad44b68aea4f9c04f14c1949dd9c77ca13ff0a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "5a91049be21aa611",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "8df72b9eab3f2fd858c40312d0a806cb67c620bd62873826c8732ba8795d9cfa"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "asked-nothing",
|
|
"unit": "115d87f37bf1d4ab91fa3010303e81b127f84b817268b60b8fd4b9934efeae4f"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "2b8101c89c839614",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "7bb7d858a670fc51f81e08c141c2bca3b8b7524254ab679e33b22ce79536e895"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "c23acf4f38945093",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "82bdc0b6bb0c19e342efa63af0c9014a607461d0682cdd14bd5fea33516fbd50"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "2b8101c89c839614",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "886285661b88f14e00ff8e863b31cf7b7afb303ad4aa4aa13b1cffbf1272d5e0"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "c23acf4f38945093",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "bf74aae5a48156f183426a80cafca6da219ab13b2ae4b40fa88fca75acb72980"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "d7cc37a3a54315cb",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "4aecd43c6e5b81daf7aadd6a6e22f22c17c08b652a2f5121a49320ca1057b186"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "d7cc37a3a54315cb",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "88123ae860be2fdc28fd6a289cf26c3e0af0689f455cf8c15098e5dc76e5c8a8"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "5011004f06f1e217",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "6c48682d1b02ff2559d92346d192cc9dbe6a0bbe2ab2c146653110420105ff1d"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "5011004f06f1e217",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "d3592260108a838246e0cfd5ab6d48bceb0ef870e223565745dcfd68f1826840"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "81caad96b221c2b8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "3c2dc720ed159e55629ba737665d93859def9790427289567a513c83c133e236"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "81caad96b221c2b8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "e8b9595a320776c8e663fd0b168193c1e64e36a9052784d1219f2c4a91d647f2"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "f9b6599018ef3b60",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 12,
|
|
"sink_kind": "send_from_directory",
|
|
"source": "advisory-fixes",
|
|
"status": "path",
|
|
"unit": "7558d6ee39a311c5459e35fe6f7b12917b7f843b21ab1fbb5e485a07f53b7d78"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "f9b6599018ef3b60",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 11,
|
|
"sink_kind": "send_from_directory",
|
|
"source": "advisory-fixes",
|
|
"status": "path",
|
|
"unit": "b1a6cf450a074788ffca2bebd880435abac2c376e89cb328d7a22d277fdccad8"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "eaf2f03db2c502b5",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "38dbfbf745d7cbcc52c6fff83248d84663273fe6a1f1b014eac7776c4bb8f074"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "eaf2f03db2c502b5",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "a84d848ef56b72fc15872d88acaae1743c9cdf88095d13b1869abbec6a0d8a8f"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "7df48bca2c9fabfc",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "7b76ce8f55d61071adb367018cc3e50f04a05d08c7c4919c3806fc1cc8bf41a7"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "7df48bca2c9fabfc",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "c82ea0adc9c8366aa2b77ce73772038676fc37ff50879e873ff397958fdd7ec1"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 4,
|
|
"sink_kind": "text",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "7f02a09b8d8f2321f2cdade74c2fa1d52442e006149a749a8be768daaa62195d"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "9b5e439943ce5c2b04d6201b7a843634aa1b13b726813c23450ff54ce03f3dd6"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "5b836889b4da4921",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "a84c2ce4a4eadf265d4481ad7f6864edf1d7e3084c6ee32cbbfe454bb2946bfe"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "5b836889b4da4921",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "caeed7f097a3311fe2e84efd372fe4b4c140f63a80a9f07ba0b61966dbab15e0"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "ac526f457067fad8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "50d8bafd5189fab0429bd4135d9ed400cc2fc14706226a2de98d65746ebfdcc7"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "ac526f457067fad8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "9532b70b0df76a34170b57c74deafaba54d5d2f16a729c39b0dfd3eb2022d899"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "c97a971a18f85244",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "95c80c503ed43fe9a0370f89ea935d47badee6a9625548b9dca78e04275003dd"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "c97a971a18f85244",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "e9810872beb9c158f54048392142c2f701314f854d6dfc748553ca36ed6c08d0"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "unsupported",
|
|
"unit": "c2a2c2d85114a97f892fb1e5500fbd98622457a8c46451e1f9e958ab08a40318"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 6,
|
|
"sink_kind": "text",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "29d8be8206c88ba7efd86b56a7dcf8b655e33b4a792c2d18b028c92c6252daab"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "6a4e0bd705331747",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "6db80439d89b54f60f836c415dd403fd09d21cf630da81435d4d2f9cef5d883c"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "6a4e0bd705331747",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "bf257e4f0812012be330fe119d07d29253d291161f435262787f491762c6bfb1"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "f96f0fb245948915",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "0954e6931373915c204b9ec8d2b8ae6297a95667bfd41aadf9035625ad93967f"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "f96f0fb245948915",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "5e09cdae2504e834d591b6f92a808427f07550364b5419899f7e6f76084fc377"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "bf11f138fe39675e",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "56f0d0b156992af56141d6368fdb0c5376fc7a44a03991d754f97202b9d77008"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "bf11f138fe39675e",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "8271af5017894167556893da2070188060d06eebc87f27db45c46234c359631d"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "9d937c2dffb4aadc",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "01ac12bb06e660d0aeef8b1e26dddc5c99d52cc333f7af6d1981eee2818e64fd"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "9d937c2dffb4aadc",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "9612edf0f927048335e83e9925f01be9aea9b772bdbdc568ad9cc0a17055662a"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "d4f648048e45f2ea",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "08807c8110b8c1b8635a6883c229fb91f2b9566db8b6c252448a0db7b2ddd47e"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "d4f648048e45f2ea",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "10869c931053bf77ecaa98a47f56dea27d643d1abed2a4758bcf48a78547ccc9"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "662e1f36c230d7f1",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "unsupported",
|
|
"unit": "0b73332b25413902c26d5b5dee6767465eed99ff71a814582988ffe0d8ec1a30"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "asked-nothing",
|
|
"unit": "8c8e46d0c7d361b784baff9d70f38744b2805ef1ee0aaacaa616bc20a2c6f32d"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "unsupported",
|
|
"unit": "aca938682c196fd4c85b39b89eeedb97c35f6a5a017651fe9c03c5b727cab7ea"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "asked-nothing",
|
|
"unit": "cec00d1509a129364da6ab8537fb3f433fd847e26d073c90311ccdaf7a1b39e7"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "662e1f36c230d7f1",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "unsupported",
|
|
"unit": "e0f58a7ac5627de3e7b6cfe5add41d18b0f64b998c1cc788d42eb2cdbbc3fe41"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "2c251a645094f389",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "0d41cc634771048f72d07c4aa9feaed669d0bfe3844d61dcdc525a0f899617e2"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "2c251a645094f389",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "ca8288d0b8b94dc6b7e4c681936ea610d295fe949cba5f64f09b6de134ef9875"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "2ac5ec5011615c9b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "2f427f403af3cb58d776437736c2389805543413fdb91aad98979158c6d00de3"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "2ac5ec5011615c9b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "cddc8c5bed0841b80e7b20d0b378e858f8e4ac37fd7b890ce76611d989857f92"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "0c7830c2912ff285855d8a3c8e9b47db4ca4af840baa66d4b5d3f4422f46f95d"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 15,
|
|
"sink_kind": "system",
|
|
"source": "adjudications",
|
|
"status": "path",
|
|
"unit": "5383a8c2a78fabd3d17a5b3021125953b5ebbee61f8900c30d016c56b1a3bad6"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "360d8bfd2f116e98",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "7c1989a4ec3622bdaebcf1161de850f22cfed041cb38830ca1ded4fa99d40466"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "ec8c706cc2b20f36",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "848688dcd0fe8d46e6762cc8aee1d82e8fad8a2a044c94b547aea11049c85bfc"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "ec8c706cc2b20f36",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "983cc9231f91baee4e2d626193f3b88aa5b09907f6faab870949bdc9c336b816"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "e4ad86416d5c6668",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "98ff1dff2afe80709b8e61a9c95cfeea12b2110c13b7120478268b4762e2c992"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "360d8bfd2f116e98",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "a1a825d23e34757c8e961e43ae791253e62682e130acdb846b58118588006a98"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "asked-nothing",
|
|
"unit": "a7fa4207508b3989baabc7a1f0ff2ea5229b366c1cb106e7fc945134b8b106c8"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "e4ad86416d5c6668",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "ef5c53f3114d0057e694df13dc07cbcb532c3b0d59150eda269b87b021d7a6e8"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "9ae575048504c690",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 3,
|
|
"sink_kind": "header",
|
|
"source": "advisory-fixes",
|
|
"status": "path",
|
|
"unit": "176acf077fd58c3e6f940753179ffa3e8316661f355d94acb5e0345b51925ca4"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "9ae575048504c690",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 3,
|
|
"sink_kind": "header",
|
|
"source": "advisory-fixes",
|
|
"status": "path",
|
|
"unit": "228b34ebc2090b5239c7821d28366ddc663e7118d015a79b45dca6618d5490fb"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "d6edb5496b3fdba2",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "9acb8017ebadc480515a664181c427f37359edcc1dc6f344f368a87e0c191b3f"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "d6edb5496b3fdba2",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "c1bfe63148bc700c812fde95ad9f83d456e4fa04e10c6f5394072a08f73174c6"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "27e1c8e8ee93a892",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "47fb89b132d6de48674c37965579e727d922bef1796db70f8b9f862ac47cb9a5"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "27e1c8e8ee93a892",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "79887f0ca8b05d6599d55167d8a9faf67bdb2254d17c143141da44971077002d"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "a3fdf9ce3441ec86",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "653236018929ab8534c27704a20ec5d358047bc66e451620d2ac32081c91d333"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "a3fdf9ce3441ec86",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "b70ca2c43f5929e7b885bd728349e721fd85d7605e2f722a7e8cfe0f0d477b0c"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "92400e83890882a66ffdea1a405e2354a195442e176d85fb707b0442c44d45ca"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "f9dcf3a0fb0f0a14",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "7ca6dd4f673976b000a657f885af3463740419ce41e14f972af0c5483cb75a7d"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "f9dcf3a0fb0f0a14",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "86c1db3a5e9f843d6546146449171e0378ac61d6c8f44c6dd72fd379cdbb188a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "3e71f79348a6b770",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "200250ebceadde4cbdfec2802a4f9fbfa220dbd7fa4c2dd5ed717fb1f3ea7447"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "3e71f79348a6b770",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "b9faa5007c8cbb67ada3f1f026ca59e0ace6fbb9c3d1f1369d4521a7e323e7da"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "8972a0f56ee57477",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "6b987df2960828dcb1b2b3f190a903a40361d58117d63321d671aecc6c2cb570"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "8972a0f56ee57477",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "ca3fa87dd37435c01a7121119912c1a1e261259c11805c0b66e7d4b315640945"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "6144baeb491f4a56",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "f5c22ce104e9593e5272b6e8b3c6f3b61fa4578552ccea80e6021ee90bdb3ffc"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "6144baeb491f4a56",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "f687e7e95dbe47f602a1e0002a44f94fd48e5b1c33f77ecebc6c2d814fcbf450"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "2ef4471c66e5e4ab",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "ad7c8e368fe1699a044e058d5c10b41bd9fc0f91c3f3c384c5dac40af39e71f6"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "2ef4471c66e5e4ab",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "d888baf7194bbe7158cb3932f58b47a9a235351d388d10df82a130ddd54c2d46"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "5628c54152216646",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "47d081c9f6060218967902f694e61c88f64f57c65bec6fc3073afeb0b77d117c"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "5628c54152216646",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "e1297bccf9c3606e0b41d762a69ff5d0a33ae4f7f1506071af6b9cb4a177ff56"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "e52aa814c36ace1f",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "failed",
|
|
"unit": "2d6d74364f1982e91f27f1c995b8699df1fc8f8dce6e1e2cf274bf01b6e9494e"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "e52aa814c36ace1f",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "failed",
|
|
"unit": "4727471fea2cf0a92d43b4b1503f1339a7dde87f872ba8064dacbf855c57705b"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "a07929b3fc1cfc28",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "0637029194bd7378237b4dc944dc5cf9f2b63db9796f27410a74a9d567b66dc4"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "a07929b3fc1cfc28",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "ffd286c8588a77929639a89e4a742e15306b642af14aa906c721165df804ccd3"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "6548e1527e82bd99",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "5542613f6d2eb9421b8213b8bb864894f0ecf9fe64945681019230ef0d75cfaa"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "asked-nothing",
|
|
"unit": "6c2adee34e9e8384535ec1073eda60e2ab528ac77c36747802c303e1f5e9ffe8"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "7ce70e9b20107cc7ebb87d173da765fc53ffd268e521749a06a9a1f38d746845"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "6548e1527e82bd99",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "c3e54975464323e58ec96ee4d83e7bc08baf94553d553a8dc3fb28cd9c70ff21"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "asked-nothing",
|
|
"unit": "d3173c1e43eb6402a71ea2dec1592913dc078a2194ba1c1d509ab129a3180f6f"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "0924befc49c7bb18",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "e7e4872db40f0420547ed622fbdd7a072b64a7ba466d1ccfff68e691cee6ad99"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "0924befc49c7bb18",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "f7d95f43fb2df20ebc4c37fceabdd00ffd8159f404ca384481f1764252382388"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "d4ee6cfeba71e398",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "e79582de3031bada2617a0667ef7ff5cd7183d4aa885f55a665cf0ec88d17624"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "d4ee6cfeba71e398",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "fef35272853e7f3692efd54daa01c12862953352fa6ccbbb5e3f7fea70c63d78"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "772e18821701d60f",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "89a0496c7663bbfd67d660c9f481c12420da2dd1bdb29dc079735ee7a0a49626"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "772e18821701d60f",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "d3241ceaa50a7d23a4650e6a2a55372b08ec96b35b0bede844bc40e16e818ebc"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "250de1302c7e541d",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "5d03535f2df2acdbc319d9e6b20da65d51f3e810b80f3c8f89b5074a971a3f1c"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "250de1302c7e541d",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "78f977cfc096e34b4eada7f798ad2973ef45728d0d01bfab6ac9e2a3257827ef"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "c10bfb006f2da55a",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "1ea4b86dbd84581b1d7b7cabbab9f28c8b213416a60778879666ff42d23fd7f1"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "c10bfb006f2da55a",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "7647021f742da24c660b2d407886771786e957076c4cf336def560a570dd8778"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "a73421efb106ab0a",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "1f6f207a758582de0c0e6b331b19fe119abe18727d45ccbbe09aabb795f3a292"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "a73421efb106ab0a",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "32fbdad39eaf5177db4ad0a11d53e785b30bc7b2376ad9d460f29a08429bd0c7"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "0458e3fd444409f9",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "b521216bb4106738b3571ad3902d08f6230aabd88cf3a8f9f26f1c8ec01304cb"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "0458e3fd444409f9",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "c87d2871907798fa2e73d31381e9d63089b0388033f096d247373fec07c2cb36"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "6bdccabcf5b9fdc9",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "3d6ddca5eb264d88411b86755909f1d2abddd09c129cabd54c96ff26b4105316"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "6bdccabcf5b9fdc9",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "e055b898802279bc63204cc601e29f7f1018efad7228cab0cce00ea5866ecc7b"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "91bc832e70680c92",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "1060c63ff0fae3af567448f3d4c60d9c159b61ccc358964243eb152a9ac38865"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "91bc832e70680c92",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "369dffd1e730d7997813adfbebf1481cc68987cae0d0085e47b91a26d5330cf8"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "137fb3496a3a75f4",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "7e8b6c484999229b23d50d9f5a4c4c5b2a8d954a5d64230981b1c6705b760fbf"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "137fb3496a3a75f4",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "c461154e4dbd74e35a4ed2e85de7b076f0582beeec459be28104c38f616c7565"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "a4144258dffb3b8d",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "7ab301e1614979f44c353e665540582493f78ef4bfc41209562c19b900710f8c"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "a4144258dffb3b8d",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "ea95e8387dff32ded9dc7b04c11a76a545b4e2ea6db0076b9b13971a59904bb3"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "deserialization",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "858330e01d3cf9bb",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "033cda2b7cffa5a5fa6abf0b7f2cd27ba78d916eb3cab8c79decccd8776f4a3f"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "deserialization",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "858330e01d3cf9bb",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "d44c4555a5ae19aa17b468ec5cff56b33a0b221df52e04d8abcb656399499dee"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "c6a49339d4f0c798",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "dc2e4cd5bd963643702d2b832ae170dd25744162e4076e36687256a09e69d089"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "c6a49339d4f0c798",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "f83cd137b85e651ca5299c5a42176b797ed4964cbef31418c96d63c52fdb65f5"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "4b6526d132e9ac86",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "8ec3596444f3045684242840e9a1df19879383f2733aca8f8af6f6cf8a96d388"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "4b6526d132e9ac86",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "f3d39162fa14446b207aabe7bf3c913dc32a9637ac83352ea5cb2fdbb43720a8"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "80abf1d5c4a3f6a5",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "3df3c6d9941352dd2861427da56b94ee335f308d0a2a27c6f745aef60349c80f"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "80abf1d5c4a3f6a5",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "4fde61a570906e658d9b14db0e5d1f5acc0c7489951421bff2afde25033ff73c"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "5ec37c0f475001ca",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "5d8175fb21a4649bdc8730358e9b87adb90b2aafc4da5fee203829663e4f46a0"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "5ec37c0f475001ca",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "af845e9e332555096dd350401977b2f07015433f3db8a040891d9470f3f9e355"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "68d44ef338ef3470",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "3020ac6c3186d7974953b1c4da65b80141b81aca5203436ae7a2d7aca0870944"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "68d44ef338ef3470",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "8fdb85a6bfec89f0715ea81e83fd91616f92c59954c092e79272154f202b7488"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "c74525e844650de2",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "2e444ad34ee5f47d73f0cfad0a10c70363337b4ddf9067ecd1b8072d8232652c"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "c74525e844650de2",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "c492d325f5ff82b5f817aa4be1440cec8595054dd0719e07a58ac5501b2ae7eb"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "111a5a80a3abc2c9",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "c7ae403742450deb2bd051ad1231121d2117ba56fa72a038c82d58d207cb3870"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "111a5a80a3abc2c9",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "debe34831afca6f8220b9952036a2d4570babdb5e321a2f8dbaec661a016bd50"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "unsupported",
|
|
"unit": "9950b85412b021ebabb11eea4c490a660ad380d14c673a87c3fb568ba4bcfac9"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "656df5ff8e69dcdb1f9ba1ed52d734966eb29773bc745587483a355743b8eb5a"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "unsupported",
|
|
"unit": "91652a4e776fbce70cde9e4a99c6da5e17da7f8d6d0404867c61eec04161b6cf"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "e53bb3a217dc4737e8dd03671de4f6a895599024070a985a268c65a034295e7c"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 9,
|
|
"sink_kind": "pickle.loads",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "3d7aba22444811a337abcad0e4fc62990bb704d3a10e72d893342fa94699026b"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 6,
|
|
"sink_kind": "HttpResponse",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "5f18a3026a51f7140b7aaa3aa8563e8b6fdda6065d95e19e25b1dac4b9ce0e00"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 9,
|
|
"sink_kind": "pickle.loads",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "0fccc306ce80cb4cbfdcde0a2e56d637bcefa9dd30423d6c54a4f77860afe740"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "1e2eaa45661345f1b6759d968d7696dd0d96d6fba1350a00e4d0a2ebaaa2e391"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "8b9a8ff0e32a327df75eb8a1811464d5f34690079d5930139dd917063bdd2809"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "245d0e939b7c1ccf098c798492009e3a73ea17400fa613dd865cd369d2e7f383"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "unsupported",
|
|
"unit": "653c48df493f31c2d01c973d1e379a180fbe6a6edc83a500bc62509112175f41"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "3719fe21d45b50b35458bcd2e263e4baee67adbd3c98adf0eaab6bc6183c5651"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "1209a6cc8c1548ed83d4a9a09d6a27f706a23e69cf0c261fc5e3a27536a83306"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "362c90495dc468bb732c71f62d71ec308854161de31ad18d2a870056d947ddb6"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "unsupported",
|
|
"unit": "b52e53fec9707b2b442c4dc7a41d376cf76946d2c45c2eb600c9477fc6baebaa"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "477e3b90b92e622888dbe0e9d3a23b31271ddfa3104a5ab326eb9e9e765aa01d"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 6,
|
|
"sink_kind": "HttpResponse",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "660c63c4a73bfe64088ae3249e40d9c5d69a6f8a505ff671217c5708a345c5b0"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 5,
|
|
"sink_kind": "redirect",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "4d60c386c801bedb61c1461fced29a3cfb50b09d6435e8617c60398343719d93"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 9,
|
|
"sink_kind": "pickle.loads",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "f1fddcc1354a29bef55610ee2b73eaa440192f2f18a0d22d08057b9d1e1b61b8"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "6d9886c38221b2f9aacf83749218ac5ebc354a6fcc4170e6c78bedb92b88296a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 9,
|
|
"sink_kind": "pickle.loads",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "5550fec4a81c4c9cb22d7312d8a63e1fb2b03c4aed0c1f316d44c1eb27511bac"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 5,
|
|
"sink_kind": "redirect",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "8ff87dd04140f0137ea1891f220b1276156ce10a58be5a49d0c8e07be531ffb2"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "unsupported",
|
|
"unit": "f24b19cc0f67247eccb274521a62741fef8f4729f0ddc9b5c1fa561a4947182a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "83523c9d83380d4cdae593a593d361493e00d18e61740f84e762aad41b991e18"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 9,
|
|
"sink_kind": "pickle.loads",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "c6c9bde6630678377d250701073c5c223c7892e6ff8f2f8e0293dea22c5b5e7e"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 6,
|
|
"sink_kind": "HttpResponse",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "b9b15958973c83f8d7b58372ab5ba58eb191c400125579d5ae8c5b52d5d1368e"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "b95ec12e4e126ad558e944e2c260116ed6a63f5f3ab97fb5cbcdca75a931ad73"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "38a5545ac9ef67e15db720d1396a2d5915f9d06d6f4772012e5bc95f33770376"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "unsupported",
|
|
"unit": "c8bbe9be91c976be97b7ca387048a7d4537d9f6fcc6cbad0a541d1080629d5a6"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "ffacd53f1bd75155e63b318fb9cba27ec03e754841e1eb39d1d4fa0b2c3dfca2"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 6,
|
|
"sink_kind": "HttpResponse",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "8fd920175fc43b91b4397acffacb10ab8f7fd0ee38bcf2d2f3ed06a3fad0dfe9"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 5,
|
|
"sink_kind": "redirect",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "86c9598ebe3dcda261a69ae545513f6ce73101f3980066e4506ece99bebea84f"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 9,
|
|
"sink_kind": "pickle.loads",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "e5190fcc57505116f79a31c51aed69f8a1eea13a8ae3e7265f44c72418277ef9"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 4,
|
|
"sink_kind": "redirect",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "2b807ff54e6c47e941124c16d0c27c691cef54f2203060a3a6ce812d478c5261"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 9,
|
|
"sink_kind": "pickle.loads",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "401aefb4b4791301ace2d770d321c6b26743b0aab7b96f8b410254c704be6d2e"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 5,
|
|
"sink_kind": "redirect",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "22d186c93498e21418b6c1d0547a73374b13041d8afc89a80d9540fa658b6b42"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "dbfb6df14fe37f8c0efda5f16643297fb0550dfc5ad5805d4e4b844d967773b2"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "f0da8cfe4ac1e586aa7903d72e67b44500bbd5306d72b4b342d10613efc69222"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "2b8fd73943f456da266434470333a7775f55d9a41953e97a000fdaa3257b6a30"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 9,
|
|
"sink_kind": "pickle.loads",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "a612091f452e60f28f44eefec641175170dc5db04456a39a099cbb13c50b4d2c"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 4,
|
|
"sink_kind": "redirect",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "4c6600facd83bbf234a32d9e28ac494fb516df6e3d9e9dc28d720ff35252d067"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 9,
|
|
"sink_kind": "pickle.loads",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "fb0ea8cab8c9430d22d1b0fdd65a69146fa95fbff94e720b4861b96538d992c6"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 5,
|
|
"sink_kind": "redirect",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "e81f91a56058ac1473579767abea57064c53d7d007797a854314814e3c35ee74"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "unsupported",
|
|
"unit": "5851ecd96a449f98b05f243bfda0a7cf3af8612b27f53c414ae1f4ea67242a7f"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "328621ef2a94632e5d37ea6267d17b766233384cde35c07e29a4eb672d40ba28"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 6,
|
|
"sink_kind": "HttpResponse",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "04b2eae2128608dad460ba8275142a41a44e32c4243a29e2a6fb2c9ebf3d8f1a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 5,
|
|
"sink_kind": "redirect",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "33337002ff5f5a189610b042522ceea254c9d107c1f24771b4f616a0f96f636e"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 9,
|
|
"sink_kind": "pickle.loads",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "02c09a783cbf058856fc2b448406f3ffa6fbfbacf9b70f4e5e22fd741a5c7699"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 4,
|
|
"sink_kind": "redirect",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "956260164cb21a47c499e5598491031ef303418943f5096f225a87162b588574"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 9,
|
|
"sink_kind": "pickle.loads",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "8bd8c5aed69eae3019cc2d3654b36bdf2b31435e6a020a389cd103696a2f874c"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 5,
|
|
"sink_kind": "redirect",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "1d8397ef4a9fde7b48e2e1e871bba0f960a802cd7823ecfc10e9dfaddb955ccc"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "c9db92476032eb4296b950a1eff8fa4aaa26f11542a01a5cf10c7b2e32dc6433"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "d3e0d0f9b0f4b723080989b5486395cda0a5b186a674022ea70e7fa7ab561323"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 9,
|
|
"sink_kind": "pickle.loads",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "44ff3b3e61c02744830c4abea872821ca7e0f94950c082740c5c48ef13604e94"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "4103e979a99233c3e71fdfe9f1cdcbab34a2c60b5351b75c5ff5dfc287b962d0"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "f73ecbfda2bcadef",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "53e596dabf90b2992d5b3e50394791859b393beedc8f84e00484e37498627ff0"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "f73ecbfda2bcadef",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "6daaccf64706e876dd505c65a62aeacc1357f3470a5cef7b1ac874032a6fcf99"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "6768bfae38c6859d",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "f376519889a00950f5af67eb15c639306ea70da7235d3be4a94dbc19cb096cf5"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "6768bfae38c6859d",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "f3fea4e334f49ef6fe6b17121fef553eb8e33a9ffa13e6d6cbc4c448da996a7c"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "d670253fa209671c",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "1aeebe2e440bdd70525c31f93180f33be93f820db5ba46a2e59c371ef83ee794"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "d670253fa209671c",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "b11c8a8a24d3809c0507228568fe7cc05ca0a22ed28cb19019adb13cb619d63f"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "33260f3e6c8ea6d0",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "7ca409c7dbc1c38ff005624e212efc6d424cb421e27b482dc8dc0d6881f4c11a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "33260f3e6c8ea6d0",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "fc364d7ed77c7c0508da00e5ba847ec0792f3bc373d8b4297747189ef42d1ae0"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "32ef8148a2c08f58",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "2fb2c9314a483787168a450f50430721f9527f913aa0eae07298d5334cf4f137"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "32ef8148a2c08f58",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "78dd291bb2ef83ea3a87948c0ac0027c6d667b9044093e766e2bc91bebe83936"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "54586b5a24655adf",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "2ece75a0240ed36a811c381841aa6d440af2b9774ddacb1d7a31a67ec267b0b2"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "54586b5a24655adf",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "e60f6b788a196db9bb671d621189b79a5526302a6d09c2396d67fbe0b9ab3c24"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "474f96e2a9b3d202",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "4a5e8e8ebd7ecb0e252280af0cb38a1d7794757728b912525322ac26df5ee223"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "474f96e2a9b3d202",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "6a888540443061d3b37c06f0cebc70cffdfa70e0aa940626e86cbff9829310fe"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "a09692dc94164db8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 10,
|
|
"sink_kind": "unserialize",
|
|
"source": "advisory-fixes-2",
|
|
"status": "path",
|
|
"unit": "139cf84e79c4efd026a064b2ca0a3d7ffff87b54eae1275a07c0d69ef4981e27"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "a09692dc94164db8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 10,
|
|
"sink_kind": "unserialize",
|
|
"source": "advisory-fixes-2",
|
|
"status": "path",
|
|
"unit": "828e88b656245a1d0865c79b2ed023a49e78607a4ac81d70ccd3690f4419d2d1"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "6cce78d7569ad8db7ca0a61d7078198f666502d26ea6c0afb03173a8a4bb16ef"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "82047c0513e43a83",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "6d2dbed1ab1c9d8ac259dd4227be69641fa59d52e816a8dc547ade01d0b9b0c4"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "98ee23cd6bd31cd3",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "ab4bb39be535d70cd95e9035bb958bfc7418576a6ff40a47551894dd140317bb"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "98ee23cd6bd31cd3",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "b70068cbc646bd01d3e10986e002f648a74e9d798900dc59cf3039b749c95c18"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "ff168d95d8d9496e",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "c6ec9478c125ed780d7013c2807f2cec1878f44253667dfed319c28cbfd17d4d"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "b1bfef46dcd3b9a5",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "cd4d095d8380a2fb7ca02fc6abdbae5249cc06455db2929875533f4aa8b886dc"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "82047c0513e43a83",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "d1bade217be8d345cf5d0f0442ee31924187acbb98779dada95274a77462f696"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "ff168d95d8d9496e",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "d561db250b892b91feed7ae877900e1e25963444f73c7699576e010f06da73cf"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "b1bfef46dcd3b9a5",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "ed78fd5a7ab30bcd6e8ddd27c706a19cfd89750de4fbf81c0b567946eb94db83"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "25f75d77a669b54e",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "0f2825568461562f2a915a4f16ef8a4931290fd20a9801470aeb12677e66e3f1"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "25f75d77a669b54e",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "bf22bb44bcff4a5baf5d550c9d3e83e5f3ca607475fb51deaf4fb6fccff3d73a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "47069df6bfb3dc00",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "444c1f41fc23ad656a8bf98dae58b36d0f1daa214ab030682f26111dd389e58d"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "47069df6bfb3dc00",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "c0c8b5cca070673ea4b4bb8f08dfff86b7781780e300720c4051aded035052fe"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "cd80750447cf7af67ad809279718d98106c71705fef9ff7254728bfff4ece5b1"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 9,
|
|
"sink_kind": "open",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "2ce605ab5ce7ad3a1fb983cd6bddf3924e5da3010d2252a0a4640aab4e5921a0"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "deserialization",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "b0a899116dc36b85",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "510ad48af03ba4a1a2a06dd254b135311dddb62d9fe5a2e8e8b12627586e6b13"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "deserialization",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "b0a899116dc36b85",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "b414718a8a5f79739b88db24da6ad9da8e48bcb6b5e2dc99158848cdaa226767"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "8e22ee30441b20484090659b0c97423c711f5d10219041bf3a399623fc056a07"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 3,
|
|
"sink_kind": "session.execute",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "0f9070df9dc334f981cb01008c260b8bff78dbdeb48ce672830ed95caa8406fb"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 6,
|
|
"sink_kind": "text",
|
|
"source": "vibe-py",
|
|
"status": "path",
|
|
"unit": "5e352f797b1422b0df477bce4730a9ce33cbd0837c3d63da94e4d8801a9a4b64"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "dadccb128ac0e120",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "unsupported",
|
|
"unit": "505097494da5939404ad7d5b4af2b1c4a10efe94048084492d6ce60ebaa04c97"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "dadccb128ac0e120",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "unsupported",
|
|
"unit": "84ff8ca2d98a1b5d1ca4bfaabe7d19e03a396042b228c8d18d1185a178389702"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "unsupported",
|
|
"unit": "91e261c54bd2c3c3a9ac04e48894ecabaca5b13e7db4fbd5578f9d266098117a"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "unsupported",
|
|
"unit": "a308dfd59bc398824e2454bf6cf6cfd5b7880e5b948a82424f14753d2b6fcdbe"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "unsupported",
|
|
"unit": "ba24eb554458bc97314ed561a7b2f4a4e643dde1205c32de4c8fcdd8c46e575b"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "24d8f1840b67fbe5",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "7ffa4a229a62266788fbf64890f81f20358b3eb8c35d3ab87d0c339d5bb4b507"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "24d8f1840b67fbe5",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "d19493ed7941e1cd25a76dc50504d97398770d07ebc302dd66d83441e946c468"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "9f8a60eb48d74bc8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "80fce34f2377731e3de4355c7ea33bb20fc2fc00a5f388565b23018c7a3ed008"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "9f8a60eb48d74bc8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "b68e62722a327c9d5ce6774eb96527451729410768efc0b5c7ba604ec468052d"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "2c857235d0764986",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "33bdfe911cd1b512e5994ee7a3e3ab2ad1f302cab29df3b011c0d825c23536a3"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "2c857235d0764986",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "b5efdcb84a057f3cd9fd3a30a32239dc06c13536a4e84a66c7a17cb372050c97"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "9e84429d629c0b6b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "774cfdecac67499bb35a872931d4698d1b92ebeeb42d21790469e418889954e5"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "9e84429d629c0b6b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "a6c5c15ca1815f83dfb47428c4a8afd4e60fa1c027b9f33c668cb9a0d77c18af"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "8e6b4b4e28981590",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "3cce3e8f9ff3f1d261f9b96c844c1e4da07bae72d5393897b3a929be25372edc"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "8e6b4b4e28981590",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "b105689ac24ed334294c434a77bb6d56d5d598830ffe8a5d60ab3be5290b47ad"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "0a36cd5177f3b2c20b433db6bfffe5ec5b7e74cacc34a86ac581f7a0a559432a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "e7fc97d83013c9ff",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "5ab444e64297fc19065478104c7ebdabe23cc415f22adafd0cf82c98e4c5cae3"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "e7fc97d83013c9ff",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "6b462ea30c1afda572600a10324249223932d36a032eacafac8c837bccbdce87"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "84d6a4202a082e0d",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "8175082f40d8d61d44b54579c84a808e25b89110be5d8fd82feedf7dd5e0d5ab"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "8abefca43ee4ae2c797033da31f85c17bfa7be6b35413d70b0216415c5db9a09"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "91d213946859f33d3f243c43aa8285cc6e8ecb3db1de938f32af775a70607f8e"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "a244d9f010ddb43a09e82363dfabb0e406d411fb5de08ab7d6c9ee367f2a15c3"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "d27d174d6e8e5f1682a1c42723705e89f0d18c95ecedd0567e313daa9a0aae44"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "84d6a4202a082e0d",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "asked-nothing",
|
|
"unit": "f45608ed47fa11ca25093641f6021ec06076c18676abac9b809f31b3b7713de8"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "55d1ce4f29dd1583",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "a877ce3462da316bcdd82ce9db1d9887e887eaa83157922edb1663413edae1d6"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "55d1ce4f29dd1583",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "aee67be0ba31f99c7a24faa1bad6178c6d37361a308cf5aa10138e6ce4bbcfeb"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "16e529fe8c5486b2",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "1d21acd0171726775d3da4589b660645fcd43cc026042a2b27e0e0e8374eceb7"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "16e529fe8c5486b2",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "f8e004b67ac98dc3392ea4115051e6bd10ce22eb638a762f0f16e1d4200bf129"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "0b34438e6e0ba63d",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "bf2608b00f0f784cc42e4c607f0b1ef50903283779bfb2eec91d2ec187856d14"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "0b34438e6e0ba63d",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "c5104cbf723fa0d55675963d8aa6802780ce3d274efe0012290fc49164c3fcc4"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "b0210cd069757ad2",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "d1d40c8b48d039c1999ff957a015273c30652ca0c45c4eb088052991a2a92f28"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "b0210cd069757ad2",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "e2e804652a885f640ebf341627f3279d6c965b47ee2ce792e55045ab4d1e1dee"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "ef603436079b0005",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "77f843b5044bb5da935df4b2620bf2abe9e7dceb3147439e883927112eaec22f"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "ef603436079b0005",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "f2ce95f0e44e73986784b63a702ffa4035c423056cac3667a63140a7e8d795c2"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "a023056d2704c727",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "6028fe87bea019646fff2b31c1b2d7bd0a95eb9214fe437e2008bc5d2dfabb7d"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "a023056d2704c727",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "dd93069189c5f242db611e4bfba4341c22f283b65af666fc31343854358de87e"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "abc80e34d5f72367",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "87d4a5b81bbfdd9628109a5f820895b6fddb00eb96b0f7bbe30a8d640457bcc2"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "abc80e34d5f72367",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "b171c77b52637bc84c487d7f8bce9a54229f9dbd6605e5089e1e88943ced989c"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "deserialization",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "1945f28a3fc5bd55",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "64c0b7ccad09192eeaf590befe0de0087d5b48a65a4f6cef41415f3f54a8f536"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "deserialization",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "1945f28a3fc5bd55",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "b55cd6759d4b7861e589052aa534bd0554586db46a329ed3beed7244d579e8c4"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "1c9e47835232f644",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc",
|
|
"status": "unsupported",
|
|
"unit": "90e220d3540b88dd9efc8e66c8ab519d4cc78805f16bed585b795c78cfbb4d58"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "1c9e47835232f644",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc",
|
|
"status": "unsupported",
|
|
"unit": "b5a185b05235f70f6cf27e2adba919f4d8393dbdf2d99de095548a21946aeaf3"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "9b2b34cf62a76ea3",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "91a3984e47f17512db8523e04f863525c67db18631d8f11776cf61ca7221c91b"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "9b2b34cf62a76ea3",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "d91f1e14282a0c3c8da57c6935a1625e881374bd205b5baa9e4a341d9109ae21"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "a20cdf9dd208720d",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "18a26df68e4b81d411cfbcc8155a7e6f382753d6e1ad95eece7ed24fa8c44324"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "a20cdf9dd208720d",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "e6fb74441fb585d7ef5855317fba795ef0f0a0e6eae9970a49556ce3070c3254"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "b2e833b60a0fa396",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "08ccacb7434e9f8b8b05c7bb0996be0609e34860d8fc418db329aaf8d7910f2f"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "b2e833b60a0fa396",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "2ca7f80f0badc049ce725718e49bd60da72d316589399126a5f4c5308cf83868"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "d6930fe7e752b7ec",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "06f0341dfbf1aa9504083737df5d9be3cedfd4e3a198799d8075a29990776800"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "d6930fe7e752b7ec",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "30e2cd8bd381d7568b78eaf982f562d278a6a8d942d5282466532c1441bdf0ad"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "e9c34a6a4bf2d333",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "0ae20c7334fb27889ef8551f34c65a847dffd6b37f84f722f7e8ed64fd82e95b"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "e9c34a6a4bf2d333",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "59ab1924056704605b22b7c8360f40f745e7f488450be3647a632bf9a3b22699"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "053a9e02feda3960",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "34e18fe343b5c25ec582fc05ab091fd9ba160f658ba7678066c56db4991a951b"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "053a9e02feda3960",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "8fcb18a2a8654b6594cb2ec078e2a018d20f73d2b69a2e625338ffa80b3f72c3"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "2d482951d7380c4f",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "5c1a721da6f85d1d5dfc8cbe5e9809b093a09c059e5abeebed2cbbee55fbd498"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "2d482951d7380c4f",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "6cabd1c4b5aa94cafdd07c0c6a3f9abfdc03761ddc5b0a2bebc72a508d020b8b"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "asked-nothing",
|
|
"unit": "2300c097374b9098671dcbcd42d02d08172e0f3064a8323223d0fe79a6106aab"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "0664148b0b192456",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "failed",
|
|
"unit": "d702617aaf4d19811baaa18386a3c8b0eb35cd3fd72e8d90611d34850e990858"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "0664148b0b192456",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "f5ed13d811c5b16d46cbd4a3b9edb8f7d2db49acbd49d95f39f33eaab38f58f5"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "fd5781ba332ab81e",
|
|
"sanitized": 1,
|
|
"shortest_path_steps": 7,
|
|
"sink_kind": "popen",
|
|
"source": "advisory-fixes-2",
|
|
"status": "path",
|
|
"unit": "59eca69b2bd99ba282eb8056d7bc789e9c691eebf62a4b42594e34f5516833ae"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "fd5781ba332ab81e",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 6,
|
|
"sink_kind": "popen",
|
|
"source": "advisory-fixes-2",
|
|
"status": "path",
|
|
"unit": "7a7d774a6de9e4a95fe97fff822652f1f1383922f2f0a4dcb12b8e964ca330f5"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "366dc5ddcfe598dd",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "0053d866cec1e99f8a4a8754cf8ece3c46df16e002c86703c68937d5f3a09b08"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "366dc5ddcfe598dd",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "027dbc5b9245fb804a1e2ba4445b8afa180aa2c2b3293db107ffe0ca4900ebb4"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "d0a34bf90e99e794",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "4efbb75cc4105149522d2b2220987fd4373a8ef645c2c544546da540f14109eb"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "d0a34bf90e99e794",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "fd790f533103fd1a5646a9374ae895cf6e36d578fc747db2b0d0249a54a85e9f"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "a697aa902d141a6a",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "341e8fbb46f00167a32a2d653ba09a205794084eff65afddb70f9cfff42d697e"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "a697aa902d141a6a",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "e29414494b275afc15f3a028f62402161df7f6da5123c302149e23845177f7f6"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "8c1fc8417190a134",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "2125fb101d6108627e77f61c05cadddddfebd1cddce0e66376d9b822a2eecbb4"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "8c1fc8417190a134",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "ae7bbc58026fb71f91b477946a27bbe3599be90501da9237755f3cf0fb289794"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "1972ea9f72b178b6",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "3ddabb356d78e7c65ec8f88b6da8e4fcabc055ae73f2f6d92c50efddc5d4fcbe"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "1972ea9f72b178b6",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "6875dd5e9c0ff8a1b693d29a109cb2e62e6ff4081df40868aca70e4770476757"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "2b007a2377d633dd",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "bdd71a783efb4eda9a82afbd30a16bd7608153830dbc599e65c453c18d1644b2"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "2b007a2377d633dd",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "f398ef33900624219e59de08e1cc101c43082a81c37d6d03a916cc220727ca67"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "04aa777130c02a06",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "16aa43c87956c44a4b115245140eefed704095d37cec0cc6410377403cd2fa7a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 12,
|
|
"sink_kind": "session.exec",
|
|
"source": "adjudications",
|
|
"status": "path",
|
|
"unit": "23744137e0485a36f686f5f1b5666780fbed3ca522e8c6d35687a391ef504498"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "67565d99fe28c68f",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "2692316792e6f02fb51578cf30d71bba6c73bf5420c36f709681c8eaa69807d4"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 3,
|
|
"sink_kind": "session.exec",
|
|
"source": "adjudications",
|
|
"status": "path",
|
|
"unit": "2e36f73002c416a68d077bffb0335d82346c7507f2478353aeac005fce5a9cbc"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "04aa777130c02a06",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "67721f67055eb6fed955ff22bfe4060344662eccb369431835a2116ad120c4f8"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "asked-nothing",
|
|
"unit": "8fc1c96fa6faa4d3966ecc42876189b18ddab779d58f47cdf28a1155f48a6ac4"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "67565d99fe28c68f",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "ab535098a8e709b022afee1da15dd1fc371d389056938ee4fa4971b2966c823a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 3,
|
|
"sink_kind": "session.exec",
|
|
"source": "adjudications",
|
|
"status": "path",
|
|
"unit": "d46f94235bc462360097e7a22e1d442d95f049306631489a4d8b25f647a95bbe"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 3,
|
|
"sink_kind": "session.exec",
|
|
"source": "adjudications",
|
|
"status": "path",
|
|
"unit": "edd6dd4364442f66384d14e9317ef2f6234e32ab78327a45741b8a816b4332ee"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "asked-nothing",
|
|
"unit": "fc7df6887ac719d4615934c0e8c3296728c2f6089f233158c59989027c802d72"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "c0412509f15fe3e1",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "63bda2a71ad7155ad2f59aa9086efef3fd3710dc82c57f4b32ec8bf561460239"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "c0412509f15fe3e1",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "b1c9a070c93764655786c3de5fde536c150e319efe47548614cc544b73a8ee2b"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "deserialization",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "feed5f7de11289a4",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "71531567b2b8609ae0d31cb177b8faea4f5fc61923e513b0154a2c941287ce2b"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "deserialization",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "feed5f7de11289a4",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "d6be6d397a301a07faa761163d3d9e270d71d23d3bdfd084eeafb1e62b91dd71"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "31c259b4e9dccd82",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "1f1ddb8a5b415461638056c70756d2d0e836de71e824c0e46474f20646eaa4d5"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "31c259b4e9dccd82",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "a6ec568d4eef212a842dded7fdef2284524d367e5d24473ddb34e6374be9fad7"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "ffd4b04a7bebfaf8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "54f7519d3d59b6d8d69a5f8f7bd78e360d3fabaae00b7587c37e388719169370"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "ffd4b04a7bebfaf8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "c5e42c9ab2ee54e46700ab0b64e239b567fbc75ccaceaf6cbf20687813663332"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "2ffec9490ef1d482",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "0ab883d3561162b75ad9d161f79c0d17521a23317f2f574c910465f288119483"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "2ffec9490ef1d482",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "b0af86c1642c14047248f1134181be0ec3839900917dffa360c5014119f8632c"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "deserialization",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "73f2a014c6a699ed",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "44ba9d9d8e75769c1444ebf37a64941a845b4bcae678ec79d64dc84e5cc067a0"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "deserialization",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "73f2a014c6a699ed",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "b430d488c486cef26b1c661f773e7e9e4a177eeea73537a033eec98d532e4eed"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "738e4c22edb32172",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "932d7312b2bb4b830179104bca076f587505c2d4ce881b2f04f992defba6dd9e"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "738e4c22edb32172",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "eee5136489c3baa3653ededbf6385d0237e2bd8b5384286780646b88ed34fb91"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "cb0c638282db0d37",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "a49e6ad2e7c2a5ad0d68d5d69c263306b501fc0dc9382e701fb5fe680611196b"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "cb0c638282db0d37",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "dee28099d3b37cbd0ee14412122ecc5f8488ed6bec01863520b87706a040fba1"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "09bce271e8530fbc",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "35eb19b4c6176b37287e2123bb98ec4045ce6bde7cc3864dde317c024b0935d8"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "09bce271e8530fbc",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "dd33291cc494bbc77d44e9b13d16f171d32c9746637506f315f375e8a9ddee95"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "a856cd13668353a6",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "6149fb0132b981620a90a23a9af8d4656d0d827403e63b48258443cacd0a9c81"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "a856cd13668353a6",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "b5aecdd6a87f8d57d28f54a013b1f96332460fe1bb44bff4ed28e166f18f9abe"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "40d8d81a764c508f",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "7deeed73c29c74ccbed29be049e109d363d41e4b5eea245ee57780b85f0e137a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "40d8d81a764c508f",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "b5cdadf848e67910550666ba2a6ac67b24112e501c02dba1865766a316317a23"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "failed",
|
|
"unit": "15dbea384b3255457a44d9382efc6944dd27f1d411d903344a5d5e5fd194b72f"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "b2ac284bd70dd684",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "unsupported",
|
|
"unit": "225890ba6694dc8f4fbab46e9c851dff8c095e906cf14db15d01ebce0891aaab"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "b6eca35de93a5be8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 19,
|
|
"sink_kind": "db.query",
|
|
"source": "population-v1",
|
|
"status": "path",
|
|
"unit": "42eb8427415704e060e73b5ce0943b014ddf380ca756d5ec47c558e59a79895a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "b6eca35de93a5be8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 21,
|
|
"sink_kind": "db.query",
|
|
"source": "population-v1",
|
|
"status": "path",
|
|
"unit": "4c9cdcc11a18641ef41e9308712c5e8b830ec9ad5ebc3a956c8701e4f77b39c0"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "6a53939838afbdd7",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "unsupported",
|
|
"unit": "5794809e595311c86909d673a570d003aa025e4dcd6abc5641b641d935beb0b1"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "46d3ec7d49cb8ca7",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 25,
|
|
"sink_kind": "db.query",
|
|
"source": "population-v1",
|
|
"status": "path",
|
|
"unit": "5f7a63ec650915962ee5255f5416df63ab882d6107f3b540be36d481798a8944"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "6a53939838afbdd7",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "unsupported",
|
|
"unit": "97a7018535ab511622e3ade9e53d570ffb1c80633eaa372fb76e749b3a586c8f"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "46d3ec7d49cb8ca7",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 21,
|
|
"sink_kind": "db.query",
|
|
"source": "population-v1",
|
|
"status": "path",
|
|
"unit": "a84e9ab47f4f2b584684dbb81575758d9032fe3f2ed53bef478cb9dcfedaf677"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "b2ac284bd70dd684",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "unsupported",
|
|
"unit": "aeceb1ebc863ebbc3b69ae56c5b78d2dba005132b75cbd6af929bb0bfe25da9b"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "f42cab375ace1739",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "unsupported",
|
|
"unit": "e329d4a6ac757680bf3d292a81f1f74f8a8a9b482d1651efe9f503f6a4de8796"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "f42cab375ace1739",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "unsupported",
|
|
"unit": "e73c5aac41c0b93072223a3097fb175548ce893e0678ff3a22bc7571745a17e0"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "1041a18cd1aec5f8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "c301b8c362aee3fe5ea38e18f858166bc4162ad8ace44c5fb2df192afc81da2a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "1041a18cd1aec5f8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "ca8e58ffcfd60bdc8626db8b9eb4f253c1b8b8affcb793c6d963b7a3ec91906b"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "52354ccdbc16f209e4692d97d5237e04ed030cf4a5e71f77b5a767962b355b4a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "7d23be667536afff",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "b5016a5a53409491ba805ed8718599b84250b7b6914da0434b0882b0b3578dc8"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "7d23be667536afff",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vibe-py",
|
|
"status": "asked-nothing",
|
|
"unit": "f1b01102968568d3ba1b2fdc70f4ae281f433fb20d29eff2a55fc45555ddbfcd"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "f21df949f8aca4fa",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "15d23ab3aea4c878dd73bbae579f3ab473e8363477a97d28164ed5e1b94cb510"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "f21df949f8aca4fa",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "787bc98c651ed3db21be4c28e9c560c366ffd6ca508823d21e5d83eeaf1269db"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "1199de75f426940b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "unsupported",
|
|
"unit": "10fdc236f43a02b7e291eb8bf6ada297a2ae98086a63b171057bc7bfc37a3377"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "22112c31603bbe9f",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "unsupported",
|
|
"unit": "5eb3b7523b5a196dcaacba08d68457f9a45e31503ea02745ca3a7d0542f9881c"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "22112c31603bbe9f",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "unsupported",
|
|
"unit": "6bd5bdfd81b0a3374d59cfb2c1f7fa2b27887f4672f4485e77eb5234b569983f"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "1199de75f426940b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v1",
|
|
"status": "unsupported",
|
|
"unit": "c09dffd04708540845c8d1dd77a2bd989bd35f264abf652a2db55f8cb1faf7a9"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "7aab025ea7b97019",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "7487a34cdfdb532a5096764a47a3e565fa509605c1df0e2b105eb9c751fc5307"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "7aab025ea7b97019",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "9c0be2a58741f095fd0a9cdc60d4ca4039de1529699d5701dc4d0bcf7d5bf90c"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "4de5441f1776f083",
|
|
"sanitized": 1,
|
|
"shortest_path_steps": 30,
|
|
"sink_kind": "fs.readFileSync",
|
|
"source": "vfc-js",
|
|
"status": "path",
|
|
"unit": "a3a35d573da308cd1d0614a26616bbd37b360d9ea416894cdeffdb59abd691d4"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "4de5441f1776f083",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 18,
|
|
"sink_kind": "fs.readFileSync",
|
|
"source": "vfc-js",
|
|
"status": "path",
|
|
"unit": "dc33fc26c1bf7c67e5439ddfdad06c0faf16c796e0fe8a46b6e6a541e708676d"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "1972a9a06d7585ad",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "1f472e842e894c9907536c6eb6c9c922bbb3b21c27999114588ec2a4345ab665"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "1972a9a06d7585ad",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "7e38e24f1cc4d287627b7cd6cb870888865bb87fa87bba1c4fbf84eabb213121"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "d76d5232a8587127",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "1ec32d427822d1ddd3b0d7245f5771ddeb56c146ac8ff9959dd85760ff659a20"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "d76d5232a8587127",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "5143b19a1a1e6b9162b80594ed7fb5c0c57ed0b8abfd793bfc71089552d57638"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "5f6e814444b4acd8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "2e8aa07b1aa4bfc5349b0d4464f3f2a6500aa55ff765b0139e9901ed34151ffa"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "5f6e814444b4acd8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "e26c726c08be761b22fcc6ec17fc1fa7aba4769f08957f024e5545906df62797"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "888e955fb6cfb4fd",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "6f1a431ca97afc34ceec48393eb134a8928a312e6f761eb907c6b5855cac6208"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "888e955fb6cfb4fd",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "7b62415d17569924d16238a4aa28ab1af2db6561f56be9f59d8075fd1bc4a941"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "a5691395e641fd4c",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "40339c123107f1231d6aa58de876cded1dfefd5b31dadc4fc86eedc6a687165f"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "a5691395e641fd4c",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "ea3828e2f59cc6f7b415a101532b566ecbd47ab123c3c7593c23c52f6773a2e3"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "f1ebdacbd647e39d",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "79628ef3d6c9e12a94922cdca548ff77d3dbdd6b595c1fec5958fcf23b609095"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "f1ebdacbd647e39d",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "f910e010c3ff2c8c17f0f80fbe89a934e4f792b601febbf318359e6dc3afc18e"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "2dd5384f097711b5",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "212fba6b5e50db045114af369a03ffbdf09ec898c10eeff3c45bfc01a5017b4c"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "2dd5384f097711b5",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "370ba3a1d0e354e882b7be92c1ebbf2e2903bdf29d442048ea3dc1f80922467f"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 5,
|
|
"sink_kind": "$wpdb->get_var",
|
|
"source": "dev-php",
|
|
"status": "path",
|
|
"unit": "ac905d12b92954263c046bd0138a682cea86cf8476336d6baa664ade28d34ac6"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "218a45d869bd7e39",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "309ebac468b7ab054c8396ed495770385ae3590caba43709745ba2d1db4b6d54"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "3cc8613813dec13cb1b7b45b296688da883f0b36cd2c4fc1da6e81703fb59ab9"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "218a45d869bd7e39",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "9bd2331dbc260451355307e4c37bae17ad6676654c66181934e1b35fb174cc5a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "asked-nothing",
|
|
"unit": "b087ac4d0989e0b72698a9644ef4eac8073b4a15bb21730d63e4730b5cc58a60"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "failed",
|
|
"unit": "c5d1e8d19560c997018fdca12eb60f1799be76c33be058b88472f5a2fc6709be"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "c863054be488a284",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "425e1d9961b79bbc011c447cd050910dd796a32b248962a5b0acc3f5f19b7345"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "c863054be488a284",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "552925bba199119c7db5457b9d3c535bc9f6061cecfd2ab2f72cde690a536e1e"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 18,
|
|
"sink_kind": "header",
|
|
"source": "adjudications",
|
|
"status": "path",
|
|
"unit": "22befc17a75a688e2f9358d2ddf9a7b197da44cd95dbdeae5e0191b113ee54d3"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "63f496d9ff53e39b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "6a98f8145776c78793b37156e9a81757841bb6de80016ab4fa575209d724db3f"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "63f496d9ff53e39b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "population-v2",
|
|
"status": "asked-nothing",
|
|
"unit": "7ac60c96c15f8517e089cc2240aedcf1fc30e54a41e35fe03c6b965bc393fbd6"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "adjudications",
|
|
"status": "asked-nothing",
|
|
"unit": "ae39cb55ef2a87c5347e0ddc40975f142450e82de4909e93ba62a7ed0efb4134"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "d1b19898f8deaa41",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "3763c7b407ad471820b5f8fa25bde0ba6d91e15c07c56681de4b41add418b0b1"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "d1b19898f8deaa41",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "bc8b934938c30687f3d4f982392d2cfa9504a916b463ccb5c46fe8a30eede488"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "f5f33fa6fe7b8492",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "938bbf146a9037e687190bcee82c047492dffbe90efea40a49a647f81a0f1ed0"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "f5f33fa6fe7b8492",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "b90c9f7e0011685f1a8e853a9ed0ae37fd437ef6d6eb0ba17c240aec2c22b603"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "f74364dc8e35c8ba",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "11e760e99c5c852676c9288e18a250febb3854e9047b51e8b9ecc9f3b423b6f5"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "f74364dc8e35c8ba",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 19,
|
|
"sink_kind": "unserialize",
|
|
"source": "advisory-fixes",
|
|
"status": "path",
|
|
"unit": "5fc980194040f4c4d803075d4085618cc0260ae8f3454b26b9b704d30200ffea"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "db1c51833994ec55",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "c2ce8320c778dd55434d7413844797b68e6fcabc4dc509458a9d60ca70b88c60"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "output_encoding",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "db1c51833994ec55",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "f2d6843547af1276ae8a4dff3a7786913fa79dc69540d4fbb95c4c091e27c7f2"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "f4690679bf9d80aa",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "1a4e24df8d08672ecde4709a77ea5c437b2198fecff8bfff373b63c9eaed6e63"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "f4690679bf9d80aa",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "78711973ec84867671314dd7878769092b32f59860eafed50a0f6979daee76fc"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "d6a42c18151efb48",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "01ae2279707361bfc06a005335d41b85066d0a163802ca81c031f5dbded5bb46"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "d6a42c18151efb48",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "a50dc15c313a9078badea01365987c66c5cee1ad48cea65c35c8bc2cbba25e8e"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "85c15e3fc2b370b2",
|
|
"sanitized": 1,
|
|
"shortest_path_steps": 8,
|
|
"sink_kind": "$wpdb->get_var",
|
|
"source": "population-v1",
|
|
"status": "path",
|
|
"unit": "0990d8f41cb07c1cf217812e51a7025381de4ba68d1be3799e26241d81dcea67"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "85c15e3fc2b370b2",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 6,
|
|
"sink_kind": "$wpdb->get_col",
|
|
"source": "population-v1",
|
|
"status": "path",
|
|
"unit": "9da1d63f0c4da270f66eb87bf9c342ace883a0aef78c4643e254159b5da8fce3"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "c7f4f4ebebfae831",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "b5cbc1490bca76679adfbe5e4d9f8067d27a226d595ba401b551b00c3ce4d45a"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "c7f4f4ebebfae831",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "ba2c1808eebdbe3f54c488b09bcb3d69e521916d1a3a0b5b14e02d5bc88bf016"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "1507c8e00ed4b859",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "620e9b5ed143c0bcec178db359fa601acb1d3a134b3e85c2e838b7dcf3892d85"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "1507c8e00ed4b859",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "6f5ce4008dac0471260310c60e1e2a9f76a7e4eec6ebd039835f0488cf3b19aa"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "8f5a6abedd742bbe",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "71e3ced643a244100cc3fde234f5b4b27655214c7ae0ff67ab61e3e48a8fdf78"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "8f5a6abedd742bbe",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "7c8cbfae87127042f9f43621345b4f7958bde27a3ff9db76254063e80735f3ce"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "c9538342f2d7efca",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "2b8db57d65ef1d67c457ff5a336e8a542d03387395d69d5e16815c4f00f40723"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "c9538342f2d7efca",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "e2ed113dc21ad5f7caa71ba4a5ece8f8f900a97fd0d00dc85f7ac79ff5bed19a"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "494dd5d5e5cdf4b8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "3b8011f94ec721f68dd29afc6c8b01117c86a8b0c31f3650a6ce0a8d7c0739ff"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "path",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "494dd5d5e5cdf4b8",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "f7e2280574e9ae51daa64d8adb2955407ff6d1e156f0e2854b6c047e0a733c78"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "51eae488182a123a",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "20b039866ba796c34efa0e92468fb49a314ad7fe2914d9ff8b823e3e35ab26f9"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "51eae488182a123a",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "2ab3fef05def768ef7b4165bcedcf7d200282dba78a32e19b90a0df3aee7e3e5"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "6f5a650865e08571",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "e2051cc42e4f8b026c7807f966d492367310c90326e60fef1b0ee8c509c805a9"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "untrusted_destination",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "6f5a650865e08571",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "asked-nothing",
|
|
"unit": "f5364d68ffe80b578e788f37f08784b0162826393b49b4a3affd70d7cc4c9e01"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "8acd426c5771b37c",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "983e146a60e061254b15dc8dd573cbba57f8dd0358f23ea1b9c313ef69069af5"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "injection",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "8acd426c5771b37c",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "vfc-js",
|
|
"status": "asked-nothing",
|
|
"unit": "f80dfec45231e4778078cb10f00128ed445177cac0a062fc2df5ced5c0171f21"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "9b84800ce5c395cb",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "9b7dfdceae03fd86ad3260a03f85bcdcff8f32f10c265d23743ff8dc98eeefb8"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "9b84800ce5c395cb",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "b99dda150c0da3defa5f4c527ef6c402f5589dfb2f2f03f3e5e424910eb48c53"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "ad64e8fac4ac3ee0",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "36dfd01915a553d86576e8ecd3b737b8e2b297aa542f58cc83b448060e74398a"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "ad64e8fac4ac3ee0",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "c2b6d40f130d35bbfc16fab9411c664fa06321c59fb1d901a1987a69cb09c72e"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "d48c08b19f560848",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "03d02c9e25eec0f380b125279fce35e8867065bf6e1ec75f9f39729ce6efdc77"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "access_control",
|
|
"fold": "outer-0",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "d48c08b19f560848",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "abbea69b7d0fa68c3ace442c25597e128cde354b417787b5913fd10d666c0d19"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "bfc8188bbb673e3b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "a7cff0da55c0cc1d5c838e11fc6ce6c4b22c54b9f8e101688b218d6928eca504"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-2",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "bfc8188bbb673e3b",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes-2",
|
|
"status": "unsupported",
|
|
"unit": "f741c56815230b9c30e2c8ef8952b895e9480e4780a89ff2cf6daf60d1fce7b6"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "3844ed3d703d7ef4",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "445efda074e4d9f6c1634225eb08a3c3eb1257311c995ce891df2c791a6f5c8b"
|
|
},
|
|
{
|
|
"asked": 0,
|
|
"family": "output_encoding",
|
|
"fold": "outer-4",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 1,
|
|
"pair": "3844ed3d703d7ef4",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "unsupported",
|
|
"unit": "8ac27b08549353ada819caaf99a5180d2f2f515b03aa8cd99a5d37b527ea3a5c"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "a63eae7d621a985e",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 2,
|
|
"sink_kind": "unknown",
|
|
"source": "advisory-fixes",
|
|
"status": "path",
|
|
"unit": "04ca0b583b09c3b4f67bd2496a4607ecb134d24b7bdaf8960fa151e40ebcc447"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "path",
|
|
"fold": "outer-3",
|
|
"guard_present": 0,
|
|
"has_path": 0,
|
|
"label": 0,
|
|
"pair": "a63eae7d621a985e",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 0,
|
|
"sink_kind": "no-path",
|
|
"source": "advisory-fixes",
|
|
"status": "asked-nothing",
|
|
"unit": "ecfa2a67726ca9d3e2621a4d8be60145095b76aa18ecf0268212341d63752871"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 0,
|
|
"pair": "0d9f529b7f0084b6",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 17,
|
|
"sink_kind": "unserialize",
|
|
"source": "advisory-fixes",
|
|
"status": "path",
|
|
"unit": "35aa369236f510634b3aa7b54b04e9da0f80877e515786a888e760f8fe33c524"
|
|
},
|
|
{
|
|
"asked": 1,
|
|
"family": "deserialization",
|
|
"fold": "outer-1",
|
|
"guard_present": 0,
|
|
"has_path": 1,
|
|
"label": 1,
|
|
"pair": "0d9f529b7f0084b6",
|
|
"sanitized": 0,
|
|
"shortest_path_steps": 16,
|
|
"sink_kind": "unserialize",
|
|
"source": "advisory-fixes",
|
|
"status": "path",
|
|
"unit": "ef4f8613c0914eb815504e00cd6ee05df38352fd3b27826798e6623594017042"
|
|
}
|
|
],
|
|
"units_input": {
|
|
"bytes": 98598,
|
|
"sha256": "240a44e1ca640cc1481a16abd598e645d310cc068d975b6c81821e2ea5951201"
|
|
}
|
|
}
|