Open_Ultra_SAST/benchmarks/pairs/github/node-serialize-cve-2017-5941/vuln.js at c64e37edbdb5c626096d658e143bcd15e24677cd - Open_Ultra_SAST - Because Security Code-Cave (private)

marius/Open_Ultra_SAST

mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-16 19:59:26 +00:00

Files

T

Marius Ciepluch 1ae41eea19 feat(propose-adjudicate-prove): overlay adjudicates inventory before prove

Regex inventory stays the proposer. MAP attaches promote/demote/unadjudicated/coverage
from intra-file taint (tree-sitter when a grammar parses, Python ast as last resort).
Deep sandboxes promotions only, ordered by the existing heuristic ranker plus optional
OpenRouter mechanism recall. The SAST pair slice scores overlay outcomes; the stage-1
detection gate and local pair gate stay inventory-only.

2026-09-04 13:57:33 +02:00

8 lines

247 B

JavaScript

Raw Blame History

 // Pattern from npm node-serialize CVE-2017-5941 (CWE-95): unserialize via eval.
 // Public advisory: https://nvd.nist.gov/vuln/detail/CVE-2017-5941
 function parsePayload(obj) {
   return eval("(" + obj + ")");
 }
 module.exports = { parsePayload };