Hakiri found a Ruby on Rails project with 200 production gems in the repo. The project has a total of 4 security warnings (4 in code and 0 in dependencies). Here is the breakdown of security warnings by type:
Attribute Restrictionno warnings |
Authenticationno warnings |
Buffer Errorsno warnings |
Code Injectionno warnings |
Command Injectionno warnings |
Configurationno warnings |
Credentials Managementno warnings |
Cross-Site Request Forgeryno warnings |
Cross-Site Scripting1 warning |
Cryptographyno warnings |
Dangerous Evaluationno warnings |
Dangerous Sendno warnings |
Default Routesno warnings |
Denial of Serviceno warnings |
Dynamic Render Pathno warnings |
File Accessno warnings |
Format Stringno warnings |
Format Validationno warnings |
Information Disclosureno warnings |
Input Validationno warnings |
Link Followingno warnings |
Mass Assignmentno warnings |
Numeric Errorsno warnings |
OS Command Injectionsno warnings |
Perms and Access Controlno warnings |
Race Conditionsno warnings |
Redirect1 warning |
Resource Managementno warnings |
Session Settingno warnings |
SSL Verification Bypassno warnings |
SQL Injection2 warnings |
Unsafe Deserializationno warnings |
Otherno warnings |