BETA Shoulder jest w wersji beta — Wyniki mogą czasami być błędne. Twoja opinia kształtuje to, co naprawimy w następnej kolejności. Podziel się opinią
🐹
Go Security
90 reguly
54 CWE 7 critical

Podatnosci Bezpieczenstwa Go

Shoulder wykrywa 90 wzorcow bezpieczenstwa specyficznych dla aplikacji Go zbudowanych z Go.

Pokrycie Frameworkow

Kategorie Podatnosci

CWE-693 6 reguly
Protection Mechanism Failure
CWE-307 5 reguly
Improper Restriction of Excessive Authentication Attempts
CWE-942 5 reguly
Permissive Cross-domain Policy with Untrusted Domains
CWE-20 4 reguly
Improper Input Validation
CWE-200 4 reguly
Exposure of Sensitive Information to an Unauthorized Actor
1 critical
CWE-362 4 reguly
Concurrent Execution Using Shared Resource with Improper Synchronization ('Race Condition')
CWE-94 3 reguly
Improper Control of Generation of Code ('Code Injection')
2 critical
CWE-306 3 reguly
Missing Authentication for Critical Function
CWE-319 3 reguly
Cleartext Transmission of Sensitive Information
CWE-400 3 reguly
Uncontrolled Resource Consumption
CWE-489 3 reguly
Active Debug Code
CWE-639 3 reguly
Authorization Bypass Through User-Controlled Key
CWE-22 2 reguly
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-502 2 reguly
Deserialization of Untrusted Data
CWE-74 1 reguly
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CWE-78 1 reguly
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
1 critical
CWE-89 1 reguly
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
1 critical
CWE-90 1 reguly
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CWE-93 1 reguly
Improper Neutralization of CRLF Sequences ('CRLF Injection')
CWE-113 1 reguly
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
🐹

Skanuj swoj projekt Go

Uruchom Shoulder CLI, aby znalezc podatnosci specyficzne dla Go.