Amazon Q
Detector Library
Ruby detectors (29/29)
SQL InjectionDivide by ZeroSensitive HTTP ActionInsufficient Protected CredentialsSensitive Information LeakCross-Site Request Forgery (CSRF)Untrusted DeserializationLog InjectionXML External EntityPath InjectionDeprecated Get ConfigurationHttp to File AccessInsufficient Key SizeCode InjectionOS Command InjectionInsecure CookieResource leakCross Site Scripting (XSS)Untrusted OpenModel Attr AccessibleServer Side Request ForgeryImproper Input ValidationStack Trace ExposureOpen RedirectImproper Certificate Validationsend_file InjectionUnsafe File PermissionsInsecure CryptographyTainted Format
Tag: injection
XML External Entity
Objects that parse or handle XML can lead to XML External Entity (XXE) attacks when misconfigured.
Code Injection
User input is used in eval command.
send_file Injection
External Control of File Name or Path.