Amazon QDetector Library Sign in to Amazon Q

Amazon Q

Detector Library

TypeScript detectors (119/119)

Integer overflow Improper Initialization CDK AWS insecure transmission CDK Insecure cookie AWS credentials logged SQL injection AWS Strong Password Policy CDK Insecure connection using unencrypted protocol New function detected Batch request with unchecked failures Unvalidated expansion of archive files Missing pagination XPath injection Logging of sensitive information Override of reserved variable names in a Lambda function Insecure CORS policy Improper input validation Hardcoded credentials Invoke super appropriately Avoid For In Looping Numeric truncation error Avoid nan in comparison Missing check on method output Unbounded LLM Output Insufficiently protected credentials Improper restriction of rendered UI layers or frames Pseudorandom number generators AWS missing encryption CDK Catch and swallow exception Improper authentication cdk Header injection Use {} instead of new Object()Hardcoded IP address Improper Handling of Undefined Values Cdk Untrusted Amazon Machine Images Weak obfuscation of web requests File Race Bad Improper certificate validation Sendfile injection Cryptographic key generator improper input validation cdk XML external entity Timing attack Missing Amazon S3 bucket owner condition Insecure hashing Session fixation Use of Default Credentials CDK File injection Items removed from an array using delete Improper Restriction of Operations within the Bounds of a Memory Buffer Limit request length Log injection Type confusion Server side request forgery aws kmskey encryption cdk Violation of secure design principles cdk Inefficient polling of AWS resource Avoid Undefined As Variable Name Avoid Object Reference Mutation Index of method comparison String passed to `setInterval` or `setTimeout`Resource management errors cdk Data loss in a batch request Client Broker Communication Cdk Tainted input for Docker API Insecure temporary file or directory Check failed records when using kinesis AWS api logging disabled cdk Improper Access Control CDK Least privilege violation File extension validation Resource leak Set SNS Return Subscription ARN Insecure object attribute modification Missing Authentication for Critical Function CDK AWS missing encryption of sensitive data cdk Unauthenticated Amazon SNS unsubscribe requests might succeed Cross-site request forgery Client-side KMS reencryption Insecure cryptography Deserialization of untrusted object AWS cost optimization cdk Clear text credentials Improper handling of case sensitivity Unsanitized input is run as code Protection mechanism failure Omission of Security-relevant Information CDK Use of a deprecated method Sensitive information leak DNS prefetching Exposure of Sensitive Information CDK Insecure JWT parsing Loose file permissions Missing Authorization CDK Improper Initialization Sensitive query string Insufficient Logging CDK AWS reliability cdk OS command injection NoSQL injection Unverified hostname Path traversal Use of deprecated components Origins-verified cross-origin communications LDAP injection SNS don't bind subscribe and publish Non-literal regular expression Stack trace exposure File and directory information exposure Usage of an API that is not recommended Lazy Load Module Disabled HTML autoescape Improper access control Redundant switch statement Cross-site scripting Sensitive data stored unencrypted due to partial encryption AWS client not reused in a Lambda function URL redirection to untrusted site Untrusted data in security decision

Low

Showing all detectors for the TypeScript language with low severity.

Invoke super appropriately

The incorrect use of super() causes problems.

File Race Bad

File name should not be used to do the file operations.

Missing Amazon S3 bucket owner condition

Not setting the Amazon S3 bucket owner condition could lead to accidentally using the wrong bucket.

Items removed from an array using delete

Items removed from an array using delete can cause undefined holes in the array.

Limit request length

Significant content length can lead to denial of service.

Improper handling of case sensitivity

Improper handling of case sensitivity when accessing a resource can lead to inconsistent results.

Use of a deprecated method

This code uses deprecated methods, which suggests that it has not been recently reviewed or maintained.

Insufficient Logging CDK

In the case of a security-critical event, the product fails to either log the event or misses crucial details in the logged information.