Alexandre Laroche

Do you where we can throw a exception in this function if the configuration file isn't correct? (unsupported option is pass) This function is call for every domain and general...

The code isn't available on their website. I wrote a email to the company to request if it's possible to get patches.

I find a copy of dkimpp.dll. All functions of the original libdkimpp haven't been implemented by Kerio. 

Here is the document : https://www.nerc.com/pa/Stand/Reliability%20Standards%20Complete%20Set/RSCompleteSet.pdf The cybersecurity requirements are those of the CIP section. The standards cover many more aspects than just cybersecurity.

@kate-grechishkina : It no longer appears to be present in semgrep version 1.139.0. However, GitLab is several versions back (1.118.0) at the moment. [https://gitlab.com/gitlab-org/security-products/analyzers/semgrep/-/blob/main/Dockerfile?ref_type=heads#L1]