奇安信CodeSafe
奇安信CodeSafe
https://github.com/google/closure-stylesheets/blob/970d51e6fb45591e50c057b118e66a364957da42/pom.xml#L83 CVE-2018-10237 CVE-2020-8908 Recommended upgrade version： 24.1.1.jre
https://github.com/IBM/AIF360/blob/7763c1c5a36647afbee310249fee82e1211b0f40/aif360/algorithms/inprocessing/gerryfair/heatmap.py#L90 Variables declared but not used, or reassigned before they are used, can be the result of programmer negligence, which often means that there is a bug in the program.
https://github.com/IBM/AIF360/blob/7763c1c5a36647afbee310249fee82e1211b0f40/mlops/kubeflow/bias_detector_pytorch/src/fairness_check.py#L78-L79 Python allows users to execute instructions dynamically, and when this capability is exploited by malicious users, dynamic code parsing attacks occur.
https://github.com/bytedance/AabResGuard/blob/e8f3a5d361ce61a3d4fa8bafb9d030bbe459c400/core/build.gradle#L38 CVE-2020-8908 Recommended upgrade version：30.0-jre
https://github.com/bytedance/AabResGuard/blob/e8f3a5d361ce61a3d4fa8bafb9d030bbe459c400/core/build.gradle#L36 CVE-2021-29425 Recommended upgrade version：2.7
https://github.com/bytedance/AabResGuard/blob/e8f3a5d361ce61a3d4fa8bafb9d030bbe459c400/core/build.gradle#L9 CVE-2015-5237 Recommended upgrade version：0.8.13
https://github.com/bytedance/AabResGuard/blob/e8f3a5d361ce61a3d4fa8bafb9d030bbe459c400/core/build.gradle#L42 CVE-2020-10683 CVE-2018-1000632 Recommended upgrade version：2.1.1-4
https://github.com/bytedance/AabResGuard/blob/4e902042a3282f42a9b89e0446222a7b275a23ec/core/src/main/java/com/bytedance/android/aabresguard/utils/FileOperation.java#L72 FOS could not be released correctly.Most unreleased resource issues cause general software reliability problems.However, if an attacker can intentionally trigger a resource leak, an attacker can launch a denial-of-service...
https://github.com/bytedance/AabResGuard/blob/4e902042a3282f42a9b89e0446222a7b275a23ec/core/src/main/java/com/bytedance/android/aabresguard/bundle/AppBundleAnalyzer.java#L29 Unable to release ZipFile correctly.Most unreleased resource issues cause general software reliability problems.However, if an attacker can intentionally trigger a resource leak, an attacker can launch a denial-of-service attack...
https://github.com/bytedance/AabResGuard/blob/4e902042a3282f42a9b89e0446222a7b275a23ec/core/src/main/java/com/bytedance/android/aabresguard/utils/FileOperation.java#L72 Path Manipulation: ZIP Entry Overwrite errors occur when a ZIP file is opened and expanded without checking the file path of the ZIP entry.Allowing user input to control the...