奇安信CodeSafe

https://github.com/microsoft/inventory-hub-java-on-azure/blob/1c2cfa5159d60c24ef391267fe95cd6bb01e9b0e/dashboard-web-app/pom.xml#L147 CVE-2020-11023 CVE-2020-11022 CVE-2019-11358 Recommended upgrade version：3.5.1+dfsg+~3.5.5-7

https://github.com/microsoft/inventory-hub-java-on-azure/blob/1c2cfa5159d60c24ef391267fe95cd6bb01e9b0e/dashboard-web-app/pom.xml#L117 CVE-2019-14893 CVE-2018-7489 CVE-2019-17267 CVE-2019-16335 CVE-2019-14540 Recommended upgrade version：2.9.10.3

https://github.com/StarlangSoftware/TurkishWordNet/blob/e14fa26f9569cca8af13ca88187dabb00c69d568/src/main/java/WordNet/WordNet.java#L1333 The program can potentially fail to release a system resource.

Unused variable

1

https://github.com/eclipse/gef/blob/028a952194429b3ba94a0dbfed8a7dddb4a6a0cb/org.eclipse.gef.zest.fx/src/org/eclipse/gef/zest/fx/behaviors/AbstractLayoutBehavior.java#L59 This variable is never used.

Unreleased Resource: Streams

1

https://github.com/eclipse/gef/blob/028a952194429b3ba94a0dbfed8a7dddb4a6a0cb/org.eclipse.gef.cloudio.ui/src/org/eclipse/gef/cloudio/internal/ui/data/TypeCollector.java#L44 The program can potentially fail to release a system resource.

https://github.com/google/gapid/blob/d3b8874c4e3acb60bf25c4d4a365e43422d23244/core/app/atexit.go#L92

Direct manipulation of non-POD objects via memory "memcpy()"

1

Hi all, This is Qianxin CodeSafe Team, we found a suspicious issue, at https://github.com/cisco/openh264/blob/3668daf135dea7d18737b01ce32774a7a2ffba32/codec/encoder/core/src/encoder_ext.cpp#L2332

Hi all, This is Qianxin CodeSafe Team, we found a suspicious issue, at https://github.com/cisco/openh264/blob/3668daf135dea7d18737b01ce32774a7a2ffba32/codec/common/inc/golomb_common.h#L117 The 2nd argument to the function "BsWriteBits()" is of type "int", while the passed expression "g_kuiGolombUELength[kuiValue]"...

Hi all, This is Qianxin CodeSafe Team, we found a suspicious issue, at https://github.com/cisco/openh264/blob/3668daf135dea7d18737b01ce32774a7a2ffba32/codec/decoder/core/src/deblocking.cpp#L685 Performing arithmetic operations on Boolean values may operate differently than performing operations on integer values, which...

Hi all, This is Qianxin CodeSafe Team, we found a suspicious issue, at https://github.com/cisco/openh264/blob/3668daf135dea7d18737b01ce32774a7a2ffba32/codec/decoder/core/src/mv_pred.cpp#L306 The first patameter 'iMvA[1]' is not initialized