Search results

[Java ] command-injection-process-builder missing common injection patterns such as chained call

bugSomething isn't workingSomething isn't working

Status: Open.

#3814 In semgrep/semgrep-rules;

· 9iang22 opened on Apr 19, 2026

[Java] false negative: jdo-sqli misses "...".formatted(input) pattern.

bugSomething isn't workingSomething isn't working

Status: Open.

#3812 In semgrep/semgrep-rules;

· 9iang22 opened on Apr 17, 2026

Java enum items are not catch by simple patterns

bugSomething isn't workingSomething isn't working

Status: Open.

#3789 In semgrep/semgrep-rules;

· tilperion2 opened on Mar 27, 2026

Java annotations are not propetly handled in enums

bugSomething isn't workingSomething isn't working

Status: Open.

#3788 In semgrep/semgrep-rules;

· tilperion2 opened on Mar 27, 2026

Add MCP (Model Context Protocol) security rules

Status: Open.

#3787 In semgrep/semgrep-rules;

· razashariff opened on Mar 27, 2026

insecure-use-strtok-fn: rule message describes normal behavior instead of actual security risks

bugSomething isn't workingSomething isn't working

Status: Open.

#3772 In semgrep/semgrep-rules;

· MarkLee131 opened on Mar 17, 2026

C memory safety rules (double-free, use-after-free) missing common exclusion patterns cause false positives

bugSomething isn't workingSomething isn't working

Status: Open.

#3770 In semgrep/semgrep-rules;

· MarkLee131 opened on Mar 17, 2026

H2C smuggling in Nginx config rule does not pass when following recommended mitigation

bugSomething isn't workingSomething isn't working

Status: Open.

#3768 In semgrep/semgrep-rules;

· mackenly opened on Mar 16, 2026

[Security Alert] Exposed API key(s) detected: AWS Access Key

Status: Open.

#3766 In semgrep/semgrep-rules;

· hdhdn opened on Mar 14, 2026

documentbuilderfactory-disallow-doctype-decl-missing not picking up feature set in constructor

bugSomething isn't workingSomething isn't working

Status: Open.

#3764 In semgrep/semgrep-rules;

· gigaSproule opened on Mar 12, 2026

False negative in Java rule command-injection-formatted-runtime-call

bugSomething isn't workingSomething isn't working

Status: Open.

#3763 In semgrep/semgrep-rules;

· tacu22 opened on Mar 6, 2026

Remove old Python compatibility rules

bugSomething isn't workingSomething isn't working

Status: Open.

#3762 In semgrep/semgrep-rules;

· Edward-Knight opened on Mar 5, 2026