Java Security Injection and IO Audit Bundle
Run a read-only Java security audit focused on command execution, path traversal, file IO, SQL and NoSQL injection, template and log injection, reflection sinks, request taint, and debug exposure.
This bundle runs 44 read-only Java security audit codemods. It is part of the split Java security audit set; run the other Java security audit bundles when you need broader coverage.
Included Codemods
- @codemod/detect-insecure-file-permission-usage@0.1.0
- @codemod/detect-template-autoescaping-disabled@0.1.0
- @codemod/detect-world-accessible-file-perms-java@0.1.0
- @codemod/java-archive-extraction-path-traversal@0.1.0
- @codemod/java-catastrophic-regex-risk@0.1.0
- @codemod/java-command-argument-injection-risk@0.1.0
- @codemod/java-db-write-mass-assignment-risk@0.1.0
- @codemod/java-detect-insecure-temp-file-creation@0.1.0
- @codemod/java-dynamic-code-execution-risk@0.1.0
- @codemod/java-dynamic-sql-formatting-detector@0.1.0
- @codemod/java-filesystem-oracle-file-access@0.1.0
- @codemod/java-filesystem-oracle-path-access@0.1.0
- @codemod/java-html-template-autoescape-disabled@0.1.0
- @codemod/java-http-body-size-limit-audit@0.1.0
- @codemod/java-http-request-size-limit-check@0.1.0
- @codemod/java-http-route-method-restriction@0.1.0
- @codemod/java-http-routes-missing-method-limits@0.1.0
- @codemod/java-json-injection-risk-miner@0.1.0
- @codemod/java-log-injection-miner@0.1.0
- @codemod/java-mass-assignment-db-ops-audit@0.1.0
- @codemod/java-no-path-resolved-os-commands@0.1.0
- @codemod/java-nosql-injection-hotspots@0.1.0
- @codemod/java-os-command-argument-injection@0.1.0
- @codemod/java-os-command-injection-detection@0.1.0
- @codemod/java-os-process-command-injection@0.1.0
- @codemod/java-path-dependent-process-launch@0.1.0
- @codemod/java-path-injection-file-io-taint@0.1.0
- @codemod/java-prod-debug-features-audit@0.1.0
- @codemod/java-production-debug-features-audit@0.1.0
- @codemod/java-reflected-input-in-response-xss@0.1.0
- @codemod/java-reflection-injection-miner@0.1.0
- @codemod/java-regex-backtracking-risk@0.1.0
- @codemod/java-regex-redos-hotspots@0.1.0
- @codemod/java-regex-redos-risk@0.1.0
- @codemod/java-sensitive-data-in-logs@0.1.0
- @codemod/java-ssrf-outbound-request-taint@0.1.0
- @codemod/java-ssrf-path-traversal-request-sinks@0.1.0
- @codemod/java-temp-file-creation-security@0.1.0
- @codemod/java-temp-files-publicly-writable-dir@0.1.0
- @codemod/java-template-execution-sinks@0.1.0
- @codemod/java-template-injection-risk@0.1.0
- @codemod/java-unsafe-sql-query-construction@0.1.0
- @codemod/java-untrusted-bean-population@0.1.0
- @codemod/java-user-controlled-reflection-targets@0.1.0