Code Security Report: 9 total findings

[mend-for-github-com]

Code Security Report

Scan Metadata

Latest Scan: 2023-08-16 07:17am
Total Findings: 9 | New Findings: 0 | Resolved Findings: 0
Tested Project Files: 103
Detected Programming Languages: 1 (Java)

• Check this box to manually trigger a scan

Finding Details

Severity	Vulnerability Type	CWE	File	Data Flows	Date
Medium	Error Messages Information Exposure	CWE-209	AbstractSwaggerDeserializer.java:33	1	2023-08-16 07:18am
More info swagger-parser/modules/swagger-compat-spec-parser/src/main/java/io/swagger/deserializer/AbstractSwaggerDeserializer.java Lines 28 to 33 in ccaacb8 try { deserializedObject = objectMapper.readValue(jsonNode.traverse(), clazz); } catch (JsonMappingException e) { messageBuilder.append(new Message(e.getPathReference(), e.getMessage(), Severity.ERROR)); } catch (IOException e) { messageBuilder.append(new Message("", e.getMessage(), Severity.ERROR)); 1 Data Flow/s detected View Data Flow 1 swagger-parser/modules/swagger-compat-spec-parser/src/main/java/io/swagger/deserializer/AbstractSwaggerDeserializer.java Line 33 in ccaacb8 messageBuilder.append(new Message("", e.getMessage(), Severity.ERROR));
Medium	Error Messages Information Exposure	CWE-209	SwaggerParser.java:52	1	2023-08-16 07:18am
More info swagger-parser/modules/swagger-parser/src/main/java/io/swagger/parser/SwaggerParser.java Lines 47 to 52 in ccaacb8 if (output == null) { output = new SwaggerDeserializationResult() .message("The swagger definition could not be read"); } }catch (Exception e) { output.setMessages(Arrays.asList(e.getMessage())); 1 Data Flow/s detected View Data Flow 1 swagger-parser/modules/swagger-parser/src/main/java/io/swagger/parser/SwaggerParser.java Line 52 in ccaacb8 output.setMessages(Arrays.asList(e.getMessage()));
Medium	Error Messages Information Exposure	CWE-209	SwaggerParser.java:230	1	2023-08-16 07:18am
More info swagger-parser/modules/swagger-parser/src/main/java/io/swagger/parser/SwaggerParser.java Lines 225 to 230 in ccaacb8 if (output != null) { return output; } } catch (IOException e) { if (System.getProperty("debugParser") != null) { e.printStackTrace(); 1 Data Flow/s detected View Data Flow 1 swagger-parser/modules/swagger-parser/src/main/java/io/swagger/parser/SwaggerParser.java Line 230 in ccaacb8 e.printStackTrace();
Medium	Error Messages Information Exposure	CWE-209	Swagger20Parser.java:187	1	2023-08-16 07:18am
More info swagger-parser/modules/swagger-parser/src/main/java/io/swagger/parser/Swagger20Parser.java Lines 182 to 187 in ccaacb8 } return convertToSwagger(data, parentLocation); } catch (Exception e) { if (System.getProperty("debugParser") != null) { e.printStackTrace(); 1 Data Flow/s detected View Data Flow 1 swagger-parser/modules/swagger-parser/src/main/java/io/swagger/parser/Swagger20Parser.java Line 187 in ccaacb8 e.printStackTrace();
Medium	Error Messages Information Exposure	CWE-209	Swagger20Parser.java:156	1	2023-08-16 07:18am
More info swagger-parser/modules/swagger-parser/src/main/java/io/swagger/parser/Swagger20Parser.java Lines 151 to 156 in ccaacb8 } return convertToSwagger(data); } catch (Exception e) { if (System.getProperty("debugParser") != null) { e.printStackTrace(); 1 Data Flow/s detected View Data Flow 1 swagger-parser/modules/swagger-parser/src/main/java/io/swagger/parser/Swagger20Parser.java Line 156 in ccaacb8 e.printStackTrace();
Medium	Error Messages Information Exposure	CWE-209	SimpleSwaggerReader.java:37	1	2023-08-16 07:18am
More info swagger-parser/modules/swagger-compat-spec-parser/src/main/java/io/swagger/reader/SimpleSwaggerReader.java Lines 32 to 37 in ccaacb8 InputStream swaggerJson = httpClient.execute(); jsonNode = objectMapper.readTree(swaggerJson); } catch (URISyntaxException | IOException e) { messageBuilder.append(new Message("", e.getMessage(), Severity.ERROR)); 1 Data Flow/s detected View Data Flow 1 swagger-parser/modules/swagger-compat-spec-parser/src/main/java/io/swagger/reader/SimpleSwaggerReader.java Line 37 in ccaacb8 messageBuilder.append(new Message("", e.getMessage(), Severity.ERROR));
Medium	Error Messages Information Exposure	CWE-209	AbstractSwaggerDeserializer.java:31	1	2023-08-16 07:18am
More info swagger-parser/modules/swagger-compat-spec-parser/src/main/java/io/swagger/deserializer/AbstractSwaggerDeserializer.java Lines 26 to 31 in ccaacb8 T deserializedObject = null; try { deserializedObject = objectMapper.readValue(jsonNode.traverse(), clazz); } catch (JsonMappingException e) { messageBuilder.append(new Message(e.getPathReference(), e.getMessage(), Severity.ERROR)); 1 Data Flow/s detected View Data Flow 1 swagger-parser/modules/swagger-compat-spec-parser/src/main/java/io/swagger/deserializer/AbstractSwaggerDeserializer.java Line 31 in ccaacb8 messageBuilder.append(new Message(e.getPathReference(), e.getMessage(), Severity.ERROR));
Medium	Error Messages Information Exposure	CWE-209	PathUtils.java:30	1	2023-08-16 07:18am
More info swagger-parser/modules/swagger-parser/src/main/java/io/swagger/parser/util/PathUtils.java Lines 25 to 30 in ccaacb8 } } catch (Exception e) { e.getMessage(); 1 Data Flow/s detected View Data Flow 1 swagger-parser/modules/swagger-parser/src/main/java/io/swagger/parser/util/PathUtils.java Line 30 in ccaacb8 e.getMessage();
Medium	Error Messages Information Exposure	CWE-209	SwaggerParser.java:140	1	2023-08-16 07:18am
More info swagger-parser/modules/swagger-parser/src/main/java/io/swagger/parser/SwaggerParser.java Lines 135 to 140 in ccaacb8 if (output != null) { return output; } } catch (IOException e) { if (System.getProperty("debugParser") != null) { e.printStackTrace(); 1 Data Flow/s detected View Data Flow 1 swagger-parser/modules/swagger-parser/src/main/java/io/swagger/parser/SwaggerParser.java Line 140 in ccaacb8 e.printStackTrace();