|
|
|
# Vulnerability Statistic
|
|
|
|
|
|
|
|
```vega
|
|
|
|
{
|
|
|
|
"$schema": "https://vega.github.io/schema/vega/v5.json",
|
|
|
|
"width": 1000,
|
|
|
|
"height": 200,
|
|
|
|
"padding": 5,
|
|
|
|
|
|
|
|
"data": [
|
|
|
|
{
|
|
|
|
"name": "table",
|
|
|
|
"values": [
|
|
|
|
{"category": "Critical", "amount": 2, "color": "#ff0000"},
|
|
|
|
{"category": "High", "amount": 4, "color": "#ffa500"},
|
|
|
|
{"category": "Medium", "amount": 6, "color": "#daff00"},
|
|
|
|
{"category": "Low", "amount": 1, "color": "#00daff"},
|
|
|
|
{"category": "Unknown", "amount": 2, "color": "#bfe3b4"},
|
|
|
|
{"category": "Info", "amount": 5, "color": "#000000"}
|
|
|
|
]
|
|
|
|
}
|
|
|
|
],
|
|
|
|
|
|
|
|
"scales": [
|
|
|
|
{
|
|
|
|
"name": "xscale",
|
|
|
|
"type": "band",
|
|
|
|
"domain": {"data": "table", "field": "category"},
|
|
|
|
"range": "width",
|
|
|
|
"padding": 0.05,
|
|
|
|
"round": true
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"name": "yscale",
|
|
|
|
"domain": {"data": "table", "field": "amount"},
|
|
|
|
"nice": true,
|
|
|
|
"range": "height"
|
|
|
|
}
|
|
|
|
],
|
|
|
|
|
|
|
|
"axes": [
|
|
|
|
{ "orient": "bottom", "scale": "xscale", "labelColor": "white" },
|
|
|
|
{ "orient": "left", "scale": "yscale", "labelColor": "white","tickCount": 6 }
|
|
|
|
],
|
|
|
|
|
|
|
|
"marks": [
|
|
|
|
{
|
|
|
|
"type": "rect",
|
|
|
|
"from": {"data":"table"},
|
|
|
|
"encode": {
|
|
|
|
"enter": {
|
|
|
|
"x": {"scale": "xscale", "field": "category"},
|
|
|
|
"width": {"scale": "xscale", "band": 1},
|
|
|
|
"y": {"scale": "yscale", "field": "amount"},
|
|
|
|
"y2": {"scale": "yscale", "value": 0},
|
|
|
|
"fill": {"value": "color", "field": "color"}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
]
|
|
|
|
}
|
|
|
|
```
|
|
|
|
# Vulnerability Table
|
|
|
|
|
|
|
|
| Row # | Severity | Confidence | Message | Description | Location |
|
|
|
|
|-------|-----------|-------------|----------|--------------|----------|
|
|
|
|
| 1 | Info | | Improper Check for Unusual or Exceptional Conditions | Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. | python/incomplete_assertions.py:12 |
|
|
|
|
| 2 | Info | | Improper Check for Unusual or Exceptional Conditions | Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. | python/incomplete_assertions.py:6 |
|
|
|
|
| 3 | Medium | | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') | Detected the use of eval(). eval() can be dangerous if used to evaluate dynamic content. If this content can be input from outside the program, this may be a code injection vulnerability. Ensure evaluated content is not definable by external sources. Consider using safer ast.literal_eval. | python/arbitrary_code_execution.py:9 | |
