📦 deps(thirdparty): update snapshots
This commit is contained in:
+1
-1
@@ -204,7 +204,7 @@ Is it actively exploited (EPSS >0.5)?
|
||||
| Pattern | Risk | Look For |
|
||||
|---------|------|----------|
|
||||
| **String concat in queries** | Injection | `"SELECT * FROM " + user_input` |
|
||||
| **Dynamic code execution** | RCE | `eval()`, `exec()`, `Function()` |
|
||||
| **Dynamic code execution** | RCE | `eval()`, `exec()`, `Function()` | <!-- security-allowlist: defensive vulnerability taxonomy -->
|
||||
| **Unsafe deserialization** | RCE | `pickle.loads()`, `unserialize()` |
|
||||
| **Path manipulation** | Traversal | User input in file paths |
|
||||
| **Disabled security** | Various | `verify=False`, `--insecure` |
|
||||
|
||||
Reference in New Issue
Block a user