dawnscanner 1.6.8 → 2.0.0.rc4

data/lib/dawn/reporter.rb

@@ -199,7 +199,8 @@ module Dawn
         # 1_a) Third party gem vulnerabilities
         rows = []
         @engine.vulnerabilities.each do |vuln|
-          rows << [vuln[:name].justify(10), vuln[:severity], vuln[:message].justify(30), vuln[:remediation].justify(15), vuln[:evidences].join.justify(15)]
+          $logger.error(vuln)
+          rows << [vuln[:name]&.justify(10), vuln[:severity], vuln[:message]&.justify(30), vuln[:remediation]&.justify(15), vuln[:evidences].join&.justify(15)]
           rows << :separator
         end
         table = Terminal::Table.new :title=>"Vulnerabilities", :headings=>['Issue', 'Severity', 'Description', 'Solution', 'Evidences'], :rows=>rows

data/lib/dawn/utils.rb

@@ -1,7 +1,10 @@
 module Dawn
   module Utils
     def debug_me(msg)
-      $logger.debug(msg) if @debug
+      $logger.debug(msg) if $debug
+    end
+    def debug_verbosely(msg)
+      $logger.debug("VERBOSE: #{msg}") if $debug and $verbose
     end
 
     def debug_me_and_return_true(msg)
@@ -11,7 +14,7 @@ module Dawn
       __debug_me_and_return(msg, false)
     end
     def __debug_me_and_return(msg, status)
-      $logger.debug(msg) if @debug
+      $logger.debug(msg) if $debug
       return status
     end
   end

data/lib/dawn/version.rb

@@ -1,7 +1,7 @@
 module Dawn
-    VERSION = "1.6.8"
-    CODENAME = "Tow Mater"
-    RELEASE = "20170407"
-    BUILD = "3"
-    COMMIT = "gd5245d7"
+    VERSION = "2.0.0.rc4"
+    CODENAME = "Finn McMissile"
+    RELEASE = "20210406"
+    BUILD = "26"
+    COMMIT = "g9f7c8c3"
 end

data/lib/dawnscanner.rb

@@ -1,7 +1,5 @@
-require "dawn/utils"
 require "dawn/core"
 require "dawn/version"
-require "dawn/knowledge_base"
 require "dawn/rails"
 require "dawn/sinatra"
 require "dawn/padrino"
@@ -9,8 +7,11 @@ require "dawn/gemfile_lock"
 require "dawn/reporter"
 require "dawn/logger"
 
-# Datamapper classes
-require 'data_mapper'
-require "dawn/registry"
+require "dawn/cli/dawn_cli"
 
-require "date"
+# KB 
+require "dawn/knowledge_base"
+
+# General purpose utilities
+require "dawn/utils"
+include Dawn::Utils

data/spec/lib/kb/codesake_unsafe_dependency_check_spec.rb

@@ -0,0 +1,29 @@
+require 'spec_helper'
+
+
+describe "The security check for gem unsafe dependency should" do
+  before(:all) do
+    @check =  YAML.load_file("./spec/lib/kb/dependency_check.yml")
+    @check.debug=true
+    puts @check.vulnerable_version_array
+  end
+
+  it "fires if vulnerable 0.5.0 version is detected" do
+    @check.dependencies = [{:name=>"acme-gem", :version=>'0.5.0'}]
+    expect(@check.vuln?).to    eq(true)
+  end
+  it "fires if vulnerable 1.3.2 version is found" do
+    @check.dependencies = [{:name=>"acme-gem", :version=>'1.3.2'}]
+    expect(@check.vuln?).to    eq(true)
+  end
+
+  it "fires if vulnerable 3.4.0 version is found" do
+    @check.dependencies = [{:name=>"acme-gem", :version=>'3.4.0'}]
+    expect(@check.vuln?).to    eq(true)
+  end
+
+  it "doesn't fire if not vulnerable 3.0.0 version is found" do
+    @check.dependencies = [{:name=>"acme-gem", :version=>'3.0.0'}]
+    expect(@check.vuln?).to    eq(false)
+  end
+end

data/spec/lib/kb/dependency_check.yml

@@ -0,0 +1,29 @@
+--- !ruby/object:Dawn::Kb::UnsafeDependencyCheck
+applies:
+- rails
+- sinatra
+- padrino
+title: A test here
+cvss: '(AV:L/AC:L/Au:S/C:N/I:C/A:C)'
+cve: 'CVE-2021-99999'
+owasp: A9
+release_date: '25/03/2021'
+kind: :unsafe_dependency_check
+message: |-
+  Lorem ipsum dolor sit amet, consectetur adipiscing elit. Curabitur nisi turpis, tincidunt rhoncus leo sed, euismod sollicitudin nisl. In a arcu accumsan, fermentum quam vel, auctor risus. Nulla non sollicitudin libero. Cras hendrerit consectetur pulvinar. Vivamus ligula quam, vulputate eget justo in, varius rhoncus lorem. Nulla vel volutpat enim. Nulla hendrerit posuere tempor. Nulla in metus eget lacus tempor sollicitudin sed et dolor. Ut interdum volutpat felis, ac bibendum mauris volutpat ut. Etiam posuere justo ex, nec faucibus orci suscipit sit amet. Vivamus rutrum massa fermentum mi pellentesque vehicula. Nullam elementum urna mauris, nec cursus risus convallis vel. Nulla consectetur enim ut magna rutrum, et mollis ante auctor. Etiam accumsan in lacus et ultricies. Morbi ullamcorper velit a ipsum egestas, quis laoreet lectus placerat. Maecenas nunc augue, pulvinar non ligula ac, maximus venenatis mi.
+
+remediation: |-
+  Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse et metus blandit, viverra ante a, auctor urna. Integer eget est ac nisl bibendum pharetra. Vivamus rhoncus neque vitae felis congue luctus. Praesent vitae lobortis mi. Nulla malesuada elit dictum tincidunt volutpat. Quisque tincidunt lorem nec eros ullamcorper lobortis. Nunc in felis sit amet purus sollicitudin tincidunt. Sed semper sapien nisi, non rutrum orci ultricies eget. Integer neque mauris, gravida ac varius nec, tincidunt consequat turpis. Fusce nisi metus, iaculis a eros eget, interdum sodales lectus. Pellentesque purus nisi, venenatis ut quam vitae, lacinia tristique turpis. Morbi sed maximus odio, et interdum risus. Duis nec congue lacus. Nunc sed elit a leo fermentum feugiat a aliquam arcu.
+
+severity: :critical
+priority: :high
+check_family: :bulletin
+vulnerable_version_array:
+- :name: 'acme-gem'
+  :version:
+  - '0.5.0'
+  - '0.9.0'
+  - '0.9.2'
+  - '1.3.2'
+  - '2.9.0'
+  - '3.4.0'

metadata

@@ -1,36 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dawnscanner
 version: !ruby/object:Gem::Version
-  version: 1.6.8
+  version: 2.0.0.rc4
 platform: ruby
 authors:
 - Paolo Perego
-autorequire: 
+autorequire:
 bindir: bin
-cert_chain:
-- |
-  -----BEGIN CERTIFICATE-----
-  MIIDfDCCAmSgAwIBAgIBATANBgkqhkiG9w0BAQUFADBCMQ4wDAYDVQQDDAVwYW9s
-  bzEbMBkGCgmSJomT8ixkARkWC2Rhd25zY2FubmVyMRMwEQYKCZImiZPyLGQBGRYD
-  b3JnMB4XDTE3MDQwNzE0MjU0M1oXDTE4MDQwNzE0MjU0M1owQjEOMAwGA1UEAwwF
-  cGFvbG8xGzAZBgoJkiaJk/IsZAEZFgtkYXduc2Nhbm5lcjETMBEGCgmSJomT8ixk
-  ARkWA29yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKY7klJMYUud
-  10+6gsb1R7Vvnn96BpVc6sPXxInmQeoaQCZ4lT04ARfya7M6E5NHQDjCtSxv2Nib
-  QX8gASLQ/zbg6fDXsUh/SACzguSqBMmwa1LcFs/cBtFuNjq8I/dPffHUVKw1OgzE
-  hkzzmfoYHtga/XptmC24HGdJs5bEGCYTwX6luXPJVAMSxQVx/ZXoHjoR2P/ZMobO
-  md7FSsd4Tk03z/MpkDF9jjMPb7DjMy2ke8VHMRzBurMldhmD2GLRBo+QAnTHrRNp
-  a3yXoWmTlnnxAlJUqSGn83n7r1roHasdT7KzhPmAQ42qh6FrjbkQl/jdJA2fl3I3
-  F0+emUMo9J8CAwEAAaN9MHswCQYDVR0TBAIwADALBgNVHQ8EBAMCBLAwHQYDVR0O
-  BBYEFGrgDWYLVLOvh1i9ValuYILfIy7rMCAGA1UdEQQZMBeBFXBhb2xvQGRhd25z
-  Y2FubmVyLm9yZzAgBgNVHRIEGTAXgRVwYW9sb0BkYXduc2Nhbm5lci5vcmcwDQYJ
-  KoZIhvcNAQEFBQADggEBAHnheFofuUUhycQUbvvo/QlilUWwm5ez9a8tnU3rAeGs
-  6VVsjSf5j30PeQWAVporY3wuPD6Tnqvx0qqOcEtcBJcNcdbqr8h/lLQe66PJnRjM
-  rcAIGSI/KtAfBYSQAP/d711jVjlZr69LjlQjvbV99i36ZDmKHGcrNBnsP49jMuPP
-  cLydkHKvReI6cjZchfO27r1oEVCcd9Z6OTB7StD2SGrXgjbXT6jWuKy9npS0GlCr
-  ZhbONaAaqfNoUhrLptHzm4FNkx1RXERL/HqIsA2pv/L1ZveOWLxrQgI3MuujkoVL
-  nyZ9QdMe5aRX2OoNvfso64jO/IXPlYx+XH8ag3EWRpo=
-  -----END CERTIFICATE-----
-date: 2017-04-07 00:00:00.000000000 Z
+cert_chain: []
+date: 2021-04-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: cvss
@@ -145,7 +123,7 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
-  name: sqlite3
+  name: psych
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -159,21 +137,7 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
-  name: dm-sqlite-adapter
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-- !ruby/object:Gem::Dependency
-  name: data_mapper
+  name: thor
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -296,7 +260,6 @@ files:
 - Roadmap.md
 - VERSION
 - bin/dawn
-- certs/paolo_at_dawnscanner_dot_org.pem
 - checksum/.placeholder
 - checksum/codesake-dawn-1.1.0.gem.sha512
 - checksum/codesake-dawn-1.1.0.rc1.gem.sha512
@@ -323,270 +286,44 @@ files:
 - checksum/dawnscanner-1.6.5.gem.sha1
 - checksum/dawnscanner-1.6.6.gem.sha1
 - checksum/dawnscanner-1.6.7.gem.sha1
+- checksum/dawnscanner-1.6.8.gem.sha1
+- checksum/dawnscanner-2.0.0.rc1.gem.sha1
+- checksum/dawnscanner-2.0.0.rc2.gem.sha1
+- checksum/dawnscanner-2.0.0.rc3.gem.sha1
 - code_of_conduct.md
 - dawnscanner.gemspec
+- doc/change.sh
 - doc/dawn_1_0_announcement.md
 - doc/dawn_1_1_announcement.md
 - doc/dawn_1_2_announcement.md
 - doc/dawn_1_5_announcement.md
 - doc/dawnscanner.yml.sample
+- doc/kickstart_kb.tar.gz
+- doc/knowledge_base.rb
 - doc/new_knowledge_base_v1.0.md
+- docs/.placeholder
+- docs/CNAME
+- docs/_config.yml
 - features/dawn_complains_about_an_incorrect_command_line.feature.disabled
 - features/dawn_scan_a_secure_sinatra_app.feature.disabled
 - features/dawn_scan_a_vulnerable_sinatra_app.feature.disabled
 - features/step_definition/dawn_steps.rb
 - features/support/env.rb
+- lib/dawn/cli/dawn_cli.rb
 - lib/dawn/core.rb
 - lib/dawn/engine.rb
 - lib/dawn/gemfile_lock.rb
 - lib/dawn/kb/basic_check.rb
 - lib/dawn/kb/combo_check.rb
-- lib/dawn/kb/cve_2004_0755.rb
-- lib/dawn/kb/cve_2004_0983.rb
-- lib/dawn/kb/cve_2005_1992.rb
-- lib/dawn/kb/cve_2005_2337.rb
-- lib/dawn/kb/cve_2006_1931.rb
-- lib/dawn/kb/cve_2006_2582.rb
-- lib/dawn/kb/cve_2006_3694.rb
-- lib/dawn/kb/cve_2006_4112.rb
-- lib/dawn/kb/cve_2006_5467.rb
-- lib/dawn/kb/cve_2006_6303.rb
-- lib/dawn/kb/cve_2006_6852.rb
-- lib/dawn/kb/cve_2006_6979.rb
-- lib/dawn/kb/cve_2007_0469.rb
-- lib/dawn/kb/cve_2007_5162.rb
-- lib/dawn/kb/cve_2007_5379.rb
-- lib/dawn/kb/cve_2007_5380.rb
-- lib/dawn/kb/cve_2007_5770.rb
-- lib/dawn/kb/cve_2007_6077.rb
-- lib/dawn/kb/cve_2007_6612.rb
-- lib/dawn/kb/cve_2008_1145.rb
-- lib/dawn/kb/cve_2008_1891.rb
-- lib/dawn/kb/cve_2008_2376.rb
-- lib/dawn/kb/cve_2008_2662.rb
-- lib/dawn/kb/cve_2008_2663.rb
-- lib/dawn/kb/cve_2008_2664.rb
-- lib/dawn/kb/cve_2008_2725.rb
-- lib/dawn/kb/cve_2008_3655.rb
-- lib/dawn/kb/cve_2008_3657.rb
-- lib/dawn/kb/cve_2008_3790.rb
-- lib/dawn/kb/cve_2008_3905.rb
-- lib/dawn/kb/cve_2008_4094.rb
-- lib/dawn/kb/cve_2008_4310.rb
-- lib/dawn/kb/cve_2008_5189.rb
-- lib/dawn/kb/cve_2008_7248.rb
-- lib/dawn/kb/cve_2009_4078.rb
-- lib/dawn/kb/cve_2009_4124.rb
-- lib/dawn/kb/cve_2009_4214.rb
-- lib/dawn/kb/cve_2010_1330.rb
-- lib/dawn/kb/cve_2010_2489.rb
-- lib/dawn/kb/cve_2010_3933.rb
-- lib/dawn/kb/cve_2011_0188.rb
-- lib/dawn/kb/cve_2011_0446.rb
-- lib/dawn/kb/cve_2011_0447.rb
-- lib/dawn/kb/cve_2011_0739.rb
-- lib/dawn/kb/cve_2011_0995.rb
-- lib/dawn/kb/cve_2011_1004.rb
-- lib/dawn/kb/cve_2011_1005.rb
-- lib/dawn/kb/cve_2011_2197.rb
-- lib/dawn/kb/cve_2011_2686.rb
-- lib/dawn/kb/cve_2011_2705.rb
-- lib/dawn/kb/cve_2011_2929.rb
-- lib/dawn/kb/cve_2011_2930.rb
-- lib/dawn/kb/cve_2011_2931.rb
-- lib/dawn/kb/cve_2011_2932.rb
-- lib/dawn/kb/cve_2011_3009.rb
-- lib/dawn/kb/cve_2011_3186.rb
-- lib/dawn/kb/cve_2011_3187.rb
-- lib/dawn/kb/cve_2011_4319.rb
-- lib/dawn/kb/cve_2011_4815.rb
-- lib/dawn/kb/cve_2011_5036.rb
-- lib/dawn/kb/cve_2012_1098.rb
-- lib/dawn/kb/cve_2012_1099.rb
-- lib/dawn/kb/cve_2012_1241.rb
-- lib/dawn/kb/cve_2012_2139.rb
-- lib/dawn/kb/cve_2012_2140.rb
-- lib/dawn/kb/cve_2012_2660.rb
-- lib/dawn/kb/cve_2012_2661.rb
-- lib/dawn/kb/cve_2012_2671.rb
-- lib/dawn/kb/cve_2012_2694.rb
-- lib/dawn/kb/cve_2012_2695.rb
-- lib/dawn/kb/cve_2012_3424.rb
-- lib/dawn/kb/cve_2012_3463.rb
-- lib/dawn/kb/cve_2012_3464.rb
-- lib/dawn/kb/cve_2012_3465.rb
-- lib/dawn/kb/cve_2012_4464.rb
-- lib/dawn/kb/cve_2012_4466.rb
-- lib/dawn/kb/cve_2012_4481.rb
-- lib/dawn/kb/cve_2012_4522.rb
-- lib/dawn/kb/cve_2012_5370.rb
-- lib/dawn/kb/cve_2012_5371.rb
-- lib/dawn/kb/cve_2012_5380.rb
-- lib/dawn/kb/cve_2012_6109.rb
-- lib/dawn/kb/cve_2012_6134.rb
-- lib/dawn/kb/cve_2012_6496.rb
-- lib/dawn/kb/cve_2012_6497.rb
-- lib/dawn/kb/cve_2012_6684.rb
-- lib/dawn/kb/cve_2013_0155.rb
-- lib/dawn/kb/cve_2013_0156.rb
-- lib/dawn/kb/cve_2013_0162.rb
-- lib/dawn/kb/cve_2013_0175.rb
-- lib/dawn/kb/cve_2013_0183.rb
-- lib/dawn/kb/cve_2013_0184.rb
-- lib/dawn/kb/cve_2013_0233.rb
-- lib/dawn/kb/cve_2013_0256.rb
-- lib/dawn/kb/cve_2013_0262.rb
-- lib/dawn/kb/cve_2013_0263.rb
-- lib/dawn/kb/cve_2013_0269.rb
-- lib/dawn/kb/cve_2013_0276.rb
-- lib/dawn/kb/cve_2013_0277.rb
-- lib/dawn/kb/cve_2013_0284.rb
-- lib/dawn/kb/cve_2013_0285.rb
-- lib/dawn/kb/cve_2013_0333.rb
-- lib/dawn/kb/cve_2013_0334.rb
-- lib/dawn/kb/cve_2013_1607.rb
-- lib/dawn/kb/cve_2013_1655.rb
-- lib/dawn/kb/cve_2013_1656.rb
-- lib/dawn/kb/cve_2013_1756.rb
-- lib/dawn/kb/cve_2013_1800.rb
-- lib/dawn/kb/cve_2013_1801.rb
-- lib/dawn/kb/cve_2013_1802.rb
-- lib/dawn/kb/cve_2013_1812.rb
-- lib/dawn/kb/cve_2013_1821.rb
-- lib/dawn/kb/cve_2013_1854.rb
-- lib/dawn/kb/cve_2013_1855.rb
-- lib/dawn/kb/cve_2013_1856.rb
-- lib/dawn/kb/cve_2013_1857.rb
-- lib/dawn/kb/cve_2013_1875.rb
-- lib/dawn/kb/cve_2013_1898.rb
-- lib/dawn/kb/cve_2013_1911.rb
-- lib/dawn/kb/cve_2013_1933.rb
-- lib/dawn/kb/cve_2013_1947.rb
-- lib/dawn/kb/cve_2013_1948.rb
-- lib/dawn/kb/cve_2013_2065.rb
-- lib/dawn/kb/cve_2013_2090.rb
-- lib/dawn/kb/cve_2013_2105.rb
-- lib/dawn/kb/cve_2013_2119.rb
-- lib/dawn/kb/cve_2013_2512.rb
-- lib/dawn/kb/cve_2013_2513.rb
-- lib/dawn/kb/cve_2013_2516.rb
-- lib/dawn/kb/cve_2013_2615.rb
-- lib/dawn/kb/cve_2013_2616.rb
-- lib/dawn/kb/cve_2013_2617.rb
-- lib/dawn/kb/cve_2013_3221.rb
-- lib/dawn/kb/cve_2013_4164.rb
-- lib/dawn/kb/cve_2013_4203.rb
-- lib/dawn/kb/cve_2013_4389.rb
-- lib/dawn/kb/cve_2013_4413.rb
-- lib/dawn/kb/cve_2013_4457.rb
-- lib/dawn/kb/cve_2013_4478.rb
-- lib/dawn/kb/cve_2013_4479.rb
-- lib/dawn/kb/cve_2013_4489.rb
-- lib/dawn/kb/cve_2013_4491.rb
-- lib/dawn/kb/cve_2013_4492.rb
-- lib/dawn/kb/cve_2013_4562.rb
-- lib/dawn/kb/cve_2013_4593.rb
-- lib/dawn/kb/cve_2013_5647.rb
-- lib/dawn/kb/cve_2013_5671.rb
-- lib/dawn/kb/cve_2013_6414.rb
-- lib/dawn/kb/cve_2013_6415.rb
-- lib/dawn/kb/cve_2013_6416.rb
-- lib/dawn/kb/cve_2013_6417.rb
-- lib/dawn/kb/cve_2013_6421.rb
-- lib/dawn/kb/cve_2013_6459.rb
-- lib/dawn/kb/cve_2013_6460.rb
-- lib/dawn/kb/cve_2013_6461.rb
-- lib/dawn/kb/cve_2013_7086.rb
-- lib/dawn/kb/cve_2014_0036.rb
-- lib/dawn/kb/cve_2014_0080.rb
-- lib/dawn/kb/cve_2014_0081.rb
-- lib/dawn/kb/cve_2014_0082.rb
-- lib/dawn/kb/cve_2014_0130.rb
-- lib/dawn/kb/cve_2014_1233.rb
-- lib/dawn/kb/cve_2014_1234.rb
-- lib/dawn/kb/cve_2014_2322.rb
-- lib/dawn/kb/cve_2014_2525.rb
-- lib/dawn/kb/cve_2014_2538.rb
-- lib/dawn/kb/cve_2014_3482.rb
-- lib/dawn/kb/cve_2014_3483.rb
-- lib/dawn/kb/cve_2014_3916.rb
-- lib/dawn/kb/cve_2014_4975.rb
-- lib/dawn/kb/cve_2014_7818.rb
-- lib/dawn/kb/cve_2014_7819.rb
-- lib/dawn/kb/cve_2014_7829.rb
-- lib/dawn/kb/cve_2014_8090.rb
-- lib/dawn/kb/cve_2014_9490.rb
-- lib/dawn/kb/cve_2015_1819.rb
-- lib/dawn/kb/cve_2015_1840/cve_2015_1840_a.rb
-- lib/dawn/kb/cve_2015_1840/cve_2015_1840_b.rb
-- lib/dawn/kb/cve_2015_2963.rb
-- lib/dawn/kb/cve_2015_3224.rb
-- lib/dawn/kb/cve_2015_3225.rb
-- lib/dawn/kb/cve_2015_3226.rb
-- lib/dawn/kb/cve_2015_3227.rb
-- lib/dawn/kb/cve_2015_3448.rb
-- lib/dawn/kb/cve_2015_4020.rb
-- lib/dawn/kb/cve_2015_5312.rb
-- lib/dawn/kb/cve_2015_7497.rb
-- lib/dawn/kb/cve_2015_7498.rb
-- lib/dawn/kb/cve_2015_7499.rb
-- lib/dawn/kb/cve_2015_7500.rb
-- lib/dawn/kb/cve_2015_7519.rb
-- lib/dawn/kb/cve_2015_7541.rb
-- lib/dawn/kb/cve_2015_7576.rb
-- lib/dawn/kb/cve_2015_7577.rb
-- lib/dawn/kb/cve_2015_7578.rb
-- lib/dawn/kb/cve_2015_7579.rb
-- lib/dawn/kb/cve_2015_7581.rb
-- lib/dawn/kb/cve_2015_8241.rb
-- lib/dawn/kb/cve_2015_8242.rb
-- lib/dawn/kb/cve_2015_8317.rb
-- lib/dawn/kb/cve_2016_0751.rb
-- lib/dawn/kb/cve_2016_0752.rb
-- lib/dawn/kb/cve_2016_0753.rb
-- lib/dawn/kb/cve_2016_2097.rb
-- lib/dawn/kb/cve_2016_2098.rb
-- lib/dawn/kb/cve_2016_5697.rb
-- lib/dawn/kb/cve_2016_6316.rb
-- lib/dawn/kb/cve_2016_6317.rb
-- lib/dawn/kb/cve_2016_6582.rb
 - lib/dawn/kb/dependency_check.rb
 - lib/dawn/kb/deprecation_check.rb
-- lib/dawn/kb/gem_check.rb
-- lib/dawn/kb/not_revised_code.rb
 - lib/dawn/kb/operating_system_check.rb
-- lib/dawn/kb/osvdb_105971.rb
-- lib/dawn/kb/osvdb_108530.rb
-- lib/dawn/kb/osvdb_108563.rb
-- lib/dawn/kb/osvdb_108569.rb
-- lib/dawn/kb/osvdb_108570.rb
-- lib/dawn/kb/osvdb_115654.rb
-- lib/dawn/kb/osvdb_116010.rb
-- lib/dawn/kb/osvdb_117903.rb
-- lib/dawn/kb/osvdb_118579.rb
-- lib/dawn/kb/osvdb_118830.rb
-- lib/dawn/kb/osvdb_118954.rb
-- lib/dawn/kb/osvdb_119878.rb
-- lib/dawn/kb/osvdb_119927.rb
-- lib/dawn/kb/osvdb_120415.rb
-- lib/dawn/kb/osvdb_120857.rb
-- lib/dawn/kb/osvdb_121701.rb
-- lib/dawn/kb/osvdb_132234.rb
-- lib/dawn/kb/owasp_ror_cheatsheet.rb
-- lib/dawn/kb/owasp_ror_cheatsheet/check_for_backup_files.rb
-- lib/dawn/kb/owasp_ror_cheatsheet/check_for_safe_redirect_and_forward.rb
-- lib/dawn/kb/owasp_ror_cheatsheet/command_injection.rb
-- lib/dawn/kb/owasp_ror_cheatsheet/csrf.rb
-- lib/dawn/kb/owasp_ror_cheatsheet/mass_assignment_in_model.rb
-- lib/dawn/kb/owasp_ror_cheatsheet/security_related_headers.rb
-- lib/dawn/kb/owasp_ror_cheatsheet/sensitive_files.rb
-- lib/dawn/kb/owasp_ror_cheatsheet/session_stored_in_database.rb
 - lib/dawn/kb/pattern_match_check.rb
 - lib/dawn/kb/ruby_version_check.rb
-- lib/dawn/kb/simpleform_xss_20131129.rb
+- lib/dawn/kb/rubygem_check.rb
+- lib/dawn/kb/unsafe_depedency_check.rb
 - lib/dawn/kb/version_check.rb
 - lib/dawn/knowledge_base.rb
-- lib/dawn/knowledge_base_experimental.rb
 - lib/dawn/logger.rb
 - lib/dawn/padrino.rb
 - lib/dawn/rails.rb
@@ -609,121 +346,20 @@ files:
 - spec/lib/kb/codesake_dependency_version_check_spec.rb
 - spec/lib/kb/codesake_deprecation_check_spec.rb
 - spec/lib/kb/codesake_ruby_version_check_spec.rb
+- spec/lib/kb/codesake_unsafe_dependency_check_spec.rb
 - spec/lib/kb/codesake_version_check_spec.rb
-- spec/lib/kb/cve_2011_2705_spec.rb
-- spec/lib/kb/cve_2011_2930_spec.rb
-- spec/lib/kb/cve_2011_3009_spec.rb
-- spec/lib/kb/cve_2011_3187_spec.rb
-- spec/lib/kb/cve_2011_4319_spec.rb
-- spec/lib/kb/cve_2011_5036_spec.rb
-- spec/lib/kb/cve_2012_1098_spec.rb
-- spec/lib/kb/cve_2012_2139_spec.rb
-- spec/lib/kb/cve_2012_2671_spec.rb
-- spec/lib/kb/cve_2012_6109_spec.rb
-- spec/lib/kb/cve_2012_6684_spec.rb
-- spec/lib/kb/cve_2013_0162_spec.rb
-- spec/lib/kb/cve_2013_0183_spec.rb
-- spec/lib/kb/cve_2013_0184_spec.rb
-- spec/lib/kb/cve_2013_0256_spec.rb
-- spec/lib/kb/cve_2013_0262_spec.rb
-- spec/lib/kb/cve_2013_0263_spec.rb
-- spec/lib/kb/cve_2013_0334_spec.rb
-- spec/lib/kb/cve_2013_1607_spec.rb
-- spec/lib/kb/cve_2013_1655_spec.rb
-- spec/lib/kb/cve_2013_1756_spec.rb
-- spec/lib/kb/cve_2013_2090_spec.rb
-- spec/lib/kb/cve_2013_2105_spec.rb
-- spec/lib/kb/cve_2013_2119_spec.rb
-- spec/lib/kb/cve_2013_2512_spec.rb
-- spec/lib/kb/cve_2013_2513_spec.rb
-- spec/lib/kb/cve_2013_2516_spec.rb
-- spec/lib/kb/cve_2013_4203_spec.rb
-- spec/lib/kb/cve_2013_4413_spec.rb
-- spec/lib/kb/cve_2013_4489_spec.rb
-- spec/lib/kb/cve_2013_4491_spec.rb
-- spec/lib/kb/cve_2013_4593_spec.rb
-- spec/lib/kb/cve_2013_5647_spec.rb
-- spec/lib/kb/cve_2013_5671_spec.rb
-- spec/lib/kb/cve_2013_6414_spec.rb
-- spec/lib/kb/cve_2013_6416_spec.rb
-- spec/lib/kb/cve_2013_6459_spec.rb
-- spec/lib/kb/cve_2013_7086_spec.rb
-- spec/lib/kb/cve_2014_0036_spec.rb
-- spec/lib/kb/cve_2014_0080_spec.rb
-- spec/lib/kb/cve_2014_0081_spec.rb
-- spec/lib/kb/cve_2014_0082_spec.rb
-- spec/lib/kb/cve_2014_0130_spec.rb
-- spec/lib/kb/cve_2014_1233_spec.rb
-- spec/lib/kb/cve_2014_1234_spec.rb
-- spec/lib/kb/cve_2014_2322_spec.rb
-- spec/lib/kb/cve_2014_2538_spec.rb
-- spec/lib/kb/cve_2014_3482_spec.rb
-- spec/lib/kb/cve_2014_3483_spec.rb
-- spec/lib/kb/cve_2014_7818_spec.rb
-- spec/lib/kb/cve_2014_7819_spec.rb
-- spec/lib/kb/cve_2014_7829_spec.rb
-- spec/lib/kb/cve_2014_9490_spec.rb
-- spec/lib/kb/cve_2015_1819_spec.rb
-- spec/lib/kb/cve_2015_1840_spec.rb
-- spec/lib/kb/cve_2015_2963_spec.rb
-- spec/lib/kb/cve_2015_3224_spec.rb
-- spec/lib/kb/cve_2015_3225_spec.rb
-- spec/lib/kb/cve_2015_3226_spec.rb
-- spec/lib/kb/cve_2015_3227_spec.rb
-- spec/lib/kb/cve_2015_3448_spec.rb
-- spec/lib/kb/cve_2015_4020_spec.rb
-- spec/lib/kb/cve_2015_5312_spec.rb
-- spec/lib/kb/cve_2015_7497_spec.rb
-- spec/lib/kb/cve_2015_7498_spec.rb
-- spec/lib/kb/cve_2015_7499_spec.rb
-- spec/lib/kb/cve_2015_7500_spec.rb
-- spec/lib/kb/cve_2015_7519_spec.rb
-- spec/lib/kb/cve_2015_7541_spec.rb
-- spec/lib/kb/cve_2015_7576_spec.rb
-- spec/lib/kb/cve_2015_7577_spec.rb
-- spec/lib/kb/cve_2015_7578_spec.rb
-- spec/lib/kb/cve_2015_7579_spec.rb
-- spec/lib/kb/cve_2015_7581_spec.rb
-- spec/lib/kb/cve_2015_8241_spec.rb
-- spec/lib/kb/cve_2015_8242_spec.rb
-- spec/lib/kb/cve_2015_8317_spec.rb
-- spec/lib/kb/cve_2016_0751_spec.rb
-- spec/lib/kb/cve_2016_0752_spec.rb
-- spec/lib/kb/cve_2016_0753_spec.rb
-- spec/lib/kb/cve_2016_2097_spec.rb
-- spec/lib/kb/cve_2016_2098_spec.rb
-- spec/lib/kb/cve_2016_5697_spec.rb
-- spec/lib/kb/cve_2016_6316_spec.rb
-- spec/lib/kb/cve_2016_6317_spec.rb
-- spec/lib/kb/cve_2016_6582_spec.rb
-- spec/lib/kb/osvdb_105971_spec.rb
-- spec/lib/kb/osvdb_108530_spec.rb
-- spec/lib/kb/osvdb_108563_spec.rb
-- spec/lib/kb/osvdb_108569_spec.rb
-- spec/lib/kb/osvdb_108570_spec.rb
-- spec/lib/kb/osvdb_115654_spec.rb
-- spec/lib/kb/osvdb_116010_spec.rb
-- spec/lib/kb/osvdb_117903_spec.rb
-- spec/lib/kb/osvdb_118579_spec.rb
-- spec/lib/kb/osvdb_118830_spec.rb
-- spec/lib/kb/osvdb_118954_spec.rb
-- spec/lib/kb/osvdb_119878_spec.rb
-- spec/lib/kb/osvdb_119927_spec.rb
-- spec/lib/kb/osvdb_120415_spec.rb
-- spec/lib/kb/osvdb_120857_spec.rb
-- spec/lib/kb/osvdb_121701_spec.rb
-- spec/lib/kb/osvdb_132234_spec.rb
+- spec/lib/kb/dependency_check.yml
 - spec/lib/kb/owasp_ror_cheatsheet_disabled.rb
 - spec/lib/kb/yamilize_kb_spec.rb
 - spec/spec_helper.rb
 - support/bootstrap.js
 - support/bootstrap.min.css
 - support/codesake.css
-homepage: http://dawnscanner.org
+homepage: https://dawnscanner.org
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -731,16 +367,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 1.9.3
+      version: 2.3.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.5.1
-signing_key: 
+rubygems_version: 3.2.3
+signing_key:
 specification_version: 4
 summary: Dawnscanner is a security source code scanner for ruby powered code. It is
   crafted with love to make your sinatra, padrino and ruby on rails web applications
@@ -761,110 +396,9 @@ test_files:
 - spec/lib/kb/codesake_dependency_version_check_spec.rb
 - spec/lib/kb/codesake_deprecation_check_spec.rb
 - spec/lib/kb/codesake_ruby_version_check_spec.rb
+- spec/lib/kb/codesake_unsafe_dependency_check_spec.rb
 - spec/lib/kb/codesake_version_check_spec.rb
-- spec/lib/kb/cve_2011_2705_spec.rb
-- spec/lib/kb/cve_2011_2930_spec.rb
-- spec/lib/kb/cve_2011_3009_spec.rb
-- spec/lib/kb/cve_2011_3187_spec.rb
-- spec/lib/kb/cve_2011_4319_spec.rb
-- spec/lib/kb/cve_2011_5036_spec.rb
-- spec/lib/kb/cve_2012_1098_spec.rb
-- spec/lib/kb/cve_2012_2139_spec.rb
-- spec/lib/kb/cve_2012_2671_spec.rb
-- spec/lib/kb/cve_2012_6109_spec.rb
-- spec/lib/kb/cve_2012_6684_spec.rb
-- spec/lib/kb/cve_2013_0162_spec.rb
-- spec/lib/kb/cve_2013_0183_spec.rb
-- spec/lib/kb/cve_2013_0184_spec.rb
-- spec/lib/kb/cve_2013_0256_spec.rb
-- spec/lib/kb/cve_2013_0262_spec.rb
-- spec/lib/kb/cve_2013_0263_spec.rb
-- spec/lib/kb/cve_2013_0334_spec.rb
-- spec/lib/kb/cve_2013_1607_spec.rb
-- spec/lib/kb/cve_2013_1655_spec.rb
-- spec/lib/kb/cve_2013_1756_spec.rb
-- spec/lib/kb/cve_2013_2090_spec.rb
-- spec/lib/kb/cve_2013_2105_spec.rb
-- spec/lib/kb/cve_2013_2119_spec.rb
-- spec/lib/kb/cve_2013_2512_spec.rb
-- spec/lib/kb/cve_2013_2513_spec.rb
-- spec/lib/kb/cve_2013_2516_spec.rb
-- spec/lib/kb/cve_2013_4203_spec.rb
-- spec/lib/kb/cve_2013_4413_spec.rb
-- spec/lib/kb/cve_2013_4489_spec.rb
-- spec/lib/kb/cve_2013_4491_spec.rb
-- spec/lib/kb/cve_2013_4593_spec.rb
-- spec/lib/kb/cve_2013_5647_spec.rb
-- spec/lib/kb/cve_2013_5671_spec.rb
-- spec/lib/kb/cve_2013_6414_spec.rb
-- spec/lib/kb/cve_2013_6416_spec.rb
-- spec/lib/kb/cve_2013_6459_spec.rb
-- spec/lib/kb/cve_2013_7086_spec.rb
-- spec/lib/kb/cve_2014_0036_spec.rb
-- spec/lib/kb/cve_2014_0080_spec.rb
-- spec/lib/kb/cve_2014_0081_spec.rb
-- spec/lib/kb/cve_2014_0082_spec.rb
-- spec/lib/kb/cve_2014_0130_spec.rb
-- spec/lib/kb/cve_2014_1233_spec.rb
-- spec/lib/kb/cve_2014_1234_spec.rb
-- spec/lib/kb/cve_2014_2322_spec.rb
-- spec/lib/kb/cve_2014_2538_spec.rb
-- spec/lib/kb/cve_2014_3482_spec.rb
-- spec/lib/kb/cve_2014_3483_spec.rb
-- spec/lib/kb/cve_2014_7818_spec.rb
-- spec/lib/kb/cve_2014_7819_spec.rb
-- spec/lib/kb/cve_2014_7829_spec.rb
-- spec/lib/kb/cve_2014_9490_spec.rb
-- spec/lib/kb/cve_2015_1819_spec.rb
-- spec/lib/kb/cve_2015_1840_spec.rb
-- spec/lib/kb/cve_2015_2963_spec.rb
-- spec/lib/kb/cve_2015_3224_spec.rb
-- spec/lib/kb/cve_2015_3225_spec.rb
-- spec/lib/kb/cve_2015_3226_spec.rb
-- spec/lib/kb/cve_2015_3227_spec.rb
-- spec/lib/kb/cve_2015_3448_spec.rb
-- spec/lib/kb/cve_2015_4020_spec.rb
-- spec/lib/kb/cve_2015_5312_spec.rb
-- spec/lib/kb/cve_2015_7497_spec.rb
-- spec/lib/kb/cve_2015_7498_spec.rb
-- spec/lib/kb/cve_2015_7499_spec.rb
-- spec/lib/kb/cve_2015_7500_spec.rb
-- spec/lib/kb/cve_2015_7519_spec.rb
-- spec/lib/kb/cve_2015_7541_spec.rb
-- spec/lib/kb/cve_2015_7576_spec.rb
-- spec/lib/kb/cve_2015_7577_spec.rb
-- spec/lib/kb/cve_2015_7578_spec.rb
-- spec/lib/kb/cve_2015_7579_spec.rb
-- spec/lib/kb/cve_2015_7581_spec.rb
-- spec/lib/kb/cve_2015_8241_spec.rb
-- spec/lib/kb/cve_2015_8242_spec.rb
-- spec/lib/kb/cve_2015_8317_spec.rb
-- spec/lib/kb/cve_2016_0751_spec.rb
-- spec/lib/kb/cve_2016_0752_spec.rb
-- spec/lib/kb/cve_2016_0753_spec.rb
-- spec/lib/kb/cve_2016_2097_spec.rb
-- spec/lib/kb/cve_2016_2098_spec.rb
-- spec/lib/kb/cve_2016_5697_spec.rb
-- spec/lib/kb/cve_2016_6316_spec.rb
-- spec/lib/kb/cve_2016_6317_spec.rb
-- spec/lib/kb/cve_2016_6582_spec.rb
-- spec/lib/kb/osvdb_105971_spec.rb
-- spec/lib/kb/osvdb_108530_spec.rb
-- spec/lib/kb/osvdb_108563_spec.rb
-- spec/lib/kb/osvdb_108569_spec.rb
-- spec/lib/kb/osvdb_108570_spec.rb
-- spec/lib/kb/osvdb_115654_spec.rb
-- spec/lib/kb/osvdb_116010_spec.rb
-- spec/lib/kb/osvdb_117903_spec.rb
-- spec/lib/kb/osvdb_118579_spec.rb
-- spec/lib/kb/osvdb_118830_spec.rb
-- spec/lib/kb/osvdb_118954_spec.rb
-- spec/lib/kb/osvdb_119878_spec.rb
-- spec/lib/kb/osvdb_119927_spec.rb
-- spec/lib/kb/osvdb_120415_spec.rb
-- spec/lib/kb/osvdb_120857_spec.rb
-- spec/lib/kb/osvdb_121701_spec.rb
-- spec/lib/kb/osvdb_132234_spec.rb
+- spec/lib/kb/dependency_check.yml
 - spec/lib/kb/owasp_ror_cheatsheet_disabled.rb
 - spec/lib/kb/yamilize_kb_spec.rb
 - spec/spec_helper.rb