getdoorman 1.0.6 → 1.0.8

package/src/rules/security/ruby.js

@@ -54,7 +54,7 @@ const rules = [
   {
     id: 'SEC-RUBY-001',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'SQL Injection via String Interpolation in where()',
     description: 'Using string interpolation inside ActiveRecord where() allows SQL injection.',
@@ -70,7 +70,7 @@ const rules = [
   {
     id: 'SEC-RUBY-002',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'SQL Injection via String Concatenation in where()',
     description: 'Concatenating user input into ActiveRecord where() enables SQL injection.',
@@ -86,7 +86,7 @@ const rules = [
   {
     id: 'SEC-RUBY-003',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Raw SQL with String Interpolation',
     description: 'Using execute() or select_all() with interpolated strings allows SQL injection.',
@@ -102,7 +102,7 @@ const rules = [
   {
     id: 'SEC-RUBY-004',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'SQL Injection via find_by_sql',
     description: 'Using find_by_sql with string interpolation allows SQL injection.',
@@ -457,7 +457,7 @@ const rules = [
   {
     id: 'SEC-RUBY-025',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'CSRF Protection Disabled via Configuration',
     description: 'Setting allow_forgery_protection to false disables CSRF globally.',
@@ -477,7 +477,7 @@ const rules = [
   {
     id: 'SEC-RUBY-026',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Command Injection via system()',
     description: 'Passing user input to system() allows command injection.',
@@ -493,7 +493,7 @@ const rules = [
   {
     id: 'SEC-RUBY-027',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Command Injection via Backticks',
     description: 'Using backticks with interpolation allows command injection.',
@@ -509,7 +509,7 @@ const rules = [
   {
     id: 'SEC-RUBY-028',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Command Injection via exec()',
     description: 'Passing user input to exec() allows command injection.',
@@ -525,7 +525,7 @@ const rules = [
   {
     id: 'SEC-RUBY-029',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Command Injection via IO.popen',
     description: 'Using IO.popen with string interpolation allows command injection.',
@@ -541,7 +541,7 @@ const rules = [
   {
     id: 'SEC-RUBY-030',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Command Injection via Open3 with Interpolation',
     description: 'Using Open3 methods with string interpolation allows command injection.',
@@ -561,7 +561,7 @@ const rules = [
   {
     id: 'SEC-RUBY-031',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Unsafe YAML.load',
     description: 'YAML.load can deserialize arbitrary Ruby objects, leading to RCE.',
@@ -577,7 +577,7 @@ const rules = [
   {
     id: 'SEC-RUBY-032',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Unsafe Marshal.load',
     description: 'Marshal.load can execute arbitrary code when deserializing untrusted data.',
@@ -593,7 +593,7 @@ const rules = [
   {
     id: 'SEC-RUBY-033',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Unsafe Marshal.restore',
     description: 'Marshal.restore is an alias for Marshal.load and is equally dangerous.',
@@ -625,7 +625,7 @@ const rules = [
   {
     id: 'SEC-RUBY-035',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Server-Side Template Injection via ERB.new',
     description: 'Passing user input to ERB.new allows arbitrary code execution.',
@@ -729,7 +729,7 @@ const rules = [
   {
     id: 'SEC-RUBY-041',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Code Injection via eval()',
     description: 'Using eval with user-controlled input allows arbitrary code execution.',
@@ -761,7 +761,7 @@ const rules = [
   {
     id: 'SEC-RUBY-043',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Unsafe constantize with User Input',
     description: 'Using constantize on user input allows instantiation of arbitrary classes.',
@@ -777,7 +777,7 @@ const rules = [
   {
     id: 'SEC-RUBY-044',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Code Injection via class_eval',
     description: 'Using class_eval with interpolated strings allows arbitrary code execution.',
@@ -845,7 +845,7 @@ const rules = [
   {
     id: 'SEC-RUBY-048',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Hardcoded Secret Key',
     description: 'Hardcoded secret_key_base exposes application to session forgery.',
@@ -961,7 +961,7 @@ const rules = [
   {
     id: 'SEC-RUBY-055',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Hardcoded Password',
     description: 'Hardcoded passwords in source code can be extracted by attackers.',
@@ -1029,7 +1029,7 @@ const rules = [
   {
     id: 'SEC-RUBY-059',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Template Injection via render with User Input',
     description: 'Passing user input to render() template name allows arbitrary template rendering.',

package/src/rules/security/rust.js

@@ -114,7 +114,7 @@ const rules = [
   {
     id: 'SEC-RS-005',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'SQL Injection via format! in Query',
     description: 'Using format! to build SQL queries allows injection attacks.',
@@ -130,7 +130,7 @@ const rules = [
   {
     id: 'SEC-RS-006',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'SQL Injection via String Concatenation',
     description: 'Building SQL queries with string concatenation allows injection.',
@@ -146,7 +146,7 @@ const rules = [
   {
     id: 'SEC-RS-007',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Command Injection via Command::new',
     description: 'Passing user-controlled input to Command::new or .arg() can lead to command injection.',
@@ -162,7 +162,7 @@ const rules = [
   {
     id: 'SEC-RS-008',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Command Injection via Shell Execution',
     description: 'Using Command::new("sh") or Command::new("bash") with -c flag and user input enables injection.',
@@ -210,7 +210,7 @@ const rules = [
   {
     id: 'SEC-RS-011',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Hardcoded Secret',
     description: 'Secrets hardcoded in source code can be extracted from binaries.',
@@ -371,7 +371,7 @@ const rules = [
   {
     id: 'SEC-RS-021',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'from_raw_parts Without Bounds Checking',
     description: 'slice::from_raw_parts creates a slice from a raw pointer without verifying bounds, risking buffer overflows.',

package/src/rules/security/shell.js

@@ -55,7 +55,7 @@ const rules = [
   {
     id: 'SEC-SHELL-002',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'eval with Variable Input',
     description: 'eval executes arbitrary code and is dangerous when used with user-controlled input.',
@@ -75,7 +75,7 @@ const rules = [
   {
     id: 'SEC-SHELL-003',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Pipe to Shell (curl | bash)',
     description: 'Piping downloaded content directly to a shell executes untrusted code without inspection.',
@@ -115,7 +115,7 @@ const rules = [
   {
     id: 'SEC-SHELL-005',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Hardcoded Password in Script',
     description: 'Passwords hardcoded in shell scripts can be read by anyone with file access.',
@@ -247,7 +247,7 @@ const rules = [
   {
     id: 'SEC-SHELL-011',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'SQL Injection in Shell Script',
     description: 'Interpolating variables into SQL commands allows SQL injection.',
@@ -267,7 +267,7 @@ const rules = [
   {
     id: 'SEC-SHELL-012',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Command Injection via Backticks with User Input',
     description: 'Using backticks with user-controlled variables allows arbitrary command execution.',
@@ -347,7 +347,7 @@ const rules = [
   {
     id: 'SEC-SHELL-016',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'SUID/SGID Bit Setting',
     description: 'Setting SUID/SGID bits on scripts or binaries can lead to privilege escalation.',
@@ -467,7 +467,7 @@ const rules = [
   {
     id: 'SEC-SHELL-022',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Exposed AWS Credentials',
     description: 'AWS access keys hardcoded in shell scripts can be used to compromise cloud resources.',
@@ -507,7 +507,7 @@ const rules = [
   {
     id: 'SEC-SHELL-024',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Firewall Disabled',
     description: 'Disabling firewall rules removes a critical security layer.',
@@ -547,7 +547,7 @@ const rules = [
   {
     id: 'SEC-SHELL-026',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Obfuscated Command Execution',
     description: 'Decoding base64 and piping to shell is a common technique to hide malicious commands.',

package/src/rules/security/ssrf.js

@@ -40,7 +40,7 @@ const rules = [
   {
     id: 'SEC-SSRF-001',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'HTTP Request with User-Controlled URL (SSRF)',
     description:

package/src/rules/security/swift.js

@@ -55,7 +55,7 @@ const rules = [
   {
     id: 'SEC-SWIFT-002',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Hardcoded API Key or Secret',
     description: 'API keys or secrets hardcoded in source code can be extracted from compiled binaries.',
@@ -455,7 +455,7 @@ const rules = [
   {
     id: 'SEC-SWIFT-022',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Hardcoded Encryption Key',
     description: 'Encryption keys hardcoded in source code can be extracted from the binary.',
@@ -555,7 +555,7 @@ const rules = [
   {
     id: 'SEC-SWIFT-027',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'SQL Injection in SQLite',
     description: 'String interpolation in SQLite queries allows SQL injection.',

package/src/rules/security/taint.js

@@ -15,7 +15,7 @@ const rules = [
   {
     id: 'TAINT-001',
     category: 'security',
-    severity: 'critical',
+    severity: 'high',
     confidence: 'likely',
     title: 'Data Flow / Taint Analysis — Indirect Injection',
     check({ files }) {