Semgrep Registry

Every time a tweet goes out here, a Semgrep Rule gets its wings.

Follow this account to find out about the latest rules released in the Semgrep Registry!

[Semgrep Registry @SemgrepRegistry]

New JavaScript rule in the Registry:
🤖 express-third-party-object-deserialization (https://t.co/r1CkdyxwCx)

📋 The following function call $SER.$FUNC accepts user controlled data which can result in Remote Code Execution (RCE) through Object Deserialization. It is recommended…

[Semgrep Registry @SemgrepRegistry]

New JavaScript rule in the Registry:
🤖 express-session-hardcoded-secret (https://t.co/83TVWdcw6z)

📋 The "secret" attribute of the express-session third-party package is used to sign session IDs. The secret was found to be hard-coded, which can lead to session hijacking attac…

[Semgrep Registry @SemgrepRegistry]

New JavaScript rule in the Registry:
🤖 express-res-sendfile (https://t.co/UuWEqbLZoh)

📋 The application processes user-input, this is passed to res.sendFile which can allow an attacker to arbitrarily read files on the system through path traversal. It is recommended to perfo…

[Semgrep Registry @SemgrepRegistry]

New JavaScript rule in the Registry:
🤖 express-open-redirect (https://t.co/3Qqx5w6mQn)

📋 The application redirects to a URL specified by user-supplied input ($QUERY) that is not validated. This could redirect users to malicious locations. Consider using an allow-list approac…

[Semgrep Registry @SemgrepRegistry]

New JavaScript rule in the Registry:
🤖 express-libxml-vm-noent (https://t.co/lFVgpO5uJ5)

📋 Detected use of parseXml() function with the `noent` field set to `true`. This can lead to an XML External Entities (XXE) attack if untrusted data is passed into it.

[Semgrep Registry @SemgrepRegistry]

New JavaScript rule in the Registry:
🤖 express-libxml-noent (https://t.co/z9dth6b9z7)

📋 The libxml library processes user-input with the `noent` attribute is set to `true` which can lead to being vulnerable to XML External Entities (XXE) type attacks. It is recommended to se…

[Semgrep Registry @SemgrepRegistry]

New JavaScript rule in the Registry:
🤖 express-sequelize-injection (https://t.co/nRTZnbPWO8)

📋 Detected a sequelize statement that is tainted by user-input. This could lead to SQL injection if the variable is user-controlled and is not properly sanitized. In order to prevent…

[Semgrep Registry @SemgrepRegistry]

New JavaScript rule in the Registry:
🤖 express-third-party-object-deserialization (https://t.co/r1CkdyxwCx)

📋 The following function call $SER.$FUNC accepts user controlled data which can result in Remote Code Execution (RCE) through Object Deserialization. It is recommended…

[Semgrep Registry @SemgrepRegistry]

New JavaScript rule in the Registry:
🤖 express-session-hardcoded-secret (https://t.co/83TVWdcw6z)

📋 The "secret" attribute of the express-session third-party package is used to sign session IDs. The secret was found to be hard-coded, which can lead to session hijacking attac…

[Semgrep Registry @SemgrepRegistry]

New JavaScript rule in the Registry:
🤖 express-res-sendfile (https://t.co/UuWEqbLZoh)

📋 The application processes user-input, this is passed to res.sendFile which can allow an attacker to arbitrarily read files on the system through path traversal. It is recommended to perfo…

[Semgrep Registry @SemgrepRegistry]

New JavaScript rule in the Registry:
🤖 express-open-redirect (https://t.co/3Qqx5w6mQn)

📋 The application redirects to a URL specified by user-supplied input ($QUERY) that is not validated. This could redirect users to malicious locations. Consider using an allow-list approac…

[Semgrep Registry @SemgrepRegistry]

New JavaScript rule in the Registry:
🤖 express-libxml-vm-noent (https://t.co/lFVgpO5uJ5)

📋 Detected use of parseXml() function with the `noent` field set to `true`. This can lead to an XML External Entities (XXE) attack if untrusted data is passed into it.

[Semgrep Registry @SemgrepRegistry]

New JavaScript rule in the Registry:
🤖 express-libxml-noent (https://t.co/z9dth6b9z7)

📋 The libxml library processes user-input with the `noent` attribute is set to `true` which can lead to being vulnerable to XML External Entities (XXE) type attacks. It is recommended to se…

[Semgrep Registry @SemgrepRegistry]

New ruby rule in the Registry:
🤖 tainted-deserialization (https://t.co/AciF6nTc1J)

📋 Deserialization of a string tainted by `event` object found. Objects in Ruby can be serialized into strings, then later loaded from strings. However, uses of `load` can cause remote code exe…

[Semgrep Registry @SemgrepRegistry]

New java rule in the Registry:
🤖 tainted-url-host (https://t.co/Vxu7vRBf1U)

📋 User data flows into the host portion of this manually-constructed URL. This could allow an attacker to send data to their own server, potentially exposing sensitive data such as cookies or authori…

[Semgrep Registry @SemgrepRegistry]

New java rule in the Registry:
🤖 tainted-system-command (https://t.co/ggziY4WR2Z)

📋 Detected user input entering a method which executes a system command. This could result in a command injection vulnerability, which allows an attacker to inject an arbitrary system command o…

[Semgrep Registry @SemgrepRegistry]

New java rule in the Registry:
🤖 tainted-html-string (https://t.co/Ds5Povlqyi)

📋 Detected user input flowing into a manually constructed HTML string. You may be accidentally bypassing secure methods of rendering HTML by manually constructing HTML and this could create a cros…

[Semgrep Registry @SemgrepRegistry]

New java rule in the Registry:
🤖 tainted-file-path (https://t.co/Ory03NFvld)

📋 Detected user input controlling a file path. An attacker could control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controll…

[Semgrep Registry @SemgrepRegistry]

New ruby rule in the Registry:
🤖 tainted-deserialization (https://t.co/AciF6nTc1J)

📋 Deserialization of a string tainted by `event` object found. Objects in Ruby can be serialized into strings, then later loaded from strings. However, uses of `load` can cause remote code exe…

[Semgrep Registry @SemgrepRegistry]

New java rule in the Registry:
🤖 tainted-url-host (https://t.co/Vxu7vRBf1U)

📋 User data flows into the host portion of this manually-constructed URL. This could allow an attacker to send data to their own server, potentially exposing sensitive data such as cookies or authori…