Amazon CodeGuruDetector Library Sign in to CodeGuru Reviewer

CodeGuru

Detector Library

Python detectors (86/86)

Improper privilege management Resource leak Inefficient string concatenation inside loop Spawning a process without main module Improper sanitization of wildcards or matching symbols Improper certificate validation URL redirection to untrusted site Integer overflow Mutually exclusive call Time zone aware datetimes Catch and swallow exception Insecure hashing Stack trace exposure Using AutoAddPolicy or WarningPolicy Use of a deprecated method Log injection Weak obfuscation of web request Deadlocks caused by improper multiprocessing API usage OS command injection Unauthenticated LDAP requests Low maintainability with low class cohesion Untrusted AMI images Confusion between equality and identity in conditional expression Path traversal AWS credentials logged Loose file permissions Socket close platform compatibility Zip bomb attack Unsanitized input is run as code Sensitive data stored unencrypted due to partial encryption Synchronous publication of AWS Lambda metrics Error prone sequence modification Batch request with unchecked failures Bad exception handling Unrestricted upload of dangerous file type Inefficient polling of AWS resource Hardcoded IP address Insecure connection using unencrypted protocol Incorrect use of Process.terminate API Unauthenticated Amazon SNS unsubscribe requests might succeed Hardcoded credentials Insecure Socket Bind XML External Entity Insecure CORS policy Cross-site request forgery Set SNS Return Subscription ARN Do not pass generic exception rule Unnecessary iteration Insecure cryptography Outdated subprocess module API Garbage collection prevention in multiprocessing Catch and rethrow exception Improper input validation Improper authentication Cross-site scripting Missing none check on response metadata Missing pagination Semaphore overflow prevention Mutable objects as default arguments of functions Insecure cookie Violation of PEP8 programming recommendations Insecure temporary file or directory Incorrect binding of SNS publish operations Client-side KMS reencryption Socket connection timeout AWS client not reused in a Lambda function Complex code hard to maintain Inefficient new method from hashlib Leaky subprocess timeout Usage of an API that is not recommended Dangerous global variables Enabling and overriding debug feature Risky use of dict get method Multiple values in return statement is prone to error LDAP injection XPath injection Clear text credentials Deserialization of untrusted object Use of an inefficient or incorrect API Multidimensional list initialization using replication is error prone Override of reserved variable names in a Lambda function SQL injection Docker arbitrary container run Missing S3 bucket owner condition Direct dict object modification Catastrophic backtracking regex

Low

Showing all detectors for the Python language with low severity.

Time zone aware datetimes

Using naive datetime objects might cause time zone related issues.

Use of a deprecated method

This code uses deprecated methods, which suggests that it has not been recently reviewed or maintained.

Inefficient polling of AWS resource

Custom polling can be inefficient and prone to error. Consider using AWS waiters instead.

Incorrect use of Process.terminate API

The Process.terminate API might cause data corruption of shared resources.

Catch and rethrow exception

Catching and re-throwing an exception without further actions is redundant and wasteful.

Mutable objects as default arguments of functions

Default values in Python are created exactly once, when the function is defined. If that object is changed, subsequent calls to the function will refer to the changed object, leading to confusion.

Incorrect binding of SNS publish operations

Incorrect binding of SNS publish operations with the subscribe or create_topic operations might lead to latency issues.

AWS client not reused in a Lambda function

Recreating AWS clients in each Lambda function invocation is expensive.

Complex code hard to maintain

Complex code can be difficult to read and hard to maintain.

Dangerous global variables

Global variables can be dangerous and cause bugs because they can be simultaneously accessed from multiple sections of a program.

Risky use of dict get method

Using the get method from the dict class without default values can cause runtime exceptions.

Multiple values in return statement is prone to error

Methods that return multiple values can be difficult to read and prone to error.

Use of an inefficient or incorrect API

Incorrect use of API leads to ambiguity and inconsistency

Multidimensional list initialization using replication is error prone

list replication using replication operator creates references to the existing objects, not copies, which could introduce bugs.

Missing S3 bucket owner condition

Not setting the S3 bucket owner condition might introduce a risk of accidentally using a wrong bucket.

Direct dict object modification

Directly modifying the __dict__ object might cause undesirable behavior due to symbol table modification.