Amazon QDetector Library Sign in to Amazon Q

Detector Library

Severity CriticalFeedback

Amazon Q

Detector Library

Ruby detectors (29/29)

SQL Injection Divide by Zero Sensitive HTTP Action Insufficient Protected Credentials Sensitive Information Leak Cross-Site Request Forgery (CSRF)Untrusted Deserialization Log Injection XML External Entity Path Injection Deprecated Get Configuration Http to File Access Insufficient Key Size Code Injection OS Command Injection Insecure Cookie Resource leak Cross Site Scripting (XSS)Untrusted Open Model Attr Accessible Server Side Request Forgery Improper Input Validation Stack Trace Exposure Open Redirect Improper Certificate Validation send_file Injection Unsafe File Permissions Insecure Cryptography Tainted Format

Critical

Showing all detectors for the Ruby language with critical severity.

Code Injection

User input is used in eval command.