aboutcode-org / aboutcode-org/vulnerablecode
Track Java "shaded"/uberjar/jarjar hidden dependency vulnerabilities
- Vorherrschende Sprache
- Python
- Sterne
- 702
- Forks
- 328
- Ø Merge
- 3 T. 8 Std.
- Gemergte PRs (30 T.)
- 3
Beschreibung
See:
- https://github.com/jensdietrich/xshady and https://github.com/jensdietrich/xshady-release/ by @jensdietrich et al. and paper at https://arxiv.org/abs/2306.05534
- we have some PurlDB WIP on Uberjar detection and related issues at:
- https://github.com/nexB/purldb/issues/154
- https://github.com/nexB/purldb/issues/69
- https://github.com/nexB/purldb/issues/98
- https://github.com/nexB/scancode-toolkit/issues/2418
@jensdietrich I read "Those projects were detected with a research tool our team has developed" ... is this open source?
See also https://github.com/ctcpip/java-shaded-example as a example by @ctcpip
Beitragsleitfaden
Für dieses Repository ist kein Beitragsleitfaden indexiert
Bewertung
Dieses Issue wurde noch nicht bewertet.