carlspring / carlspring/vertx-vulns

Build a collection of typical security concern topics

Open
#2 0 comments 0 reactions 0 assignees View on GitHub
help wanted
Dominant language
Java
Stars
0
Forks
0
PR merge metrics
No merged PRs in 30d

Description

# Task Description

We need to build a collection of typical security concern topics. These will then be used to produce a list of code examples that illustrate bad and good code.

* Injection vulnerabilities
* #9
* Command injection
* #8
* #11
* #12
* Malicious file uploads
* Authentication and authorization flaws
* #7
* Incomplete or missing security controls
* Broken access control
* #6
* Using `io.vertx.core.http.HttpClient`
* Using `io.vertx.reactivex.ext.web.client.WebClient`
* Insecure defaults and configurations
* Insecure data storage (e.g., plaintext passwords, sensitive data in logs)
* Insufficient session expiration and management
* Information leakage
* Denial of Service (DoS) attacks
* Lack of input validation
* Insecure deserialization
* Broken cryptography (e.g., weak algorithms, insufficient key length)
* Improper error handling
* Race conditions
* Use of unsafe or deprecated functions

# Open Questions

# Notes

# Task List

The following tasks will need to be carried out:
* [ ] Build a collection of topics.
* [ ] Add a brief summary for each topic
* [ ] Update the documentation.

# Useful Commands

# Incurred Costs

# Task Relationships

This task:
* Is a sub-task of: #
* Depends on: #
* Is a follow-up of: #
* Relates to: #

# Resources

# Useful Links

# Points of Contact

Contributor guide

No contributing guide indexed for this repository

Research direction

No file or test is named. Start by reviewing the existing repository structure and the referenced topics (#6–#12), then identify where the collection and summaries should live. Done means the typical security topics are collected, each has a brief summary, and the documentation is updated.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
documentation, security
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.