MISP (core software) - Open Source Threat Intelligence and Sharing Platform
This report summarizes scanner evidence for MISP/MISP, a PHP project with 6,590 GitHub stars. SynthScan examined 501,322 lines of code across 1049 source files, recording 1918 pattern matches distributed across 18 syntactic categories. The legacy adjusted pattern signal is 4.4 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 1644 finding(s).
Are imports declared and package/API names verified? 155 finding(s).
Are wrappers, guards, and repeated structures necessary? 1581 finding(s).
Which changes need focused human review? 1918 finding(s).
Run additional scans to build a history of the legacy pattern signal. Score changes are not a measure of AI adoption or code quality.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1918 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/misp-delegation/src/misp-delegation.py | 162 | def save_current_sync_timestamp() -> None: | CODE |
| LOW | tools/misp-delegation/src/misp-delegation.py | 226 | def collect_events_from_source(source_instance: MISPInstance, filters: dict, incremental_sync: bool = False) -> List[dic | CODE |
| LOW | tools/misp-delegation/src/misp-delegation.py | 240 | def collect_existing_events_on_remote(destination_instance: MISPInstance, incremental_sync: bool = False) -> Optional[Li | CODE |
| LOW⚡ | tools/misp-delegation/src/misp-delegation.py | 253 | def get_outdated_or_non_existing_events(events_on_source: List[dict], events_on_remote: List[dict]) -> List[dict]: | CODE |
| LOW⚡ | tools/misp-delegation/src/misp-delegation.py | 262 | def push_eligible_events_to_remote(source_instance: MISPInstance, destination_instance: MISPInstance, eligible_events: L | CODE |
| LOW⚡ | tools/misp-delegation/src/misp-delegation.py | 285 | def request_delegation_for_pushed_events(destination_instance: MISPInstance, pushed_events_uuids: List[str], delegation_ | CODE |
| LOW | app/Test/UrlEgressValidatorTest.php | 38 | public function testStrictPolicyRefusesInternalLiterals(): void | CODE |
| LOW | app/Test/UrlEgressValidatorTest.php | 62 | public function testStrictPolicyAllowsPublicLiterals(): void | CODE |
| LOW | app/Test/UrlEgressValidatorTest.php | 74 | public function testAdjacentPublicRangeIsNotCaughtByPrivateRange(): void | CODE |
| LOW | app/Test/UrlEgressValidatorTest.php | 85 | public function testNumericHostEncodingsAreRefused(): void | CODE |
| LOW | app/Test/UrlEgressValidatorTest.php | 100 | public function testNonHttpSchemesAreRefused(): void | CODE |
| LOW | app/Test/UrlEgressValidatorTest.php | 112 | public function testLoopbackPolicyLeavesPrivateRangesReachable(): void | CODE |
| LOW | app/Test/UrlEgressValidatorTest.php | 120 | public function testLoopbackPolicyStillRefusesLoopbackAndMetadata(): void | CODE |
| LOW | app/Test/UrlEgressValidatorTest.php | 141 | public function testNamedLoopbackIsResolvedAndRefused(): void | CODE |
| LOW | app/Test/UrlEgressValidatorTest.php | 153 | public function testRedirectMustStayOnTheSameHost(): void | CODE |
| LOW | app/Test/UrlEgressValidatorTest.php | 168 | public function testRedirectMayNotDowngradeHttps(): void | CODE |
| LOW | app/Test/UrlEgressValidatorTest.php | 180 | public function testRedirectAnchorDoesNotPenaliseInternalFeeds(): void | CODE |
| LOW | app/Test/UrlEgressValidatorTest.php | 185 | public function testResolveLocationHandlesTheFormsAServerActuallySends(): void | CODE |
| LOW | app/Test/UrlEgressValidatorTest.php | 201 | public function testResolveLocationStripsCrlf(): void | CODE |
| LOW | app/Test/UrlEgressValidatorTest.php | 208 | public function testRefusedRangesGrowUnderTheStrictPolicy(): void | CODE |
| LOW | app/Test/EventTemplateValidatorTest.php | 66 | public function testMinimalValidDefinitionHasNoErrors(): void | CODE |
| LOW⚡ | app/Test/EventTemplateValidatorTest.php | 78 | public function testMissingSchemaVersionIsRejected(): void | CODE |
| LOW⚡ | app/Test/EventTemplateValidatorTest.php | 85 | public function testWrongSchemaVersionIsRejected(): void | CODE |
| LOW⚡ | app/Test/EventTemplateValidatorTest.php | 93 | public function testMissingUuidIsRejected(): void | CODE |
| LOW⚡ | app/Test/EventTemplateValidatorTest.php | 100 | public function testMalformedUuidIsRejected(): void | CODE |
| LOW | app/Test/EventTemplateValidatorTest.php | 118 | public function testMissingNameIsRejected(): void | CODE |
| LOW | app/Test/EventTemplateValidatorTest.php | 133 | public function testMissingEventDefaultsIsRejected(): void | CODE |
| LOW | app/Test/EventTemplateValidatorTest.php | 140 | public function testUnknownElementTypeIsRejected(): void | CODE |
| LOW | app/Test/EventTemplateValidatorTest.php | 164 | public function testIdentifierPatternIsEnforced(): void | CODE |
| LOW | app/Test/EventTemplateValidatorTest.php | 176 | public function testAttributeFieldRequiresMispBlock(): void | CODE |
| LOW | app/Test/EventTemplateValidatorTest.php | 188 | public function testAttributeFieldEmptyLabelIsRejected(): void | CODE |
| LOW | app/Test/EventTemplateValidatorTest.php | 202 | public function testDistributionOutOfRangeIsRejected(): void | CODE |
| LOW | app/Test/EventTemplateValidatorTest.php | 227 | public function testInfoTemplateMalformedVariableIsRejected(): void | CODE |
| LOW | app/Test/EventTemplateValidatorTest.php | 237 | public function testInfoTemplateWithValidVariablesIsAccepted(): void | CODE |
| LOW | app/Test/EventTemplateValidatorTest.php | 250 | public function testDuplicateElementIdsAreFlagged(): void | CODE |
| LOW | app/Test/EventTemplateValidatorTest.php | 261 | public function testObjectReferenceFromPointingAtUnknownIdIsFlagged(): void | CODE |
| LOW | app/Test/EventTemplateValidatorTest.php | 282 | public function testObjectReferenceToNonObjectFieldIsFlagged(): void | CODE |
| LOW | app/Test/EventTemplateValidatorTest.php | 303 | public function testInfoTemplateFieldRefResolvesToElementId(): void | CODE |
| LOW | app/Test/EventTemplateValidatorTest.php | 315 | public function testInfoTemplateFieldRefToUnknownIdIsFlagged(): void | CODE |
| LOW | app/Test/EventTemplateValidatorTest.php | 347 | private function assertSchemaErrorContains(string $needle, array $errors): void | CODE |
| LOW | app/Test/WidgetCacheTest.php | 93 | public function testIsCacheableOptInGating() | CODE |
| LOW | app/Test/WidgetCacheTest.php | 107 | public function testDerivedPathStripsWidgetSuffixAndSnakeCases() | CODE |
| LOW | app/Test/WidgetCacheTest.php | 122 | public function testFrameworkKeysAreExcludedFromHash() | CODE |
| LOW | app/Test/WidgetCacheTest.php | 137 | public function testKeyIsOrderIndependent() | CODE |
| LOW | app/Test/WidgetCacheTest.php | 153 | public function testDifferentWidgetsDoNotCollideOnSameConfig() | CODE |
| LOW | app/Test/WidgetCacheTest.php | 161 | public function testRememberPassesThroughWhenNotCacheable() | CODE |
| LOW⚡ | app/Test/WidgetCacheTest.php | 174 | public function testUserScopeAddsUserSegmentToKey() | CODE |
| LOW⚡ | app/Test/WidgetCacheTest.php | 184 | public function testUserScopeDifferentUsersGetDifferentKeys() | CODE |
| LOW⚡ | app/Test/WidgetCacheTest.php | 192 | public function testUserScopeSameUserSameConfigSameKey() | CODE |
| LOW⚡ | app/Test/WidgetCacheTest.php | 200 | public function testGlobalScopeIgnoresUser() | CODE |
| LOW⚡ | app/Test/WidgetCacheTest.php | 210 | public function testRememberUserScopedWithoutUserRunsLive() | CODE |
| LOW⚡ | app/Test/WidgetCacheTest.php | 225 | public function testOrgScopeAddsOrgSegmentToKey() | CODE |
| LOW⚡ | app/Test/WidgetCacheTest.php | 235 | public function testOrgScopeSameOrgSharesKeyAcrossUsers() | CODE |
| LOW⚡ | app/Test/WidgetCacheTest.php | 245 | public function testOrgScopeDifferentOrgsGetDifferentKeys() | CODE |
| LOW⚡ | app/Test/WidgetCacheTest.php | 253 | public function testOrgScopeSiteAdminGetsSeparateNoAclBucket() | CODE |
| LOW | app/Test/WidgetCacheTest.php | 265 | public function testRememberOrgScopedWithoutBucketRunsLive() | CODE |
| LOW | app/Test/EventTemplateInstantiatorTest.php | 75 | public function testInvalidDefinitionRaisesInstantiationException(): void | CODE |
| LOW | app/Test/EventTemplateInstantiatorTest.php | 95 | public function testFileFieldInputShapeIsValidated(): void | CODE |
| LOW | app/Test/EventTemplateInstantiatorTest.php | 157 | public function testUnknownUserInputIdIsRejected(): void | CODE |
| LOW | app/Test/EventTemplateInstantiatorTest.php | 184 | public function testMissingMandatorySimpleFieldIsRejected(): void | CODE |
| 1402 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | app/webroot/js/mispOvermind.js | 2266 | // ── 1. JSON Setup ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/webroot/js/mispOvermind.js | 2281 | // ── 2. Read a SyncRuleJson field (returns [] if missing or invalid) ──────── | COMMENT |
| MEDIUM | app/webroot/js/mispOvermind.js | 2288 | // ── 3. Build push_rules ────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/webroot/js/mispOvermind.js | 2309 | // ── 4. Build pull_rules ────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/webroot/js/mispOvermind.js | 2430 | // ── Helpers DOM ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/webroot/js/mispOvermind.js | 2437 | // ── Organisations table display ──────────────────────────────────────── | COMMENT |
| MEDIUM | app/webroot/js/mispOvermind.js | 2495 | // ── Servers table display ────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/webroot/js/mispOvermind.js | 2544 | // ── Local orgs ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/webroot/js/mispOvermind.js | 2563 | // ── External orgs ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/webroot/js/mispOvermind.js | 2582 | // ── Servers ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/webroot/js/mispOvermind.js | 2602 | // ── Roaming toggle ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/webroot/js/mispOvermind.js | 2608 | // ── Navigation accordion (Next / Prev) ──────────────────────────────────── | COMMENT |
| MEDIUM | app/webroot/js/mispOvermind.js | 2625 | // ── Résumé (Step 4) ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/webroot/js/mispOvermind.js | 2663 | // ── Submit ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | app/webroot/js/mispOvermind.js | 2701 | // ── Initialization in edit mode ─────────────────────────────────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 104 | // ── data collection ───────────────────────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 125 | // ── Table counts ──────────────────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 147 | // ── Attribute distributions ───────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 183 | // ── Event/object distributions (small) ────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 200 | // ── Attribute aggregates ──────────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 255 | // ── Timestamp (uses index, always fast) ───── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 499 | // ── query helpers (all read-only) ─────────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 916 | // ── evaluation engine ─────────────────────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 1029 | // ── Tier 1: Common IOC export patterns ────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 1198 | // ── Tier 2: Analyst investigation ─────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 1364 | // ── Tier 3: Sync and automation ───────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 1456 | // ── Tier 4: Complex multi-axis ────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 1619 | // ── evaluation helpers ────────────────────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 1731 | // ── report printer ────────────────────────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 1762 | // ── Table counts ──────────────────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 1779 | // ── Key distributions ─────────────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 1814 | // ── Value cardinality ─────────────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 1839 | // ── Timestamp ─────────────────────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 1856 | // ── Object membership ─────────────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 1876 | // ── Tag breadth ───────────────────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 1909 | // ── Bucket distributions ──────────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 1923 | // ── Correlation ratio ──────────────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 1937 | // ── Filter evaluation ─────────────────────── | COMMENT |
| MEDIUM | app/Console/Command/SearchPerformanceShell.php | 1976 | // ── Summary ───────────────────────────────── | COMMENT |
| MEDIUM | tests/testlive_collection_sync.py | 61 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/testlive_collection_sync.py | 64 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/testlive_collection_sync.py | 121 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/attribute_search_bench.py | 37 | # ── query catalogue ────────────────────────────────── | COMMENT |
| MEDIUM | tests/attribute_search_bench.py | 294 | # ── Join-order-sensitive queries ───────────────── | COMMENT |
| MEDIUM | docs/xINSTALL.tsurugi.md | 48 | #--------------------------------------------- | COMMENT |
| MEDIUM | docs/xINSTALL.tsurugi.md | 51 | #-------------------------------- | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | app/Test/EventTemplateInstantiatorTest.php | 70 | 'email' => 'analyst@example.org', | CODE |
| LOW | app/Test/EventTemplateInfoRendererTest.php | 92 | array('user' => 'alice@example.org') | CODE |
| LOW | app/webroot/js/tom-select.complete.min.js | 138 | function le(e,t){var s=Object.assign({},re,t),i=s.dataAttr,n=s.labelField,o=s.valueField,r=s.disabledField,l=s.optgroupF | CODE |
| LOW | app/webroot/js/jquery-ui.min.js | 6 | !function (t) { "use strict"; "function" == typeof define && define.amd ? define(["jquery"], t) : t(jQuery) }(function ( | CODE |
| LOW | app/webroot/js/pivotick.iife.js | 103 | In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function Yg(i,t){return Vg(i)||Wg(i | CODE |
| LOW | app/webroot/js/pivotick.iife.js | 289 | `,this.slidePanel=e.content.firstElementChild,this.slidePanel.innerHTML="",this.options.header!=null){this.header=docume | CODE |
| LOW | app/webroot/js/codemirror/addons/placeholder.js | 12 | CodeMirror.defineOption("placeholder", "", function(cm, val, old) { | CODE |
| LOW | app/webroot/js/codemirror/addons/placeholder.js | 45 | var placeHolder = cm.getOption("placeholder") | CODE |
| LOW | app/webroot/js/workflows-editor/workflows-editor.js | 2031 | $input.attr('placeholder', options.placeholder) | CODE |
| LOW | app/webroot/js/workflows-editor/workflows-editor.js | 2109 | $input.attr('placeholder', options.placeholder) | CODE |
| LOW | app/Controller/SharingGroupBlueprintsController.php | 174 | $fake_user = [ | CODE |
| LOW | app/Controller/SharingGroupBlueprintsController.php | 181 | $temp = $this->SharingGroupBlueprint->evaluateSharingGroupBlueprint($sharingGroupBlueprint, $fake_user); | CODE |
| LOW | app/Controller/SharingGroupBlueprintsController.php | 307 | $fake_user = [ | CODE |
| LOW | app/Controller/SharingGroupBlueprintsController.php | 314 | $temp = $this->SharingGroupBlueprint->evaluateSharingGroupBlueprint($sharingGroupBlueprint, $fake_user); | CODE |
| LOW | app/Controller/DashboardsController.php | 92 | $w['placeholder'] = ''; | CODE |
| LOW | app/Controller/DashboardsController.php | 123 | $w['placeholder'] = $instance->placeholder; | CODE |
| LOW | app/Controller/DashboardsController.php | 1189 | 'placeholder' => $placeholder, | CODE |
| LOW | app/Model/Dashboard.php | 119 | 'placeholder' => empty($widgetClass->placeholder) ? '' : $widgetClass->placeholder, | CODE |
| LOW | app/Model/UserSetting.php | 33 | 'placeholder' => array( | CODE |
| LOW | app/Model/UserSetting.php | 53 | 'placeholder' => 1, | CODE |
| LOW | app/Model/UserSetting.php | 58 | 'placeholder' => array( | CODE |
| LOW | app/Model/UserSetting.php | 74 | 'placeholder' => ['path' => '/events/index'], | CODE |
| LOW | app/Model/UserSetting.php | 78 | 'placeholder' => array( | CODE |
| LOW⚡ | app/Model/UserSetting.php | 98 | 'placeholder' => array( | CODE |
| LOW⚡ | app/Model/UserSetting.php | 104 | 'placeholder' => ['clusters'], | CODE |
| LOW⚡ | app/Model/UserSetting.php | 112 | 'placeholder' => [ | CODE |
| LOW⚡ | app/Model/UserSetting.php | 122 | 'placeholder' => false, | CODE |
| LOW⚡ | app/Model/UserSetting.php | 126 | 'placeholder' => 'Default, Overmind, UiBeta, EventTest', | CODE |
| LOW⚡ | app/Model/UserSetting.php | 131 | 'placeholder' => 'all', | CODE |
| LOW | app/Model/UserSetting.php | 142 | 'placeholder' => 'auto', | CODE |
| LOW | app/Model/UserSetting.php | 152 | 'placeholder' => true, | CODE |
| LOW | app/Model/UserSetting.php | 345 | $output[$setting]['placeholder'] = $config['placeholder']; | CODE |
| LOW | app/Model/SharingGroupBlueprint.php | 69 | $fake_user = [ | CODE |
| LOW | app/Model/SharingGroupBlueprint.php | 76 | $result = $this->updateSharingGroup($sharingGroupBlueprint, $fake_user); | CODE |
| LOW | app/Model/WorkflowModules/WorkflowBaseModule.php | 383 | 'placeholder' => '{ | CODE |
| LOW | app/Model/WorkflowModules/Module_misp_module.php | 113 | 'placeholder' => $moduleParam['value'] ?? '', | CODE |
| LOW | …flowModules/trigger/Module_tag_attached_after_save.php | 53 | 'placeholder' => __('Type a tag'), | CODE |
| LOW | app/Model/WorkflowModules/logic/Module_count_if.php | 34 | 'placeholder' => 'Event.Tag.{n}.name', | CODE |
| LOW | app/Model/WorkflowModules/logic/Module_count_if.php | 50 | 'placeholder' => '50', | CODE |
| LOW | …odel/WorkflowModules/logic/Module_filter_timestamp.php | 57 | 'placeholder' => '3d', | CODE |
| LOW | …Model/WorkflowModules/logic/Module_threat_level_if.php | 46 | 'placeholder' => __('Pick a threat level'), | CODE |
| LOW | app/Model/WorkflowModules/logic/Module_filter_tag.php | 62 | 'placeholder' => __('Pick a tag'), | CODE |
| LOW | app/Model/WorkflowModules/logic/Module_filter_tag.php | 72 | 'placeholder' => __('Pick a Galaxy Cluster'), | CODE |
| LOW | …rkflowModules/logic/Module_aggregate_comparator_if.php | 73 | 'placeholder' => 'Attribute.{n}.Tag', | CODE |
| LOW | …rkflowModules/logic/Module_aggregate_comparator_if.php | 93 | 'placeholder' => '42', | CODE |
| LOW | app/Model/WorkflowModules/logic/Module_tag_if.php | 57 | 'placeholder' => __('Pick a tag'), | CODE |
| LOW | app/Model/WorkflowModules/logic/Module_tag_if.php | 67 | 'placeholder' => __('Pick a Galaxy Cluster'), | CODE |
| LOW | …Model/WorkflowModules/logic/Module_organisation_if.php | 55 | 'placeholder' => __('Pick an organisation'), | CODE |
| LOW⚡ | …l/WorkflowModules/logic/Module_generic_filter_data.php | 40 | 'placeholder' => 'Event._AttributeFlattened.{n}', | CODE |
| LOW⚡ | …l/WorkflowModules/logic/Module_generic_filter_data.php | 49 | 'placeholder' => 'tlp:red', | CODE |
| LOW⚡ | …l/WorkflowModules/logic/Module_generic_filter_data.php | 59 | 'placeholder' => '[\'ip-src\', \'ip-dst\']', | CODE |
| LOW | …l/WorkflowModules/logic/Module_generic_filter_data.php | 75 | 'placeholder' => 'Tag.name', | CODE |
| LOW | …Model/WorkflowModules/logic/Module_distribution_if.php | 63 | 'placeholder' => __('Pick a distribution'), | CODE |
| LOW | …Model/WorkflowModules/logic/Module_distribution_if.php | 72 | 'placeholder' => __('Pick a sharing group'), | CODE |
| LOW | app/Model/WorkflowModules/logic/Module_generic_if.php | 35 | 'placeholder' => 'tlp:red', | CODE |
| LOW | app/Model/WorkflowModules/logic/Module_generic_if.php | 45 | 'placeholder' => '[\'ip-src\', \'ip-dst\']', | CODE |
| LOW | app/Model/WorkflowModules/logic/Module_generic_if.php | 61 | 'placeholder' => 'Attribute.{n}.Tag', | CODE |
| LOW | app/Model/WorkflowModules/action/Module_push_zmq.php | 25 | 'placeholder' => 'Attribute.{n}.AttributeTag.{n}.Tag.name', | CODE |
| LOW | …/Model/WorkflowModules/action/Module_tag_operation.php | 69 | 'placeholder' => __('Pick a tag'), | CODE |
| LOW | …/Model/WorkflowModules/action/Module_tag_operation.php | 79 | 'placeholder' => __('Pick a Galaxy Cluster'), | CODE |
| 43 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | PRD.md | 781 | ## Getting Started | COMMENT |
| LOW | PRD.md | 801 | #### OR Filters (Comma-Separated Values) | COMMENT |
| LOW | PRD.md | 821 | ### Editing Records | COMMENT |
| LOW | tools/gen_misp_install_docs.sh | 41 | ${xSED} -i "s/WiP/:construction:/g" ../docs/Changelog.md | COMMENT |
| LOW | tools/misp-wipe/misp-wipe.sh | 1 | #!/bin/bash | COMMENT |
| LOW | tools/misp-backup/misp-restore.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/misp-backup/misp-backup.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/misp-backup/misp-backup.sh | 21 | ## Tested against MISP 2.4.102 | COMMENT |
| LOW | tools/curl/editEvent.sh | 1 | #curl -H "Accept: application/xml" -H "content-type: text/xml" -H "Authorization: vlf4o42bYSVVWLm28jLB85my4HBZWXTri8vGdy | COMMENT |
| LOW | INSTALL/CONFIG.elasticsearch-logging.txt | 1 | # It's possible to send all logs from MISP to an elasticsearch | COMMENT |
| LOW | INSTALL/UPGRADE.ubuntu2404.sh | 1 | #!/bin/bash | COMMENT |
| LOW | INSTALL/setup/config.php | 81 | COMMENT | |
| LOW | INSTALL/setup/config.php | 121 | // Other useful environment variable you wish to set | COMMENT |
| LOW | INSTALL/setup/config.php | 141 | // Name of the Handler (the handler classname, without the 'Handler' part) | COMMENT |
| LOW | INSTALL/setup/config.php | 161 | // Only one scheduler worker is permitted to run at one time | COMMENT |
| LOW | INSTALL/old/INSTALL.debian7.txt | 201 | # Now log in using the webinterface: | COMMENT |
| LOW | INSTALL/old/INSTALL.ubuntu1404.txt | 161 | COMMENT | |
| LOW | INSTALL/old/INSTALL.debian8.txt | 221 | # 'host' => 'localhost', | COMMENT |
| LOW | INSTALL/old/xINSTALL.debian8-postgresql.txt | 41 | postgres=# ALTER USER misp with password 'XXXXXXXXX'; | COMMENT |
| LOW | INSTALL/old/INSTALL.ubuntu1604.with.webmin.txt | 161 | cp -a /home/misp/public_html/MISP/app/Config/bootstrap.default.php /home/misp/public_html/MISP/app/Config/bootstrap.php | COMMENT |
| LOW | INSTALL/old/INSTALL.ubuntu1604.with.webmin.txt | 181 | # ); | COMMENT |
| LOW | app/Config/config.default.php | 241 | // 'misp_orgadmin' => 2, | COMMENT |
| LOW | app/Config/database.default.php | 41 | 'password' => 'db password', | COMMENT |
| LOW | app/Config/database.default.php | 61 | // 'database' => 'misp', | COMMENT |
| LOW | app/webroot/css/bootstrap5-custom.scss | 41 | // npx sass app/webroot/css/bootstrap5-custom.scss app/webroot/css/bootstrap5-custom.min.css --style compressed | COMMENT |
| LOW | app/webroot/js/markdown-it.js | 181 | } | COMMENT |
| LOW | app/webroot/js/markdown-it.js | 201 | // USE OR OTHER DEALINGS IN THE SOFTWARE. | COMMENT |
| LOW | app/webroot/js/markdown-it.js | 1181 | COMMENT | |
| LOW | app/webroot/js/markdown-it.js | 1201 | // 03B8;GREEK SMALL LETTER THETA;Ll;0;L;;;;;N;;;0398;;0398 | COMMENT |
| LOW | app/webroot/js/markdown-it.js | 2641 | this.sCount = []; | COMMENT |
| LOW | app/webroot/js/markdown-it.js | 3181 | // ``` | COMMENT |
| LOW | app/webroot/js/markdown-it.js | 5401 | re.src_auth = "(?:(?:(?!" + re.src_ZCc + "|[@/\\[\\]()]).)+@)?"; | COMMENT |
| LOW | app/webroot/js/markdown-it.js | 6401 | // Use '/' to close single tags (<br />) | COMMENT |
| LOW | app/webroot/js/markdown-it.js | 6441 | // Enable HTML tags in source | COMMENT |
| LOW | app/webroot/js/cal-heatmap.js | 81 | // Data type | COMMENT |
| LOW | app/webroot/js/cal-heatmap.js | 161 | // null to disable, and use the default css styles | COMMENT |
| LOW | app/webroot/js/cal-heatmap.js | 181 | // - an array of Date objects: highlight the specified dates | COMMENT |
| LOW | app/webroot/js/cal-heatmap.js | 201 | subDomainTitleFormat: { | COMMENT |
| LOW | app/webroot/js/cal-heatmap.js | 261 | COMMENT | |
| LOW | app/webroot/js/codemirror/codemirror.js | 341 | else { bidiOther = i; } | COMMENT |
| LOW | app/webroot/js/codemirror/codemirror.js | 5541 | function changeLine(doc, handle, changeType, op) { | COMMENT |
| LOW | app/webroot/js/codemirror/codemirror.js | 5781 | } | COMMENT |
| LOW | app/Plugin/LdapAuth/README.md | 561 | Example `/etc/ldap/ldap.conf` configuration using a custom CA, equivalent to setting `LdapAuthldapTlsCustomCaCert`: | COMMENT |
| LOW | …dapAuth/Controller/Component/Auth/LdapAuthenticate.php | 301 | // | COMMENT |
| LOW | …dapAuth/Controller/Component/Auth/LdapAuthenticate.php | 701 | // repeat that class' _checkFields() guard: both credentials must be non-empty | COMMENT |
| LOW | app/Controller/TaxonomiesController.php | 861 | COMMENT | |
| LOW | app/Controller/ObjectRelationshipsController.php | 141 | // 'conditions' => array('ObjectRelationship.name' => $name) | COMMENT |
| LOW | app/Controller/ObjectRelationshipsController.php | 281 | COMMENT | |
| LOW | app/Controller/DashboardsController.php | 41 | // an empty array as the value), use that — a user who | COMMENT |
| LOW | app/Controller/DashboardsController.php | 81 | // emit data-widget-schema + data-widget-placeholder and the | COMMENT |
| LOW | app/Controller/DashboardsController.php | 121 | )) + $w['schema']; | COMMENT |
| LOW | app/Controller/DashboardsController.php | 641 | // saved configs) and keys without a schema entry pass through | COMMENT |
| LOW | app/Controller/DashboardsController.php | 721 | // carrying a comma, a quote or a newline used to split the | COMMENT |
| LOW | app/Controller/TaxiiServersController.php | 141 | return $this->RestResponse->saveFailResponse( | COMMENT |
| LOW | app/Controller/CollectionsController.php | 441 | } | COMMENT |
| LOW | app/Controller/Component/IOCImportComponent.php | 1 | <?php | COMMENT |
| LOW | app/Controller/Component/IOCImportComponent.php | 101 | COMMENT | |
| LOW | app/Model/Feed.php | 501 | // `url` is deliberately absent. The whole row is pushed into | COMMENT |
| LOW | app/Model/Feed.php | 521 | if (!$redis->exists('misp:feed_cache:' . $v['Feed']['id'])) { | COMMENT |
| LOW | app/Model/Event.php | 7501 | // the save: the recoverFields loop below restores distribution from the | COMMENT |
| 48 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/get-flags.py | 16 | except urllib.error.HTTPError: | CODE |
| HIGH | tools/misp-delegation/src/misp-delegation.py | 23 | except KeyError: | CODE |
| HIGH | tools/misp-workflows/webhook-listener.py | 47 | except KeyboardInterrupt: | CODE |
| HIGH | app/files/scripts/stix2misp.py | 53 | except ImportError: | CODE |
| HIGH | app/files/scripts/stix2misp.py | 174 | except AttributeError: | CODE |
| HIGH | app/files/scripts/stix2misp.py | 724 | except AttributeError: | CODE |
| HIGH | app/files/scripts/build_iso_centroids.py | 179 | except LookupError: | CODE |
| HIGH | app/files/scripts/generate_file_objects.py | 10 | except ImportError: | CODE |
| HIGH | app/files/scripts/mispzmq/mispzmqclient.py | 28 | except KeyboardInterrupt: | CODE |
| HIGH | tests/testlive_event_templates.py | 106 | except requests.RequestException: | CODE |
| HIGH | tests/testlive_event_templates.py | 115 | except requests.RequestException: | CODE |
| HIGH | tests/testlive_event_templates.py | 524 | except requests.RequestException: | CODE |
| HIGH | tests/testlive_event_templates.py | 712 | except requests.RequestException: | CODE |
| HIGH | tests/testlive_event_templates.py | 888 | except requests.RequestException: | CODE |
| HIGH | tests/ai_fake_module_server.py | 349 | except KeyboardInterrupt: | CODE |
| HIGH | tests/testlive_collection_sync.py | 281 | except Exception: | CODE |
| HIGH | tests/ui_event_mass_actions_check.py | 203 | except Exception: | CODE |
| HIGH | tests/ui_event_mass_actions_check.py | 104 | except RuntimeError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/misp-delegation/src/misp-delegation.py | 77 | except Exception as err: | CODE |
| LOW | tools/misp-delegation/src/misp-delegation.py | 86 | except Exception as err: | CODE |
| LOW | tools/misp-delegation/src/misp-delegation.py | 101 | except Exception as err: | CODE |
| LOW | tools/misp-delegation/src/misp-delegation.py | 172 | except Exception: | CODE |
| LOW⚡ | tools/misp-delegation/src/misp-delegation.py | 268 | except Exception as err: | CODE |
| LOW⚡ | tools/misp-delegation/src/misp-delegation.py | 277 | except Exception as err: | CODE |
| LOW | tools/misp-delegation/src/misp-delegation.py | 301 | except Exception as err: | CODE |
| LOW | tools/misp-delegation/src/misp-delegation.py | 313 | except Exception as err: | CODE |
| LOW | tools/misp-delegation/src/misp-delegation.py | 333 | except Exception as err: | CODE |
| LOW | tools/misp-delegation/src/misp-delegation.py | 345 | except Exception as err: | CODE |
| MEDIUM | tools/misp-delegation/src/misp-delegation.py | 168 | def get_last_sync_timestamp() -> Union[int, None]: | CODE |
| LOW | tools/misp-zmq/slackbot.py | 55 | except Exception: | CODE |
| LOW | tools/misp-zmq/slackbot.py | 191 | except Exception: | CODE |
| MEDIUM⚡ | app/files/scripts/stix2misp.py | 1355 | print(f'Error with the following {properties._XSI_TYPE} object:\n{observable.to_json()}', file=sys.s | CODE |
| MEDIUM⚡ | app/files/scripts/stix2misp.py | 1445 | print(f'Error with the following {properties._XSI_TYPE} object:\n{observable.to_json()}', fi | CODE |
| MEDIUM | app/files/scripts/stix2misp.py | 189 | def getTimestampfromDate(date): | CODE |
| MEDIUM | app/files/scripts/stix2misp.py | 1059 | def parse_misp_attribute(self, observable, misp_attribute, to_ids=False): | CODE |
| MEDIUM | app/files/scripts/stix2misp.py | 1557 | def generate_event(filename, tries=0): | CODE |
| MEDIUM | app/files/scripts/stix2misp.py | 1578 | def is_from_misp(event): | CODE |
| LOW⚡ | app/files/scripts/stix2misp.py | 1107 | except Exception: | CODE |
| LOW⚡ | app/files/scripts/stix2misp.py | 1354 | except Exception: | CODE |
| LOW⚡ | app/files/scripts/stix2misp.py | 1444 | except Exception as e: | CODE |
| LOW | app/files/scripts/stix2misp.py | 587 | except Exception: | CODE |
| LOW | app/files/scripts/stix2misp.py | 841 | except Exception: | CODE |
| LOW | app/files/scripts/stix2misp.py | 1569 | except Exception as e: | CODE |
| LOW | app/files/scripts/stix2misp.py | 1599 | except Exception as e: | CODE |
| LOW | app/files/scripts/yaratest.py | 12 | except Exception: | CODE |
| LOW | app/files/scripts/misp2stix.py | 94 | except Exception as e: | CODE |
| LOW⚡ | app/files/scripts/stixtest.py | 39 | except Exception: | CODE |
| LOW⚡ | app/files/scripts/stixtest.py | 45 | except Exception: | CODE |
| LOW⚡ | app/files/scripts/stixtest.py | 51 | except Exception: | CODE |
| LOW⚡ | app/files/scripts/stixtest.py | 57 | except Exception: | CODE |
| LOW⚡ | app/files/scripts/stixtest.py | 63 | except Exception: | CODE |
| LOW⚡ | app/files/scripts/stixtest.py | 69 | except Exception: | CODE |
| LOW⚡ | app/files/scripts/stixtest.py | 75 | except Exception: | CODE |
| LOW | app/files/scripts/misp_framing.py | 62 | except Exception as e: | CODE |
| LOW | app/files/scripts/taxii/taxii_push.py | 370 | except Exception as e: | CODE |
| LOW | app/files/scripts/taxii/taxii_push.py | 455 | except Exception: | CODE |
| LOW | app/files/scripts/yara/permissive_plyara.py | 35 | except Exception as e: | CODE |
| MEDIUM | app/files/scripts/yara/permissive_plyara.py | 25 | def parse_string(self, input_string): | CODE |
| LOW | app/files/scripts/stix2/stix2misp.py | 143 | except Exception as e: | CODE |
| LOW | app/files/scripts/stix2/misp2stix2.py | 77 | except Exception as e: | CODE |
| LOW | tests/testlive_ai_ux.py | 189 | except Exception: | CODE |
| LOW | tests/testlive_ai_ux.py | 254 | except Exception as exc: # best effort | CODE |
| LOW | tests/testlive_event_templates.py | 45 | except Exception: | CODE |
| LOW | tests/testlive_collection_sync.py | 107 | except Exception as exc: # cleanup is best-effort | CODE |
| LOW⚡ | tests/testlive_collection_sync.py | 281 | except Exception: | CODE |
| LOW⚡ | tests/testlive_collection_sync.py | 287 | except Exception as exc: | CODE |
| LOW⚡ | tests/testlive_collection_sync.py | 294 | except Exception as exc: | CODE |
| LOW | tests/testlive_event_mass_actions.py | 76 | except Exception: | CODE |
| LOW | tests/ui_event_mass_actions_check.py | 203 | except Exception: | CODE |
| MEDIUM | tests/attribute_search_bench_diff.py | 66 | print(f"Error: no benchmark lines found in {path_a}") | CODE |
| MEDIUM | tests/attribute_search_bench_diff.py | 69 | print(f"Error: no benchmark lines found in {path_b}") | CODE |
| LOW | tests/attribute_search_bench.py | 594 | except Exception as e: | CODE |
| LOW | tests/attribute_search_bench.py | 627 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | app/webroot/js/jquery-ui.min.js | 6 | !function (t) { "use strict"; "function" == typeof define && define.amd ? define(["jquery"], t) : t(jQuery) }(function ( | CODE |
| CRITICAL | app/webroot/js/vis.js | 26 | ;r=void 0!==n.indexMatch?" in "+t.printLocation(n.path,e,"")+'Perhaps it was incomplete? Did you mean: "'+n.indexMatch+' | CODE |
| CRITICAL | app/webroot/js/vis.js | 34 | d=Math.sqrt(Math.pow(o.screen_x-n.screen_x,2)+Math.pow(o.screen_y-n.screen_y,2)),l=Math.sqrt(Math.pow(n.screen_x-s.scree | CODE |
| CRITICAL | app/webroot/js/pivotick.iife.js | 83 | `+c.text,this.inlineQueue.pop(),this.inlineQueue.at(-1).src=h.text):e.push(c);continue}if(t){this.infiniteLoopError(t.ch | CODE |
| CRITICAL | app/webroot/js/jquery.js | 2 | !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):f | CODE |
| CRITICAL | app/webroot/js/codemirror/codemirror.js | 8848 | return this.cm.display.wrapper.ownerDocument.getSelection() | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | INSTALL/INSTALL.ubuntu2404.sh | 504 | # Create a python3 virtualenv | COMMENT |
| MEDIUM | INSTALL/xINSTALL.rhel94.sh | 367 | # Create a python3 virtualenv | COMMENT |
| MEDIUM | INSTALL/INSTALL.debian13.sh | 464 | # Create a python3 virtualenv | COMMENT |
| MEDIUM | INSTALL/INSTALL.debian12.sh | 466 | # Create a python3 virtualenv | COMMENT |
| MEDIUM⚡ | app/files/scripts/stix2misp.py | 1110 | # Create a MISP object, its attributes, and add it in the MISP event | COMMENT |
| MEDIUM | app/files/scripts/stix2misp.py | 1153 | # Create a MISP attribute and add it in its MISP object | COMMENT |
| MEDIUM⚡ | tests/testlive_comprehensive_local.py | 1082 | #Create a test event | COMMENT |
| MEDIUM⚡ | tests/testlive_comprehensive_local.py | 1086 | #Create a false positive warninglist | COMMENT |
| MEDIUM | tests/testlive_comprehensive_local.py | 1102 | #Create a known identifier warninglist | COMMENT |
| MEDIUM | tests/testlive_comprehensive_local.py | 1197 | # Create a user | COMMENT |
| MEDIUM | .forgejo/workflows/sync.yml | 290 | # Create a Python environment | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | app/files/scripts/stix2misp.py | 48 | CODE | |
| LOW | app/files/scripts/stix2misp.py | 52 | CODE | |
| LOW | app/files/scripts/stix2misp.py | 1571 | CODE | |
| LOW | app/files/scripts/build_iso_centroids.py | 45 | CODE | |
| LOW | app/files/scripts/yaratest.py | 10 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 48 | CODE | |
| LOW | app/files/scripts/generate_file_objects.py | 17 | CODE | |
| LOW | app/files/scripts/generate_file_objects.py | 21 | CODE | |
| LOW | app/files/scripts/generate_file_objects.py | 25 | CODE | |
| LOW | app/files/scripts/generate_file_objects.py | 29 | CODE | |
| LOW | app/files/scripts/yara/yaratemplate.py | 5 | CODE | |
| LOW | app/files/scripts/yara/permissive_plyara.py | 3 | CODE | |
| LOW | app/files/scripts/yara/yaraexport.py | 2 | CODE | |
| LOW | app/files/scripts/stix2/stix2misp.py | 42 | CODE | |
| LOW | app/files/scripts/stix2/stix2misp.py | 42 | CODE | |
| LOW | app/files/scripts/mispzmq/mispzmqtest.py | 5 | CODE | |
| LOW | app/files/scripts/mispzmq/mispzmqtest.py | 11 | CODE | |
| LOW | tests/testlive_comprehensive_local.py | 16 | CODE | |
| LOW | tests/testlive_comprehensive_local.py | 16 | CODE | |
| LOW | tests/testlive_comprehensive_local.py | 16 | CODE | |
| LOW | tests/testlive_comprehensive_local.py | 16 | CODE | |
| LOW | tests/testlive_event_templates.py | 20 | CODE | |
| LOW | tests/test_stix2misp_wrapper.py | 13 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/misp-backup/misp-restore.sh | 73 | # Check if variable is empty | COMMENT |
| LOW | tools/misp-backup/misp-restore.sh | 112 | # Check if run as root | COMMENT |
| LOW | tools/misp-backup/misp-backup.sh | 80 | # Check if variable is empty | COMMENT |
| LOW | tools/misp-backup/misp-backup.sh | 103 | # Check if run as root | COMMENT |
| LOW | INSTALL/INSTALL.ubuntu2404.sh | 125 | # Check if we're on Ubuntu 24.04 as expected: | COMMENT |
| LOW | INSTALL/xINSTALL.rhel94.sh | 138 | # Check if we're on RHEL 9.4+ as expected: | COMMENT |
| LOW | INSTALL/INSTALL.debian13.sh | 137 | # Check if we're on Debian 12 as expected: | COMMENT |
| LOW | INSTALL/INSTALL.debian12.sh | 137 | # Check if we're on Debian 12 as expected: | COMMENT |
| LOW | INSTALL/UPGRADE.ubuntu2404.sh | 88 | # Check if we're on Ubuntu 24.04 as expected: | COMMENT |
| LOW | app/files/scripts/mispzmq/mispzmq.py | 90 | # Check if TLS is being used with Redis host | COMMENT |
| LOW | app/Console/worker/stop.sh | 16 | # Check if run as root | COMMENT |
| LOW | app/Console/worker/start.sh | 3 | # Check if run as root | COMMENT |
| LOW | app/Console/worker/start_dynamic.sh | 16 | # Check if run as root | COMMENT |
| LOW | app/Console/worker/start_dynamic.sh | 22 | # Check if jq is present and enable advanced checks | COMMENT |
| LOW⚡ | tests/testlive_security.py | 277 | # Check if role was not changed | COMMENT |
| LOW | tests/testlive_security.py | 151 | # Check if admin is really site admin | COMMENT |
| LOW | tests/testlive_security.py | 193 | # Check if user can login with given password | COMMENT |
| LOW | tests/testlive_security.py | 352 | # Check if user can login with given password | COMMENT |
| LOW | tests/build-test.sh | 5 | # Check if dependencies for zmq are properly installed | COMMENT |
| LOW | tests/build-test.sh | 8 | # Check if all attachments handlers dependencies are correctly installed | COMMENT |
| LOW | tests/curl_tests_GH.sh | 9 | # Check if user is logged | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | app/webroot/doc/openapi.yaml | 42 | curl --header "Authorization: YOUR_API_KEY" \ | CODE |
| HIGH | app/webroot/doc/openapi.yaml | 469 | curl -H "Authorization: YOUR_API_KEY" \ | CODE |
| HIGH | app/webroot/doc/openapi.yaml | 7570 | Authorization: YOUR_API_KEY | CODE |
| HIGH | app/Controller/ApiController.php | 93 | __('YOUR_API_KEY') | CODE |
| HIGH | app/Controller/ApiController.php | 119 | $logHeaders[$k] = 'Authorization: ' . __('YOUR_API_KEY'); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/misp_retention.py | 59 | CODE | |
| LOW | tools/misp_retention.py | 76 | CODE | |
| LOW | tools/misp-delegation/src/misp-delegation.py | 177 | CODE | |
| LOW | tools/misp-zmq/slackbot.py | 64 | CODE | |
| LOW | tools/misp-snmp/misp-snmp-monitor.py | 30 | CODE | |
| LOW | tools/misp-snmp/misp-snmp-monitor.py | 50 | CODE | |
| LOW | app/files/scripts/stix2misp.py | 111 | CODE | |
| LOW | app/files/scripts/stix2misp.py | 597 | CODE | |
| LOW | app/files/scripts/stix2misp.py | 787 | CODE | |
| LOW | app/files/scripts/stix2misp.py | 909 | CODE | |
| LOW | app/files/scripts/stix2misp.py | 945 | CODE | |
| LOW | app/files/scripts/stix2misp.py | 1014 | CODE | |
| LOW | app/files/scripts/stix2misp.py | 1079 | CODE | |
| LOW | app/files/scripts/stix2misp.py | 1288 | CODE | |
| LOW | app/files/scripts/stix2misp.py | 1347 | CODE | |
| LOW | app/files/scripts/stix2misp.py | 1396 | CODE | |
| LOW | app/files/scripts/stix2misp.py | 1415 | CODE | |
| LOW | app/files/scripts/stix2misp.py | 1434 | CODE | |
| LOW | app/files/scripts/stix2misp.py | 1468 | CODE | |
| LOW | app/files/scripts/build_iso_centroids.py | 107 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 78 | CODE | |
| LOW | app/files/scripts/misp2stix.py | 144 | CODE | |
| LOW | app/files/scripts/yara/yaratemplate.py | 32 | CODE | |
| LOW | app/files/scripts/yara/misp2yara.py | 31 | CODE | |
| LOW | app/files/scripts/yara/permissive_plyara.py | 38 | CODE | |
| LOW | app/files/scripts/stix2/stix2misp.py | 114 | CODE | |
| LOW | app/files/scripts/mispzmq/mispzmq.py | 175 | CODE | |
| LOW | tests/testlive_ai_ux.py | 181 | CODE | |
| LOW | tests/testlive_comprehensive_local.py | 1080 | CODE | |
| LOW | tests/testlive_collection_sync.py | 123 | CODE | |
| LOW | tests/attribute_search_bench.py | 562 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | app/webroot/js/mispOvermind.js | 797 | // Safe global fallback — filter_bar.ctp re-declares this per scaffold, | COMMENT |
| MEDIUM | app/webroot/js/mispOvermind.js | 843 | // The scaffold draws every row twice (table and card view): keep the | COMMENT |
| MEDIUM | app/Lib/Tools/OnboardingTour.php | 316 | // in MISP is built from this same scaffold, so what | COMMENT |
| MEDIUM | tests/ai_fake_module_server.py | 113 | # One candidate the hallucination guard always drops, so metadata.rejected is never empty. | COMMENT |
| MEDIUM | docs/dev/dashboard-progress.md | 805 | - [x] Empty-state element for "no widgets yet" — shown when both the user's `UserSetting:dashboard` and any default temp | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/testlive_ai_ux.py | 374 | # #11099: the module's results.Tag marks the event as AI-generated and unreviewed | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/ui_event_mass_actions_check.py | 231 | " ids.push($(this).data('id')); });" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | app/Model/Event.php | 5916 | //Step 1 - Extract the UUIDs of the events that are extended and remove duplicates | COMMENT |
| LOW | app/Model/Event.php | 5929 | //Step 2 - Extract the UUIDs and ids of all events | COMMENT |
| LOW | app/Model/Event.php | 5935 | //Step 3 - Fetch the events that are extended or not extended | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | INSTALL/UPGRADE.ubuntu2404.sh | 14 | # To upgrade from an existing 2.4 install you can use the following command: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | app/Lib/Tools/ComplexTypeTool.php | 157 | * For example, to split the following line: "value1##comma##value2" simply pass $settings['delimiter | COMMENT |