Javascript Rules
SAST rules for Javascript that identify insecure patterns in application code.
Javascript Rule Catalog
| ID | Title | Severity | Category |
|---|---|---|---|
CODE-0358 | SQL Injection using Knex raw() or whereRaw() functions | CRITICAL | Injection |
CODE-0359 | NoSQL Injection in findOne() function | CRITICAL | Injection |
CODE-0360 | NoSQL JavaScript Injection via Untrusted Input in MongoDB $where Operator | CRITICAL | Injection |
CODE-0361 | SQL Injection via Untrusted Input | CRITICAL | Injection |
CODE-0364 | Sequelize Weak TLS Version | CRITICAL | Crypto |
CODE-0367 | Cleartext Transmission of Sensitive Information | CRITICAL | InsecureConfig |
CODE-0370 | Origin validation error | CRITICAL | Web |
CODE-0371 | Experimental Features Enabled | CRITICAL | InsecureConfig |
CODE-0373 | User controlled data in eval() or similar functions | CRITICAL | Injection |
CODE-0374 | Untrusted user input in require() function | CRITICAL | Injection |
CODE-0375 | Insecure gRPC Connection | CRITICAL | InsecureConfig |
CODE-0376 | Deserialization of Untrusted Data | CRITICAL | Deserialization |
CODE-0377 | Code Injection via Untrusted Data in Sandbox | CRITICAL | Injection |
CODE-0378 | Deserialization of Untrusted Data | CRITICAL | Deserialization |
CODE-0379 | Server Side Template Injection | CRITICAL | Injection |
CODE-0380 | Code Injection via Untrusted Input to vm2 | CRITICAL | Injection |
CODE-0381 | Untrusted user input reaching `vm2` sandbox can result in context injection | CRITICAL | Injection |
CODE-0382 | Code Injection via Untrusted Input to `vm` | CRITICAL | Injection |
CODE-0383 | Untrusted user input in `vm.compileFunction()` | CRITICAL | Injection |
CODE-0384 | Untrusted user input in `vm.runInContext()` | CRITICAL | Injection |
CODE-0385 | Untrusted user input in `vm.runInNewContext()` | CRITICAL | Injection |
CODE-0386 | Deserialization of Untrusted Data | CRITICAL | Deserialization |
CODE-0387 | OS Command Injection via shelljs.exec() | CRITICAL | Injection |
CODE-0397 | HTTP Header Injection | CRITICAL | Injection |
CODE-0402 | Hardcoded JWT Secret | CRITICAL | Secrets |
CODE-0405 | Hardcoded JWT Secret | CRITICAL | Secrets |
CODE-0407 | Insecure JWT Algorithm | CRITICAL | Crypto |
CODE-0408 | Untrusted user input in redirect() can result in Open Redirect vulnerability | CRITICAL | Web |
CODE-0409 | Untrusted user input in response header('Location') can result in Open Redirect vulnerability | CRITICAL | Web |
CODE-0410 | Server-Side Request Forgery (SSRF) | CRITICAL | Injection |
CODE-0411 | Server-side request forgery (SSRF) via phantom | CRITICAL | Injection |
CODE-0412 | Server-side request forgery (SSRF) via Playwright | CRITICAL | Injection |
CODE-0413 | Server-side request forgery (SSRF) in puppeteer | CRITICAL | Injection |
CODE-0415 | Server-side request forgery (SSRF) in wkhtmltopdf | CRITICAL | Injection |
CODE-0423 | XML Entity Expansion Vulnerability | CRITICAL | Injection |
CODE-0424 | XPath Injection | CRITICAL | Injection |
CODE-0426 | XML External Entity (XXE) Injection | CRITICAL | Injection |
CODE-0816 | XML External Entity (XXE) Injection | CRITICAL | Injection |
CODE-0195 | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') | HIGH | Injection |
CODE-0198 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | HIGH | Injection |
CODE-0210 | CSRF Protection Disabled in Apollo GraphQL Server | HIGH | Web |
CODE-0277 | Insecure CORS Policy in Apollo GraphQL Server | HIGH | Web |
CODE-0285 | Permissive Cross-domain Policy with Untrusted Domains | HIGH | Web |
CODE-0363 | Improper Certificate Validation in Sequelize Connection | HIGH | Crypto |
CODE-0403 | Insufficiently protected credentials | HIGH | Auth |
CODE-0404 | Insufficiently protected credentials | HIGH | Secrets |
CODE-0406 | Insufficient token revocation in express-jwt | HIGH | Auth |
CODE-0651 | Outdated ApolloServer option 'schemaDirectives' | HIGH | Web |
CODE-0654 | Apollo GraphQL Server Lacks CSRF Prevention | HIGH | Web |
CODE-0769 | Command Injection via Child Process | HIGH | Injection |
CODE-0191 | Out-of-bounds read in Buffer API methods | MEDIUM | Injection |
CODE-0192 | Out-of-bounds write in Buffer API | MEDIUM | Injection |
CODE-0193 | Insecure Buffer Allocation | MEDIUM | InsecureConfig |
CODE-0194 | Regular expression with non-literal value | MEDIUM | Injection |
CODE-0196 | Improper limitation of a pathname to a restricted directory ('Path Traversal') | MEDIUM | Injection |
CODE-0197 | Use of cryptographically weak pseudo-random number generator (PRNG) | MEDIUM | Crypto |
CODE-0200 | Observable Timing Discrepancy | MEDIUM | Crypto |
CODE-0201 | Markup Escaping Disabled | MEDIUM | Injection |
CODE-0223 | Permissive Cross-domain Policy with Untrusted Domains | MEDIUM | Web |
CODE-0256 | Insecure SSL configuration in node-libcurl | MEDIUM | InsecureConfig |
CODE-0276 | Missing CORS Policy in Apollo GraphQL Server | MEDIUM | Web |
CODE-0284 | Missing CORS Policy in Apollo GraphQL Server | MEDIUM | Web |
CODE-0350 | Use of a broken or risky cryptographic algorithm | MEDIUM | Crypto |
CODE-0351 | AES Algorithm Used Without Initialization Vector | MEDIUM | Crypto |
CODE-0352 | Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) | MEDIUM | Crypto |
CODE-0353 | Use of weak hash | MEDIUM | Crypto |
CODE-0354 | Use of weak hash | MEDIUM | Crypto |
CODE-0355 | Observable timing discrepancy | MEDIUM | Crypto |
CODE-0356 | Improper Certificate Validation | MEDIUM | Crypto |
CODE-0357 | Use of Weak Cryptographic Algorithm | MEDIUM | Crypto |
CODE-0362 | Cleartext transmission of sensitive information | MEDIUM | InsecureConfig |
CODE-0365 | Layer 7 Denial of Service via Unchecked Input for Loop Condition | MEDIUM | InsecureConfig |
CODE-0366 | Regular Expression Denial of Service | MEDIUM | Injection |
CODE-0368 | Experimental Blink Features Enabled | MEDIUM | InsecureConfig |
CODE-0369 | Disabling Context Isolation in Electron | MEDIUM | InsecureConfig |
CODE-0372 | Node Integration Exposure | MEDIUM | InsecureConfig |
CODE-0388 | Default Session Cookie Name | MEDIUM | Auth |
CODE-0389 | Insufficiently protected credentials: session cookie domain not set | MEDIUM | Auth |
CODE-0390 | Sensitive cookie without 'HttpOnly' flag | MEDIUM | Web |
CODE-0391 | Insufficient Session Expiration | MEDIUM | Auth |
CODE-0392 | Insufficiently protected credentials: session cookie path not set | MEDIUM | Auth |
CODE-0393 | Sensitive cookie with improper SameSite attribute | MEDIUM | Web |
CODE-0394 | Sensitive cookie in HTTPS session without 'Secure' attribute | MEDIUM | Auth |
CODE-0395 | Insecure CORS Configuration | MEDIUM | Web |
CODE-0396 | Origin validation error | MEDIUM | Web |
CODE-0398 | X-XSS-Protection Header Set to 0 | MEDIUM | Web |
CODE-0399 | X-XSS-Protection header is set to 0 | MEDIUM | Web |
CODE-0400 | Helmet Security Response Header Disabled | MEDIUM | Web |
CODE-0401 | Host Header Injection | MEDIUM | Injection |
CODE-0414 | Server-side request forgery (SSRF) in wkhtmltoimage | MEDIUM | Injection |
CODE-0416 | Insecure ZIP Archive Extraction | MEDIUM | Injection |
CODE-0417 | Untrusted user input in express render() function | MEDIUM | Injection |
CODE-0418 | Untrusted user input in express render() function | MEDIUM | Injection |
CODE-0419 | Untrusted user input in readFile()/readFileSync() can lead to directory traversal attacks | MEDIUM | Injection |
CODE-0420 | Path Traversal via User Input in Path Construction | MEDIUM | Injection |
CODE-0421 | Insecure TAR Archive Extraction | MEDIUM | Injection |
CODE-0422 | Insecure ZIP Archive Extraction | MEDIUM | Injection |
CODE-0427 | Cross-Site Scripting (XSS) via Unvalidated User Input | MEDIUM | Web |
CODE-0428 | Insecure Handlebars Configuration | MEDIUM | Web |
CODE-0429 | Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) | MEDIUM | Injection |
CODE-0430 | Cross-site Scripting (XSS) due to improper neutralization of input during web page generation | MEDIUM | Web |
CODE-0431 | Markup Escaping Disabled | MEDIUM | Injection |
CODE-0432 | Cross-Site Scripting (XSS) via serialize-javascript | MEDIUM | Injection |
CODE-0808 | Insecure Use of GraphQL Upload | MEDIUM | Web |
CODE-0199 | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') | LOW | Injection |
Total Rules: 105
Click on any rule ID to view detailed information, examples, and remediation guidance.