wcm.io Caravan
SpotBugs Bug Detector Report
The following document contains the results of SpotBugs
SpotBugs Version is 4.8.3
Threshold is medium
Effort is default
Summary
| Classes | Bugs | Errors | Missing Classes |
|---|---|---|---|
| 9 | 4 | 0 | 1 |
Files
| Class | Bugs |
|---|---|
| io.wcm.caravan.commons.httpasyncclient.impl.HttpAsyncClientItem | 1 |
| io.wcm.caravan.commons.httpclient.impl.helpers.CertificateLoader | 3 |
io.wcm.caravan.commons.httpasyncclient.impl.HttpAsyncClientItem
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Exception thrown in class io.wcm.caravan.commons.httpasyncclient.impl.HttpAsyncClientItem at new io.wcm.caravan.commons.httpasyncclient.impl.HttpAsyncClientItem(HttpClientConfig) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. | BAD_PRACTICE | CT_CONSTRUCTOR_THROW | 79 | Medium |
io.wcm.caravan.commons.httpclient.impl.helpers.CertificateLoader
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This API (java/io/File.<init>(Ljava/lang/String;)V) reads a file whose location might be specified by user input | SECURITY | PATH_TRAVERSAL_IN | 245 | Medium |
| This API (java/io/File.<init>(Ljava/lang/String;)V) reads a file whose location might be specified by user input | SECURITY | PATH_TRAVERSAL_IN | 248 | Medium |
| This API (java/io/File.<init>(Ljava/lang/String;)V) reads a file whose location might be specified by user input | SECURITY | PATH_TRAVERSAL_IN | 226 | Medium |