Search results

STATIC_IV false positive

false-positiveSomething that should not report.Something that should not report.

Status: Open.

#765 In find-sec-bugs/find-sec-bugs;

· ChristopherSchultz opened on Aug 26, 2025

SQL_INJECTION_JDBC seems to miss situations where the tained variable is used in a chained StringBuilder.append

false-positiveSomething that should not report.Something that should not report.

Status: Open.

#764 In find-sec-bugs/find-sec-bugs;

· ChristopherSchultz opened on Aug 22, 2025

The check for CRLF_INJECTION_LOGS should recognize replacing \\R

false-positiveSomething that should not report.Something that should not report.

Status: Open.

#762 In find-sec-bugs/find-sec-bugs;

· reallifedeveloper opened on Jul 15, 2025

Jakarta new packages

Status: Open.

#749 In find-sec-bugs/find-sec-bugs;

· h3xstream opened on Dec 9, 2024

DataflowAnalysisException in 1.12.0 and 1.13.0

bug

Status: Open.

#744 In find-sec-bugs/find-sec-bugs;

· myaponchik opened on Oct 15, 2024

False Positive: XXE_SCHEMA_FACTORY detector does not account for setting properties in separate method

false-positiveSomething that should not report.Something that should not report.

Status: Open.

#738 In find-sec-bugs/find-sec-bugs;

· javanegmond opened on Jun 10, 2024

How do I use the command line arguments passed in by spotbugs in findsecbugs

questionQuestions on how to use FSB or about its capabilities.Questions on how to use FSB or about its capabilities.

Status: Open.

#737 In find-sec-bugs/find-sec-bugs;

· sjlx12345 opened on Jun 6, 2024

Cannot build find-sec-bugs from local, CrlfLogInjectionDetectorTest fail

Status: Open.

#736 In find-sec-bugs/find-sec-bugs;

· bsellier opened on May 31, 2024

Add support for JSR305 @Detainted / @Tainted / @Untainted in the taint analysis

Status: Open.

#735 In find-sec-bugs/find-sec-bugs;

· gehel opened on May 3, 2024

Getting "Hard coded password found here" exception where (IMHO) it shouldn't

bug

false-positiveSomething that should not report.Something that should not report.

Status: Open.

#731 In find-sec-bugs/find-sec-bugs;

· sliric opened on Mar 5, 2024

Missing artifact in release assets

Status: Open.

#730 In find-sec-bugs/find-sec-bugs;

· haerter-tss opened on Mar 5, 2024

Invalid class name exception for methods with generics

bug

Status: Open.

#724 In find-sec-bugs/find-sec-bugs;

· pavelorehov opened on Feb 13, 2024