Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WeakRSAKey check page is missing #1894

Open
aliismayilov opened this issue Dec 18, 2024 · 0 comments
Open

WeakRSAKey check page is missing #1894

aliismayilov opened this issue Dec 18, 2024 · 0 comments

Comments

@aliismayilov
Copy link

Background

Brakeman version: 6.2.2
Rails version: 8.0.1
Ruby version: 3.3.6

Link to Rails application code: N/A

Issue

We have the following warning reported:

{
  "warning_type": "Weak Cryptography",
  "warning_code": 126,
  "check_name": "WeakRSAKey",
  "message": "Use of padding mode PKCS1 (default if not specified), which is known to be insecure. Use OAEP instead",
  "link": "https://brakemanscanner.org/docs/warning_types/weak_cryptography/",
  "user_input": null,
  "confidence": "High",
  "cwe_id": [
    780
  ],
  "note": "",
  ...
}

The check has a link to an non-existing page, which makes hard to understand and resolve the warning.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant