Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.
App allows self signed or invalid SSL certificates. App is vulnerable to MITM attacks. If the app does not verify the authenticity of the server's SSL certificate, an attacker could impersonate the server and intercept sensitive data transmitted between the app and the server. To fix these security issues, you should ensure proper SSL certificate validation
The `usleep` function has been deprecated, use `nanosleep` or `setitimer` instead. For more information please see: https://linux.die.net/man/3/setitimer
The ulimit function is obsolete and no longer recommended. Use `getrlimit(2)`, `setrlimit`, or `sysconf` instead. For more information please see: https://linux.die.net/man/3/setrlimit
The `gsignal` and `ssignal` functions are obsolete and no longer recommended. Consider using the `raise` or `sigaction` functions instead for process signaling. For more information please see: https://linux.die.net/man/3/sigaction
The `memalign` function may not check that the alignment argument is correct. Calling free (on non Linux-based systems) may fail and in certain circumstances this failure may be exploitable. This function has been deprecated in favor of `posix_memalign`. For more information please see: https://linux.die.net/man/3/memalign
