View raw JSON
{
"slug": "defender-security",
"previous_version": "6.2.4",
"current_version": "6.2.4",
"new_findings": [
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "extra/hub-connector/inc/class-remote.php",
"line": 717,
"snippet": "$signature = base64_decode( $signed_data, true ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode",
"confidence": "medium"
},
{
"pattern": "createfunc",
"kind": "builtin",
"file": "lib/packages/Safe/generated/funchand.php",
"line": 17,
"snippet": "function create_function(string $args, string $code): string",
"confidence": "medium"
},
{
"pattern": "createfunc",
"kind": "builtin",
"file": "lib/packages/Safe/generated/funchand.php",
"line": 20,
"snippet": "$result = \\create_function($args, $code);",
"confidence": "medium"
},
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "lib/packages/Safe/generated/url.php",
"line": 20,
"snippet": "function base64_decode(string $data, bool $strict = false): string",
"confidence": "medium"
},
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "lib/packages/Safe/generated/url.php",
"line": 23,
"snippet": "$result = \\base64_decode($data, $strict);",
"confidence": "medium"
},
{
"pattern": "gzinflate",
"kind": "builtin",
"file": "lib/packages/Safe/generated/zlib.php",
"line": 340,
"snippet": "function gzinflate(string $data, int $length = 0): string",
"confidence": "medium"
},
{
"pattern": "gzinflate",
"kind": "builtin",
"file": "lib/packages/Safe/generated/zlib.php",
"line": 343,
"snippet": "$result = \\gzinflate($data, $length);",
"confidence": "medium"
},
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "lib/packages/Base64Url/Base64Url.php",
"line": 49,
"snippet": "$decoded = base64_decode(strtr($data, '-_', '+/'), true);",
"confidence": "medium"
},
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "lib/packages/CBOR/Utils.php",
"line": 52,
"snippet": "$decoded = base64_decode(strtr($data, '-_', '+/'), true);",
"confidence": "medium"
},
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "lib/packages/CBOR/Tag/Base64EncodingTag.php",
"line": 56,
"snippet": "$result = base64_decode($this->object->getNormalizedData($ignoreTags), true);",
"confidence": "medium"
},
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "lib/packages/League/Uri/Uri.php",
"line": 697,
"snippet": "$userinfo = base64_decode(substr($server['HTTP_AUTHORIZATION'], 6), true);",
"confidence": "medium"
},
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "lib/packages/League/Uri/Uri.php",
"line": 877,
"snippet": "$res = base64_decode($data, true);",
"confidence": "medium"
},
{
"pattern": "hex_string_long",
"kind": "builtin",
"file": "lib/packages/League/Uri/Uri.php",
"line": 199,
"snippet": "private const ASCII = \"\\x20\\x65\\x69\\x61\\x73\\x6E\\x74\\x72\\x6F\\x6C\\x75\\x64\\x5D\\x5B\\x63\\x6D\\x70\\x27\\x0A\\x67\\x7C\\x68\\x76\\x2E\\x66\\x62\\x2C\\x3A\\x3D\\x2D\\x71\\x31\\x30\\x43\\x32\\x2A\\x79\\x78\\x29\\x28\\x4C\\x39\\x41\\",
"confidence": "medium"
},
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "lib/packages/Assert/Assertion.php",
"line": 2698,
"snippet": "if (false === \\base64_decode($value, true)) {",
"confidence": "medium"
},
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "lib/packages/Webauthn/PublicKeyCredentialUserEntity.php",
"line": 66,
"snippet": "$id = base64_decode($json['id'], true);",
"confidence": "medium"
}
],
"new_finding_count": 22
}