The following document contains the results of FindBugs Report
FindBugs Version is 2.0.2
Threshold is medium
Effort is min
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.owasp.dependencycheck.analyzer.AssemblyAnalyzer.initializeFileTypeAnalyzer() discards result of readLine after checking if it is nonnull | STYLE | RV_DONT_JUST_NULL_CHECK_READLINE | 236 | Medium |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Possible null pointer dereference of currentVersion on branch that might be infeasible in org.owasp.dependencycheck.analyzer.FalsePositiveAnalyzer.removeSpuriousCPE(Dependency) | STYLE | NP_NULL_ON_SOME_PATH_MIGHT_BE_INFEASIBLE | 145 | Medium |
| Possible null pointer dereference of nextVersion on branch that might be infeasible in org.owasp.dependencycheck.analyzer.FalsePositiveAnalyzer.removeSpuriousCPE(Dependency) | STYLE | NP_NULL_ON_SOME_PATH_MIGHT_BE_INFEASIBLE | 145 | Medium |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Found reliance on default encoding in org.owasp.dependencycheck.analyzer.JavaScriptAnalyzer.analyzeFileType(Dependency, Engine): new java.io.FileReader(File) | I18N | DM_DEFAULT_ENCODING | 115 | High |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.owasp.dependencycheck.suppression.SuppressionParser.parseSuppressionRules(File) may fail to clean up java.io.InputStream | EXPERIMENTAL | OBL_UNSATISFIED_OBLIGATION | 72 | Medium |
