repo_url=https://github.com/wazuh/wazuh.git vulnerable_commit=24609e140155d7fd2bddd4ebb045dbde5bea320f fixed_commit=b29849f8abb08d78f257e6106b6111a8a1b0e621 --- vulnerable sink line --- 24609e140155d7fd2bddd4ebb045dbde5bea320f:framework/wazuh/core/results.py:836: casters = [getattr(builtins, type_) for type_ in types] --- fixed allowlist lines --- b29849f8abb08d78f257e6106b6111a8a1b0e621:framework/wazuh/core/results.py:607: ALLOWED_TYPES = {'int', 'float', 'str', 'bool'} b29849f8abb08d78f257e6106b6111a8a1b0e621:framework/wazuh/core/results.py:615: if type_name not in ALLOWED_TYPES: b29849f8abb08d78f257e6106b6111a8a1b0e621:framework/wazuh/core/results.py:617: f"Allowed types: {', '.join(sorted(ALLOWED_TYPES))}") b29849f8abb08d78f257e6106b6111a8a1b0e621:framework/wazuh/core/results.py:842: ALLOWED_CASTERS = { b29849f8abb08d78f257e6106b6111a8a1b0e621:framework/wazuh/core/results.py:858: if type_ not in ALLOWED_CASTERS: b29849f8abb08d78f257e6106b6111a8a1b0e621:framework/wazuh/core/results.py:860: f"Allowed types: {', '.join(ALLOWED_CASTERS.keys())}") b29849f8abb08d78f257e6106b6111a8a1b0e621:framework/wazuh/core/results.py:861: casters.append(ALLOWED_CASTERS[type_])