Swift rules

Each rule includes the following information.

  • Rule Name: The Snyk name of the rule.

  • CWE(s): The CWE numbers that are covered by this rule.

  • Security Categories: The OWASP Top 10 (2021 edition) category to which the rule belongs to, if any, and if it is included in SANS 25.

  • Autofixable: Security rules that are autofixable by DeepCode AI Fix. This information is included only for the supported programming languages.

Rule NameCWE(s)Security CategoriesAutofixable

Clear Text Logging

CWE-200, CWE-312

OWASP:A01, OWASP:A04

No

Code Injection

CWE-94

Sans Top 25, OWASP:A03

No

Command Injection

CWE-78

Sans Top 25, OWASP:A03

No

Device Authentication Bypass

CWE-287

Sans Top 25, OWASP:A07

No

Hardcoded Secret

CWE-547

OWASP:A05

No

Use of a Broken or Risky Cryptographic Algorithm

CWE-327

OWASP:A02

No

Use of Password Hash With Insufficient Computational Effort

CWE-916

OWASP:A02

No

Information Exposure

CWE-200

OWASP:A01

No

Use of Insufficiently Random Values

CWE-330

OWASP:A02

No

Insecure Data Storage

CWE-922

OWASP:A01

No

Memory Corruption

CWE-822

None

No

Use of Hardcoded Credentials

CWE-798

Sans Top 25, OWASP:A07

No

Use of Hardcoded Passwords

CWE-798, CWE-259

Sans Top 25, OWASP:A07

No

Path Traversal

CWE-23

OWASP:A01

No

Improper Certificate Validation

CWE-295

OWASP:A07

No

SQL Injection

CWE-89

Sans Top 25, OWASP:A03

No

Server-Side Request Forgery (SSRF)

CWE-918

Sans Top 25, OWASP:A10

No

Insecure Deserialization

CWE-502

Sans Top 25, OWASP:A08

No

Inadequate Encryption Strength

CWE-326

OWASP:A02

No

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

CWE-614

OWASP:A05

No

Cross-site Scripting (XSS)

CWE-79

Sans Top 25, OWASP:A03

No

XML External Entity (XXE) Injection

CWE-611

OWASP:A05

No

Last updated

More information

Snyk privacy policy

© 2024 Snyk Limited | All product and company names and logos are trademarks of their respective owners.