explode-js/bench/code-injection.json at main · formalsec/explode-js · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
{
  "name" : "code-injection",
  "cwes" : [ "CWE_94" ],
  "packages": [
    "access-policy-3.1.0",
    "accesslog-0.0.2",
    "angular-expressions-1.1.1",
    "angular-expressions-1.4.2",
    "asyncapi-java-spring-cloud-stream-template-0.6.9",
    "asyncapi-modelina-0.59.9",
    "backstage-plugin-scaffolder-backend-1.14.0",
    "bassmaster-1.5.1",
    "blakeembrey-template-1.1.0",
    "blamer-0.1.13",
    "budibase-server-2.19.6",
    "builder.io-qwik-0.20.1",
    "cd-messenger-2.7.24",
    "cd-messenger-2.7.26",
    "convert-svg-core-0.6.3",
    "cryo-0.0.6",
    "cyclonedx-cdxgen-11.1.6",
    "djv-2.0.0",
    "dom-iterator-1.0.0",
    "dot-1.1.2",
    "electerm-1.3.22",
    "electron-1.6.14",
    "electron-22.3.18",
    "eslint-utils-1.4.0",
    "eta-2.0.0",
    "flowise-1.8.0",
    "frangoteam-fuxa-1.1.13",
    "fsevents-1.2.10",
    "gettext.js-2.0.2",
    "handlebars-3.0.8",
    "handlebars-4.7.7",
    "hbs-4.1.2",
    "hoppscotch-cli-0.5.0",
    "hot-formula-parser-3.0.0",
    "hull.js-1.0.6",
    "ifnotnowwhen-promptr-6.0.7",
    "is-my-json-valid-2.20.0",
    "joplin-2.6.2",
    "js-deobfuscator-1.1.0",
    "js-yaml-3.13.0",
    "js-yaml-3.13.1",
    "jsen-0.6.6",
    "json-10.0.0",
    "json-ptr-2.0.0",
    "jsonpath-plus-10.2.0",
    "jsrender-0.9.73",
    "jsreport-3.11.3",
    "kmc-1.2.2",
    "larvitbase-api-0.5.2",
    "lilconfig-3.1.0",
    "lodash-4.17.20",
    "m-log-0.0.1",
    "mapbox.js-2.1.6",
    "marsdb-0.6.11",
    "mathjs-3.10.3",
    "mathjs-3.16.5",
    "md-to-pdf-4.1.0",
    "mdx-mermaid-1.2.3",
    "metacalc-0.0.2",
    "mixin-pro-0.6.0",
    "mobile-icon-resizer-0.4.2",
    "mock2easy-0.0.24",
    "modjs-0.4.0",
    "modulify-0.1.0",
    "mol-proto-0.1.3",
    "mongo-express-0.54.0",
    "mongo-parse-2.1.0",
    "mongodb-js-connection-form-1.20.0",
    "mongoose-8.9.4",
    "mongoosemask-0.0.6",
    "morgan-1.9.0",
    "morgan-json-1.1.0",
    "mosc-1.0.0",
    "mysql2-3.9.4",
    "mysql2-3.9.6",
    "nobelprizeparser-1.0.1",
    "node-extend-0.2.0",
    "node-os-utils-1.1.0",
    "node-rules-3.0.0",
    "node-rules-4.0.2",
    "node-serialize-0.0.3",
    "nuxt-3.4.3",
    "oauth2-server-3.1.1",
    "obsidian-dataview-0.4.12hotfix1",
    "octocat.js-1.2",
    "pac-resolver-4.2.0",
    "pdfjs-dist-2.0.550",
    "pg-3.6.4",
    "pidusage-1.1.4",
    "pixl-class-1.0.0",
    "pouchdb-6.0.5",
    "preact-10.0.0-beta.0",
    "pug-3.0.2",
    "react-editable-json-tree-2.2.2",
    "realms-shim-1.1.0",
    "reduce-css-calc-1.2.4",
    "safe-eval-0.2.0",
    "safer-eval-1.3.1",
    "safer-eval-1.3.2",
    "safer-eval-1.3.6",
    "scratch-vm-0.2.0-prerelease.20200709173451",
    "script-manager-0.8.6",
    "serialize-javascript-2.0.0",
    "serialize-to-js-0.5.0",
    "shiba-1.2.1",
    "snyk-1.1064.0",
    "squirrelly-9.1.0",
    "static-eval-1.1.1",
    "static-eval-2.0.1",
    "summit-0.1.22",
    "swig-templates-2.0.3",
    "syntax-error-1.1.0",
    "systeminformation-5.23.6",
    "template-1.1.0",
    "thenify-3.3.0",
    "total.js-3.4.7",
    "total.js-3.4.8",
    "total.js-3.4.9",
    "total4-0.0.43",
    "typed-function-0.10.6",
    "underscore-1.12.0",
    "underscore-1.13.0-0",
    "value-censorship-1.1.0",
    "veval-1.0.0",
    "vm2-3.9.10",
    "vm2-3.9.19",
    "wiki-plugin-datalog-0.1.6",
    "xmlhttprequest-1.6.0",
    "xterm-3.8.1",
    "zhaoyao91-eval-in-vm-0.0.0"
  ]
}