Back to Codebase
Vulnerability Analysis Report
Drush Drush v4.6.0
Scan ID: SCAN-DRUSH-DRUSH-kVpKVE • Hash: 0ffb8460
Severity Score
Critical
Total Findings
2
Engine Version
ECOMGUARD-HYBRID-AST-1.5
Scan Duration
0.779s
Vulnerability Details
L28
Dynamic Code Execution in variableTest.php
CWE-94
File Location:
tests/variableTest.php:28
Security Score:
96 / 100
Confirmed Issue
Rule Engine Warning
Detected insecure pattern matching known vulnerability signatures. High Severity (Confirmed via full AST flow control tracing). Please apply remediation steps matching the recommended patch format below.
Heuristics Diff
- eval($var_export);
+ // Avoid dynamic function/code evaluation. Rewrite with native callbacks.
L22
Dynamic Code Execution in variableTest.php
CWE-94
File Location:
tests/variableTest.php:22
Security Score:
95 / 100
Confirmed Issue
Rule Engine Warning
Detected insecure pattern matching known vulnerability signatures. High Severity (Confirmed via full AST flow control tracing). Please apply remediation steps matching the recommended patch format below.
Heuristics Diff
- eval($var_export);
+ // Avoid dynamic function/code evaluation. Rewrite with native callbacks.