Back to Codebase
Vulnerability Analysis Report
Drush Drush v5.0.0-rc2
Scan ID: SCAN-DRUSH-DRUSH-s0Z1ir • Hash: a3680c6e
Severity Score
Critical
Total Findings
2
Engine Version
ECOMGUARD-HYBRID-AST-1.5
Scan Duration
0.748s
Vulnerability Details
L27
Dynamic Code Execution in variableTest.php
CWE-94
File Location:
tests/variableTest.php:27
Security Score:
97 / 100
Confirmed Issue
Rule Engine Warning
Detected insecure pattern matching known vulnerability signatures. High Severity (Confirmed via full AST flow control tracing). Please apply remediation steps matching the recommended patch format below.
Heuristics Diff
- eval($var_export);
+ // Avoid dynamic function/code evaluation. Rewrite with native callbacks.
L21
Dynamic Code Execution in variableTest.php
CWE-94
File Location:
tests/variableTest.php:21
Security Score:
96 / 100
Confirmed Issue
Rule Engine Warning
Detected insecure pattern matching known vulnerability signatures. High Severity (Confirmed via full AST flow control tracing). Please apply remediation steps matching the recommended patch format below.
Heuristics Diff
- eval($var_export);
+ // Avoid dynamic function/code evaluation. Rewrite with native callbacks.