CWE coverage for Swift — CodeQL query help documentation
CWE-20
Swift
swift/incomplete-hostname-regexp
Incomplete regular expression for hostnames
CWE-20
Swift
swift/missing-regexp-anchor
Missing regular expression anchor
CWE-20
Swift
swift/bad-tag-filter
Bad HTML filtering regexp
CWE-22
Swift
swift/unsafe-unpacking
Arbitrary file write during a zip extraction from a user controlled source
CWE-22
Swift
swift/path-injection
Uncontrolled data used in path expression
CWE-23
Swift
swift/path-injection
Uncontrolled data used in path expression
CWE-36
Swift
swift/path-injection
Uncontrolled data used in path expression
CWE-73
Swift
swift/path-injection
Uncontrolled data used in path expression
CWE-74
Swift
swift/path-injection
Uncontrolled data used in path expression
CWE-74
Swift
swift/command-line-injection
System command built from user-controlled sources
CWE-74
Swift
swift/unsafe-webview-fetch
Unsafe WebView fetch
CWE-74
Swift
swift/sql-injection
Database query built from user-controlled sources
CWE-74
Swift
swift/unsafe-js-eval
JavaScript Injection
CWE-74
Swift
swift/uncontrolled-format-string
Uncontrolled format string
CWE-74
Swift
swift/predicate-injection
Predicate built from user-controlled sources
CWE-77
Swift
swift/command-line-injection
System command built from user-controlled sources
CWE-78
Swift
swift/command-line-injection
System command built from user-controlled sources
CWE-79
Swift
swift/unsafe-webview-fetch
Unsafe WebView fetch
CWE-88
Swift
swift/command-line-injection
System command built from user-controlled sources
CWE-89
Swift
swift/sql-injection
Database query built from user-controlled sources
CWE-94
Swift
swift/unsafe-webview-fetch
Unsafe WebView fetch
CWE-94
Swift
swift/unsafe-js-eval
JavaScript Injection
CWE-95
Swift
swift/unsafe-webview-fetch
Unsafe WebView fetch
CWE-95
Swift
swift/unsafe-js-eval
JavaScript Injection
CWE-99
Swift
swift/path-injection
Uncontrolled data used in path expression
CWE-116
Swift
swift/bad-tag-filter
Bad HTML filtering regexp
CWE-134
Swift
swift/uncontrolled-format-string
Uncontrolled format string
CWE-135
Swift
swift/string-length-conflation
String length conflation
CWE-185
Swift
swift/bad-tag-filter
Bad HTML filtering regexp
CWE-186
Swift
swift/bad-tag-filter
Bad HTML filtering regexp
CWE-200
Swift
swift/cleartext-logging
Cleartext logging of sensitive information
CWE-227
Swift
swift/static-initialization-vector
Static initialization vector for encryption
CWE-259
Swift
swift/constant-password
Constant password
CWE-284
Swift
swift/constant-password
Constant password
CWE-284
Swift
swift/hardcoded-key
Hard-coded encryption key
CWE-287
Swift
swift/constant-password
Constant password
CWE-287
Swift
swift/hardcoded-key
Hard-coded encryption key
CWE-311
Swift
swift/cleartext-storage-database
Cleartext storage of sensitive information in a local database
CWE-311
Swift
swift/cleartext-transmission
Cleartext transmission of sensitive information
CWE-311
Swift
swift/cleartext-logging
Cleartext logging of sensitive information
CWE-311
Swift
swift/cleartext-storage-preferences
Cleartext storage of sensitive information in an application preference store
CWE-312
Swift
swift/cleartext-storage-database
Cleartext storage of sensitive information in a local database
CWE-312
Swift
swift/cleartext-logging
Cleartext logging of sensitive information
CWE-312
Swift
swift/cleartext-storage-preferences
Cleartext storage of sensitive information in an application preference store
CWE-319
Swift
swift/cleartext-transmission
Cleartext transmission of sensitive information
CWE-321
Swift
swift/hardcoded-key
Hard-coded encryption key
CWE-326
Swift
swift/weak-password-hashing
Use of an inappropriate cryptographic hashing algorithm on passwords
CWE-326
Swift
swift/weak-sensitive-data-hashing
Use of a broken or weak cryptographic hashing algorithm on sensitive data
CWE-327
Swift
swift/ecb-encryption
Encryption using ECB
CWE-327
Swift
swift/weak-password-hashing
Use of an inappropriate cryptographic hashing algorithm on passwords
CWE-327
Swift
swift/weak-sensitive-data-hashing
Use of a broken or weak cryptographic hashing algorithm on sensitive data
CWE-327
Swift
swift/constant-salt
Use of constant salts
CWE-327
Swift
swift/insufficient-hash-iterations
Insufficient hash iterations
CWE-328
Swift
swift/weak-password-hashing
Use of an inappropriate cryptographic hashing algorithm on passwords
CWE-328
Swift
swift/weak-sensitive-data-hashing
Use of a broken or weak cryptographic hashing algorithm on sensitive data
CWE-329
Swift
swift/static-initialization-vector
Static initialization vector for encryption
CWE-330
Swift
swift/static-initialization-vector
Static initialization vector for encryption
CWE-330
Swift
swift/constant-password
Constant password
CWE-330
Swift
swift/hardcoded-key
Hard-coded encryption key
CWE-344
Swift
swift/constant-password
Constant password
CWE-344
Swift
swift/hardcoded-key
Hard-coded encryption key
CWE-359
Swift
swift/cleartext-logging
Cleartext logging of sensitive information
CWE-400
Swift
swift/redos
Inefficient regular expression
CWE-400
Swift
swift/regex-injection
Regular expression injection
CWE-405
Swift
swift/xxe
Resolving XML external entity in user-controlled data
CWE-409
Swift
swift/xxe
Resolving XML external entity in user-controlled data
CWE-485
Swift
swift/unsafe-webview-fetch
Unsafe WebView fetch
CWE-485
Swift
swift/unsafe-js-eval
JavaScript Injection
CWE-532
Swift
swift/cleartext-logging
Cleartext logging of sensitive information
CWE-538
Swift
swift/cleartext-logging
Cleartext logging of sensitive information
CWE-552
Swift
swift/cleartext-logging
Cleartext logging of sensitive information
CWE-573
Swift
swift/static-initialization-vector
Static initialization vector for encryption
CWE-610
Swift
swift/path-injection
Uncontrolled data used in path expression
CWE-610
Swift
swift/xxe
Resolving XML external entity in user-controlled data
CWE-611
Swift
swift/xxe
Resolving XML external entity in user-controlled data
CWE-642
Swift
swift/path-injection
Uncontrolled data used in path expression
CWE-657
Swift
swift/constant-password
Constant password
CWE-657
Swift
swift/hardcoded-key
Hard-coded encryption key
CWE-664
Swift
swift/unsafe-unpacking
Arbitrary file write during a zip extraction from a user controlled source
CWE-664
Swift
swift/path-injection
Uncontrolled data used in path expression
CWE-664
Swift
swift/unsafe-webview-fetch
Unsafe WebView fetch
CWE-664
Swift
swift/unsafe-js-eval
JavaScript Injection
CWE-664
Swift
swift/redos
Inefficient regular expression
CWE-664
Swift
swift/constant-password
Constant password
CWE-664
Swift
swift/cleartext-storage-database
Cleartext storage of sensitive information in a local database
CWE-664
Swift
swift/cleartext-logging
Cleartext logging of sensitive information
CWE-664
Swift
swift/cleartext-storage-preferences
Cleartext storage of sensitive information in an application preference store
CWE-664
Swift
swift/hardcoded-key
Hard-coded encryption key
CWE-664
Swift
swift/xxe
Resolving XML external entity in user-controlled data
CWE-664
Swift
swift/regex-injection
Regular expression injection
CWE-668
Swift
swift/unsafe-unpacking
Arbitrary file write during a zip extraction from a user controlled source
CWE-668
Swift
swift/path-injection
Uncontrolled data used in path expression
CWE-668
Swift
swift/cleartext-logging
Cleartext logging of sensitive information
CWE-669
Swift
swift/xxe
Resolving XML external entity in user-controlled data
CWE-671
Swift
swift/constant-password
Constant password
CWE-671
Swift
swift/hardcoded-key
Hard-coded encryption key
CWE-674
Swift
swift/xxe
Resolving XML external entity in user-controlled data
CWE-682
Swift
swift/string-length-conflation
String length conflation
CWE-691
Swift
swift/unsafe-webview-fetch
Unsafe WebView fetch
CWE-691
Swift
swift/unsafe-js-eval
JavaScript Injection
CWE-691
Swift
swift/xxe
Resolving XML external entity in user-controlled data
CWE-693
Swift
swift/incomplete-hostname-regexp
Incomplete regular expression for hostnames
CWE-693
Swift
swift/missing-regexp-anchor
Missing regular expression anchor
CWE-693
Swift
swift/bad-tag-filter
Bad HTML filtering regexp
CWE-693
Swift
swift/constant-password
Constant password
CWE-693
Swift
swift/cleartext-storage-database
Cleartext storage of sensitive information in a local database
CWE-693
Swift
swift/cleartext-transmission
Cleartext transmission of sensitive information
CWE-693
Swift
swift/cleartext-logging
Cleartext logging of sensitive information
CWE-693
Swift
swift/cleartext-storage-preferences
Cleartext storage of sensitive information in an application preference store
CWE-693
Swift
swift/hardcoded-key
Hard-coded encryption key
CWE-693
Swift
swift/ecb-encryption
Encryption using ECB
CWE-693
Swift
swift/weak-password-hashing
Use of an inappropriate cryptographic hashing algorithm on passwords
CWE-693
Swift
swift/weak-sensitive-data-hashing
Use of a broken or weak cryptographic hashing algorithm on sensitive data
CWE-693
Swift
swift/insecure-tls
Insecure TLS configuration
CWE-693
Swift
swift/constant-salt
Use of constant salts
CWE-693
Swift
swift/insufficient-hash-iterations
Insufficient hash iterations
CWE-697
Swift
swift/bad-tag-filter
Bad HTML filtering regexp
CWE-706
Swift
swift/unsafe-unpacking
Arbitrary file write during a zip extraction from a user controlled source
CWE-706
Swift
swift/path-injection
Uncontrolled data used in path expression
CWE-706
Swift
swift/xxe
Resolving XML external entity in user-controlled data
CWE-707
Swift
swift/path-injection
Uncontrolled data used in path expression
CWE-707
Swift
swift/command-line-injection
System command built from user-controlled sources
CWE-707
Swift
swift/unsafe-webview-fetch
Unsafe WebView fetch
CWE-707
Swift
swift/sql-injection
Database query built from user-controlled sources
CWE-707
Swift
swift/unsafe-js-eval
JavaScript Injection
CWE-707
Swift
swift/bad-tag-filter
Bad HTML filtering regexp
CWE-707
Swift
swift/uncontrolled-format-string
Uncontrolled format string
CWE-707
Swift
swift/predicate-injection
Predicate built from user-controlled sources
CWE-710
Swift
swift/static-initialization-vector
Static initialization vector for encryption
CWE-710
Swift
swift/constant-password
Constant password
CWE-710
Swift
swift/hardcoded-key
Hard-coded encryption key
CWE-749
Swift
swift/unsafe-webview-fetch
Unsafe WebView fetch
CWE-749
Swift
swift/unsafe-js-eval
JavaScript Injection
CWE-757
Swift
swift/insecure-tls
Insecure TLS configuration
CWE-760
Swift
swift/constant-salt
Use of constant salts
CWE-776
Swift
swift/xxe
Resolving XML external entity in user-controlled data
CWE-798
Swift
swift/constant-password
Constant password
CWE-798
Swift
swift/hardcoded-key
Hard-coded encryption key
CWE-827
Swift
swift/xxe
Resolving XML external entity in user-controlled data
CWE-829
Swift
swift/xxe
Resolving XML external entity in user-controlled data
CWE-834
Swift
swift/xxe
Resolving XML external entity in user-controlled data
CWE-913
Swift
swift/unsafe-webview-fetch
Unsafe WebView fetch
CWE-913
Swift
swift/unsafe-js-eval
JavaScript Injection
CWE-916
Swift
swift/weak-password-hashing
Use of an inappropriate cryptographic hashing algorithm on passwords
CWE-916
Swift
swift/constant-salt
Use of constant salts
CWE-916
Swift
swift/insufficient-hash-iterations
Insufficient hash iterations
CWE-922
Swift
swift/cleartext-storage-database
Cleartext storage of sensitive information in a local database
CWE-922
Swift
swift/cleartext-logging
Cleartext logging of sensitive information
CWE-922
Swift
swift/cleartext-storage-preferences
Cleartext storage of sensitive information in an application preference store
CWE-943
Swift
swift/sql-injection
Database query built from user-controlled sources
CWE-943
Swift
swift/predicate-injection
Predicate built from user-controlled sources
CWE-1204
Swift
swift/static-initialization-vector
Static initialization vector for encryption
CWE-1333
Swift
swift/redos
Inefficient regular expression