codeql/java/documentation/library-coverage/coverage.csv

1	package	sink	source	summary	sink:bean-validation	sink:command-injection	sink:credentials-key	sink:credentials-password	sink:credentials-username	sink:encryption-iv	sink:encryption-salt	sink:environment-injection	sink:file-content-store	sink:fragment-injection	sink:groovy-injection	sink:hostname-verification	sink:html-injection	sink:information-leak	sink:intent-redirection	sink:jexl-injection	sink:jndi-injection	sink:js-injection	sink:ldap-injection	sink:log-injection	sink:mvel-injection	sink:notification	sink:ognl-injection	sink:path-injection	sink:pending-intents	sink:regex-use	sink:regex-use[-1]	sink:regex-use[0]	sink:regex-use[]	sink:regex-use[f-1]	sink:regex-use[f1]	sink:regex-use[f]	sink:request-forgery	sink:response-splitting	sink:sql-injection	sink:template-injection	sink:trust-boundary-violation	sink:url-forward	sink:url-redirection	sink:xpath-injection	sink:xslt-injection	source:android-external-storage-dir	source:contentprovider	source:database	source:environment	source:file	source:remote	summary:taint	summary:value
2	actions.osgi			6																																																6
3	android.app	77		103										11					7							42			17																							18	85
4	android.content	24	31	154															16																				8							4	27					63	91
5	android.database	59		41																																			59													41
6	android.net			60																																																45	15
7	android.os	1	2	122																								1																		2						41	81
8	android.support.v4.app	11												11
9	android.util	6	16																					6																											16
10	android.webkit	3	2														2					1																													2
11	android.widget		1	1																																															1	1
12	androidx.core.app	47		95																						41			6																							12	83
13	androidx.fragment.app	11												11
14	androidx.slice	2	5	88																									2																		5					27	61
15	antlr			1																																																1
16	ch.ethz.ssh2	2						1	1
17	cn.hutool.core.codec			1																																																1
18	com.alibaba.druid.sql	1		1																																			1													1
19	com.alibaba.fastjson2			1																																																1
20	com.amazonaws.auth	2					2
21	com.auth0.jwt.algorithms	6					6
22	com.azure.identity	3					1	1	1
23	com.esotericsoftware.kryo.io			1																																																1
24	com.esotericsoftware.kryo5.io			1																																																1
25	com.fasterxml.jackson.core			1																																																1
26	com.fasterxml.jackson.databind	2		8																								2																								8
27	com.google.common.base	4		87																												3	1																			63	24
28	com.google.common.cache			17																																																	17
29	com.google.common.collect			553																																																2	551
30	com.google.common.flogger	29																						29
31	com.google.common.io	10		73									1															9																								72	1
32	com.google.gson			52																																																38	14
33	com.hubspot.jinjava	2																																						2
34	com.jcraft.jsch	5		1				2	2																												1															1
35	com.microsoft.sqlserver.jdbc	4						2	2
36	com.mitchellbosecke.pebble	2																																						2
37	com.mongodb	10						4	6
38	com.opensymphony.xwork2	56		961																							56																									867	94
39	com.rabbitmq.client		21	7																																															21	7
40	com.sshtools.j2ssh.authentication	3						1	2
41	com.sun.crypto.provider	19					17	2
42	com.sun.jndi.ldap	4							4
43	com.sun.net.httpserver	3						1	2
44	com.sun.net.ssl	3						3
45	com.sun.rowset	3						2	1
46	com.sun.security.auth.module	2						2
47	com.sun.security.ntlm	5						3	2
48	com.sun.security.sasl.digest	3						2	1
49	com.thoughtworks.xstream	1																										1
50	com.trilead.ssh2	13					2	4	7
51	com.unboundid.ldap.sdk	17																					17
52	com.zaxxer.hikari	2																																			2
53	flexjson			1																																																	1
54	freemarker.cache	1																																						1
55	freemarker.template	7																																						7
56	groovy.lang	26													26
57	groovy.text	1													1
58	groovy.util	5													5
59	hudson	74	9	2648		4						3	2				4											55									6													5	4	2572	76
60	io.jsonwebtoken		2	4																																															2	4
61	io.netty.bootstrap	3																																			3
62	io.netty.buffer			207																																																130	77
63	io.netty.channel	9	2																																		9														2
64	io.netty.handler.codec	4	13	259																								1									3														13	143	116
65	io.netty.handler.ssl	4																										4
66	io.netty.handler.stream	1																										1
67	io.netty.resolver			1																																																1
68	io.netty.util	2		23																								1									1															21	2
69	jakarta.activation	2		2																								1									1															2
70	jakarta.faces.context	2	7														2																																		7
71	jakarta.json			123																																																100	23
72	jakarta.persistence	2		1																																			2													1
73	jakarta.servlet	2	1																																							2									1
74	jakarta.ws.rs.client	1																																			1
75	jakarta.ws.rs.container		9																																																9
76	jakarta.ws.rs.core	2		149																																							2									94	55
77	jakarta.xml.bind.attachment		2																																																2
78	java.applet			14																																																14
79	java.awt	1		5																																							1									2	3
80	java.beans			193																																																193
81	java.io	51	1	256									22															29																						1		249	7
82	java.lang	38	3	759		13						1												8				11			4			1															3			681	78
83	java.math			9																																																	9
84	java.net	23	3	278				1	1																												21														3	274	4
85	java.nio	44		361									5															38									1															259	102
86	java.rmi			71																																																71
87	java.security	21		543			11	10																																												539	4
88	java.sql	15	1	303				1	1																												4		9									1				303
89	java.text			134																																																134
90	java.time			476																																																388	88
91	java.util	47	2	1218									1											34				2				5	2		1	2													2			704	514
92	javafx.scene.web	1																																			1
93	javax.accessibility			31																																																31
94	javax.activation	2		7																								1									1															7
95	javax.annotation.processing			9																																																9
96	javax.crypto	19		128			12	3		2	2																																									128
97	javax.faces.context	2	7														2																																		7
98	javax.imageio	1		261																								1																								261
99	javax.jms		9	57																																															9	57
100	javax.json			123																																																100	23
101	javax.lang.model.element			17																																																17
102	javax.lang.model.type			9																																																9
103	javax.lang.model.util			68																																																68
104	javax.management	2		799																	2																															798	1
105	javax.naming	7		324																	6		1																													318	6
106	javax.net	4		86				2								2																																				86
107	javax.portlet	1		61																																						1										61
108	javax.print	2		100					2																																											100
109	javax.rmi.ssl			7																																																7
110	javax.script	1		42																					1																											42
111	javax.security.auth	7		137			4	3																																												137
112	javax.security.cert			5																																																5
113	javax.security.sasl			28																																																28
114	javax.servlet	9	22	3														1										1										3			2	2									22	3
115	javax.smartcardio			30																																																30
116	javax.sound.midi			29																																																29
117	javax.sound.sampled			66																																																66
118	javax.sql	7		63				4	3																																											63
119	javax.tools			31																																																31
120	javax.transaction.xa			1																																																1
121	javax.validation	1	1		1																																														1
122	javax.ws.rs.client	1																																			1
123	javax.ws.rs.container		9																																																9
124	javax.ws.rs.core	3		149																																		1					2									94	55
125	javax.xml.bind.attachment		2																																																2
126	javax.xml.catalog			11																																																10	1
127	javax.xml.crypto			126																																																126
128	javax.xml.datatype			4																																																4
129	javax.xml.namespace			10																																																10
130	javax.xml.parsers			18																																																18
131	javax.xml.stream			36																																																36
132	javax.xml.transform	2		89																								1																	1							89
133	javax.xml.validation			5																																																5
134	javax.xml.xpath	3		12																																								3								12
135	jenkins			523																																																500	23
136	jodd.json			10																																																	10
137	kotlin	16		1849																								14									2															1836	13
138	liquibase.database.jvm	1																																					1
139	liquibase.statement.core	1																																					1
140	net.schmizz.sshj	4						2	2
141	net.sf.json	2		338																																	2															321	17
142	net.sf.saxon.s9api	5																																											5
143	ognl	6																									6
144	okhttp3	4		50																																	4															23	27
145	org.acegisecurity			49																																																49
146	org.antlr.runtime	1																										1
147	org.apache.commons.codec			6																																																6
148	org.apache.commons.collections			800																																																17	783
149	org.apache.commons.collections4			800																																																17	783
150	org.apache.commons.compress.archivers.tar			4																																																4
151	org.apache.commons.exec	10				6						4
152	org.apache.commons.httpclient.util			1																																																1
153	org.apache.commons.io	118		562									4															99									15															548	14
154	org.apache.commons.jelly	6																																			6
155	org.apache.commons.jexl2	15																		15
156	org.apache.commons.jexl3	15																		15
157	org.apache.commons.lang			767																																																596	171
158	org.apache.commons.lang3	6		425																										6																						294	131
159	org.apache.commons.logging	6																						6
160	org.apache.commons.net	13	12					2	2																			3									6														12
161	org.apache.commons.ognl	6																									6
162	org.apache.commons.text			272																																																220	52
163	org.apache.cxf.catalog	1																																			1
164	org.apache.cxf.common.classloader	3																										1									2
165	org.apache.cxf.common.jaxb	1																										1
166	org.apache.cxf.common.logging	6																						6
167	org.apache.cxf.configuration.jsse	2														1												1
168	org.apache.cxf.helpers	10																										5																5
169	org.apache.cxf.resource	9																										4									5
170	org.apache.cxf.staxutils	1																										1
171	org.apache.cxf.tools.corba.utils	4																										4
172	org.apache.cxf.tools.util	10																										10
173	org.apache.cxf.transform	3																																											3
174	org.apache.directory.ldap.client.api	1																					1
175	org.apache.hadoop.fs	3		11																								3																								11
176	org.apache.hadoop.hive.metastore	3																																					3
177	org.apache.hadoop.hive.ql.exec	1		1																								1																								1
178	org.apache.hadoop.hive.ql.metadata	1																										1
179	org.apache.hc.client5.http.async.methods	84																																			84
180	org.apache.hc.client5.http.classic.methods	37																																			37
181	org.apache.hc.client5.http.fluent	19																																			19
182	org.apache.hc.core5.benchmark	1																																			1
183	org.apache.hc.core5.function			1																																																1
184	org.apache.hc.core5.http	73	2	45													1																				72														2	45
185	org.apache.hc.core5.net			18																																																18
186	org.apache.hc.core5.util			24																																																18	6
187	org.apache.hive.hcatalog.templeton	1																																					1
188	org.apache.http	48	3	95													2																				46														3	86	9
189	org.apache.ibatis.jdbc	6		57																																			6													57
190	org.apache.ibatis.mapping			1																																																1
191	org.apache.log4j	11																						11
192	org.apache.logging.log4j	359		8																				359																												4	4
193	org.apache.shiro.codec			1																																																1
194	org.apache.shiro.jndi	1																			1
195	org.apache.shiro.mgt	1					1
196	org.apache.sshd.client.session	3						1	2
197	org.apache.struts.beanvalidation.validation.interceptor			4																																																4
198	org.apache.struts2	14		3873																							11														3											3839	34
199	org.apache.tools.ant	12				1																						11
200	org.apache.tools.zip			1																																																1
201	org.apache.velocity.app	4																																						4
202	org.apache.velocity.runtime	4																																						4
203	org.codehaus.cargo.container.installer	3																										2									1
204	org.codehaus.groovy.control	1													1
205	org.dom4j	20																																										20
206	org.eclipse.jetty.client	2																																			2
207	org.fusesource.leveldbjni	1																										1
208	org.geogebra.web.full.main	1																																									1
209	org.gradle.api.file			3																																																3
210	org.hibernate	7																																					7
211	org.influxdb	1																																			1
212	org.jboss.logging	324																						324
213	org.jdbi.v3.core	6																																			6
214	org.jenkins.ui.icon			49																																																48	1
215	org.jenkins.ui.symbol			33																																																25	8
216	org.jooq	1																																					1
217	org.json			236																																																198	38
218	org.keycloak.models.map.storage	1																																					1
219	org.kohsuke.stapler	20	24	363													2											9									3					1	5								24	352	11
220	org.mvel2	16																							16
221	org.openjdk.jmh.runner.options	1																										1
222	org.owasp.esapi			1																																																1
223	org.pac4j.jwt.config.encryption	4					4
224	org.pac4j.jwt.config.signature	4					4
225	org.scijava.log	13																						13
226	org.slf4j	55		6																				55																												2	4
227	org.springframework.beans			30																																																	30
228	org.springframework.boot.jdbc	1																																			1
229	org.springframework.cache			13																																																	13
230	org.springframework.context			3																																																3
231	org.springframework.core.io	3																										2									1
232	org.springframework.data.repository			1																																																	1
233	org.springframework.http	14		77																																	14															67	10
234	org.springframework.jdbc.core	19																																					19
235	org.springframework.jdbc.datasource	4																																			4
236	org.springframework.jdbc.object	9																																					9
237	org.springframework.jndi	1																			1
238	org.springframework.ldap	47																			33		14
239	org.springframework.security.core.userdetails	2						1	1
240	org.springframework.security.web.savedrequest		6																																																6
241	org.springframework.ui			32																																																	32
242	org.springframework.util	3		142																								3																								90	52
243	org.springframework.validation			13																																																13
244	org.springframework.web.client	13	3																																		13														3
245	org.springframework.web.context.request		8																																																8
246	org.springframework.web.multipart		12	13																																															12	13
247	org.springframework.web.portlet	2																																								2
248	org.springframework.web.reactive.function.client	2																																			2
249	org.springframework.web.servlet	2																																								2
250	org.springframework.web.util		9	157																																															9	132	25
251	org.thymeleaf	2		2																																				2												2
252	org.w3c.dom			57																																																56	1
253	org.xml.sax			4																																																4
254	org.xmlpull.v1		3																																																3
255	org.yaml.snakeyaml			1																																																1
256	play.libs.ws	2																																			2
257	play.mvc	1	13	24																																					1										13	24
258	ratpack.core.form			3																																																3
259	ratpack.core.handling		6	4																																															6	4
260	ratpack.core.http		10	10																																															10	10
261	ratpack.exec			48																																																	48
262	ratpack.form			3																																																3
263	ratpack.func			35																																																	35
264	ratpack.handling		6	4																																															6	4
265	ratpack.http		10	10																																															10	10
266	ratpack.util			35																																																	35
267	retrofit2	1		1																																	1															1
268	sun.awt			5																																																5
269	sun.jvmstat.perfdata.monitor.protocol.local	3							3
270	sun.jvmstat.perfdata.monitor.protocol.rmi	1							1
271	sun.management.spi			1																																																1
272	sun.misc	3							3
273	sun.net.ftp	5						2	3
274	sun.net.www.protocol.http	3						2	1
275	sun.nio.ch			2																																																2
276	sun.security.acl	1							1
277	sun.security.jgss.krb5	2					2
278	sun.security.krb5	9		7			3	6																																												7
279	sun.security.pkcs	4					4
280	sun.security.pkcs11	3					1	2
281	sun.security.provider	2						2
282	sun.security.ssl	3						3
283	sun.security.x509	1					1
284	sun.tools.jconsole	28						13	15
285	sun.util.logging.internal			3																																																3