codeql/java/documentation/library-coverage/coverage.csv

1	package	sink	source	summary	sink:bean-validation	sink:command-injection	sink:credentials-key	sink:credentials-password	sink:credentials-username	sink:encryption-iv	sink:encryption-salt	sink:environment-injection	sink:file-content-store	sink:fragment-injection	sink:groovy-injection	sink:hostname-verification	sink:html-injection	sink:information-leak	sink:intent-redirection	sink:jexl-injection	sink:jndi-injection	sink:js-injection	sink:ldap-injection	sink:log-injection	sink:mvel-injection	sink:notification	sink:ognl-injection	sink:path-injection	sink:path-injection[read]	sink:pending-intents	sink:regex-use	sink:regex-use[-1]	sink:regex-use[0]	sink:regex-use[]	sink:regex-use[f-1]	sink:regex-use[f1]	sink:regex-use[f]	sink:request-forgery	sink:response-splitting	sink:sql-injection	sink:template-injection	sink:trust-boundary-violation	sink:unsafe-deserialization	sink:url-forward	sink:url-redirection	sink:xpath-injection	sink:xslt-injection	sink:xxe	source:android-external-storage-dir	source:commandargs	source:contentprovider	source:database	source:environment	source:file	source:remote	summary:taint	summary:value
2	actions.osgi			6																																																				6
3	android.app	77		103										11					7							42				17																										18	85
4	android.content	24	31	154															16																					8									4		27					63	91
5	android.database	59		41																																				59																41
6	android.net			60																																																				45	15
7	android.os	1	2	122																								1																					2							41	81
8	android.support.v4.app	11												11
9	android.util	6	16																					6																															16
10	android.webkit	3	2														2					1																																	2
11	android.widget		1	1																																																			1	1
12	androidx.core.app	47		95																						41				6																										12	83
13	androidx.fragment.app	11												11
14	androidx.slice	2	5	88																										2																					5					27	61
15	antlr			1																																																				1
16	ch.ethz.ssh2	2						1	1
17	cn.hutool.core.codec			1																																																				1
18	com.alibaba.com.caucho.hessian.io	2																																									2
19	com.alibaba.druid.sql	1		1																																				1																1
20	com.alibaba.fastjson2			1																																																				1
21	com.amazonaws.auth	2					2
22	com.auth0.jwt.algorithms	6					6
23	com.azure.identity	3					1	1	1
24	com.caucho.burlap.io	1																																									1
25	com.caucho.hessian.io	2																																									2
26	com.cedarsoftware.util.io	2																																									2
27	com.couchbase.client.core.env	15		1				9	6																																															1
28	com.couchbase.client.java	10						2	2																															6
29	com.esotericsoftware.kryo.io			1																																																				1
30	com.esotericsoftware.kryo5.io			1																																																				1
31	com.esotericsoftware.yamlbeans	1																																									1
32	com.fasterxml.jackson.core			1																																																				1
33	com.fasterxml.jackson.databind	2		8																								2																												8
34	com.google.common.base	4		87																													3	1																						63	24
35	com.google.common.cache			17																																																					17
36	com.google.common.collect			553																																																				2	551
37	com.google.common.flogger	29																						29
38	com.google.common.io	10		73									1															4	5																											72	1
39	com.google.gson			52																																																				38	14
40	com.hubspot.jinjava	2																																							2
41	com.jcraft.jsch	5		1				2	2																													1																		1
42	com.microsoft.sqlserver.jdbc	4						2	2
43	com.mitchellbosecke.pebble	2																																							2
44	com.mongodb	10						4	6
45	com.opensymphony.xwork2	56		961																							56																													867	94
46	com.rabbitmq.client		21	7																																																			21	7
47	com.sshtools.j2ssh.authentication	3						1	2
48	com.sun.crypto.provider	19					17	2
49	com.sun.jndi.ldap	4							4
50	com.sun.net.httpserver	3						1	2
51	com.sun.net.ssl	3						3
52	com.sun.rowset	3						2	1
53	com.sun.security.auth.module	2						2
54	com.sun.security.ntlm	5						3	2
55	com.sun.security.sasl.digest	3						2	1
56	com.thoughtworks.xstream	1																											1
57	com.trilead.ssh2	13					2	4	7
58	com.unboundid.ldap.sdk	17																					17
59	com.zaxxer.hikari	2																																				2
60	flexjson			1																																																					1
61	freemarker.cache	1																																							1
62	freemarker.template	7																																							7
63	groovy.lang	26													26
64	groovy.text	1													1
65	groovy.util	5													5
66	hudson	75	9	2648		4						3	2				4											39	17									6																5	4	2572	76
67	io.jsonwebtoken		2	4																																																			2	4
68	io.netty.bootstrap	3																																				3
69	io.netty.buffer			207																																																				130	77
70	io.netty.channel	9	2																																			9																	2
71	io.netty.handler.codec	4	13	259																									1									3																	13	143	116
72	io.netty.handler.ssl	4																										2	2
73	io.netty.handler.stream	1																											1
74	io.netty.resolver			1																																																				1
75	io.netty.util	2		23																								1										1																		21	2
76	io.undertow.server.handlers.resource	1		3																								1																												3
77	jakarta.activation	2		2																								1										1																		2
78	jakarta.faces.context	4	7														2											2																											7
79	jakarta.json			123																																																				100	23
80	jakarta.persistence	2		1																																				2																1
81	jakarta.servlet	2	26																																									2											26
82	jakarta.ws.rs.client	1																																				1
83	jakarta.ws.rs.container		9																																																				9
84	jakarta.ws.rs.core	2		149																																									2											94	55
85	jakarta.xml.bind.attachment		2																																																				2
86	java.applet			11																																																				11
87	java.awt	1		3																																									1												3
88	java.beans	1		177																																							1													82	95
89	java.io	66	1	225									22															29	15																									1		202	23
90	java.lang	38	3	790		13						1												8				2	9			4			1																		3			510	280
91	java.math			9																																																					9
92	java.net	23	3	347				1	1																													21																	3	248	99
93	java.nio	47		499									5															25	16									1																		302	197
94	java.rmi			68																																																				45	23
95	java.security	21		583			11	10																																																285	298
96	java.sql	15	1	292				1	1																													4		9												1				274	18
97	java.text			154																																																				72	82
98	java.time			131																																																				27	104
99	java.util	48	2	1340									1											34				3					5	2		1	2																2			558	782
100	javafx.scene.web	1																																				1
101	javax.accessibility			63																																																				28	35
102	javax.activation	2		7																								1										1																		7
103	javax.annotation.processing			28																																																				25	3
104	javax.crypto	19		140			12	3		2	2																																													76	64
105	javax.faces.context	4	7														2											2																											7
106	javax.imageio	1		304																								1																												138	166
107	javax.jms		9	57																																																			9	57
108	javax.json			123																																																				100	23
109	javax.lang.model			277																																																				217	60
110	javax.management	2		766																	2																																			363	403
111	javax.naming	7		341																	6		1																																	191	150
112	javax.net	4		136				2								2																																								87	49
113	javax.portlet	1																																										1
114	javax.print	2		133					2																																															102	31
115	javax.rmi.ssl			6																																																					6
116	javax.script	1		50																					1																															14	36
117	javax.security.auth	7		147			4	3																																																50	97
118	javax.security.cert			5																																																				5
119	javax.security.sasl			49																																																				42	7
120	javax.servlet	10	29	3														1											2										3			2		2											29	3
121	javax.smartcardio			34																																																				24	10
122	javax.sound.midi			60																																																				51	9
123	javax.sound.sampled			90																																																				53	37
124	javax.sql	7		126				4	3																																															68	58
125	javax.tools			66																																																				62	4
126	javax.transaction.xa			1																																																				1
127	javax.validation	1	1		1																																																		1
128	javax.ws.rs.client	1																																				1
129	javax.ws.rs.container		9																																																				9
130	javax.ws.rs.core	3		149																																			1						2											94	55
131	javax.xml.bind.attachment		2																																																				2
132	javax.xml.catalog			12																																																				11	1
133	javax.xml.crypto			269																																																				172	97
134	javax.xml.datatype			6																																																				5	1
135	javax.xml.namespace			15																																																				5	10
136	javax.xml.parsers			37																																																				35	2
137	javax.xml.stream			221																																																				201	20
138	javax.xml.transform	2		134																								1																			1									72	62
139	javax.xml.validation			29																																																				29
140	javax.xml.xpath	3		26																																										3										26
141	jenkins			523																																																				500	23
142	jodd.json			10																																																					10
143	kotlin	16		1849																								11	3									2																		1836	13
144	liquibase.database.jvm	1																																						1
145	liquibase.statement.core	1																																						1
146	net.lingala.zip4j	2																										2
147	net.schmizz.sshj	4						2	2
148	net.sf.json	2		338																																		2																		321	17
149	net.sf.saxon.s9api	5																																													5
150	ognl	6																									6
151	okhttp3	4		50																																		4																		23	27
152	org.acegisecurity			49																																																				49
153	org.antlr.runtime	1																										1
154	org.apache.avro	18	19																									17										1												1				17	1
155	org.apache.commons.codec			6																																																				6
156	org.apache.commons.collections			800																																																				17	783
157	org.apache.commons.collections4			806																																																				17	789
158	org.apache.commons.compress.archivers.tar			4																																																				4
159	org.apache.commons.exec	10				6						4
160	org.apache.commons.fileupload		11	4																																																			11	4
161	org.apache.commons.httpclient.util			1																																																				1
162	org.apache.commons.io	124		570									4															102	3									15																		556	14
163	org.apache.commons.jelly	6																																				6
164	org.apache.commons.jexl2	15																		15
165	org.apache.commons.jexl3	15																		15
166	org.apache.commons.lang	1		767																																							1													596	171
167	org.apache.commons.lang3	7		425																											6												1													294	131
168	org.apache.commons.logging	6																						6
169	org.apache.commons.net	13	12					2	2																				3									6																	12
170	org.apache.commons.ognl	6																									6
171	org.apache.commons.text			272																																																				220	52
172	org.apache.cxf.catalog	1																																				1
173	org.apache.cxf.common.classloader	3																										1										2
174	org.apache.cxf.common.jaxb	1																										1
175	org.apache.cxf.common.logging	6																						6
176	org.apache.cxf.configuration.jsse	2														1												1
177	org.apache.cxf.helpers	10																										5																		5
178	org.apache.cxf.resource	9																										4										5
179	org.apache.cxf.staxutils	1																										1
180	org.apache.cxf.tools.corba.utils	4																										4
181	org.apache.cxf.tools.util	10																										10
182	org.apache.cxf.transform	3																																													3
183	org.apache.directory.ldap.client.api	1																					1
184	org.apache.hadoop.fs	3		11																								3																												11
185	org.apache.hadoop.hive.metastore	3																																						3
186	org.apache.hadoop.hive.ql.exec	1		1																								1																												1
187	org.apache.hadoop.hive.ql.metadata	1																										1
188	org.apache.hc.client5.http.async.methods	84																																				84
189	org.apache.hc.client5.http.classic.methods	37																																				37
190	org.apache.hc.client5.http.fluent	19																																				19
191	org.apache.hc.client5.http.protocol			1																																																					1
192	org.apache.hc.client5.http.utils			7																																																				7
193	org.apache.hc.core5.benchmark	1																																				1
194	org.apache.hc.core5.function			1																																																				1
195	org.apache.hc.core5.http	73	2	45													1																					72																	2	45
196	org.apache.hc.core5.net			18																																																				18
197	org.apache.hc.core5.util			24																																																				18	6
198	org.apache.hive.hcatalog.templeton	1																																						1
199	org.apache.http	53	3	117													2																					51																	3	108	9
200	org.apache.ibatis.jdbc	6		57																																				6																57
201	org.apache.ibatis.mapping			1																																																				1
202	org.apache.log4j	11																						11
203	org.apache.logging.log4j	359		8																				359																																4	4
204	org.apache.poi	43	24	2216																								40																				3					1	23		1160	1056
205	org.apache.shiro.authc		1																																																				1
206	org.apache.shiro.codec			1																																																				1
207	org.apache.shiro.jndi	1																			1
208	org.apache.shiro.mgt	1					1
209	org.apache.sshd.client.session	3						1	2
210	org.apache.struts.beanvalidation.validation.interceptor			4																																																				4
211	org.apache.struts2	14		3873																							11															3														3839	34
212	org.apache.tools.ant	14				1																						5	8
213	org.apache.tools.zip			1																																																				1
214	org.apache.velocity.app	4																																							4
215	org.apache.velocity.runtime	4																																							4
216	org.codehaus.cargo.container.installer	3																										2										1
217	org.codehaus.groovy.control	1													1
218	org.dom4j	20																																												20
219	org.eclipse.jetty.client	2																																				2
220	org.exolab.castor.xml	1																																									1
221	org.fusesource.leveldbjni	1																										1
222	org.geogebra.web.full.main	1																																											1
223	org.gradle.api.file			3																																																				3
224	org.hibernate	10																																						10
225	org.ho.yaml	8																																									8
226	org.influxdb	1																																				1
227	org.jabsorb	1																																									1
228	org.jboss.logging	324																						324
229	org.jboss.vfs	1																										1
230	org.jdbi.v3.core	6																																				6
231	org.jenkins.ui.icon			49																																																				48	1
232	org.jenkins.ui.symbol			33																																																				25	8
233	org.jooq	1																																						1
234	org.json			236																																																				198	38
235	org.keycloak.models.map.storage	1																																						1
236	org.kohsuke.stapler	20	24	363													2											8	1									3						1	5										24	352	11
237	org.lastaflute.web		1	4																																																			1	4
238	org.mvel2	16																							16
239	org.openjdk.jmh.runner.options	1																										1
240	org.owasp.esapi			1																																																				1
241	org.pac4j.jwt.config.encryption	4					4
242	org.pac4j.jwt.config.signature	4					4
243	org.scijava.log	13																						13
244	org.slf4j	55		6																				55																																2	4
245	org.springframework.beans			30																																																					30
246	org.springframework.boot.jdbc	1																																				1
247	org.springframework.cache			13																																																					13
248	org.springframework.context			3																																																				3
249	org.springframework.core.io	17		6																								16										1																		6
250	org.springframework.data.repository			1																																																					1
251	org.springframework.http	14		77																																		14																		67	10
252	org.springframework.jdbc.core	19																																						19
253	org.springframework.jdbc.datasource	4																																				4
254	org.springframework.jdbc.object	9																																						9
255	org.springframework.jndi	1																			1
256	org.springframework.ldap	47																			33		14
257	org.springframework.security.core.userdetails	2						1	1
258	org.springframework.security.web.savedrequest		6																																																				6
259	org.springframework.ui			32																																																					32
260	org.springframework.util	10		142																								9	1																											90	52
261	org.springframework.validation			13																																																				13
262	org.springframework.web.client	13	3																																			13																	3
263	org.springframework.web.context.request		8																																																				8
264	org.springframework.web.multipart		12	12																																																			12	12
265	org.springframework.web.portlet	2																																										2
266	org.springframework.web.reactive.function.client	3																																				3
267	org.springframework.web.servlet	2																																										2
268	org.springframework.web.socket		8	6																																																			8	6
269	org.springframework.web.util		9	159																																																			9	134	25
270	org.thymeleaf	2		2																																					2															2
271	org.xml.sax			1																																																				1
272	org.xmlpull.v1		3																																																				3
273	org.yaml.snakeyaml			1																																																				1
274	play.libs.ws	2																																				2
275	play.mvc	1	13	24																																						1													13	24
276	ratpack.core.form			3																																																				3
277	ratpack.core.handling		6	4																																																			6	4
278	ratpack.core.http		10	10																																																			10	10
279	ratpack.exec			48																																																					48
280	ratpack.form			3																																																				3
281	ratpack.func			35																																																					35
282	ratpack.handling		6	4																																																			6	4
283	ratpack.http		10	10																																																			10	10
284	ratpack.util			35																																																					35
285	retrofit2	1		1																																		1																		1
286	software.amazon.awssdk.transfer.s3.model	8																										8
287	sun.jvmstat.perfdata.monitor.protocol.local	3							3
288	sun.jvmstat.perfdata.monitor.protocol.rmi	1							1
289	sun.misc	3							3
290	sun.net.ftp	5						2	3
291	sun.net.www.protocol.http	3						2	1
292	sun.security.acl	1							1
293	sun.security.jgss.krb5	2					2
294	sun.security.krb5	9					3	6
295	sun.security.pkcs	4					4
296	sun.security.pkcs11	3					1	2
297	sun.security.provider	2						2
298	sun.security.ssl	3						3
299	sun.security.x509	1					1
300	sun.tools.jconsole	28						13	15