fga-gpp-mds/2017.1-Escola-X

View on GitHub

Showing 3,213 of 3,213 total issues

Method create has a Cognitive Complexity of 9 (exceeds 5 allowed). Consider refactoring.
Open

def create
if( is_principal? )
@suspension = @@alumn.suspensions.create(suspension_params)
@suspension.employee_id = @current_user.id
if( @suspension.save )
Severity: Minor
Found in app/controllers/suspensions_controller.rb - About 55 mins to fix

Method create has a Cognitive Complexity of 9 (exceeds 5 allowed). Consider refactoring.
Open

def create
if ( is_principal? )
@classroom_grades = ClassroomGrade.all
@subject = Subject.new(subject_params)
@teacher = Teacher.find_by_registry(params[:teacher_registry])
Severity: Minor
Found in app/controllers/subjects_controller.rb - About 55 mins to fix

Method update has a Cognitive Complexity of 9 (exceeds 5 allowed). Consider refactoring.
Open

def update
if ( is_principal? )
@classroom_grades = ClassroomGrade.all
@subject = Subject.find(params[:id])
@teacher = Teacher.find_by_registry(params[:teacher_registry])
Severity: Minor
Found in app/controllers/subjects_controller.rb - About 55 mins to fix

Method create has a Cognitive Complexity of 9 (exceeds 5 allowed). Consider refactoring.
Open

def create
if ( is_employee? )
@strike = @@alumn.strikes.create(strike_params)
@strike.employee_id = @current_user.id
if (@strike.save)
Severity: Minor
Found in app/controllers/strikes_controller.rb - About 55 mins to fix

Nokogiri gem, via libxml, is affected by DoS vulnerabilities
Open

nokogiri (1.8.0)
Severity: Minor
Found in Gemfile.lock by bundler-audit

Moderate severity vulnerability that affects nokogiri
Open

nokogiri (1.8.0)
Severity: Minor
Found in Gemfile.lock by bundler-audit

Denial of service via multipart parsing in Rack
Open

rack (2.0.3)
Severity: Minor
Found in Gemfile.lock by bundler-audit

Possible shell escape sequence injection vulnerability in Rack
Open

rack (2.0.3)
Severity: Minor
Found in Gemfile.lock by bundler-audit

TZInfo relative path traversal vulnerability allows loading of arbitrary files
Open

tzinfo (1.2.3)
Severity: Critical
Found in Gemfile.lock by bundler-audit

Denial of Service Vulnerability in Action View
Open

actionview (5.0.3)
Severity: Critical
Found in Gemfile.lock by bundler-audit

Prototype pollution attack through jQuery $.extend
Open

jquery-rails (4.3.1)
Severity: Minor
Found in Gemfile.lock by bundler-audit

Nokogiri gem, via libxml, is affected by DoS and RCE vulnerabilities
Open

nokogiri (1.8.0)
Severity: Critical
Found in Gemfile.lock by bundler-audit

Directory Traversal in rubyzip
Open

rubyzip (1.2.1)
Severity: Minor
Found in Gemfile.lock by bundler-audit

Revert libxml2 behavior in Nokogiri gem that could cause XSS
Open

nokogiri (1.8.0)
Severity: Minor
Found in Gemfile.lock by bundler-audit

Denial of service via header parsing in Rack
Open

rack (2.0.3)
Severity: Minor
Found in Gemfile.lock by bundler-audit

Broken Access Control vulnerability in Active Job
Open

activejob (5.0.3)
Severity: Critical
Found in Gemfile.lock by bundler-audit

Possible information leak / session hijack vulnerability
Open

rack (2.0.3)
Severity: Minor
Found in Gemfile.lock by bundler-audit

Possible XSS vulnerability in Rack
Open

rack (2.0.3)
Severity: Minor
Found in Gemfile.lock by bundler-audit

ruby-ffi DDL loading issue on Windows OS
Open

ffi (1.9.18)
Severity: Critical
Found in Gemfile.lock by bundler-audit

Nokogiri gem, via libxml, is affected by DoS vulnerabilities
Open

nokogiri (1.8.0)
Severity: Minor
Found in Gemfile.lock by bundler-audit
Severity
Category
Status
Source
Language