Repository navigation
Corpus: add path-traversal (CWE-22) cases for Go and Java #12
Description
Add path-traversal corpus cases so CWE-22 is covered beyond Python/PHP.
Where: umbra_eval/detection/corpus/multilang.py (or public.py).
- Go:
os.Open("/data/" + r.URL.Query().Get("f"))(and a taint-through-var form). - Java:
new File(baseDir, req.getParameter("name"))/Files.readAllBytes(...). - SAFE decoys: input validated/canonicalized against a base dir.
Acceptance criteria
- Vulnerable cases detected as
path_traversal/CWE-22; SAFE cases 0 FP. -
pytest -q+ruffgreen.
See CONTRIBUTING.md. If the engine misses a case, that's a valid finding — open a
companion umbra-core issue rather than hand-tuning to one case.
Activity
ShubhaKC123 commentedon Aug 11, 2026
Hi, I'd like to work on this issue.
bkd-dotcom commentedon Aug 11, 2026
Sure, you can start working by forking the repo.
feat(corpus): XXE, path-traversal and Go SSRF cases + pinned real rep…
bkd-dotcom commentedon Aug 18, 2026
Done in #31 (merged).
LANG-56-go-path-traversalandLANG-57-java-path-traversal(CWE-22), plus aLANG-58-SAFE-go-constant-pathdecoy so a compiled-in path is not counted as traversal.These needed detection rules first:
mainhad no Go or Java path-traversal rule, so a corpus case would have dropped recall below the 1.0 the eval suite asserts. Added asgo.taint.path_traversal/java.taint.path_traversalin Signetry/core#95 (shipped in core v0.7.0).Corpus is now 60 cases at recall 1.0 with 0 false positives, verified against the published core v0.7.0 tag in a clean environment.