OWASP Top 10 Security Risks for 2021: Java

ID	Checker name
A1-2021: Broken Access Control	SPRING.AUTHZ.ABSENT SPRING.AUTHZ.MISSING SV.CSRF.GET SV.CSRF.ORIGIN SV.CSRF.TOKEN SV.PATH.INJ SV.SENSITIVE.DATA SV.SENSITIVE.OBJ
A2-2021: Cryptographic Failures	JAVA.SV.EMAIL.HOST SV.ECV SV.ECV.TRUSTMANAGER SV.HASH.NO_SALT SV.RANDOM SV.WEAK.CRYPT SV.WEAK.KEYS.AES SV.WEAK.KEYS.DH SV.WEAK.KEYS.DSA SV.WEAK.KEYS.EC SV.WEAK.KEYS.RSA SV.WEAK.TLS
A3-2021: Injection	ANDROID.LIFECYCLE.SV.GETEXTRA SV.DATA.DB SV.EXEC SV.EXEC.DIR SV.EXEC.ENV SV.EXEC.LOCAL SV.SQL SV.SQL.DBSOURCE SV.TAINT SV.TAINT_NATIVE SV.XSS.DB SV.XSS.REF
A4-2021: Insecure Design	SV.DATA.BOUND SV.DATA.FILE SV.EMAIL SV.IL.SESSION SV.IL.SESSION.CLIENT SV.PASSWD.PLAIN SV.PASSWD.PLAIN.HC SV.PRIVILEGE.MISSING SV.SENSITIVE.DATA SV.SENSITIVE.OBJ SV.TMPFILE SV.XSS.COOKIE.SECURE
A5-2021: Security Misconfiguration	ECC.EMPTY EXC.BROADTHROWS JAVA.SV.EMAIL.HOST JD.CATCH JD.FINRET JD.UNCAUGHT SV.ECV SV.ECV.TRUSTMANAGER SV.IL.DEV SV.IL.FILE SV.XSS.COOKIE SV.XXE.DBF SV.XXE.SF SV.XXE.SPF SV.XXE.TF SV.XXE.XIF SV.XXE.XRF UMC.SYSERR UMC.SYSOUT
A6-2021: Vulnerable and Outdated Components	SV.STRUTS.VER
A7-2021: Identification and Authentication Failures	JAVA.SV.EMAIL.HOST SPRING.AUTHC.ABSENT SPRING.AUTHC.MISSING SV.AUTH.BYPASS.MIGHT SV.AUTH.BYPASS.MUST SV.AUTH.HASH.MIGHT SV.AUTH.HASH.MUST SV.ECV SV.ECV.TRUSTMANAGER SV.LDAP.ANON SV.PASSWD.HC SV.PASSWD.HC.EMPTY SV.SESSION.FIXATION.COOKIE SV.SPRING.FIXATION SV.WEAK.TLS
A8-2021: Software and Data Integrity Failures	SV.CLASSDEF.INJ SV.CLASSLOADER.INJ SV.EXEC.PATH SV.SCRIPT SV.SERIAL.NOFINAL SV.SERIAL.NOREAD SV.SERIAL.NOWRITE SV.SERIAL.OVERRIDE SV.SERIAL.SIG
A9-2021: Security Logging and Monitoring Failures	SV.LOG_FORGING
A10-2021: Server-Side Request Forgery (SSRF)	SV.CSRF.GET SV.CSRF.ORIGIN SV.CSRF.TOKEN SV.SSRF.URI

Support Summary:

10 rules