All issues

Search results

request: strong params checks for id (key) columns

Status: Open.

#2045 In presidentbeef/brakeman;

· kwerle opened on Sep 3, 2026

Unscoped Find should exclude only if all belongs_to associations are optional

Status: Open.

#2043 In presidentbeef/brakeman;

· artinboghosian opened on Aug 30, 2026

Parallelise index_call_sites and process_libs: ~75% of scan time is single-threaded on large apps

Status: Open.

#2042 In presidentbeef/brakeman;

· corsonknowles opened on Aug 23, 2026

False Positive: Regexp containing an escaped $ is marked unsafe

Status: Open.

#2041 In presidentbeef/brakeman;

· timdiggins opened on Aug 21, 2026

Add warnings for dangerous content security policy settings autogenerated by Rails

Status: Open.

#2040 In presidentbeef/brakeman;

· ddalcino opened on Aug 19, 2026

Support reading config from ignore file

Status: Open.

#2020 In presidentbeef/brakeman;

· G-Rath opened on Apr 21, 2026

Hash lookup on frozen constant should untaint the result

Status: Open.

#2018 In presidentbeef/brakeman;

· allard opened on Apr 18, 2026

How to write reports to file and summary to stdout?

Status: Open.

#1992 In presidentbeef/brakeman;

· jasonkarns opened on Jan 21, 2026

Provide a way to report warnings only from some files/directories while scanning the full app

Status: Open.

#1977 In presidentbeef/brakeman;

· ikaronen-relex opened on Nov 20, 2025

[Format Error] on code field with Prism parser- Brakeman v7.0.2

Status: Open.

#1956 In presidentbeef/brakeman;

· tsigouris007 opened on Jul 30, 2025

Allow Brakeman to determine the Rails configuration by querying Rails.application.config

Status: Open.

#1942 In presidentbeef/brakeman;

· gstokkink-bex opened on Jun 10, 2025

Feature: Check Mailer templates for html injection

Status: Open.

#1939 In presidentbeef/brakeman;

· NiklasHae opened on May 13, 2025