{ "module": "owasp_specificity", "claim_type": "classification", "provenance": "third_party", "tool_version": "1.171.0", "elapsed_seconds": 4.64, "notes": [ "semgrep available: True", "501 files vendored unmodified from OWASP-Benchmark/BenchmarkJava (GPL-2.0, pinned commit 79b9bd6177e07991a9c11dc19e457c840e229931) -- see benchmark/corpus/vendor/owasp_benchmark/NOTICE.md", "Pure specificity/false-positive-rate check: every case's ground truth is expected_vulnerable=False by construction (independently verified via GitHub code search that none of these files reference RSA/EC/DH/DSA); precision/recall/F1 are degenerate here, see the specificity figure in the confusion matrix instead." ], "case_count": 501, "reproduction_recipe": [ "Fetch the unmodified file expected_context.filename from https://github.com/OWASP-Benchmark/BenchmarkJava, path src/main/java/org/owasp/benchmark/testcode/, pinned commit 79b9bd6177e07991a9c11dc19e457c840e229931 (GPL-2.0 -- see benchmark/corpus/vendor/owasp_benchmark/NOTICE.md).", "Run QShield's source-code scanner against it unmodified.", "Check whether it reported any quantum_vulnerable finding anywhere in the file -- every case here is expected to report none: expected_context.owasp_category (CWE-expected_context.owasp_cwe) is unrelated to cryptography, independently confirmed via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository." ], "cases": [ { "case_id": "owasp_specificity:BenchmarkTest00006", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00006.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00006.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00051", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00051.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00051.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00092", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00092.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00092.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00171", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00171.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00171.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00175", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00175.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00175.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00294", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00294.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00294.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00304", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00304.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00304.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00308", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00308.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00308.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00396", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00396.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00396.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00409", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00409.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00409.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00480", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00480.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00480.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00496", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00496.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00496.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00500", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00500.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00500.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00568", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00568.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00568.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00572", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00572.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00572.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00576", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00576.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00576.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00731", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00731.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00731.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00740", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00740.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00740.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00814", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00814.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00814.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00824", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00824.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00824.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00895", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00895.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00895.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00906", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00906.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00906.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00910", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00910.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00910.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00978", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00978.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00978.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00982", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00982.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00982.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01066", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01066.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01066.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01189", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01189.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01189.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01193", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01193.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01193.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01285", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01285.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01285.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01289", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01289.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01289.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01361", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01361.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01361.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01365", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01365.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01365.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01442", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01442.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01442.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01446", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01446.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01446.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01527", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01527.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01527.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01531", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01531.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01531.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01601", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01601.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01601.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01609", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01609.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01609.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01674", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01674.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01674.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01688", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01688.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01688.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01692", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01692.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01692.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01780", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01780.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01780.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01794", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01794.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01794.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01851", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01851.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01851.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01928", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01928.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01928.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01938", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01938.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01938.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest01942", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01942.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01942.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest02059", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02059.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02059.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest02070", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02070.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02070.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest02148", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02148.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02148.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest02152", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02152.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02152.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest02156", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02156.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02156.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest02249", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02249.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02249.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest02253", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02253.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02253.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest02336", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02336.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02336.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest02343", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02343.java", "owasp_category": "cmdi", "owasp_cwe": "78", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'cmdi' (CWE-78) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02343.java", "owasp_category": "cmdi" } }, { "case_id": "owasp_specificity:BenchmarkTest00012", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00012.java", "owasp_category": "ldapi", "owasp_cwe": "90", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'ldapi' (CWE-90) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00012.java", "owasp_category": "ldapi" } }, { "case_id": "owasp_specificity:BenchmarkTest00139", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00139.java", "owasp_category": "ldapi", "owasp_cwe": "90", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'ldapi' (CWE-90) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00139.java", "owasp_category": "ldapi" } }, { "case_id": "owasp_specificity:BenchmarkTest00694", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00694.java", "owasp_category": "ldapi", "owasp_cwe": "90", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'ldapi' (CWE-90) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00694.java", "owasp_category": "ldapi" } }, { "case_id": "owasp_specificity:BenchmarkTest00861", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00861.java", "owasp_category": "ldapi", "owasp_cwe": "90", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'ldapi' (CWE-90) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00861.java", "owasp_category": "ldapi" } }, { "case_id": "owasp_specificity:BenchmarkTest01023", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01023.java", "owasp_category": "ldapi", "owasp_cwe": "90", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'ldapi' (CWE-90) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01023.java", "owasp_category": "ldapi" } }, { "case_id": "owasp_specificity:BenchmarkTest01242", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01242.java", "owasp_category": "ldapi", "owasp_cwe": "90", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'ldapi' (CWE-90) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01242.java", "owasp_category": "ldapi" } }, { "case_id": "owasp_specificity:BenchmarkTest01402", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01402.java", "owasp_category": "ldapi", "owasp_cwe": "90", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'ldapi' (CWE-90) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01402.java", "owasp_category": "ldapi" } }, { "case_id": "owasp_specificity:BenchmarkTest01501", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01501.java", "owasp_category": "ldapi", "owasp_cwe": "90", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'ldapi' (CWE-90) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01501.java", "owasp_category": "ldapi" } }, { "case_id": "owasp_specificity:BenchmarkTest01753", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01753.java", "owasp_category": "ldapi", "owasp_cwe": "90", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'ldapi' (CWE-90) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01753.java", "owasp_category": "ldapi" } }, { "case_id": "owasp_specificity:BenchmarkTest01831", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01831.java", "owasp_category": "ldapi", "owasp_cwe": "90", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'ldapi' (CWE-90) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01831.java", "owasp_category": "ldapi" } }, { "case_id": "owasp_specificity:BenchmarkTest01909", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01909.java", "owasp_category": "ldapi", "owasp_cwe": "90", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'ldapi' (CWE-90) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01909.java", "owasp_category": "ldapi" } }, { "case_id": "owasp_specificity:BenchmarkTest02104", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02104.java", "owasp_category": "ldapi", "owasp_cwe": "90", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'ldapi' (CWE-90) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02104.java", "owasp_category": "ldapi" } }, { "case_id": "owasp_specificity:BenchmarkTest02196", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02196.java", "owasp_category": "ldapi", "owasp_cwe": "90", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'ldapi' (CWE-90) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02196.java", "owasp_category": "ldapi" } }, { "case_id": "owasp_specificity:BenchmarkTest00001", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00001.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00001.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00040", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00040.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00040.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00062", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00062.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00062.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00131", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00131.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00131.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00135", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00135.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00135.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00216", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00216.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00216.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00220", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00220.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00220.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00262", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00262.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00262.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00359", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00359.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00359.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00363", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00363.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00363.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00452", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00452.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00452.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00456", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00456.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00456.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00460", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00460.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00460.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00528", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00528.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00528.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00621", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00621.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00621.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00625", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00625.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00625.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00629", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00629.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00629.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00699", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00699.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00699.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00785", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00785.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00785.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00862", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00862.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00862.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00866", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00866.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00866.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00951", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00951.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00951.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00955", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00955.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00955.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01025", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01025.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01025.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01029", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01029.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01029.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01033", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01033.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01033.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01109", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01109.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01109.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01113", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01113.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01113.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01117", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01117.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01117.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01157", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01157.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01157.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01161", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01161.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01161.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01234", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01234.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01234.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01238", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01238.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01238.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01329", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01329.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01329.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01404", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01404.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01404.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01408", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01408.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01408.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01495", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01495.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01495.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01499", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01499.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01499.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01572", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01572.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01572.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01643", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01643.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01643.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01647", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01647.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01647.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01747", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01747.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01747.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01751", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01751.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01751.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01835", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01835.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01835.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01839", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01839.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01839.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01905", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01905.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01905.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01983", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01983.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01983.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01987", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01987.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01987.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest01991", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01991.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01991.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest02029", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02029.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02029.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest02033", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02033.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02033.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest02106", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02106.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02106.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest02110", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02110.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02110.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest02197", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02197.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02197.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest02201", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02201.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02201.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest02205", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02205.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02205.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest02301", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02301.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02301.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest02377", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02377.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02377.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest02381", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02381.java", "owasp_category": "pathtraver", "owasp_cwe": "22", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'pathtraver' (CWE-22) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02381.java", "owasp_category": "pathtraver" } }, { "case_id": "owasp_specificity:BenchmarkTest00016", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00016.java", "owasp_category": "securecookie", "owasp_cwe": "614", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'securecookie' (CWE-614) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00016.java", "owasp_category": "securecookie" } }, { "case_id": "owasp_specificity:BenchmarkTest00169", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00169.java", "owasp_category": "securecookie", "owasp_cwe": "614", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'securecookie' (CWE-614) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00169.java", "owasp_category": "securecookie" } }, { "case_id": "owasp_specificity:BenchmarkTest00300", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00300.java", "owasp_category": "securecookie", "owasp_cwe": "614", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'securecookie' (CWE-614) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00300.java", "owasp_category": "securecookie" } }, { "case_id": "owasp_specificity:BenchmarkTest00405", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00405.java", "owasp_category": "securecookie", "owasp_cwe": "614", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'securecookie' (CWE-614) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00405.java", "owasp_category": "securecookie" } }, { "case_id": "owasp_specificity:BenchmarkTest00655", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00655.java", "owasp_category": "securecookie", "owasp_cwe": "614", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'securecookie' (CWE-614) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00655.java", "owasp_category": "securecookie" } }, { "case_id": "owasp_specificity:BenchmarkTest00903", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00903.java", "owasp_category": "securecookie", "owasp_cwe": "614", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'securecookie' (CWE-614) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00903.java", "owasp_category": "securecookie" } }, { "case_id": "owasp_specificity:BenchmarkTest01062", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01062.java", "owasp_category": "securecookie", "owasp_cwe": "614", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'securecookie' (CWE-614) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01062.java", "owasp_category": "securecookie" } }, { "case_id": "owasp_specificity:BenchmarkTest01187", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01187.java", "owasp_category": "securecookie", "owasp_cwe": "614", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'securecookie' (CWE-614) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01187.java", "owasp_category": "securecookie" } }, { "case_id": "owasp_specificity:BenchmarkTest01283", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01283.java", "owasp_category": "securecookie", "owasp_cwe": "614", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'securecookie' (CWE-614) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01283.java", "owasp_category": "securecookie" } }, { "case_id": "owasp_specificity:BenchmarkTest01522", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01522.java", "owasp_category": "securecookie", "owasp_cwe": "614", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'securecookie' (CWE-614) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01522.java", "owasp_category": "securecookie" } }, { "case_id": "owasp_specificity:BenchmarkTest01605", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01605.java", "owasp_category": "securecookie", "owasp_cwe": "614", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'securecookie' (CWE-614) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01605.java", "owasp_category": "securecookie" } }, { "case_id": "owasp_specificity:BenchmarkTest01789", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01789.java", "owasp_category": "securecookie", "owasp_cwe": "614", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'securecookie' (CWE-614) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01789.java", "owasp_category": "securecookie" } }, { "case_id": "owasp_specificity:BenchmarkTest01935", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01935.java", "owasp_category": "securecookie", "owasp_cwe": "614", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'securecookie' (CWE-614) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01935.java", "owasp_category": "securecookie" } }, { "case_id": "owasp_specificity:BenchmarkTest02065", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02065.java", "owasp_category": "securecookie", "owasp_cwe": "614", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'securecookie' (CWE-614) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02065.java", "owasp_category": "securecookie" } }, { "case_id": "owasp_specificity:BenchmarkTest02144", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02144.java", "owasp_category": "securecookie", "owasp_cwe": "614", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'securecookie' (CWE-614) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02144.java", "owasp_category": "securecookie" } }, { "case_id": "owasp_specificity:BenchmarkTest00008", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00008.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00008.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00026", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00026.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00026.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00034", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00034.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00034.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00043", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00043.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00043.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00102", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00102.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00102.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00106", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00106.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00106.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00110", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00110.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00110.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00114", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00114.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00114.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00192", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00192.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00192.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00196", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00196.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00196.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00200", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00200.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00200.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00204", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00204.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00204.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00329", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00329.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00329.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00333", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00333.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00333.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00337", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00337.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00337.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00341", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00341.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00341.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00428", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00428.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00428.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00432", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00432.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00432.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00436", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00436.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00436.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00440", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00440.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00440.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00511", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00511.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00511.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00515", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00515.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00515.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00519", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00519.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00519.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00592", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00592.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00592.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00596", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00596.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00596.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00600", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00600.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00600.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00604", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00604.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00604.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00673", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00673.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00673.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00677", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00677.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00677.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00681", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00681.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00681.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00762", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00762.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00762.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00766", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00766.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00766.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00770", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00770.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00770.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00774", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00774.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00774.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00840", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00840.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00840.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00844", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00844.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00844.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00848", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00848.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00848.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00924", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00924.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00924.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00928", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00928.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00928.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00932", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00932.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00932.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00936", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00936.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00936.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00940", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00940.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00940.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00999", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00999.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00999.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01003", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01003.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01003.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01007", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01007.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01007.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01011", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01011.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01011.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01085", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01085.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01085.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01089", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01089.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01089.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01093", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01093.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01093.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01097", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01097.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01097.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01210", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01210.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01210.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01214", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01214.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01214.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01218", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01218.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01218.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01222", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01222.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01222.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01304", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01304.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01304.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01308", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01308.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01308.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01312", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01312.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01312.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01378", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01378.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01378.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01382", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01382.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01382.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01386", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01386.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01386.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01390", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01390.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01390.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01394", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01394.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01394.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01460", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01460.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01460.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01464", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01464.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01464.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01468", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01468.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01468.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01472", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01472.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01472.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01476", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01476.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01476.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01554", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01554.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01554.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01558", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01558.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01558.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01621", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01621.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01621.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01625", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01625.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01625.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01629", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01629.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01629.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01713", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01713.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01713.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01717", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01717.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01717.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01721", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01721.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01721.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01725", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01725.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01725.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01729", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01729.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01729.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01733", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01733.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01733.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01806", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01806.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01806.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01810", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01810.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01810.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01814", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01814.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01814.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01818", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01818.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01818.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01878", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01878.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01878.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01882", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01882.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01882.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01886", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01886.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01886.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01890", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01890.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01890.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01963", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01963.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01963.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01967", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01967.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01967.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest01971", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01971.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01971.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02088", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02088.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02088.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02092", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02092.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02092.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02096", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02096.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02096.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02169", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02169.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02169.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02173", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02173.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02173.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02177", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02177.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02177.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02181", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02181.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02181.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02185", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02185.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02185.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02264", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02264.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02264.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02268", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02268.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02268.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02272", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02272.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02272.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02276", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02276.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02276.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02280", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02280.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02280.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02284", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02284.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02284.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02288", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02288.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02288.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02356", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02356.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02356.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02360", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02360.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02360.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02364", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02364.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02364.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02368", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02368.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02368.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02451", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02451.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02451.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02455", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02455.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02455.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02530", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02530.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02530.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest02534", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02534.java", "owasp_category": "sqli", "owasp_cwe": "89", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'sqli' (CWE-89) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02534.java", "owasp_category": "sqli" } }, { "case_id": "owasp_specificity:BenchmarkTest00004", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00004.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00004.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest00099", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00099.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00099.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest00252", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00252.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00252.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest00323", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00323.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00323.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest00327", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00327.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00327.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest00427", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00427.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00427.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest00588", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00588.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00588.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest00671", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00671.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00671.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest00757", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00757.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00757.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest00834", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00834.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00834.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest00923", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00923.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00923.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest00994", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00994.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00994.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest01082", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01082.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01082.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest01145", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01145.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01145.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest01205", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01205.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01205.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest01300", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01300.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01300.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest01377", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01377.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01377.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest01457", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01457.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01457.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest01548", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01548.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01548.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest01615", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01615.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01615.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest01619", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01619.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01619.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest01711", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01711.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01711.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest01874", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01874.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01874.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest01956", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01956.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01956.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest01960", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01960.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01960.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest02085", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02085.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02085.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest02167", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02167.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02167.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest02263", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02263.java", "owasp_category": "trustbound", "owasp_cwe": "501", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'trustbound' (CWE-501) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02263.java", "owasp_category": "trustbound" } }, { "case_id": "owasp_specificity:BenchmarkTest00010", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00010.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00010.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00067", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00067.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00067.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00080", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00080.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00080.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00084", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00084.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00084.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00095", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00095.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00095.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00161", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00161.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00161.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00165", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00165.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00165.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00178", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00178.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00178.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00182", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00182.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00182.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00186", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00186.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00186.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00231", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00231.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00231.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00235", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00235.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00235.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00239", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00239.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00239.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00245", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00245.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00245.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00249", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00249.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00249.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00299", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00299.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00299.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00315", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00315.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00315.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00319", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00319.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00319.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00368", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00368.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00368.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00399", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00399.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00399.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00413", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00413.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00413.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00417", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00417.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00417.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00421", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00421.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00421.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00482", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00482.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00482.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00486", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00486.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00486.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00490", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00490.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00490.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00504", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00504.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00504.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00560", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00560.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00560.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00564", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00564.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00564.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00580", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00580.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00580.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00584", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00584.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00584.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00654", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00654.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00654.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00663", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00663.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00663.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00667", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00667.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00667.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00735", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00735.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00735.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00747", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00747.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00747.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00751", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00751.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00751.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00818", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00818.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00818.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00830", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00830.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00830.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00899", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00899.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00899.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00911", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00911.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00911.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00915", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00915.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00915.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00919", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00919.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00919.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00971", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00971.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00971.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00975", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00975.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00975.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00986", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00986.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00986.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00990", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00990.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00990.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01069", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01069.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01069.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01073", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01073.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01073.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01077", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01077.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01077.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01127", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01127.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01127.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01131", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01131.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01131.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01136", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01136.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01136.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01140", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01140.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01140.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01183", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01183.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01183.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01197", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01197.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01197.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01201", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01201.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01201.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01273", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01273.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01273.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01277", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01277.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01277.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01292", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01292.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01292.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01296", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01296.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01296.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01355", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01355.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01355.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01366", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01366.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01366.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01370", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01370.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01370.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01431", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01431.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01431.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01435", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01435.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01435.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01450", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01450.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01450.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01502", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01502.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01502.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01534", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01534.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01534.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01538", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01538.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01538.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01542", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01542.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01542.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01575", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01575.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01575.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01612", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01612.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01612.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01675", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01675.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01675.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01679", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01679.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01679.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01695", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01695.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01695.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01699", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01699.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01699.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01703", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01703.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01703.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01707", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01707.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01707.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01784", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01784.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01784.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01788", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01788.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01788.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01800", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01800.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01800.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01853", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01853.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01853.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01857", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01857.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01857.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01866", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01866.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01866.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01870", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01870.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01870.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01931", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01931.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01931.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01945", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01945.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01945.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01949", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01949.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01949.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest01953", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01953.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01953.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02000", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02000.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02000.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02004", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02004.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02004.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02010", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02010.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02010.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02014", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02014.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02014.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02060", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02060.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02060.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02071", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02071.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02071.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02075", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02075.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02075.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02079", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02079.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02079.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02083", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02083.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02083.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02140", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02140.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02140.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02159", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02159.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02159.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02163", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02163.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02163.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02246", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02246.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02246.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02257", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02257.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02257.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02337", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02337.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02337.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02347", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02347.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02347.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02351", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02351.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02351.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02418", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02418.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02418.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest02422", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02422.java", "owasp_category": "weakrand", "owasp_cwe": "330", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'weakrand' (CWE-330) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02422.java", "owasp_category": "weakrand" } }, { "case_id": "owasp_specificity:BenchmarkTest00116", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00116.java", "owasp_category": "xpathi", "owasp_cwe": "643", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xpathi' (CWE-643) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00116.java", "owasp_category": "xpathi" } }, { "case_id": "owasp_specificity:BenchmarkTest00442", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00442.java", "owasp_category": "xpathi", "owasp_cwe": "643", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xpathi' (CWE-643) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00442.java", "owasp_category": "xpathi" } }, { "case_id": "owasp_specificity:BenchmarkTest00852", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00852.java", "owasp_category": "xpathi", "owasp_cwe": "643", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xpathi' (CWE-643) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00852.java", "owasp_category": "xpathi" } }, { "case_id": "owasp_specificity:BenchmarkTest01223", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01223.java", "owasp_category": "xpathi", "owasp_cwe": "643", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xpathi' (CWE-643) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01223.java", "owasp_category": "xpathi" } }, { "case_id": "owasp_specificity:BenchmarkTest01397", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01397.java", "owasp_category": "xpathi", "owasp_cwe": "643", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xpathi' (CWE-643) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01397.java", "owasp_category": "xpathi" } }, { "case_id": "owasp_specificity:BenchmarkTest01562", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01562.java", "owasp_category": "xpathi", "owasp_cwe": "643", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xpathi' (CWE-643) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01562.java", "owasp_category": "xpathi" } }, { "case_id": "owasp_specificity:BenchmarkTest01735", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01735.java", "owasp_category": "xpathi", "owasp_cwe": "643", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xpathi' (CWE-643) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01735.java", "owasp_category": "xpathi" } }, { "case_id": "owasp_specificity:BenchmarkTest01893", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01893.java", "owasp_category": "xpathi", "owasp_cwe": "643", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xpathi' (CWE-643) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01893.java", "owasp_category": "xpathi" } }, { "case_id": "owasp_specificity:BenchmarkTest00013", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00013.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00013.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00041", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00041.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00041.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00144", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00144.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00144.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00148", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00148.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00148.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00152", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00152.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00152.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00156", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00156.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00156.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00277", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00277.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00277.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00281", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00281.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00281.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00285", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00285.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00285.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00289", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00289.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00289.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00301", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00301.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00301.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00378", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00378.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00378.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00382", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00382.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00382.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00386", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00386.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00386.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00390", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00390.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00390.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00394", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00394.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00394.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00469", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00469.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00469.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00473", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00473.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00473.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00477", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00477.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00477.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00493", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00493.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00493.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00544", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00544.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00544.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00548", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00548.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00548.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00552", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00552.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00552.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00556", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00556.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00556.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00644", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00644.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00644.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00648", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00648.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00648.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00656", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00656.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00656.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00714", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00714.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00714.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00718", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00718.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00718.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00722", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00722.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00722.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00726", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00726.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00726.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00730", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00730.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00730.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00801", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00801.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00801.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00805", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00805.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00805.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00809", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00809.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00809.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00813", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00813.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00813.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00881", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00881.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00881.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00885", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00885.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00885.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00889", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00889.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00889.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest00893", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest00893.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest00893.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01048", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01048.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01048.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01052", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01052.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01052.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01056", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01056.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01056.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01172", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01172.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01172.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01176", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01176.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01176.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01180", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01180.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01180.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01252", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01252.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01252.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01256", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01256.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01256.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01260", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01260.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01260.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01264", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01264.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01264.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01268", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01268.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01268.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01337", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01337.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01337.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01341", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01341.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01341.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01345", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01345.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01345.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01349", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01349.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01349.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01417", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01417.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01417.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01421", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01421.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01421.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01425", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01425.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01425.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01429", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01429.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01429.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01505", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01505.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01505.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01509", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01509.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01509.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01513", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01513.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01513.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01583", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01583.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01583.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01587", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01587.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01587.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01591", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01591.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01591.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01595", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01595.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01595.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01599", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01599.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01599.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01660", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01660.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01660.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01664", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01664.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01664.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01668", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01668.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01668.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01767", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01767.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01767.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01771", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01771.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01771.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01775", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01775.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01775.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01914", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01914.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01914.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01918", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01918.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01918.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01922", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01922.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01922.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest01926", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest01926.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest01926.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02047", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02047.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02047.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02051", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02051.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02051.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02055", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02055.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02055.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02123", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02123.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02123.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02127", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02127.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02127.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02131", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02131.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02131.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02135", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02135.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02135.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02222", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02222.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02222.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02226", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02226.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02226.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02230", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02230.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02230.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02234", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02234.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02234.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02238", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02238.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02238.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02313", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02313.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02313.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02317", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02317.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02317.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02321", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02321.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02321.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02325", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02325.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02325.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02329", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02329.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02329.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02394", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02394.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02394.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02398", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02398.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02398.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02402", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02402.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02402.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02406", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02406.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": false, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02406.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02410", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02410.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02410.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02483", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02483.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02483.java", "owasp_category": "xss" } }, { "case_id": "owasp_specificity:BenchmarkTest02487", "claim_type": "classification", "expected": { "vulnerable": false, "present": null }, "expected_context": { "filename": "BenchmarkTest02487.java", "owasp_category": "xss", "owasp_cwe": "79", "owasp_labeled_vulnerable": true, "source": "OWASP-Benchmark/BenchmarkJava (GPL-2.0)" }, "expected_note": "OWASP category 'xss' (CWE-79) is unrelated to asymmetric cryptography; independently verified via GitHub code search to contain no RSA/EC/DH/DSA usage anywhere in the upstream repository.", "actual_outcome": "TN", "actual_detail": { "filename": "BenchmarkTest02487.java", "owasp_category": "xss" } } ] }