> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

<AccordionGroup>
  <Accordion title="ocamllint-tempfile">
    Filename.temp\_file might lead to race conditions, since the file could be altered or replaced by a symlink before being opened.<br />**Likelihood**: MEDIUM<br />**Confidence**: LOW<br />**CWE**: <br />- C
    <br />- W
    <br />- E
    <br />- -
    <br />- 3
    <br />- 6
    <br />- 7
    <br />- :
    <br />-\
    <br />- T
    <br />- i
    <br />- m
    <br />- e
    <br />- -
    <br />- o
    <br />- f
    <br />- -
    <br />- c
    <br />- h
    <br />- e
    <br />- c
    <br />- k
    <br />-\
    <br />- T
    <br />- i
    <br />- m
    <br />- e
    <br />- -
    <br />- o
    <br />- f
    <br />- -
    <br />- u
    <br />- s
    <br />- e
    <br />-\
    <br />- (
    <br />- T
    <br />- O
    <br />- C
    <br />- T
    <br />- O
    <br />- U
    <br />- )
    <br />-\
    <br />- R
    <br />- a
    <br />- c
    <br />- e
    <br />-\
    <br />- C
    <br />- o
    <br />- n
    <br />- d
    <br />- i
    <br />- t
    <br />- i
    <br />- o
    <br />- n
  </Accordion>

  <Accordion title="ocamllint-exec">
    Executing external programs might lead to comand or argument injection vulnerabilities.<br />**Likelihood**: MEDIUM<br />**Confidence**: LOW<br />**CWE**: <br />- C
    <br />- W
    <br />- E
    <br />- -
    <br />- 7
    <br />- 8
    <br />- :
    <br />-\
    <br />- O
    <br />- S
    <br />-\
    <br />- C
    <br />- o
    <br />- m
    <br />- m
    <br />- a
    <br />- n
    <br />- d
    <br />-\
    <br />- I
    <br />- n
    <br />- j
    <br />- e
    <br />- c
    <br />- t
    <br />- i
    <br />- o
    <br />- n
  </Accordion>

  <Accordion title="ocamllint-unsafe">
    Unsafe functions do not perform boundary checks or have other side effects, use with care.<br />**Likelihood**: MEDIUM<br />**Confidence**: MEDIUM<br />**CWE**: <br />- C
    <br />- W
    <br />- E
    <br />- -
    <br />- 2
    <br />- 4
    <br />- 2
    <br />- :
    <br />-\
    <br />- U
    <br />- s
    <br />- e
    <br />-\
    <br />- o
    <br />- f
    <br />-\
    <br />- I
    <br />- n
    <br />- h
    <br />- e
    <br />- r
    <br />- e
    <br />- n
    <br />- t
    <br />- l
    <br />- y
    <br />-\
    <br />- D
    <br />- a
    <br />- n
    <br />- g
    <br />- e
    <br />- r
    <br />- o
    <br />- u
    <br />- s
    <br />-\
    <br />- F
    <br />- u
    <br />- n
    <br />- c
    <br />- t
    <br />- i
    <br />- o
    <br />- n
    <br />-\
    <br />- (
    <br />- 4
    <br />- .
    <br />- 1
    <br />- 2
    <br />- )
  </Accordion>

  <Accordion title="ocamllint-digest">
    Digest uses MD5 and should not be used for security purposes. Consider using SHA256 instead.<br />**Likelihood**: MEDIUM<br />**Confidence**: LOW<br />**CWE**: <br />- C
    <br />- W
    <br />- E
    <br />- -
    <br />- 3
    <br />- 2
    <br />- 8
    <br />- :
    <br />-\
    <br />- U
    <br />- s
    <br />- e
    <br />-\
    <br />- o
    <br />- f
    <br />-\
    <br />- W
    <br />- e
    <br />- a
    <br />- k
    <br />-\
    <br />- H
    <br />- a
    <br />- s
    <br />- h
    <br />-\
    <br />- (
    <br />- 4
    <br />- .
    <br />- 1
    <br />- 2
    <br />- )
  </Accordion>

  <Accordion title="ocamllint-hashtable-dos">
    Creating a Hashtbl without the optional random number parameter makes it prone to DoS attacks when attackers are able to fill the table with malicious content. Hashtbl.randomize or the R flag in the OCAMLRUNPARAM are other ways to randomize it.<br />**Likelihood**: LOW<br />**Confidence**: LOW<br />**CWE**: <br />- C
    <br />- W
    <br />- E
    <br />- -
    <br />- 3
    <br />- 9
    <br />- 9
    <br />- :
    <br />-\
    <br />- R
    <br />- e
    <br />- s
    <br />- o
    <br />- u
    <br />- r
    <br />- c
    <br />- e
    <br />-\
    <br />- M
    <br />- a
    <br />- n
    <br />- a
    <br />- g
    <br />- e
    <br />- m
    <br />- e
    <br />- n
    <br />- t
    <br />-\
    <br />- E
    <br />- r
    <br />- r
    <br />- o
    <br />- r
    <br />- s
    <br />-\
    <br />- (
    <br />- 4
    <br />- .
    <br />- 1
    <br />- 2
    <br />- )
  </Accordion>

  <Accordion title="ocamllint-filenameconcat">
    When attacker supplied data is passed to Filename.concat directory traversal attacks might be possible.<br />**Likelihood**: MEDIUM<br />**Confidence**: LOW<br />**CWE**: <br />- C
    <br />- W
    <br />- E
    <br />- -
    <br />- 3
    <br />- 5
    <br />- :
    <br />-\
    <br />- P
    <br />- a
    <br />- t
    <br />- h
    <br />-\
    <br />- T
    <br />- r
    <br />- a
    <br />- v
    <br />- e
    <br />- r
    <br />- s
    <br />- a
    <br />- l
  </Accordion>

  <Accordion title="ocamllint-marshal">
    Marshaling is currently not type-safe and can lead to insecure behaviour when untrusted data is marshalled. Marshalling can lead to out-of-bound reads as well.<br />**Likelihood**: MEDIUM<br />**Confidence**: LOW<br />**CWE**: <br />- C
    <br />- W
    <br />- E
    <br />- -
    <br />- 5
    <br />- 0
    <br />- 2
    <br />- :
    <br />-\
    <br />- D
    <br />- e
    <br />- s
    <br />- e
    <br />- r
    <br />- i
    <br />- a
    <br />- l
    <br />- i
    <br />- z
    <br />- a
    <br />- t
    <br />- i
    <br />- o
    <br />- n
    <br />-\
    <br />- o
    <br />- f
    <br />-\
    <br />- U
    <br />- n
    <br />- t
    <br />- r
    <br />- u
    <br />- s
    <br />- t
    <br />- e
    <br />- d
    <br />-\
    <br />- D
    <br />- a
    <br />- t
    <br />- a
  </Accordion>
</AccordionGroup>