The following document contains the results of SpotBugs

SpotBugs Version is 4.9.8

Threshold is medium

Effort is default

Summary

Classes Bugs Errors Missing Classes
183 8 0 0

Files

Class Bugs
io.wcm.handler.media.impl.WidthUtils 2
io.wcm.handler.media.impl.ipeconfig.PathParser 2
io.wcm.handler.mediasource.ngdm.impl.metadata.MetadataResponse 2
io.wcm.handler.mediasource.ngdm.impl.metadata.MetadataResponse$SmartCrop 1
io.wcm.handler.mediasource.ngdm.impl.metadata.NextGenDynamicMediaMetadataServiceImpl 1

io.wcm.handler.media.impl.WidthUtils

Bug Category Details Line Priority
The regular expression "(?<width>\\d+)(:(?<density>\\d+(\\.\\d+)?x))?(?<optional>\\?)?" is vulnerable to a denial of service attack (ReDOS) SECURITY REDOS 45 Medium
The regular expression "^\\s*\\d+(:\\d+(\\.\\d+)?x)?\\??\\s*(,\\s*\\d+(:\\d+(\\.\\d+)?x)?\\??\\s*)*+$" is vulnerable to a denial of service attack (ReDOS) SECURITY REDOS 51 Medium

io.wcm.handler.media.impl.ipeconfig.PathParser

Bug Category Details Line Priority
The regular expression "^.*/plugins/crop(/aspectRatios(/([^/]+))?)?$" is vulnerable to a denial of service attack (ReDOS) SECURITY REDOS 46 Medium
The regular expression "^/wcmio:mediaHandler/ipeConfig((/[^/]+)+)/wcmio:mediaFormat((/[^/]+)+)/wcmio:config(/.*)?$" is vulnerable to a denial of service attack (ReDOS) SECURITY REDOS 41 Medium

io.wcm.handler.mediasource.ngdm.impl.metadata.MetadataResponse

Bug Category Details Line Priority
Suppressing annotation UUF_UNUSED_PUBLIC_OR_PROTECTED_FIELD on the field io.wcm.handler.mediasource.ngdm.impl.metadata.MetadataResponse.assetMetadata is unnecessary STYLE US_USELESS_SUPPRESSION_ON_FIELD Not available Medium
Suppressing annotation UUF_UNUSED_PUBLIC_OR_PROTECTED_FIELD on the field io.wcm.handler.mediasource.ngdm.impl.metadata.MetadataResponse.repositoryMetadata is unnecessary STYLE US_USELESS_SUPPRESSION_ON_FIELD Not available Medium

io.wcm.handler.mediasource.ngdm.impl.metadata.MetadataResponse$SmartCrop

Bug Category Details Line Priority
Suppressing annotation UUF_UNUSED_PUBLIC_OR_PROTECTED_FIELD on the class io.wcm.handler.mediasource.ngdm.impl.metadata.MetadataResponse$SmartCrop is unnecessary STYLE US_USELESS_SUPPRESSION_ON_CLASS 53 Medium

io.wcm.handler.mediasource.ngdm.impl.metadata.NextGenDynamicMediaMetadataServiceImpl

Bug Category Details Line Priority
Concatenating user-controlled input into a URL SECURITY HTTP_PARAMETER_POLLUTION 219 Medium

Back to top

Version: 2.8.1-SNAPSHOT. Last Published: 2026-02-24.