CAUTION:
When you upgrade Coverity Analysis, all previous settings are overwritten.
All checkers listed in the following table are disabled by default in Coverity
Analysis 2025.3, regardless of their enablement status in a previous installations.
- code_injection_core_java
- code_injection_jcr
- code_injection_unknown_language
- dom_xss_core_javascript
- el_injection_core_java
- el_injection_ognl
- exec_environment_injection_core_java
- exec_environment_injection_core_javascript
- header_injection_core_csharp
- header_injection_core_java
- header_injection_core_javascript
- ldap_injection_core_csharp
- ldap_injection_core_java
- nosql_query_injection_core_java
- nosql_query_injection_core_javascript
- open_redirect_core_csharp
- open_redirect_core_java
- open_redirect_core_javascript
- os_cmd_injection_core_csharp
- os_cmd_injection_core_java
- os_cmd_injection_core_javascript
- path_manipulation_core_csharp
- path_manipulation_core_java
- path_manipulation_core_javascript
- regex_injection_core_csharp
- regex_injection_core_java
- regex_injection_core_javascript
- script_code_injection_core_csharp
- script_code_injection_core_java
- script_code_injection_core_javascript
- sensitive_data_leak_core_csharp
- sensitive_data_leak_core_java
- sensitive_data_leak_core_javascript
- session_fixation_core_java
- sqli_core_csharp
- sqli_core_java
- sqli_core_javascript
- trust_boundary_violation_core_java
- unencrypted_sensitive_data_core_csharp
- unrestricted_dispatch_core_csharp
- unrestricted_dispatch_core_java
- unsafe_deserialization_core_csharp
- unsafe_deserialization_core_java
- unsafe_deserialization_core_javascript
- unsafe_jni_core_java
- unsafe_named_query_core_csharp
- unsafe_named_query_core_java
- unsafe_reflection_core_java
- url_manipulation_core_csharp
- url_manipulation_core_java
- url_manipulation_core_javascript
- xpath_injection_core_csharp
- xpath_injection_core_java
- xss_core_javascript