Hi all, I was wondering what other people do to keep track of scanning Julia code for security vulnerabilities and if any vulnerabilities get reported to CVE. Thanks, Philip

I don’t think there are many people that track vulnerabilities in Julia packages, and if they do, they probably do it by manually auditing/fuzz testing packages they use.

Thanks. That was kind of my impression too, so I’d also be interested in what kind of fuzz testing others do for Julia.

There is a related discussion: [image] Use a tool like Codacy to check common issues pattern Internals & Design Recently, I used Codacy on my fork of Julia, and it discovered 936 issues (237 security + 36 error prone + 663 code style). So I think to suggest a discussion ab…

[image] bluesmoon: scanning Julia code for security vulnerabilities and if any vulnerabilities get reported to CVE. I don’t think this is something that CVE would track at the moment even if people submitted, see https://cve.mitre.org/cve/request_id.html CVE does not track everything, just …

I think the best way to accomplish the same goal of determining which packages have the potential to cause a security incident, is to setup fuzz testing and mutation testing infrastructure for Julia, and apply it regularly to registered packages (maybe per commit or PR as part of CI). I think it’d b…

Security scanning of Julia code

Tooling

oheil May 16, 2019, 1:10pm 4

There is a related discussion:

Topic		Replies	Views
Known Security Vulnerabilities General Usage security	8	2906	April 25, 2022
Security review Package Management security	9	707	September 2, 2025
Use a tool like Codacy to check common issues pattern Internals & Design	11	1631	May 6, 2019
Julia security advisories New to Julia	23	5927	December 15, 2021
Secure coding in Julia? General Usage security	18	1377	July 3, 2024

Security scanning of Julia code

Related topics