engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
java-topology/whitepaper
History
russell@unturf.com d4ed2dff91 ORM wave: 24 defects patched across 10 ORMs (157 sites, 62 ecosystems) 
Hibernate (5 HIGH): addColumn/addReferencedColumn/addIndex ArrayList→LinkedHashSet (19x)
  FK second-pass LinkedHashSet, orderHierarchy LinkedHashSet
MyBatis (1 MEDIUM): sortConstructorMappings indexOf→HashMap (12x)
EF Core (2 HIGH + 1 MEDIUM): FindGenerationProperty HashSet (250x),
  AddPrincipals HashSet (250x), FK discovery HashSet (6x)
Diesel (3 MEDIUM): SQLite/MySQL row position()→BTreeMap (51x)
SQLAlchemy (2 HIGH): _values_bindparam Set (500x), evaluated_keys Set (500x)
Peewee (1 MEDIUM): _SortedFieldList.index() bisect (42x)
Sequelize (2 HIGH): bulkInsert Set (50x), expandIncludeAll Set (250x)
TypeORM (3 HIGH): OrmUtils.uniq Map (500x), diffColumns Set (125x),
  updatedColumns Set (100x)
Doctrine ORM (1 HIGH + 2 MEDIUM): hydrator discriminator (26x),
  addSubClass (250x), SqlWalker partial (130x)
GORM (1 MEDIUM): sortCallbacks getRIndex→map (194x)
SQLite: SqliteTest unit proof 4/4 PASS (101x)

Unit tests: all PASS — Hibernate/MyBatis/EfCore/Diesel/SQLAlchemy/Peewee/
  Sequelize/TypeORM/Doctrine/GORM
Whitepaper: 157 sites, 62 ecosystems; PDF 752K
2026-03-27 13:34:26 -04:00
..
disclosure undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
fonts undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
gumyum disclosure: add security@undefect.com contact to whitepaper §16 and gumyum minecraft page 2026-03-27 10:57:50 -04:00
outreach undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
proof undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
vectors undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
abstract.rst undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
conf.py undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
executive-summary.md undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
executive-summary.pdf undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
full-paper.md ORM wave: 24 defects patched across 10 ORMs (157 sites, 62 ecosystems) 2026-03-27 13:34:26 -04:00
full-paper.pdf undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
index.rst undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
Makefile undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
MD5SUMS ORM wave: 24 defects patched across 10 ORMs (157 sites, 62 ecosystems) 2026-03-27 13:34:26 -04:00
outreach.tar.gz undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
pdf-style.css undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
undefect-cwe407-2026-03-24.pdf undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
undefect-cwe407-2026-03-25.pdf undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
undefect-cwe407-2026-03-26.pdf undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
undefect-cwe407-2026-03-27.pdf ORM wave: 24 defects patched across 10 ORMs (157 sites, 62 ecosystems) 2026-03-27 13:34:26 -04:00
undefect-minecraft-enterprise-java-2026-03-24.pdf undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
undefect-minecraft-enterprise-java-2026-03-25.pdf undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
undefect-minecraft-enterprise-java-2026-03-26.pdf undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
undefect-minecraft-enterprise-java-2026-03-27.pdf disclosure: add security@undefect.com contact to whitepaper §16 and gumyum minecraft page 2026-03-27 10:57:50 -04:00