Skip to content

fix: aesencryption in AESEncryption.java#7392

Merged
DenizAltunkapan merged 2 commits intoTheAlgorithms:masterfrom
orbisai0security:fix-fix-aes-decrypted-text-logging-v001
Apr 22, 2026
Merged

fix: aesencryption in AESEncryption.java#7392
DenizAltunkapan merged 2 commits intoTheAlgorithms:masterfrom
orbisai0security:fix-fix-aes-decrypted-text-logging-v001

Conversation

@orbisai0security
Copy link
Copy Markdown
Contributor

Summary

Fix high severity security issue in src/main/java/com/thealgorithms/ciphers/AESEncryption.java.

Vulnerability

Field Value
ID V-001
Severity HIGH
Scanner multi_agent_ai
Rule V-001
File src/main/java/com/thealgorithms/ciphers/AESEncryption.java:41

Description: AESEncryption.java at line 41 prints the full plaintext result of AES decryption directly to standard output using System.out.println. In any deployment where this library is embedded in a server application, container, or cloud function, standard output is routinely captured in log files, container log streams (e.g., Docker/Kubernetes logs), or log aggregation pipelines (e.g., ELK Stack, Splunk, AWS CloudWatch). Any party with read access to those log systems can retrieve the decrypted plaintext without ever possessing the AES encryption key, completely defeating the purpose of encryption.

Changes

  • src/main/java/com/thealgorithms/ciphers/AESEncryption.java

Verification

  • Build passes
  • Scanner re-scan confirms fix
  • LLM code review passed

Automated security fix by OrbisAI Security

Automated security fix generated by Orbis Security AI
@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Apr 21, 2026

Codecov Report

❌ Patch coverage is 0% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 79.53%. Comparing base (0ad5d90) to head (13a385d).

Files with missing lines Patch % Lines
.../java/com/thealgorithms/ciphers/AESEncryption.java 0.00% 1 Missing ⚠️
Additional details and impacted files
@@             Coverage Diff              @@
##             master    #7392      +/-   ##
============================================
- Coverage     79.53%   79.53%   -0.01%     
  Complexity     7177     7177              
============================================
  Files           798      798              
  Lines         23467    23467              
  Branches       4617     4617              
============================================
- Hits          18665    18664       -1     
  Misses         4055     4055              
- Partials        747      748       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@DenizAltunkapan DenizAltunkapan enabled auto-merge (squash) April 22, 2026 17:20
@DenizAltunkapan DenizAltunkapan merged commit 763b95b into TheAlgorithms:master Apr 22, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants