Skip to main content


This is the documentation for Java and Scala vulnerabilities that are detected by GuardRails. The documentation is grouped based on vulnerability category.


Some of our Java engines require byte code to perform their security analysis. At the moment, GuardRails attempts to build Maven and Gradle projects on Java 8 automatically. For Software Composition Analysis (SCA) that detects vulnerable 3rd party libraries, we have one engine that supports Maven and Gradle without requiring the building of a project. The GuardRails CLI also allows the integration of GuardRails as a build-step, so that the security analysis can be triggered against the already-built artifacts.

See the child pages for more information:

Recommended Resources for Java: