critical System graph security Trivy conf 1.00 CVE-2026-41242: protobufjs 7.5.4 — pnpm-lock.yaml

protobufjs: protobufjs: Arbitrary code execution via injected protobuf definition type fields protobufjs compiles protobuf definitions into JavaScript (JS) functions. In versions prior to 8.0.1 and 7.5.5, attackers can inject arbitrary code in the "type" fields of protobuf definitions, which will …

VulnCve 2026 41242

critical System graph security Trivy conf 1.00 CVE-2026-59873: tar 7.5.13 — pnpm-lock.yaml

tar: node-tar: Denial of Service via crafted gzip bomb node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, a…

VulnCve 2026 59873

critical System graph dependencies dependencies conf 1.00 Vulnerable dependency tar 7.5.13: GHSA-23hp-3jrh-7fpw

OSV.dev reports `tar` at version `7.5.13` (resolved in `pnpm-lock.yaml`) is affected by GHSA-23hp-3jrh-7fpw (aka CVE-2026-59873). node-tar: Decompression/parse DoS via unlimited input Aliases: CVE-2026-59873 Advisory: https://osv.dev/vulnerability/GHSA-23hp-3jrh-7fpw Fix: upgrade `tar` past the a…

packages/agent-core-v2/package.json ScaOsvGhsa 23hp 3jrh 7fpw

high System graph security Trivy conf 1.00 CVE-2026-12151: undici 7.27.1 — pnpm-lock.yaml

undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments. A malicious WebSocket server can stream …

VulnCve 2026 12151

high System graph security Trivy conf 1.00 CVE-2026-13149: brace-expansion 5.0.6 — pnpm-lock.yaml

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a…

VulnCve 2026 13149

high System graph security Trivy conf 1.00 CVE-2026-13676: fast-uri 3.1.0 — pnpm-lock.yaml

fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, …

VulnCve 2026 13676

high System graph security Trivy conf 1.00 CVE-2026-16221: fast-uri 3.1.0 — pnpm-lock.yaml

Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x ... Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2) do not treat a literal backslash character (U+005C) as an authority delimiter. Node's native WHATWG URL pa…

VulnCve 2026 16221

high System graph security Trivy conf 1.00 CVE-2026-42211: react-router 7.14.1 — pnpm-lock.yaml

react-router: React Router: Remote Code Execution via prototype pollution in Framework Mode React Router is a router for React. In versions 7.0.0 through 7.14.1, when using Framework Mode, a combination of steps could potentially allow unauthorized remote code execution (RCE) through external requ…

VulnCve 2026 42211

high System graph security Trivy conf 1.00 CVE-2026-42342: react-router 7.14.1 — pnpm-lock.yaml

react-router: @remix-run/server-runtime: React Router / Remix: Denial of Service via unbounded path expansion in __manifest endpoint React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @remix-run/server-runtime, certain crafted…

VulnCve 2026 42342

high System graph security Trivy conf 1.00 CVE-2026-44289: protobufjs 7.5.4 — pnpm-lock.yaml

protobufjs: protobufjs: Denial of Service via uncontrolled recursion in protobuf decoding protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs could recurse without a depth limit while decoding nested protobuf data. This affected both skippi…

VulnCve 2026 44289

high System graph security Trivy conf 1.00 CVE-2026-44290: protobufjs 7.5.4 — pnpm-lock.yaml

protobufjs: protobufjs: Denial of Service via crafted schema protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs allowed certain schema option paths to traverse through inherited object properties while applying options. A crafted protobuf …

VulnCve 2026 44290

high System graph security Trivy conf 1.00 CVE-2026-44291: protobufjs 7.5.4 — pnpm-lock.yaml

protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs used plain objects with inherited prototypes for internal type lookup tables used by generated encode and decode fu…

VulnCve 2026 44291

high System graph security Trivy conf 1.00 CVE-2026-44293: protobufjs 7.5.4 — pnpm-lock.yaml

protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript for toObject conversion could include an unsafe …

VulnCve 2026 44293

high System graph security Trivy conf 1.00 CVE-2026-48712: protobufjs 7.5.4 — pnpm-lock.yaml

protobufjs: protobufjs: Denial of Service via uncontrolled recursion with crafted protobuf payload protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.1 and 8.4.1, protobufjs could recurse without a depth limit while converting decoded messages to plain objects or…

VulnCve 2026 48712

high System graph security Trivy conf 1.00 CVE-2026-48779: ws 8.20.0 — pnpm-lock.yaml

ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memor…

VulnCve 2026 48779

high System graph security Trivy conf 1.00 CVE-2026-53571: vite 5.4.21 — pnpm-lock.yaml

vite: `server.fs.deny` bypass on Windows alternate paths Vite is a frontend tooling framework for JavaScript. Prior to 8.0.16, 7.3.5, and 6.4.3, the contents of files that are specified by server.fs.deny can be returned to the browser on Windows. Vite’s dev server denies direct access to sensitive…

VulnCve 2026 53571

high System graph security Trivy conf 1.00 CVE-2026-54290: hono 4.12.14 — pnpm-lock.yaml

hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, with credentials: true and no explicit origin (the default wildcard), the CORS Middleware reflec…

VulnCve 2026 54290

high System graph security Trivy conf 1.00 CVE-2026-59869: js-yaml 3.14.2 — pnpm-lock.yaml

js-yaml: js-yaml: Denial of Service via crafted YAML documents js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where…

VulnCve 2026 59869

high System graph security Trivy conf 1.00 CVE-2026-59869: js-yaml 4.1.1 — pnpm-lock.yaml

js-yaml: js-yaml: Denial of Service via crafted YAML documents js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where…

VulnCve 2026 59869

high System graph security Trivy conf 1.00 CVE-2026-59874: tar 7.5.13 — pnpm-lock.yaml

tar: Node-tar: Denial of Service via malformed tar archive header node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeated…

VulnCve 2026 59874

high System graph security Trivy conf 1.00 CVE-2026-59887: linkify-it 5.0.1 — pnpm-lock.yaml

linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used by .test() and .match() can be invoked at every mailto: occurrence and scan the remaini…

VulnCve 2026 59887

high System graph security Trivy conf 1.00 CVE-2026-6321: fast-uri 3.1.0 — pnpm-lock.yaml

fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated like real slashes and parent-directory r…

VulnCve 2026 6321

high System graph security Trivy conf 1.00 CVE-2026-6322: fast-uri 3.1.0 — pnpm-lock.yaml

fast-uri: fast-uri: URI authority bypass due to improper delimiter handling fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a…

VulnCve 2026 6322

high System graph security Trivy conf 1.00 CVE-2026-6734: undici 7.27.1 — pnpm-lock.yaml

undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying that the pool's origin matches the requested origin. All requ…

VulnCve 2026 6734

high System graph security Trivy conf 1.00 CVE-2026-9697: undici 7.27.1 — pnpm-lock.yaml

undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or socks://). The target HTTPS connection through the SOCKS5 tunnel falls back to Node's default tr…

VulnCve 2026 9697

high System graph security Trivy conf 1.00 DS-0002: Image user should not be 'root' — packages/klient/Dockerfile

Image user should not be 'root' Specify at least 1 USER command in Dockerfile with non-root user as argument Rule: DS-0002 Severity: HIGH Target: packages/klient/Dockerfile

Misconfig

high System graph security security conf 1.00 Insecure pattern 'exec_used' in packages/acp-adapter/src/kaos-acp.ts:244

Found a known-risky pattern (exec_used). Review and replace if possible.

packages/acp-adapter/src/kaos-acp.ts:244 Exec used

high System graph security security conf 1.00 Insecure pattern 'exec_used' in packages/agent-core-v2/src/os/backends/node-local/tools/rgLocator.ts:54

Found a known-risky pattern (exec_used). Review and replace if possible.

packages/agent-core-v2/src/os/backends/node-local/tools/rgLocator.ts:54 Exec used

high System graph security security conf 1.00 Insecure pattern 'exec_used' in packages/agent-core-v2/src/session/process/processRunner.ts:34

Found a known-risky pattern (exec_used). Review and replace if possible.

packages/agent-core-v2/src/session/process/processRunner.ts:34 Exec used

high System graph security security conf 1.00 Insecure pattern 'exec_used' in packages/agent-core-v2/src/session/process/processRunnerService.ts:28

Found a known-risky pattern (exec_used). Review and replace if possible.

packages/agent-core-v2/src/session/process/processRunnerService.ts:28 Exec used

high System graph security security conf 1.00 Insecure pattern 'exec_used' in packages/agent-core-v2/src/session/sessionFs/rgLocator.ts:34

Found a known-risky pattern (exec_used). Review and replace if possible.

packages/agent-core-v2/src/session/sessionFs/rgLocator.ts:34 Exec used

high System graph security security conf 1.00 Insecure pattern 'exec_used' in packages/kaos/src/kaos.ts:94

Found a known-risky pattern (exec_used). Review and replace if possible.

packages/kaos/src/kaos.ts:94 Exec used

high System graph security security conf 1.00 Insecure pattern 'exec_used' in packages/kaos/src/local.ts:727

Found a known-risky pattern (exec_used). Review and replace if possible.

packages/kaos/src/local.ts:727 Exec used

high System graph security security conf 0.90 Insecure pattern 'node_child_process' in apps/kimi-code/scripts/build-vis-asset.mjs:5

Found a known-risky pattern (node_child_process). Review and replace if possible.

apps/kimi-code/scripts/build-vis-asset.mjs:5 Node child process

high System graph security security conf 0.90 Insecure pattern 'node_child_process' in apps/kimi-code/src/cli/run-shell.ts:1

Found a known-risky pattern (node_child_process). Review and replace if possible.

apps/kimi-code/src/cli/run-shell.ts:1 Node child process

high System graph security security conf 0.90 Insecure pattern 'node_child_process' in apps/kimi-code/src/cli/update/preflight.ts:1

Found a known-risky pattern (node_child_process). Review and replace if possible.

apps/kimi-code/src/cli/update/preflight.ts:1 Node child process

high System graph security security conf 0.90 Insecure pattern 'node_child_process' in apps/kimi-code/src/utils/process/external-editor.ts:11

Found a known-risky pattern (node_child_process). Review and replace if possible.

apps/kimi-code/src/utils/process/external-editor.ts:11 Node child process

high System graph security security conf 0.90 Insecure pattern 'node_child_process' in packages/kap-server/src/lib/fileLaunch.ts:2

Found a known-risky pattern (node_child_process). Review and replace if possible.

packages/kap-server/src/lib/fileLaunch.ts:2 Node child process

high System graph security security conf 0.90 Insecure pattern 'node_child_process' in packages/pi-tui/src/terminal-image.ts:1

Found a known-risky pattern (node_child_process). Review and replace if possible.

packages/pi-tui/src/terminal-image.ts:1 Node child process

high System graph dependencies dependencies conf 1.00 Vulnerable dependency hono 4.12.14: GHSA-88fw-hqm2-52qc

OSV.dev reports `hono` at version `4.12.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-88fw-hqm2-52qc (aka CVE-2026-54290). hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard Aliases: CVE-2026-54290 Advisory: https://osv.dev/vulnerability/GHS…

apps/vis/server/package.json ScaOsvGhsa 88fw hqm2 52qc

high System graph dependencies dependencies conf 1.00 Vulnerable dependency js-yaml 3.14.2: GHSA-52cp-r559-cp3m

OSV.dev reports `js-yaml` at version `3.14.2` (resolved in `pnpm-lock.yaml`) is affected by GHSA-52cp-r559-cp3m (aka CVE-2026-59869). js-yaml: YAML merge-key chains can force quadratic CPU consumption Aliases: CVE-2026-59869 Advisory: https://osv.dev/vulnerability/GHSA-52cp-r559-cp3m Fix: upgrade…

pnpm-lock.yaml ScaOsvGhsa 52cp r559 cp3m

high System graph dependencies dependencies conf 1.00 Vulnerable dependency js-yaml 4.1.1: GHSA-52cp-r559-cp3m

OSV.dev reports `js-yaml` at version `4.1.1` (resolved in `pnpm-lock.yaml`) is affected by GHSA-52cp-r559-cp3m (aka CVE-2026-59869). js-yaml: YAML merge-key chains can force quadratic CPU consumption Aliases: CVE-2026-59869 Advisory: https://osv.dev/vulnerability/GHSA-52cp-r559-cp3m Fix: upgrade …

packages/agent-core-v2/package.json ScaOsvGhsa 52cp r559 cp3m

high System graph dependencies dependencies conf 1.00 Vulnerable dependency tar 7.5.13: GHSA-8x88-c5mf-7j5w

OSV.dev reports `tar` at version `7.5.13` (resolved in `pnpm-lock.yaml`) is affected by GHSA-8x88-c5mf-7j5w (aka CVE-2026-59874). node-tar: Negative tar entry size causes infinite loop in archive replace Aliases: CVE-2026-59874 Advisory: https://osv.dev/vulnerability/GHSA-8x88-c5mf-7j5w Fix: upgr…

packages/agent-core-v2/package.json ScaOsvGhsa 8x88 c5mf 7j5w

high System graph dependencies dependencies conf 1.00 Vulnerable dependency vite 5.4.21: GHSA-fx2h-pf6j-xcff

OSV.dev reports `vite` at version `5.4.21` (resolved in `pnpm-lock.yaml`) is affected by GHSA-fx2h-pf6j-xcff (aka CVE-2026-53571). vite: `server.fs.deny` bypass on Windows alternate paths Aliases: CVE-2026-53571 Advisory: https://osv.dev/vulnerability/GHSA-fx2h-pf6j-xcff Fix: upgrade `vite` past …

pnpm-lock.yaml ScaOsvGhsa fx2h pf6j xcff

high System graph dependencies dependencies conf 1.00 Vulnerable dependency vite 8.0.8: GHSA-fx2h-pf6j-xcff

OSV.dev reports `vite` at version `8.0.8` (resolved in `pnpm-lock.yaml`) is affected by GHSA-fx2h-pf6j-xcff (aka CVE-2026-53571). vite: `server.fs.deny` bypass on Windows alternate paths Aliases: CVE-2026-53571 Advisory: https://osv.dev/vulnerability/GHSA-fx2h-pf6j-xcff Fix: upgrade `vite` past t…

pnpm-lock.yaml ScaOsvGhsa fx2h pf6j xcff

high System graph dependencies dependencies conf 1.00 Vulnerable dependency ws 8.20.0: GHSA-96hv-2xvq-fx4p

OSV.dev reports `ws` at version `8.20.0` (resolved in `pnpm-lock.yaml`) is affected by GHSA-96hv-2xvq-fx4p (aka CVE-2026-48779). ws: Memory exhaustion DoS from tiny fragments and data chunks Aliases: CVE-2026-48779 Advisory: https://osv.dev/vulnerability/GHSA-96hv-2xvq-fx4p Fix: upgrade `ws` past…

apps/kimi-web/package.json ScaOsvGhsa 96hv 2xvq fx4p

medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: AGENTS.md

This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.

AGENTS.md VerificationAgents md

medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: apps/kimi-web/AGENTS.md

This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.

apps/kimi-web/AGENTS.md VerificationAgents md

medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: docs/en/customization/agents.md

This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.

docs/en/customization/agents.md VerificationAgents md

medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: docs/zh/customization/agents.md

This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.

docs/zh/customization/agents.md VerificationAgents md

medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: packages/agent-core-v2/AGENTS.md

This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.

packages/agent-core-v2/AGENTS.md VerificationAgents md

medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: packages/agent-core-v2/src/app/skillCatalog/builtin/sub-skill/review/SKILL.md

This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.

packages/agent-core-v2/src/app/skillCatalog/builtin/sub-skill/review/SKILL.md VerificationSkill file

medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: packages/agent-core-v2/src/app/skillCatalog/builtin/sub-skill/SKILL.md

This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.

packages/agent-core-v2/src/app/skillCatalog/builtin/sub-skill/SKILL.md VerificationSkill file

medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: packages/agent-core/src/skill/builtin/sub-skill/review/SKILL.md

This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.

packages/agent-core/src/skill/builtin/sub-skill/review/SKILL.md VerificationSkill file

medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: packages/agent-core/src/skill/builtin/sub-skill/SKILL.md

This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.

packages/agent-core/src/skill/builtin/sub-skill/SKILL.md VerificationSkill file

medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: packages/pi-tui/AGENTS.md

This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.

packages/pi-tui/AGENTS.md VerificationAgents md

medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: plugins/official/kimi-datasource/SKILL.md

This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.

plugins/official/kimi-datasource/SKILL.md VerificationSkill file

medium System graph quality Agent instructions conf 1.00 Agent instructions exist but release-hardening basics are missing

AI-coder instruction files were found, but the repo is missing lockfile. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable.

Repo hardeningGenerated repo pattern

medium System graph quality Placeholder conf 1.00 Critical user flow still appears backed by mock or placeholder data

A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded.

Mock dataCritical flowGenerated repo pattern

medium System graph security Trivy conf 1.00 CVE-2026-39365: vite 5.4.21 — pnpm-lock.yaml

vite: Vite: Information disclosure via path traversal in dev server's .map request handling Vite is a frontend tooling framework for JavaScript. From 6.0.0 to before 6.4.2, 7.3.2, and 8.0.5, the dev server’s handling of .map requests for optimized dependencies resolves file paths and calls readFil…

VulnCve 2026 39365

medium System graph security Trivy conf 1.00 CVE-2026-41305: postcss 8.5.9 — pnpm-lock.yaml

postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Versions prior to 8.5.10 do not escape `</style>` sequences when stringifyin…

VulnCve 2026 41305

medium System graph security Trivy conf 1.00 CVE-2026-42338: ip-address 10.1.0 — pnpm-lock.yaml

ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and Address6.link() do not HTML-escape attacker-controlled content before embeddi…

VulnCve 2026 42338

medium System graph security Trivy conf 1.00 CVE-2026-44288: @protobufjs/utf8 1.1.0 — pnpm-lock.yaml

protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a minimal UTF-8 decoder that accepted overlong UTF-8 byte sequences and decode…

VulnCve 2026 44288

medium System graph security Trivy conf 1.00 CVE-2026-44288: protobufjs 7.5.4 — pnpm-lock.yaml

protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a minimal UTF-8 decoder that accepted overlong UTF-8 byte sequences and decode…

VulnCve 2026 44288

medium System graph security Trivy conf 1.00 CVE-2026-44292: protobufjs 7.5.4 — pnpm-lock.yaml

protobufjs: protobufjs: Data integrity impact due to prototype pollution protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated message constructors copied enumerable properties from a provided properties object without filtering the…

VulnCve 2026 44292

medium System graph security Trivy conf 1.00 CVE-2026-44294: protobufjs 7.5.4 — pnpm-lock.yaml

protobufjs: protobufjs: Denial of Service due to unescaped control characters in field names protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript property accessors from schema-controlled field and oneof names. Certain c…

VulnCve 2026 44294

medium System graph security Trivy conf 1.00 CVE-2026-44455: hono 4.12.14 — pnpm-lock.yaml

hono/jsx has Unvalidated JSX Tag Names that May Allow HTML Injection Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.16, Improper handling of JSX element tag names in hono/jsx allowed unvalidated tag names to be directly inserted into the generat…

VulnCve 2026 44455

medium System graph security Trivy conf 1.00 CVE-2026-44456: hono 4.12.14 — pnpm-lock.yaml

Hono: bodyLimit() can be bypassed for chunked / unknown-length requests Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.16, bodyLimit() does not reliably enforce maxSize for requests without a usable Content-Length (e.g. Transfer-Encoding: chunke…

VulnCve 2026 44456

medium System graph security Trivy conf 1.00 CVE-2026-44457: hono 4.12.14 — pnpm-lock.yaml

Hono's Cache Middleware ignores Vary: Authorization / Vary: Cookie leading to cross-user cache leakage Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, Cache Middleware does not skip caching for responses that declare per-user variance via Var…

VulnCve 2026 44457

medium System graph security Trivy conf 1.00 CVE-2026-44458: hono 4.12.14 — pnpm-lock.yaml

Hono has CSS Declaration Injection via Style Object Values in JSX SSR Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, the JSX renderer escapes style attribute object values for HTML but not for CSS. Untrusted input in a style object value or …

VulnCve 2026 44458

medium System graph security Trivy conf 1.00 CVE-2026-45736: ws 8.20.0 — pnpm-lock.yaml

ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray` ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument.…

VulnCve 2026 45736

medium System graph security Trivy conf 1.00 CVE-2026-45740: protobufjs 7.5.4 — pnpm-lock.yaml

protobufjs: protobufjs: Denial of Service via crafted JSON descriptors protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.8 and 8.2.0, protobufjs could recurse without a depth limit while expanding nested JSON descriptors through Root.fromJSON() and Namespace.add…

VulnCve 2026 45740

medium System graph security Trivy conf 1.00 CVE-2026-47673: hono 4.12.14 — pnpm-lock.yaml

Hono: JWT middleware accepts any Authorization scheme, not only Bearer Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the jwt and jwk middlewares do not verify that the Authorization header value uses theBearer scheme. Any two-part header va…

VulnCve 2026 47673

medium System graph security Trivy conf 1.00 CVE-2026-47674: hono 4.12.14 — pnpm-lock.yaml

Hono: IP Restriction bypasses static deny rules for non-canonical IPv6 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the ip-restriction middleware (hono/ip-restriction) compares incoming IP addresses against configured deny and allow rules…

VulnCve 2026 47674

medium System graph security Trivy conf 1.00 CVE-2026-47675: hono 4.12.14 — pnpm-lock.yaml

Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the serialize() function in hono/cookie validates domain and path options against characters that corru…

VulnCve 2026 47675

medium System graph security Trivy conf 1.00 CVE-2026-47676: hono 4.12.14 — pnpm-lock.yaml

Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, app.mount() strips the mount prefix from the incoming request path using the raw U…

VulnCve 2026 47676

medium System graph security Trivy conf 1.00 CVE-2026-53550: js-yaml 3.14.2 — pnpm-lock.yaml

js-yaml: js-yaml: Denial of Service via crafted YAML merge keys js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml merge-key processing (<<) by repeating the same alias many times in a merge sequence.…

VulnCve 2026 53550

medium System graph security Trivy conf 1.00 CVE-2026-53550: js-yaml 4.1.1 — pnpm-lock.yaml

js-yaml: js-yaml: Denial of Service via crafted YAML merge keys js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml merge-key processing (<<) by repeating the same alias many times in a merge sequence.…

VulnCve 2026 53550

medium System graph security Trivy conf 1.00 CVE-2026-53632: vite 5.4.21 — pnpm-lock.yaml

launch-editor: launch-editor: Credential compromise via NTLMv2 password hash leak through UNC path access launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC paths. When a U…

VulnCve 2026 53632

medium System graph security Trivy conf 1.00 CVE-2026-53655: tar 7.5.13 — pnpm-lock.yaml

node-tar: node-tar: File smuggling due to inconsistent tar archive parsing node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar (node-tar) applies a PAX extended header's size= record (and other PAX overrides) to the next header entry of any type, including intermediary metadata heade…

VulnCve 2026 53655

medium System graph security Trivy conf 1.00 CVE-2026-54269: protobufjs 7.5.4 — pnpm-lock.yaml

protobufjs: protobufjs-cli: protobufjs: Denial of Service due to name collision with runtime helpers protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 8.6.0 and 7.6.3, protobufjs accepted certain schema-derived names that could collide with properties used by protob…

VulnCve 2026 54269

medium System graph security Trivy conf 1.00 CVE-2026-54286: hono 4.12.14 — pnpm-lock.yaml

hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`) Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on Windows hosts, an encoded backslash (%5C) in the request path decodes to \, which the Windows path resolver tre…

VulnCve 2026 54286

medium System graph security Trivy conf 1.00 CVE-2026-54287: hono 4.12.14 — pnpm-lock.yaml

hono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and Lattice Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on AWS Lambda, the ALB single-header response and the VPC Lattice …

VulnCve 2026 54287

medium System graph security Trivy conf 1.00 CVE-2026-54288: hono 4.12.14 — pnpm-lock.yaml

hono: Body Limit Middleware can be bypassed on AWS Lambda by understating `Content-Length` Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, the Body Limit Middleware trusts the request's Content-Length header to decide whether a body is within…

VulnCve 2026 54288

medium System graph security Trivy conf 1.00 CVE-2026-54289: hono 4.12.14 — pnpm-lock.yaml

hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on AWS Lambda@Edge, CloudFront delivers a request header that appears more than once as severa…

VulnCve 2026 54289

medium System graph security Trivy conf 1.00 CVE-2026-59871: tar 7.5.13 — pnpm-lock.yaml

node-tar: node-tar: Denial of Service due to incorrect PAX path handling node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, node-tar coerces all-digit PAX path and linkpath values in src/pax.ts to JavaScript numbers, causing downstream path handling such as normalizeWindo…

VulnCve 2026 59871

medium System graph security Trivy conf 1.00 CVE-2026-59875: tar 7.5.13 — pnpm-lock.yaml

node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.17, node-tar does not strip NUL bytes from PAX path and linkpath records in src/pax.ts, allowing a crafted archive with values to reach fs.l…

VulnCve 2026 59875

medium System graph security Trivy conf 1.00 CVE-2026-59877: protobufjs 7.5.4 — pnpm-lock.yaml

protobufjs: protobufjs: Denial of Service via crafted .proto schema protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.5 and 8.6.6, protobufjs parsed option names by advancing through schema tokens until reaching an = token without checking for end of input, so a…

VulnCve 2026 59877

medium System graph security Trivy conf 1.00 CVE-2026-59895: hono 4.12.14 — pnpm-lock.yaml

Hono: Server-Side XSS via JSX Escaping Bypass in cx() Utility Hono is a Web application framework that provides support for any JavaScript runtime. From 4.0.0 before 4.12.27, cx() in hono/css composes class names from plain strings but marks the result as already escaped without HTML-escaping the …

VulnCve 2026 59895

medium System graph security Trivy conf 1.00 CVE-2026-59896: hono 4.12.14 — pnpm-lock.yaml

hono/jsx does not isolate context per request, leading to cross-request data disclosure Hono is a Web application framework that provides support for any JavaScript runtime. From 4.11.8 before 4.12.27, hono/jsx did not isolate context values per request during server-side rendering, allowing creat…

VulnCve 2026 59896

medium System graph security Trivy conf 1.00 CVE-2026-59897: hono 4.12.14 — pnpm-lock.yaml

Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication Hono is a Web application framework that provides support for any JavaScript runtime. From 4.3.3 before 4.12.27, the AWS API Gateway v1 adapter can drop a distinct repeated request header value bec…

VulnCve 2026 59897

medium System graph security Trivy conf 1.00 CVE-2026-8723: qs 6.15.1 — pnpm-lock.yaml

### Summary `qs.stringify` throws `TypeError` when called with `arr ... ### Summary `qs.stringify` throws `TypeError` when called with `arrayFormat: 'comma'` and `encodeValuesOnly: true` on an array containing `null` or `undefined`. The throw is synchronous and not handled by any of qs's nul…

VulnCve 2026 8723

medium System graph security Trivy conf 1.00 CVE-2026-9678: undici 7.27.1 — pnpm-lock.yaml

undici: Undici: Information disclosure due to improper cache-control header parsing Impact: Undici's cache interceptor incorrectly classifies some responses as cacheable when the upstream Cache-Control header uses whitespace-padded qualified private or no-cache field names such as private=" author…

VulnCve 2026 9678

medium System graph security Trivy conf 1.00 CVE-2026-9679: undici 7.27.1 — pnpm-lock.yaml

undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding Impact: undici's cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences like %0D%0A, %00, %3B, and %3D into their literal byte equivalents. RFC 6265 §5.4 does not spe…

VulnCve 2026 9679

medium System graph api Wiring conf 0.55 Dangling fetch: GET /__kimi-dev/backend (apps/kimi-web/src/api/devBackend.ts:36)

`apps/kimi-web/src/api/devBackend.ts:36` calls `GET /__kimi-dev/backend` but no backend route in the scanned graph matches that path. The path appears development/example-only, so verify its custom dev server or proxy registration. Tool: fetch Normalized path used for matching: `/__kimi-dev/backen…

apps/kimi-web/src/api/devBackend.ts:36 Dangling fetchFetchNon production context

medium System graph api Wiring conf 0.55 Dangling fetch: POST /__kimi-dev/backend (apps/kimi-web/src/api/devBackend.ts:50)

`apps/kimi-web/src/api/devBackend.ts:50` calls `POST /__kimi-dev/backend` but no backend route in the scanned graph matches that path. The path appears development/example-only, so verify its custom dev server or proxy registration. Tool: fetch Normalized path used for matching: `/__kimi-dev/backe…

apps/kimi-web/src/api/devBackend.ts:50 Dangling fetchFetchNon production context

medium System graph dependencies dependencies conf 0.90 Dependency ignore is two or more major versions behind

`ignore` is pinned at `5.3.2` in `packages/agent-core-v2/package.json` while the latest release on the npm registry is `7.0.6` — 2 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `ignore` to…

packages/agent-core-v2/package.json FreshnessOutdated

medium System graph security Semgrep conf 0.55 detect child process — packages/pi-tui/src/autocomplete.ts:164

Detected calls to child_process from a function argument `fdPath`. This could lead to a command injection if the input is user controllable. Try to avoid calls to child_process, and if it is needed ensure user input is correctly sanitized or sandboxed. Rule: javascript.lang.security.detect-child-p…

packages/pi-tui/src/autocomplete.ts:164 SecurityJavascript

medium System graph hardware Security conf 1.00 Dockerfile runs as root: packages/klient/Dockerfile

No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image.

Container

medium System graph quality Integrity conf 0.90 Fire-and-forget `fetch()` has no rejection handler — packages/agent-core-v2/src/app/web/tools/fetch-url-types.ts:21

This fetch result is neither awaited, returned, assigned, nor followed by `.catch(...)`. A network failure can therefore become an unhandled promise rejection. Await/return the promise or attach an explicit rejection handler.

packages/agent-core-v2/src/app/web/tools/fetch-url-types.ts:21 runtime safetyRobustnessUnhandled promise

medium System graph quality Integrity conf 0.90 Fire-and-forget `fetch()` has no rejection handler — packages/agent-core/src/tools/builtin/web/fetch-url.ts:39

This fetch result is neither awaited, returned, assigned, nor followed by `.catch(...)`. A network failure can therefore become an unhandled promise rejection. Await/return the promise or attach an explicit rejection handler.

packages/agent-core/src/tools/builtin/web/fetch-url.ts:39 runtime safetyRobustnessUnhandled promise

medium System graph quality Integrity conf 1.00 2 occurrences Frontend route `/sessions/:sessionId` has no Link/navigate to it — apps/vis/web/src/App.tsx

The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.

2 occurrences

repo-level (2 hits)

Orphan pageWiring

medium System graph security Trivy conf 1.00 GHSA-67mh-4wv8-2f99: esbuild 0.21.5 — pnpm-lock.yaml

esbuild enables any website to send any requests to the development server and read the response ### Summary esbuild allows any websites to send any request to the development server and read the response due to default CORS settings. ### Details esbuild sets `Access-Control-Allow-Origin: *` he…

VulnGhsa 67mh 4wv8 2f99

medium System graph security Trivy conf 1.00 GHSA-cmwh-pvxp-8882: dompurify 3.4.7 — pnpm-lock.yaml

DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch) ## Summary DOMPurify 3.4.7 shipped a security fix ("permanent hook pollution") that makes a registered `uponSanitizeAttribute` hook's mutation of `data…

VulnGhsa cmwh pvxp 8882

medium System graph security Trivy conf 1.00 GHSA-frvp-7c67-39w9: @hono/node-server 1.19.14 — pnpm-lock.yaml

Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`) The same as the `hono` core [Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)](https://github.com/honojs/hono/security/advisories/GHSA-wwfh-h76j-fc44). ### Summary On Wind…

VulnGhsa frvp 7c67 39w9

medium System graph cicd CI/CD security conf 1.00 4 occurrences GitHub Action is tag-pinned rather than SHA-pinned

actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.

4 files, 4 locations

.github/workflows/_native-build.yml:59

.github/workflows/nix-build.yml:22

.github/workflows/pkg-pr-new.yml:22

.github/workflows/release.yml:25

CI/CD securitySupply chainGithub actions

medium System graph cicd CI/CD security conf 1.00 GitHub Actions workflow grants broad write permissions

CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions.

.github/workflows/docs-deploy.yml CI/CD securitySupply chainGithub actions

medium System graph cicd CI/CD security conf 1.00 GitHub Actions workflow grants broad write permissions

CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions.

.github/workflows/release.yml CI/CD securitySupply chainGithub actions

medium System graph security security conf 0.65 Insecure pattern 'vue_v_html' in apps/kimi-web/src/components/chat/MentionMenu.vue:83

Found a known-risky pattern (vue_v_html). Review and replace if possible.

apps/kimi-web/src/components/chat/MentionMenu.vue:83 Vue v html

medium System graph security security conf 0.65 Insecure pattern 'vue_v_html' in apps/kimi-web/src/components/chat/ToolRow.vue:57

Found a known-risky pattern (vue_v_html). Review and replace if possible.

apps/kimi-web/src/components/chat/ToolRow.vue:57 Vue v html

medium System graph security security conf 0.65 Insecure pattern 'vue_v_html' in apps/kimi-web/src/components/dialogs/SearchSessionsDialog.vue:161

Found a known-risky pattern (vue_v_html). Review and replace if possible.

apps/kimi-web/src/components/dialogs/SearchSessionsDialog.vue:161 Vue v html

medium System graph security security conf 0.65 Insecure pattern 'vue_v_html' in apps/kimi-web/src/components/FilePreview.vue:553

Found a known-risky pattern (vue_v_html). Review and replace if possible.

apps/kimi-web/src/components/FilePreview.vue:553 Vue v html

medium System graph quality Placeholder conf 1.00 Placeholder or mock-heavy implementation detected

Found 179 placeholder/mock markers across 92 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data.

Mock dataIncompleteGenerated repo pattern

medium System graph security Skillspector conf 0.50 SkillSpector E1 (data-exfil) in plugins/official/kimi-datasource/bin/kimi-datasource.mjs

https://api.kimi.com/ Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended. Skill: kimi-datasource Rule: E1 Category: data-exfil Severity: MEDIUM Confidence: 0.50 Remediation: Verify the destination URL is trusted and nece…

plugins/official/kimi-datasource/bin/kimi-datasource.mjs:23 Mcp skillData exfilE1

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency @hono/node-server 1.19.14: GHSA-frvp-7c67-39w9

OSV.dev reports `@hono/node-server` at version `1.19.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-frvp-7c67-39w9. Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`) Advisory: https://osv.dev/vulnerability/GHSA-frvp-7c67-39w9 Fix: upgrade …

apps/vis/server/package.json ScaOsvGhsa frvp 7c67 39w9

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency hono 4.12.14: GHSA-2gcr-mfcq-wcc3

OSV.dev reports `hono` at version `4.12.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-2gcr-mfcq-wcc3 (aka CVE-2026-47676). Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths Aliases: CVE-2026-47676 Advisory: https://osv.dev/vul…

apps/vis/server/package.json ScaOsvGhsa 2gcr mfcq wcc3

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency hono 4.12.14: GHSA-3hrh-pfw6-9m5x

OSV.dev reports `hono` at version `4.12.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-3hrh-pfw6-9m5x (aka CVE-2026-47675). Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection Aliases: CVE-2026-47675 Advisory: https://osv.dev/vulnerability/GHSA-3hrh-…

apps/vis/server/package.json ScaOsvGhsa 3hrh pfw6 9m5x

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency hono 4.12.14: GHSA-69xw-7hcm-h432

OSV.dev reports `hono` at version `4.12.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-69xw-7hcm-h432 (aka CVE-2026-44455). hono/jsx has Unvalidated JSX Tag Names that May Allow HTML Injection Aliases: CVE-2026-44455 Advisory: https://osv.dev/vulnerability/GHSA-69xw-7hcm-h432 Fix: upgrade…

apps/vis/server/package.json ScaOsvGhsa 69xw 7hcm h432

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency hono 4.12.14: GHSA-9vqf-7f2p-gf9v

OSV.dev reports `hono` at version `4.12.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-9vqf-7f2p-gf9v (aka CVE-2026-44456). Hono: bodyLimit() can be bypassed for chunked / unknown-length requests Aliases: CVE-2026-44456 Advisory: https://osv.dev/vulnerability/GHSA-9vqf-7f2p-gf9v Fix: upgr…

apps/vis/server/package.json ScaOsvGhsa 9vqf 7f2p gf9v

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency hono 4.12.14: GHSA-f577-qrjj-4474

OSV.dev reports `hono` at version `4.12.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-f577-qrjj-4474 (aka CVE-2026-47673). Hono: JWT middleware accepts any Authorization scheme, not only Bearer Aliases: CVE-2026-47673 Advisory: https://osv.dev/vulnerability/GHSA-f577-qrjj-4474 Fix: upgra…

apps/vis/server/package.json ScaOsvGhsa f577 qrjj 4474

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency hono 4.12.14: GHSA-hm8q-7f3q-5f36

OSV.dev reports `hono` at version `4.12.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-hm8q-7f3q-5f36. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-hm8q-7f3q-5f36 Fix: upgrade `hono` past the affected range per the advisory.

apps/vis/server/package.json ScaOsvGhsa hm8q 7f3q 5f36

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency hono 4.12.14: GHSA-hvrm-45r6-mjfj

OSV.dev reports `hono` at version `4.12.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-hvrm-45r6-mjfj. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-hvrm-45r6-mjfj Fix: upgrade `hono` past the affected range per the advisory.

apps/vis/server/package.json ScaOsvGhsa hvrm 45r6 mjfj

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency hono 4.12.14: GHSA-j6c9-x7qj-28xf

OSV.dev reports `hono` at version `4.12.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-j6c9-x7qj-28xf. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-j6c9-x7qj-28xf Fix: upgrade `hono` past the affected range per the advisory.

apps/vis/server/package.json ScaOsvGhsa j6c9 x7qj 28xf

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency hono 4.12.14: GHSA-p77w-8qqv-26rm

OSV.dev reports `hono` at version `4.12.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-p77w-8qqv-26rm. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-p77w-8qqv-26rm Fix: upgrade `hono` past the affected range per the advisory.

apps/vis/server/package.json ScaOsvGhsa p77w 8qqv 26rm

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency hono 4.12.14: GHSA-qp7p-654g-cw7p

OSV.dev reports `hono` at version `4.12.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-qp7p-654g-cw7p. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-qp7p-654g-cw7p Fix: upgrade `hono` past the affected range per the advisory.

apps/vis/server/package.json ScaOsvGhsa qp7p 654g cw7p

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency hono 4.12.14: GHSA-rv63-4mwf-qqc2

OSV.dev reports `hono` at version `4.12.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-rv63-4mwf-qqc2. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-rv63-4mwf-qqc2 Fix: upgrade `hono` past the affected range per the advisory.

apps/vis/server/package.json ScaOsvGhsa rv63 4mwf qqc2

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency hono 4.12.14: GHSA-w62v-xxxg-mg59

OSV.dev reports `hono` at version `4.12.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-w62v-xxxg-mg59. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-w62v-xxxg-mg59 Fix: upgrade `hono` past the affected range per the advisory.

apps/vis/server/package.json ScaOsvGhsa w62v xxxg mg59

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency hono 4.12.14: GHSA-wgpf-jwqj-8h8p

OSV.dev reports `hono` at version `4.12.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-wgpf-jwqj-8h8p. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-wgpf-jwqj-8h8p Fix: upgrade `hono` past the affected range per the advisory.

apps/vis/server/package.json ScaOsvGhsa wgpf jwqj 8h8p

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency hono 4.12.14: GHSA-wwfh-h76j-fc44

OSV.dev reports `hono` at version `4.12.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-wwfh-h76j-fc44. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-wwfh-h76j-fc44 Fix: upgrade `hono` past the affected range per the advisory.

apps/vis/server/package.json ScaOsvGhsa wwfh h76j fc44

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency hono 4.12.14: GHSA-xgm2-5f3f-mvvc

OSV.dev reports `hono` at version `4.12.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-xgm2-5f3f-mvvc. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-xgm2-5f3f-mvvc Fix: upgrade `hono` past the affected range per the advisory.

apps/vis/server/package.json ScaOsvGhsa xgm2 5f3f mvvc

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency hono 4.12.14: GHSA-xrhx-7g5j-rcj5

OSV.dev reports `hono` at version `4.12.14` (resolved in `pnpm-lock.yaml`) is affected by GHSA-xrhx-7g5j-rcj5. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-xrhx-7g5j-rcj5 Fix: upgrade `hono` past the affected range per the advisory.

apps/vis/server/package.json ScaOsvGhsa xrhx 7g5j rcj5

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency js-yaml 3.14.2: GHSA-h67p-54hq-rp68

OSV.dev reports `js-yaml` at version `3.14.2` (resolved in `pnpm-lock.yaml`) is affected by GHSA-h67p-54hq-rp68 (aka CVE-2026-53550). JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases Aliases: CVE-2026-53550 Advisory: https://osv.dev/vulnerability/GHSA-h67p-54hq-rp68 Fi…

pnpm-lock.yaml ScaOsvGhsa h67p 54hq rp68

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency js-yaml 4.1.1: GHSA-h67p-54hq-rp68

OSV.dev reports `js-yaml` at version `4.1.1` (resolved in `pnpm-lock.yaml`) is affected by GHSA-h67p-54hq-rp68 (aka CVE-2026-53550). JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases Aliases: CVE-2026-53550 Advisory: https://osv.dev/vulnerability/GHSA-h67p-54hq-rp68 Fix…

packages/agent-core-v2/package.json ScaOsvGhsa h67p 54hq rp68

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency tar 7.5.13: GHSA-gvwx-54wh-qm9j

OSV.dev reports `tar` at version `7.5.13` (resolved in `pnpm-lock.yaml`) is affected by GHSA-gvwx-54wh-qm9j (aka CVE-2026-59875). node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records Aliases: CVE-2026-59875 Advisory: https://osv.dev/vulnerability/GHSA-gvwx-54wh-qm9j Fix: upg…

packages/agent-core-v2/package.json ScaOsvGhsa gvwx 54wh qm9j

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency tar 7.5.13: GHSA-vmf3-w455-68vh

OSV.dev reports `tar` at version `7.5.13` (resolved in `pnpm-lock.yaml`) is affected by GHSA-vmf3-w455-68vh. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-vmf3-w455-68vh Fix: upgrade `tar` past the affected range per the advisory.

packages/agent-core-v2/package.json ScaOsvGhsa vmf3 w455 68vh

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency tar 7.5.13: GHSA-w8wr-v893-vjvp

OSV.dev reports `tar` at version `7.5.13` (resolved in `pnpm-lock.yaml`) is affected by GHSA-w8wr-v893-vjvp. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-w8wr-v893-vjvp Fix: upgrade `tar` past the affected range per the advisory.

packages/agent-core-v2/package.json ScaOsvGhsa w8wr v893 vjvp

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency undici 7.27.1: GHSA-hm92-r4w5-c3mj

OSV.dev reports `undici` at version `7.27.1` (resolved in `pnpm-lock.yaml`) is affected by GHSA-hm92-r4w5-c3mj. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-hm92-r4w5-c3mj Fix: upgrade `undici` past the affected range per the advisory.

packages/agent-core-v2/package.json ScaOsvGhsa hm92 r4w5 c3mj

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency undici 7.27.1: GHSA-p88m-4jfj-68fv

OSV.dev reports `undici` at version `7.27.1` (resolved in `pnpm-lock.yaml`) is affected by GHSA-p88m-4jfj-68fv. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-p88m-4jfj-68fv Fix: upgrade `undici` past the affected range per the advisory.

packages/agent-core-v2/package.json ScaOsvGhsa p88m 4jfj 68fv

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency undici 7.27.1: GHSA-pr7r-676h-xcf6

OSV.dev reports `undici` at version `7.27.1` (resolved in `pnpm-lock.yaml`) is affected by GHSA-pr7r-676h-xcf6. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-pr7r-676h-xcf6 Fix: upgrade `undici` past the affected range per the advisory.

packages/agent-core-v2/package.json ScaOsvGhsa pr7r 676h xcf6

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency undici 7.27.1: GHSA-vmh5-mc38-953g

OSV.dev reports `undici` at version `7.27.1` (resolved in `pnpm-lock.yaml`) is affected by GHSA-vmh5-mc38-953g. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-vmh5-mc38-953g Fix: upgrade `undici` past the affected range per the advisory.

packages/agent-core-v2/package.json ScaOsvGhsa vmh5 mc38 953g

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency undici 7.27.1: GHSA-vxpw-j846-p89q

OSV.dev reports `undici` at version `7.27.1` (resolved in `pnpm-lock.yaml`) is affected by GHSA-vxpw-j846-p89q. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-vxpw-j846-p89q Fix: upgrade `undici` past the affected range per the advisory.

packages/agent-core-v2/package.json ScaOsvGhsa vxpw j846 p89q

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency vite 5.4.21: GHSA-4w7w-66w2-5vf9

OSV.dev reports `vite` at version `5.4.21` (resolved in `pnpm-lock.yaml`) is affected by GHSA-4w7w-66w2-5vf9 (aka CVE-2026-39365). Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling Aliases: CVE-2026-39365 Advisory: https://osv.dev/vulnerability/GHSA-4w7w-66w2-5vf9 Fix: upgrade `…

pnpm-lock.yaml ScaOsvGhsa 4w7w 66w2 5vf9

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency vite 5.4.21: GHSA-v6wh-96g9-6wx3

OSV.dev reports `vite` at version `5.4.21` (resolved in `pnpm-lock.yaml`) is affected by GHSA-v6wh-96g9-6wx3 (aka CVE-2026-53632). launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows Aliases: CVE-2026-53632 Advisory: https://osv.dev/vulnerability/GHSA-v6wh-96g9-6wx3 Fix: upgrad…

pnpm-lock.yaml ScaOsvGhsa v6wh 96g9 6wx3

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency vite 8.0.8: GHSA-v6wh-96g9-6wx3

OSV.dev reports `vite` at version `8.0.8` (resolved in `pnpm-lock.yaml`) is affected by GHSA-v6wh-96g9-6wx3 (aka CVE-2026-53632). launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows Aliases: CVE-2026-53632 Advisory: https://osv.dev/vulnerability/GHSA-v6wh-96g9-6wx3 Fix: upgrade…

pnpm-lock.yaml ScaOsvGhsa v6wh 96g9 6wx3

medium System graph dependencies dependencies conf 1.00 Vulnerable dependency ws 8.20.0: GHSA-58qx-3vcg-4xpx

OSV.dev reports `ws` at version `8.20.0` (resolved in `pnpm-lock.yaml`) is affected by GHSA-58qx-3vcg-4xpx (aka CVE-2026-45736). ws: Uninitialized memory disclosure Aliases: CVE-2026-45736 Advisory: https://osv.dev/vulnerability/GHSA-58qx-3vcg-4xpx Fix: upgrade `ws` past the affected range per th…

apps/kimi-web/package.json ScaOsvGhsa 58qx 3vcg 4xpx

low System graph quality Maintenance conf 1.00 158 TODO/FIXME markers

High count of TODO/FIXME/HACK markers — track them as issues so they're not forgotten.

low System graph api Wiring conf 1.00 3 backend endpoints not called by scanned frontend

No scanned frontend call matched these backend routes. Sample: GET /asyncapi.json, GET /openapi.json, GET /*. This is fine when endpoints serve external clients (mobile apps, SDKs, third-party integrations, server-side webhooks). Otherwise document consumers or remove dead routes.

Unused endpoint

low System graph security Trivy conf 1.00 CVE-2026-11525: undici 7.27.1 — pnpm-lock.yaml

undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header Impact: When undici parses a Set-Cookie header, it accepts any SameSite attribute value that contains Strict, Lax, or None as a substring, rather than the case-insensitive exact match specified by RFC…

VulnCve 2026 11525

low System graph security Trivy conf 1.00 CVE-2026-12590: body-parser 2.2.2 — pnpm-lock.yaml

body-parser: body-parser: Denial of Service via invalid limit option Impact: In body-parser versions prior to 1.20.6 (1.x line) and 2.3.0 (2.x line), when the parser is configured with an invalid limit option value such as an unparseable string or NaN, bytes.parse returns null and the request body…

VulnCve 2026 12590

low System graph security Trivy conf 1.00 CVE-2026-44459: hono 4.12.14 — pnpm-lock.yaml

Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify() Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, improper validation of the JWT NumericDate claims exp, nbf, and iat in hono/utils/jwt allows tokens with non-sp…

VulnCve 2026 44459

low System graph security Trivy conf 1.00 CVE-2026-49356: @babel/core 7.29.0 — pnpm-lock.yaml

@babel/core: @babel/core: Arbitrary file read via sourceMappingURL comment Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted cod…

VulnCve 2026 49356

low System graph security Trivy conf 1.00 CVE-2026-53663: react-router 7.14.1 — pnpm-lock.yaml

react-router: @remix-run/server-runtime: React Router: Insufficient CSRF protection allows integrity impact React Router is a router for React. From 7.12.0 until 7.15.1, certain CSRF checks in React Router v7 Framework Mode were insufficient and run on POST requests, but were bypassed on PUT/PATCH…

VulnCve 2026 53663

low System graph security Trivy conf 1.00 CVE-2026-6733: undici 7.27.1 — pnpm-lock.yaml

undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. Impact: Undici's HTTP/1.1 client is vulnerable to response queue poisoning on reused keep-alive sockets. An attacker-controlled upstream server can inject an unsolicited HTTP/1.1 response…

VulnCve 2026 6733

low System graph frontend Frontend quality conf 0.85 Debug `console.log` remains in browser-facing code — apps/vscode/webview-ui/src/App.tsx:26

Remove debug output or route intentional diagnostics through the project's structured logger. Browser console output can expose state and create noise; server and CLI output are outside this rule's scope. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

apps/vscode/webview-ui/src/App.tsx:26 Fq console leak

low System graph frontend Frontend quality conf 0.85 Debug `console.log` remains in browser-facing code — apps/vscode/webview-ui/src/components/DisplayBlocks.tsx:166

Remove debug output or route intentional diagnostics through the project's structured logger. Browser console output can expose state and create noise; server and CLI output are outside this rule's scope. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

apps/vscode/webview-ui/src/components/DisplayBlocks.tsx:166 Fq console leak

low System graph frontend Frontend quality conf 0.85 Debug `console.log` remains in browser-facing code — apps/vscode/webview-ui/src/components/SessionList.tsx:112

Remove debug output or route intentional diagnostics through the project's structured logger. Browser console output can expose state and create noise; server and CLI output are outside this rule's scope. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

apps/vscode/webview-ui/src/components/SessionList.tsx:112 Fq console leak

low System graph frontend Frontend quality conf 0.85 Debug `console.log` remains in browser-facing code — apps/vscode/webview-ui/src/services/bridge.ts:53

Remove debug output or route intentional diagnostics through the project's structured logger. Browser console output can expose state and create noise; server and CLI output are outside this rule's scope. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

apps/vscode/webview-ui/src/services/bridge.ts:53 Fq console leak

low System graph quality Debug conf 1.00 Debug logging residue appears in source files

Found 304 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup.

CleanupRepo hardeningGenerated repo pattern

low System graph dependencies dependencies conf 0.90 Dependency @agentclientprotocol/sdk is a major version behind

`@agentclientprotocol/sdk` is pinned at `0.23.0` in `packages/acp-adapter/package.json` while the latest release on the npm registry is `1.3.0` — 1 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and up…

packages/acp-adapter/package.json FreshnessOutdated

low System graph dependencies dependencies conf 0.90 Dependency @google/genai is a major version behind

`@google/genai` is pinned at `1.49.0` in `packages/agent-core-v2/package.json` while the latest release on the npm registry is `2.13.0` — 1 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `@…

packages/agent-core-v2/package.json FreshnessOutdated

low System graph dependencies dependencies conf 0.90 Dependency @hono/node-server is a major version behind

`@hono/node-server` is pinned at `1.13.7` in `apps/vis/server/package.json` while the latest release on the npm registry is `2.0.11` — 1 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `@hon…

apps/vis/server/package.json FreshnessOutdated

low System graph dependencies dependencies conf 0.90 Dependency bcryptjs is a major version behind

`bcryptjs` is pinned at `2.4.3` in `packages/kap-server/package.json` while the latest release on the npm registry is `3.0.3` — 1 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `bcryptjs` t…

packages/kap-server/package.json FreshnessOutdated

low System graph dependencies dependencies conf 0.90 Dependency chokidar is a major version behind

`chokidar` is pinned at `4.0.3` in `packages/agent-core-v2/package.json` while the latest release on the npm registry is `5.0.0` — 1 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `chokidar…

packages/agent-core-v2/package.json FreshnessOutdated

low System graph dependencies dependencies conf 0.90 Dependency diff is a major version behind

`diff` is pinned at `8.0.2` in `apps/vscode/package.json` while the latest release on the npm registry is `9.0.0` — 1 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `diff` to `9.0.0`.

apps/vscode/package.json FreshnessOutdated

low System graph dependencies dependencies conf 0.90 Dependency js-yaml is a major version behind

`js-yaml` is pinned at `4.1.1` in `packages/agent-core-v2/package.json` while the latest release on the npm registry is `5.2.1` — 1 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `js-yaml` …

packages/agent-core-v2/package.json FreshnessOutdated

low System graph security Trivy conf 1.00 DS-0026: No HEALTHCHECK defined — packages/klient/Dockerfile

No HEALTHCHECK defined Add HEALTHCHECK instruction in your Dockerfile Rule: DS-0026 Severity: LOW Target: packages/klient/Dockerfile

Misconfig

low System graph security Trivy conf 1.00 GHSA-c2j3-45gr-mqc4: dompurify 3.4.7 — pnpm-lock.yaml

DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements. ## Summary There is a possible hook-policy inconsistency in DOMPurify 3.4.11 involving `CUSTOM_ELEMENT_HANDLING`. When a custom element is allowed via `CUSTOM_ELEMENT_HANDLING.tagNameCheck`, it app…

VulnGhsa c2j3 45gr mqc4

low System graph security Trivy conf 1.00 GHSA-gvmj-g25r-r7wr: dompurify 3.4.7 — pnpm-lock.yaml

DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside <template> content when using DOM output modes ## Summary When DOMPurify is configured with both `SAFE_FOR_TEMPLATES: true` and `RETURN_DOM: true` (or `IN_PLACE: true`), an attacker can inject template express…

VulnGhsa gvmj g25r r7wr

low System graph security Trivy conf 1.00 GHSA-vxr8-fq34-vvx9: dompurify 3.4.7 — pnpm-lock.yaml

DOMPurify: Trusted Types policy survives `clearConfig()` and can poison later `RETURN_TRUSTED_TYPE` output ## Impact A DOMPurify instance that is reused across trust boundaries can stay bound to a previously supplied `TRUSTED_TYPES_POLICY` even after `clearConfig()` is called. A later caller that…

VulnGhsa vxr8 fq34 vvx9

low System graph cicd CI/CD security conf 1.00 GitHub Action is tag-pinned rather than SHA-pinned

actions/upload-pages-artifact@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.

.github/workflows/docs-deploy.yml:37 CI/CD securitySupply chainGithub actions

low System graph frontend Frontend quality conf 0.85 Icon-only button without accessible name — apps/kimi-web/src/components/chat/Composer.vue:872

A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label

apps/kimi-web/src/components/chat/Composer.vue:872 Fq button no label

low System graph frontend Frontend quality conf 0.85 Icon-only button without accessible name — apps/kimi-web/src/debug/KapDebugView.vue:163

A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label

apps/kimi-web/src/debug/KapDebugView.vue:163 Fq button no label

low System graph frontend Frontend quality conf 0.85 Icon-only button without accessible name — packages/agent-core-v2/scripts/dep-graph/web/src/GraphView.tsx:799

A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label

packages/agent-core-v2/scripts/dep-graph/web/src/GraphView.tsx:799 Fq button no label

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: apps/kimi-code/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

apps/kimi-code/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: apps/kimi-web/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

apps/kimi-web/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: apps/vis/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

apps/vis/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: apps/vis/server/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

apps/vis/server/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: apps/vis/web/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

apps/vis/web/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: apps/vscode/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

apps/vscode/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: docs/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

docs/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: packages/acp-adapter/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

packages/acp-adapter/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: packages/agent-core-v2/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

packages/agent-core-v2/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: packages/agent-core/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

packages/agent-core/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: packages/kaos/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

packages/kaos/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: packages/kap-server/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

packages/kap-server/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: packages/klient/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

packages/klient/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: packages/kosong/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

packages/kosong/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: packages/migration-legacy/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

packages/migration-legacy/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: packages/node-sdk/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

packages/node-sdk/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: packages/oauth/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

packages/oauth/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: packages/pi-tui/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

packages/pi-tui/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: packages/protocol/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

packages/protocol/package.json LockfileReproducibilityGenerated repo pattern

low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: packages/transcript/package.json

`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.

packages/transcript/package.json LockfileReproducibilityGenerated repo pattern

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `authLegacy` in packages/agent-core-v2/src/app/authLegacy/authLegacy.ts:2

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `authLegacy` in packages/agent-core-v2/src/app/authLegacy/authLegacyService.ts:2

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `authLegacy` in packages/kap-server/src/routes/auth.ts:16

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `fromLegacy` in packages/agent-core/src/utils/completion-budget.ts:28

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `hasLegacy` in apps/vscode/src/managers/baseline.manager.ts:219

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `hasOld` in apps/vscode/webview-ui/src/components/DisplayBlocks.tsx:90

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `listLegacy` in packages/agent-core-v2/src/app/sessionIndex/sessionIndexService.ts:113

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `messageLegacy` in packages/agent-core-v2/src/agent/contextMemory/protocolMessage.ts:5

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `messageLegacy` in packages/agent-core-v2/src/app/messageLegacy/errors.ts:2

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `messageLegacy` in packages/agent-core-v2/src/app/messageLegacy/messageLegacy.ts:2

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `messageLegacy` in packages/agent-core-v2/src/app/messageLegacy/messageLegacyService.ts:2

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `messageLegacy` in packages/agent-core-v2/src/errors.ts:22

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `messageLegacy` in packages/kap-server/src/routes/messages.ts:5

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `sessionLegacy` in packages/agent-core-v2/scripts/check-domain-layers.mjs:243

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `sessionLegacy` in packages/agent-core-v2/src/agent/contextMemory/messageProjection.ts:8

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `sessionLegacy` in packages/agent-core-v2/src/agent/rpc/core-api.ts:32

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `sessionLegacy` in packages/agent-core-v2/src/app/sessionLegacy/sessionLegacy.ts:2

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `sessionLegacy` in packages/agent-core-v2/src/app/sessionLegacy/sessionLegacyService.ts:2

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `sessionLegacy` in packages/agent-core-v2/src/app/sessionLegacy/sessionProtocol.ts:2

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `sessionLegacy` in packages/agent-core-v2/src/index.ts:291

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `sessionLegacy` in packages/agent-core-v2/src/session/errors.ts:3

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `sessionLegacy` in packages/kap-server/src/protocol/rest-prompt.ts:27

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `sessionLegacy` in packages/kap-server/src/protocol/rest-session.ts:27

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `sessionLegacy` in packages/kap-server/src/protocol/session.ts:9

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `subscribe_v2` in apps/kimi-inspect/src/transcript/ws.ts:10

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `subscribe_v2` in packages/kap-server/src/protocol/ws-control.ts:169

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `subscribe_v2` in packages/kap-server/src/transport/ws/v1/wsConnectionV1.ts:3

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `subscribe_v2` in packages/transcript/src/contract/schema.ts:477

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `wireProtocolFromOld` in packages/migration-legacy/src/sessions/migrate-one.ts:118

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `wireProtocolFromOld` in packages/migration-legacy/src/sessions/state-writer.ts:10

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph cicd CI/CD security conf 1.00 package.json defines install-time lifecycle scripts

preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access.

package.json CI/CD securitySupply chainNpm

low System graph cicd CI/CD security conf 1.00 package.json defines install-time lifecycle scripts

preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access.

apps/kimi-code/package.json CI/CD securitySupply chainNpm

low System graph frontend Frontend quality conf 0.85 React Flow <Controls> without dark theming — packages/agent-core-v2/scripts/dep-graph/web/src/GraphView.tsx:718

`<Controls>` ships with white buttons. Override `.react-flow__controls` and `.react-flow__controls-button` in your stylesheet or pass a styled wrapper. Why: P1 in CHECKLIST.md — vendor defaults bleed light through. Rule id: fq.controls.no-bg

packages/agent-core-v2/scripts/dep-graph/web/src/GraphView.tsx:718 Fq controls no bg

low System graph quality Complexity conf 1.00 Very large file: apps/kimi-code/src/tui/components/messages/agent-swarm-progress.ts (1727 lines)