Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

wonderwhy-er/DesktopCommanderMCP

https://github.com/wonderwhy-er/DesktopCommanderMCP · scanned 2026-07-23 19:48 UTC (1 month, 2 weeks ago)

212 raw signals (0 security + 212 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 month, 2 weeks ago · v7 · last Δ +0.7 (diff) · 212 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
63.9
/100
Security checks
64
0 findings
System graph
64
90.0% cov · 212 findings
Critical
3
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 3 High 84 Medium 99 Low 20 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 212 Crowd 0 Layer: Frontend 5 Security 154 Quality 13 Hardware 2 Cicd 2 Dependencies 36
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 63.9/100 with 90.0% coverage. It contains 1634 nodes across 1 cross-layer flows, written primarily in mixed languages. Engine surfaced 212 findings — concentrated in security (154), dependencies (36), quality (13). Risk profile is high: 3 critical, 84 high, 99 medium. Recommended next step: open the security layer findings first — that's where the highest-impact wins live.

Showing 206 of 212 actionable findings. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

critical System graph security Trivy conf 1.00 CVE-2026-27699: basic-ftp 5.1.0 — package-lock.json
basic-ftp: basic-ftp: File overwrite due to path traversal The `basic-ftp` FTP client library for Node.js contains a path traversal vulnerability (CWE-22) in versions prior to 5.2.0 in the `downloadToDir()` method. A malicious FTP server can send directory listings with filenames containing path t…
VulnCve 2026 27699
critical System graph security Trivy conf 1.00 CVE-2026-59873: tar 6.2.1 — package-lock.json
tar: node-tar: Denial of Service via crafted gzip bomb node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, a…
VulnCve 2026 59873
critical System graph dependencies dependencies conf 0.90 Vulnerable dependency basic-ftp 5.1.0: GHSA-5rq4-664w-9x2c
OSV.dev reports `basic-ftp` at version `5.1.0` (resolved in `package-lock.json`) is affected by GHSA-5rq4-664w-9x2c (aka CVE-2026-27699). Note: `basic-ftp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. Basic FTP has Path Traversal Vulnerability in …
package-lock.json ScaOsvGhsa 5rq4 664w 9x2c
high System graph security Trivy conf 1.00 CVE-2026-0621: @modelcontextprotocol/sdk 1.25.1 — package-lock.json
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability Anthropic's MCP TypeScript SDK versions up to and including 1.25.1 contain a regular expression denial of service (ReDoS) vulnerability in the UriTemplate class when processing RFC 6570 exploded array patterns. The dynamically generated regu…
VulnCve 2026 0621
high System graph security Trivy conf 1.00 CVE-2026-13149: brace-expansion 1.1.12 — package-lock.json
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a…
VulnCve 2026 13149
high System graph security Trivy conf 1.00 CVE-2026-13149: brace-expansion 2.0.2 — package-lock.json
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a…
VulnCve 2026 13149
high System graph security Trivy conf 1.00 CVE-2026-13676: fast-uri 3.1.0 — package-lock.json
fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, …
VulnCve 2026 13676
high System graph security Trivy conf 1.00 CVE-2026-16221: fast-uri 3.1.0 — package-lock.json
Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x ... Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2) do not treat a literal backslash character (U+005C) as an authority delimiter. Node's native WHATWG URL pa…
VulnCve 2026 16221
high System graph security Trivy conf 1.00 CVE-2026-22817: hono 4.11.3 — package-lock.json
Hono JWT Middleware's JWT Algorithm Confusion via Unsafe Default (HS256) Allows Token Forgery and Auth Bypass Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.11.4, there is a flaw in Hono’s JWK/JWKS JWT verification middleware allowed the JWT header…
VulnCve 2026 22817
high System graph security Trivy conf 1.00 CVE-2026-22818: hono 4.11.3 — package-lock.json
Hono JWK Auth Middleware has JWT algorithm confusion when JWK lacks "alg" (untrusted header.alg fallback) Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.11.4, there is a flaw in Hono’s JWK/JWKS JWT verification middleware allowed the algorithm spec…
VulnCve 2026 22818
high System graph security Trivy conf 1.00 CVE-2026-23745: tar 6.2.1 — package-lock.json
node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives node-tar is a Tar for Node.js. The node-tar library (<= 7.5.2) fails to sanitize the linkpath of Link (hardlink) and SymbolicLink entries when preservePaths is false (the default secure be…
VulnCve 2026 23745
high System graph security Trivy conf 1.00 CVE-2026-23950: tar 6.2.1 — package-lock.json
node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the `path-reservations` system. On c…
VulnCve 2026 23950
high System graph security Trivy conf 1.00 CVE-2026-24842: tar 6.2.1 — package-lock.json
node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink crea…
VulnCve 2026 24842
high System graph security Trivy conf 1.00 CVE-2026-25536: @modelcontextprotocol/sdk 1.25.1 — package-lock.json
@modelcontextprotocol/sdk: @modelcontextprotocol/sdk cross-client data leak MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.10.0 to 1.25.3, cross-client response data leak when a single McpServer/Server and transport instance is reus…
VulnCve 2026 25536
high System graph security Trivy conf 1.00 CVE-2026-26960: tar 6.2.1 — package-lock.json
node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation node-tar is a full-featured Tar for Node.js. When using default options in versions 7.5.7 and below, an attacker-controlled archive can create a hardlink inside the extraction directory that points to a file outs…
VulnCve 2026 26960
high System graph security Trivy conf 1.00 CVE-2026-26996: minimatch 3.1.2 — package-lock.json
minimatch: minimatch: Denial of Service via specially crafted glob patterns minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains …
VulnCve 2026 26996
high System graph security Trivy conf 1.00 CVE-2026-26996: minimatch 5.1.6 — package-lock.json
minimatch: minimatch: Denial of Service via specially crafted glob patterns minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains …
VulnCve 2026 26996
high System graph security Trivy conf 1.00 CVE-2026-26996: minimatch 9.0.5 — package-lock.json
minimatch: minimatch: Denial of Service via specially crafted glob patterns minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains …
VulnCve 2026 26996
high System graph security Trivy conf 1.00 CVE-2026-27903: minimatch 3.1.2 — package-lock.json
minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3, `matchOne(…
VulnCve 2026 27903
high System graph security Trivy conf 1.00 CVE-2026-27903: minimatch 5.1.6 — package-lock.json
minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3, `matchOne(…
VulnCve 2026 27903
high System graph security Trivy conf 1.00 CVE-2026-27903: minimatch 9.0.5 — package-lock.json
minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3, `matchOne(…
VulnCve 2026 27903
high System graph security Trivy conf 1.00 CVE-2026-27904: minimatch 3.1.2 — package-lock.json
minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs prod…
VulnCve 2026 27904
high System graph security Trivy conf 1.00 CVE-2026-27904: minimatch 5.1.6 — package-lock.json
minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs prod…
VulnCve 2026 27904
high System graph security Trivy conf 1.00 CVE-2026-27904: minimatch 9.0.5 — package-lock.json
minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs prod…
VulnCve 2026 27904
high System graph security Trivy conf 1.00 CVE-2026-29045: hono 4.11.3 — package-lock.json
Hono vulnerable to arbitrary file access via serveStatic vulnerability Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, when using serveStatic together with route-based middleware protections (e.g. app.use('/admin/*', ...)), inconsiste…
VulnCve 2026 29045
high System graph security Trivy conf 1.00 CVE-2026-29087: @hono/node-server 1.19.7 — package-lock.json
@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware @hono/node-server allows running the Hono application on Node.js. Prior to version 1.19.10, when using @hono/node-server's static file serving together with route-based middleware p…
VulnCve 2026 29087
high System graph security Trivy conf 1.00 CVE-2026-29786: tar 6.2.1 — package-lock.json
node-tar: hardlink path traversal via drive-relative linkpath node-tar is a full-featured Tar for Node.js. Prior to version 7.5.10, tar can be tricked into creating a hardlink that points outside the extraction directory by using a drive-relative link target such as C:../target.txt, which enables …
VulnCve 2026 29786
high System graph security Trivy conf 1.00 CVE-2026-31802: tar 6.2.1 — package-lock.json
tar: tar: File overwrite via drive-relative symlink traversal node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar (npm) can be tricked into creating a symlink that points outside the extraction directory by using a drive-relative symlink target such as C:../../../target.txt, …
VulnCve 2026 31802
high System graph security Trivy conf 1.00 CVE-2026-33671: picomatch 2.3.1 — package-lock.json
picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) when processing crafted extglob patterns. Certain pattern…
VulnCve 2026 33671
high System graph security Trivy conf 1.00 CVE-2026-41324: basic-ftp 5.1.0 — package-lock.json
basic-ftp: basic-ftp: Denial of Service via unbounded memory growth from malicious directory listings basic-ftp is an FTP client for Node.js. Versions prior to 5.3.0 are vulnerable to denial of service through unbounded memory growth while processing directory listings from a remote FTP server. A …
VulnCve 2026 41324
high System graph security Trivy conf 1.00 CVE-2026-44240: basic-ftp 5.1.0 — package-lock.json
basic-ftp: basic-ftp: Client-side Denial of Service via unterminated multiline FTP responses basic-ftp is an FTP client for Node.js. Prior to 5.3.1, basic-ftp is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compromised FTP server …
VulnCve 2026 44240
high System graph security Trivy conf 1.00 CVE-2026-44705: tmp 0.2.5 — package-lock.json
tmp is a temporary file and directory creator for node.js. Prior to 0. ... tmp is a temporary file and directory creator for node.js. Prior to 0.2.6, the tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary directory when untrusted data flows into the…
VulnCve 2026 44705
high System graph security Trivy conf 1.00 CVE-2026-4867: path-to-regexp 0.1.12 — package-lock.json
path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters Impact: A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period (.). For example, /:a-:b-:c o…
VulnCve 2026 4867
high System graph security Trivy conf 1.00 CVE-2026-48779: ws 8.18.3 — package-lock.json
ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memor…
VulnCve 2026 48779
high System graph security Trivy conf 1.00 CVE-2026-48801: linkify-it 5.0.0 — package-lock.json
linkify-it: linkify-it: Denial of Service via algorithmic complexity vulnerability linkify-it is a links recognition library with full Unicode support. Prior to 5.0.1, LinkifyIt.prototype.match, the package's primary public API, has O(N²) algorithmic complexity for inputs containing many fuzzy lin…
VulnCve 2026 48801
high System graph security Trivy conf 1.00 CVE-2026-4926: path-to-regexp 8.3.0 — package-lock.json
path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, cau…
VulnCve 2026 4926
high System graph security Trivy conf 1.00 CVE-2026-54290: hono 4.11.3 — package-lock.json
hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, with credentials: true and no explicit origin (the default wildcard), the CORS Middleware reflec…
VulnCve 2026 54290
high System graph security Trivy conf 1.00 CVE-2026-59869: js-yaml 3.14.2 — package-lock.json
js-yaml: js-yaml: Denial of Service via crafted YAML documents js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where…
VulnCve 2026 59869
high System graph security Trivy conf 1.00 CVE-2026-59869: js-yaml 4.1.1 — package-lock.json
js-yaml: js-yaml: Denial of Service via crafted YAML documents js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where…
VulnCve 2026 59869
high System graph security Trivy conf 1.00 CVE-2026-59874: tar 6.2.1 — package-lock.json
tar: Node-tar: Denial of Service via malformed tar archive header node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeated…
VulnCve 2026 59874
high System graph security Trivy conf 1.00 CVE-2026-59887: linkify-it 5.0.0 — package-lock.json
linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used by .test() and .match() can be invoked at every mailto: occurrence and scan the remaini…
VulnCve 2026 59887
high System graph security Trivy conf 1.00 CVE-2026-6321: fast-uri 3.1.0 — package-lock.json
fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated like real slashes and parent-directory r…
VulnCve 2026 6321
high System graph security Trivy conf 1.00 CVE-2026-6322: fast-uri 3.1.0 — package-lock.json
fast-uri: fast-uri: URI authority bypass due to improper delimiter handling fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a…
VulnCve 2026 6322
high System graph security Trivy conf 1.00 DS-0002: Image user should not be 'root' — Dockerfile
Image user should not be 'root' Specify at least 1 USER command in Dockerfile with non-root user as argument Rule: DS-0002 Severity: HIGH Target: Dockerfile
Misconfig
high System graph security Trivy conf 1.00 GHSA-6v7q-wjvx-w8wg: basic-ftp 5.1.0 — package-lock.json
basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands ## Summary basic-ftp's CRLF injection protection (added in commit 2ecc8e2 for GHSA-chqc-8p9q-pq6q) is incomplete. Two code paths bypass the `protectWhitespace()` control charact…
VulnGhsa 6v7q wjvx w8wg
high System graph security Trivy conf 1.00 GHSA-f88m-g3jw-g9cj: sharp 0.34.5 — package-lock.json
sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 ### Impact A number of vulnerabilities, two rated as "High" severity using CVSSv4, have been discovered and fixed in the upstream libvips dependency. Those processing untrusted input with v…
VulnGhsa f88m g3jw g9cj
high System graph security security conf 1.00 Insecure pattern 'exec_used' in setup-claude-server.js:128
Found a known-risky pattern (exec_used). Review and replace if possible.
setup-claude-server.js:128 Exec used
high System graph security security conf 1.00 Insecure pattern 'exec_used' in uninstall-claude-server.js:86
Found a known-risky pattern (exec_used). Review and replace if possible.
uninstall-claude-server.js:86 Exec used
high System graph security security conf 0.90 Insecure pattern 'node_child_process' in scripts/build-mcpb.cjs:16
Found a known-risky pattern (node_child_process). Review and replace if possible.
scripts/build-mcpb.cjs:16 Node child process
high System graph security security conf 0.90 Insecure pattern 'node_child_process' in scripts/download-all-ripgrep.cjs:117
Found a known-risky pattern (node_child_process). Review and replace if possible.
scripts/download-all-ripgrep.cjs:117 Node child process
high System graph security security conf 0.90 Insecure pattern 'node_child_process' in scripts/publish-release.cjs:17
Found a known-risky pattern (node_child_process). Review and replace if possible.
scripts/publish-release.cjs:17 Node child process
high System graph security security conf 0.90 Insecure pattern 'node_child_process' in setup-claude-server.js:8
Found a known-risky pattern (node_child_process). Review and replace if possible.
setup-claude-server.js:8 Node child process
high System graph security security conf 0.90 Insecure pattern 'node_child_process' in src/utils/ripgrep-resolver.ts:1
Found a known-risky pattern (node_child_process). Review and replace if possible.
src/utils/ripgrep-resolver.ts:1 Node child process
high System graph security security conf 0.90 Insecure pattern 'node_child_process' in src/utils/system-info.ts:4
Found a known-risky pattern (node_child_process). Review and replace if possible.
src/utils/system-info.ts:4 Node child process
high System graph security security conf 0.90 Insecure pattern 'node_child_process' in uninstall-claude-server.js:8
Found a known-risky pattern (node_child_process). Review and replace if possible.
uninstall-claude-server.js:8 Node child process
high System graph security Skillspector conf 0.90 SkillSpector SC2 (supply-chain) in plugins/claude/skills/ai-tools-setup/references/hermes.md
curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash Remote code is downloaded and executed. This bypasses code review and could introduce malicious code. Skill: ai-tools-setup Rule: SC2 Category: supply-chain Severity: HIGH Confidence: 0.90 Remediation: Avoid downloading and exe…
plugins/claude/skills/ai-tools-setup/references/hermes.md:26 Mcp skillSupply chainSc2
high System graph security Skillspector conf 0.90 SkillSpector SC2 (supply-chain) in plugins/claude/skills/terminal/SKILL.md
curl / HTTP**: fine for inspection (`curl -i https://...`). Be careful with anything that pipes a downloaded script straight into a shell (`curl ... | sh Remote code is downloaded and executed. This bypasses code review and could introduce malicious code. Skill: terminal Rule: SC2 Category: …
plugins/claude/skills/terminal/SKILL.md:110 Mcp skillSupply chainSc2
high System graph security Skillspector conf 0.90 SkillSpector SC2 (supply-chain) in plugins/cursor/skills/ai-tools-setup/references/hermes.md
curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash Remote code is downloaded and executed. This bypasses code review and could introduce malicious code. Skill: ai-tools-setup Rule: SC2 Category: supply-chain Severity: HIGH Confidence: 0.90 Remediation: Avoid downloading and exe…
plugins/cursor/skills/ai-tools-setup/references/hermes.md:26 Mcp skillSupply chainSc2
high System graph security Skillspector conf 0.90 SkillSpector SC2 (supply-chain) in plugins/cursor/skills/terminal/SKILL.md
curl / HTTP**: fine for inspection (`curl -i https://...`). Be careful with anything that pipes a downloaded script straight into a shell (`curl ... | sh Remote code is downloaded and executed. This bypasses code review and could introduce malicious code. Skill: terminal Rule: SC2 Category: …
plugins/cursor/skills/terminal/SKILL.md:110 Mcp skillSupply chainSc2
high System graph security Skillspector conf 0.90 SkillSpector SC2 (supply-chain) in skills/ai-tools-setup/references/hermes.md
curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash Remote code is downloaded and executed. This bypasses code review and could introduce malicious code. Skill: ai-tools-setup Rule: SC2 Category: supply-chain Severity: HIGH Confidence: 0.90 Remediation: Avoid downloading and exe…
skills/ai-tools-setup/references/hermes.md:26 Mcp skillSupply chainSc2
high System graph security Skillspector conf 0.90 SkillSpector SC2 (supply-chain) in skills/terminal/SKILL.md
curl / HTTP**: fine for inspection (`curl -i https://...`). Be careful with anything that pipes a downloaded script straight into a shell (`curl ... | sh Remote code is downloaded and executed. This bypasses code review and could introduce malicious code. Skill: terminal Rule: SC2 Category: …
skills/terminal/SKILL.md:110 Mcp skillSupply chainSc2
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in plugins/claude/skills/computer-health-check/references/linux.md
rm -rf "$HOME/.local/share/Trash/" Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: computer-health-check Rule: TM1 Category: tool-misuse Severity: HIGH Confidence:…
plugins/claude/skills/computer-health-check/references/linux.md:50 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in plugins/claude/skills/computer-health-check/references/macos.md
rm -rf "$HOME/.Trash/" Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: computer-health-check Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.85 Remed…
plugins/claude/skills/computer-health-check/references/macos.md:54 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in plugins/claude/skills/terminal/SKILL.md
rm -rf`, `Remove-Item -Recurse -Force`, `del / Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: terminal Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: …
plugins/claude/skills/terminal/SKILL.md:158 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in plugins/cursor/skills/computer-health-check/references/linux.md
rm -rf "$HOME/.local/share/Trash/" Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: computer-health-check Rule: TM1 Category: tool-misuse Severity: HIGH Confidence:…
plugins/cursor/skills/computer-health-check/references/linux.md:50 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in plugins/cursor/skills/computer-health-check/references/macos.md
rm -rf "$HOME/.Trash/" Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: computer-health-check Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.85 Remed…
plugins/cursor/skills/computer-health-check/references/macos.md:54 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in plugins/cursor/skills/terminal/SKILL.md
rm -rf`, `Remove-Item -Recurse -Force`, `del / Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: terminal Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: …
plugins/cursor/skills/terminal/SKILL.md:158 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in skills/computer-health-check/references/linux.md
rm -rf "$HOME/.local/share/Trash/" Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: computer-health-check Rule: TM1 Category: tool-misuse Severity: HIGH Confidence:…
skills/computer-health-check/references/linux.md:50 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in skills/computer-health-check/references/macos.md
rm -rf "$HOME/.Trash/" Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: computer-health-check Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.85 Remed…
skills/computer-health-check/references/macos.md:54 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in skills/terminal/SKILL.md
rm -rf`, `Remove-Item -Recurse -Force`, `del / Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: terminal Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: …
skills/terminal/SKILL.md:158 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.70 SkillSpector TM2 (tool-misuse) in plugins/claude/skills/ai-tools-setup/references/hermes.md
| bash Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow. Skill: ai-tools-setup Rule: TM2 Category: tool-misuse Severity: HIGH Confidence: 0.70 Remediation: Limit tool chaining depth and validate the output of each t…
plugins/claude/skills/ai-tools-setup/references/hermes.md:26 Mcp skillTool misuseTm2
high System graph security Skillspector conf 0.70 SkillSpector TM2 (tool-misuse) in plugins/cursor/skills/ai-tools-setup/references/hermes.md
| bash Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow. Skill: ai-tools-setup Rule: TM2 Category: tool-misuse Severity: HIGH Confidence: 0.70 Remediation: Limit tool chaining depth and validate the output of each t…
plugins/cursor/skills/ai-tools-setup/references/hermes.md:26 Mcp skillTool misuseTm2
high System graph security Skillspector conf 0.70 SkillSpector TM2 (tool-misuse) in skills/ai-tools-setup/references/hermes.md
| bash Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow. Skill: ai-tools-setup Rule: TM2 Category: tool-misuse Severity: HIGH Confidence: 0.70 Remediation: Limit tool chaining depth and validate the output of each t…
skills/ai-tools-setup/references/hermes.md:26 Mcp skillTool misuseTm2
high System graph dependencies dependencies conf 1.00 Vulnerable dependency @modelcontextprotocol/sdk 1.25.1: GHSA-345p-7cg4-v4c7
OSV.dev reports `@modelcontextprotocol/sdk` at version `1.25.1` (resolved in `package-lock.json`) is affected by GHSA-345p-7cg4-v4c7 (aka CVE-2026-25536). @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse Aliases: CVE-2026-25536 Advisory: https://osv.…
package.json ScaOsvGhsa 345p 7cg4 v4c7
high System graph dependencies dependencies conf 1.00 Vulnerable dependency @modelcontextprotocol/sdk 1.25.1: GHSA-8r9q-7v3j-jr4g
OSV.dev reports `@modelcontextprotocol/sdk` at version `1.25.1` (resolved in `package-lock.json`) is affected by GHSA-8r9q-7v3j-jr4g (aka CVE-2026-0621). Anthropic's MCP TypeScript SDK has a ReDoS vulnerability Aliases: CVE-2026-0621 Advisory: https://osv.dev/vulnerability/GHSA-8r9q-7v3j-jr4g Fix…
package.json ScaOsvGhsa 8r9q 7v3j jr4g
high System graph dependencies dependencies conf 0.90 Vulnerable dependency basic-ftp 5.1.0: GHSA-6v7q-wjvx-w8wg
OSV.dev reports `basic-ftp` at version `5.1.0` (resolved in `package-lock.json`) is affected by GHSA-6v7q-wjvx-w8wg. Note: `basic-ftp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FT…
package-lock.json ScaOsvGhsa 6v7q wjvx w8wg
high System graph dependencies dependencies conf 0.90 Vulnerable dependency basic-ftp 5.1.0: GHSA-rp42-5vxx-qpwr
OSV.dev reports `basic-ftp` at version `5.1.0` (resolved in `package-lock.json`) is affected by GHSA-rp42-5vxx-qpwr (aka CVE-2026-41324). Note: `basic-ftp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. basic-ftp vulnerable to denial of service via …
package-lock.json ScaOsvGhsa rp42 5vxx qpwr
high System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 1.1.12: GHSA-3jxr-9vmj-r5cp
OSV.dev reports `brace-expansion` at version `1.1.12` (resolved in `package-lock.json`) is affected by GHSA-3jxr-9vmj-r5cp (aka CVE-2026-13149). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: DoS via exponent…
package-lock.json ScaOsvGhsa 3jxr 9vmj r5cp
high System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 2.0.2: GHSA-3jxr-9vmj-r5cp
OSV.dev reports `brace-expansion` at version `2.0.2` (resolved in `package-lock.json`) is affected by GHSA-3jxr-9vmj-r5cp (aka CVE-2026-13149). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: DoS via exponenti…
package-lock.json ScaOsvGhsa 3jxr 9vmj r5cp
high System graph dependencies dependencies conf 0.90 Vulnerable dependency decompress 4.2.1: GHSA-mp2f-45pm-3cg9
OSV.dev reports `decompress` at version `4.2.1` (resolved in `package-lock.json`) is affected by GHSA-mp2f-45pm-3cg9 (aka CVE-2026-53486). Note: `decompress` is a transitive dependency — pulled in by another package, not declared directly in a manifest. Decompress: Archive extraction can create fi…
package-lock.json ScaOsvGhsa mp2f 45pm 3cg9
high System graph dependencies dependencies conf 0.90 Vulnerable dependency http-cache-semantics 3.8.1: GHSA-rc47-6667-2j5j
OSV.dev reports `http-cache-semantics` at version `3.8.1` (resolved in `package-lock.json`) is affected by GHSA-rc47-6667-2j5j (aka CVE-2022-25881). Note: `http-cache-semantics` is a transitive dependency — pulled in by another package, not declared directly in a manifest. http-cache-semantics vul…
package-lock.json ScaOsvGhsa rc47 6667 2j5j
high System graph dependencies dependencies conf 0.90 Vulnerable dependency js-yaml 4.1.1: GHSA-52cp-r559-cp3m
OSV.dev reports `js-yaml` at version `4.1.1` (resolved in `package-lock.json`) is affected by GHSA-52cp-r559-cp3m (aka CVE-2026-59869). Note: `js-yaml` is a transitive dependency — pulled in by another package, not declared directly in a manifest. js-yaml: YAML merge-key chains can force quadratic…
package-lock.json ScaOsvGhsa 52cp r559 cp3m
high System graph dependencies dependencies conf 0.90 Vulnerable dependency minimatch 3.1.2: GHSA-23c5-xmqv-rm74
OSV.dev reports `minimatch` at version `3.1.2` (resolved in `package-lock.json`) is affected by GHSA-23c5-xmqv-rm74 (aka CVE-2026-27904). Note: `minimatch` is a transitive dependency — pulled in by another package, not declared directly in a manifest. minimatch ReDoS: nested *() extglobs generate …
package-lock.json ScaOsvGhsa 23c5 xmqv rm74
high System graph dependencies dependencies conf 0.90 Vulnerable dependency minimatch 3.1.2: GHSA-3ppc-4f35-3m26
OSV.dev reports `minimatch` at version `3.1.2` (resolved in `package-lock.json`) is affected by GHSA-3ppc-4f35-3m26 (aka CVE-2026-26996). Note: `minimatch` is a transitive dependency — pulled in by another package, not declared directly in a manifest. minimatch has a ReDoS via repeated wildcards w…
package-lock.json ScaOsvGhsa 3ppc 4f35 3m26
high System graph dependencies dependencies conf 0.90 Vulnerable dependency minimatch 3.1.2: GHSA-7r86-cg39-jmmj
OSV.dev reports `minimatch` at version `3.1.2` (resolved in `package-lock.json`) is affected by GHSA-7r86-cg39-jmmj (aka CVE-2026-27903). Note: `minimatch` is a transitive dependency — pulled in by another package, not declared directly in a manifest. minimatch has ReDoS: matchOne() combinatorial …
package-lock.json ScaOsvGhsa 7r86 cg39 jmmj
high System graph dependencies dependencies conf 1.00 Vulnerable dependency sharp 0.34.5: GHSA-f88m-g3jw-g9cj
OSV.dev reports `sharp` at version `0.34.5` (resolved in `package-lock.json`) is affected by GHSA-f88m-g3jw-g9cj. sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 Advisory: https://osv.dev/vulnerability/GHSA-f88m-g3jw-g9cj Fix: upgrade `sh…
package.json ScaOsvGhsa f88m g3jw g9cj
high System graph dependencies dependencies conf 0.90 Vulnerable dependency tmp 0.0.33: GHSA-ph9p-34f9-6g65
OSV.dev reports `tmp` at version `0.0.33` (resolved in `package-lock.json`) is affected by GHSA-ph9p-34f9-6g65 (aka CVE-2026-44705). Note: `tmp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. tmp has Path Traversal via unsanitized prefix/postfix tha…
package-lock.json ScaOsvGhsa ph9p 34f9 6g65
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: .mcp.json
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
.mcp.json VerificationMcp config
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: plugins/claude/skills/computer-health-check/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
plugins/claude/skills/computer-health-check/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: plugins/cursor/skills/computer-health-check/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
plugins/cursor/skills/computer-health-check/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/computer-health-check/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/computer-health-check/SKILL.md VerificationSkill file
medium System graph security Agent instructions conf 1.00 Agent instruction contains unpinned remote install: plugins/claude/skills/terminal/SKILL.md
Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands.
plugins/claude/skills/terminal/SKILL.md:112 Supply chainSkill file
medium System graph security Agent instructions conf 1.00 Agent instruction contains unpinned remote install: plugins/cursor/skills/terminal/SKILL.md
Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands.
plugins/cursor/skills/terminal/SKILL.md:112 Supply chainSkill file
medium System graph security Agent instructions conf 1.00 Agent instruction contains unpinned remote install: skills/terminal/SKILL.md
Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands.
skills/terminal/SKILL.md:112 Supply chainSkill file
medium System graph quality Placeholder conf 1.00 Critical user flow still appears backed by mock or placeholder data
A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded.
Mock dataCritical flowGenerated repo pattern
medium System graph security Trivy conf 1.00 CVE-2025-69873: ajv 8.17.1 — package-lock.json
ajv: ReDoS via $data reference ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to the JavaS…
VulnCve 2025 69873
medium System graph security Trivy conf 1.00 CVE-2026-2327: markdown-it 14.1.0 — package-lock.json
markdown-it: markdown-it: Denial of Service via Regular Expression Denial of Service in linkify function Versions of the package markdown-it from 13.0.0 and before 14.1.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the use of the regex /\*+$/ in the linkify function. An a…
VulnCve 2026 2327
medium System graph security Trivy conf 1.00 CVE-2026-24398: hono 4.11.3 — package-lock.json
Hono IPv4 address validation bypass in IP Restriction Middleware allows IP spoofing Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, IP Restriction Middleware in Hono is vulnerable to an IP address validation bypass. The `IPV4_REGEX` pa…
VulnCve 2026 24398
medium System graph security Trivy conf 1.00 CVE-2026-24472: hono 4.11.3 — package-lock.json
Hono cache middleware ignores "Cache-Control: private" leading to Web Cache Deception Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, Cache Middleware contains an information disclosure vulnerability caused by improper handling of HTTP…
VulnCve 2026 24472
medium System graph security Trivy conf 1.00 CVE-2026-24473: hono 4.11.3 — package-lock.json
Hono has an Arbitrary Key Read in Serve static Middleware (Cloudflare Workers Adapter) Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, Serve static Middleware for the Cloudflare Workers adapter contains an information disclosure vulner…
VulnCve 2026 24473
medium System graph security Trivy conf 1.00 CVE-2026-24771: hono 4.11.3 — package-lock.json
Hono vulnerable to XSS through ErrorBoundary component Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, a Cross-Site Scripting (XSS) vulnerability exists in the `ErrorBoundary` component of the hono/jsx library. Under certain usage pat…
VulnCve 2026 24771
medium System graph security Trivy conf 1.00 CVE-2026-29085: hono 4.11.3 — package-lock.json
Hono Vulnerable to SSE Control Field Injection via CR/LF in writeSSE() Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, when using streamSSE() in Streaming Helper, the event, id, and retry fields were not validated for carriage return (…
VulnCve 2026 29085
medium System graph security Trivy conf 1.00 CVE-2026-29086: hono 4.11.3 — package-lock.json
Hono Vulnerable to Cookie Attribute Injection via Unsanitized domain and path in setCookie() Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, the setCookie() utility did not validate semicolons (;), carriage returns (\r), or newline cha…
VulnCve 2026 29086
medium System graph security Trivy conf 1.00 CVE-2026-31808: file-type 21.2.0 — package-lock.json
file-type: file-type: Denial of Service due to infinite loop in ASF file parsing file-type detects the file type of a file, stream, or data. Prior to 21.3.1, a denial of service vulnerability exists in the ASF (WMV/WMA) file type detection parser. When parsing a crafted input where an ASF sub-head…
VulnCve 2026 31808
medium System graph security Trivy conf 1.00 CVE-2026-32630: file-type 21.2.0 — package-lock.json
file-type: file-type: Denial of Service via excessive memory growth from crafted ZIP files file-type detects the file type of a file, stream, or data. From 20.0.0 to 21.3.1, a crafted ZIP file can trigger excessive memory growth during type detection in file-type when using fileTypeFromBuffer(), f…
VulnCve 2026 32630
medium System graph security Trivy conf 1.00 CVE-2026-33672: picomatch 2.3.1 — package-lock.json
picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the `POSIX_REGEX_SOURCE` object. Becau…
VulnCve 2026 33672
medium System graph security Trivy conf 1.00 CVE-2026-33750: brace-expansion 1.1.12 — package-lock.json
brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13, a brace pattern with a zero step value (e.g., `{1..2..0}`) caus…
VulnCve 2026 33750
medium System graph security Trivy conf 1.00 CVE-2026-33750: brace-expansion 2.0.2 — package-lock.json
brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13, a brace pattern with a zero step value (e.g., `{1..2..0}`) caus…
VulnCve 2026 33750
medium System graph security Trivy conf 1.00 CVE-2026-39406: @hono/node-server 1.19.7 — package-lock.json
@hono/node-server: Middleware bypass via repeated slashes in serveStatic @hono/node-server allows running the Hono application on Node.js. Prior to 1.19.13, a path handling inconsistency in serveStatic allows protected static files to be accessed by using repeated slashes (//) in the request path.…
VulnCve 2026 39406
medium System graph security Trivy conf 1.00 CVE-2026-39407: hono 4.11.3 — package-lock.json
Hono: Middleware bypass via repeated slashes in serveStatic Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, a path handling inconsistency in serveStatic allows protected static files to be accessed by using repeated slashes (//) in the reques…
VulnCve 2026 39407
medium System graph security Trivy conf 1.00 CVE-2026-39408: hono 4.11.3 — package-lock.json
Hono: Path traversal in toSSG() allows writing files outside the output directory Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, a path traversal issue in toSSG() allows files to be written outside the configured output directory during stat…
VulnCve 2026 39408
medium System graph security Trivy conf 1.00 CVE-2026-39409: hono 4.11.3 — package-lock.json
Hono has incorrect IP matching in ipRestriction() for IPv4-mapped IPv6 addresses Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, ipRestriction() does not canonicalize IPv4-mapped IPv6 client addresses (e.g. ::ffff:127.0.0.1) before applying I…
VulnCve 2026 39409
medium System graph security Trivy conf 1.00 CVE-2026-39410: hono 4.11.3 — package-lock.json
Hono: Non-breaking space prefix bypass in cookie name handling in getCookie() Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, a discrepancy between browser cookie parsing and parse() handling allows cookie prefix protections to be bypassed. C…
VulnCve 2026 39410
medium System graph security Trivy conf 1.00 CVE-2026-41907: uuid 8.3.2 — package-lock.json
uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (small buf or large offset). This allows silen…
VulnCve 2026 41907
medium System graph security Trivy conf 1.00 CVE-2026-42338: ip-address 10.1.0 — package-lock.json
ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and Address6.link() do not HTML-escape attacker-controlled content before embeddi…
VulnCve 2026 42338
medium System graph security Trivy conf 1.00 CVE-2026-44455: hono 4.11.3 — package-lock.json
hono/jsx has Unvalidated JSX Tag Names that May Allow HTML Injection Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.16, Improper handling of JSX element tag names in hono/jsx allowed unvalidated tag names to be directly inserted into the generat…
VulnCve 2026 44455
medium System graph security Trivy conf 1.00 CVE-2026-44456: hono 4.11.3 — package-lock.json
Hono: bodyLimit() can be bypassed for chunked / unknown-length requests Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.16, bodyLimit() does not reliably enforce maxSize for requests without a usable Content-Length (e.g. Transfer-Encoding: chunke…
VulnCve 2026 44456
medium System graph security Trivy conf 1.00 CVE-2026-44457: hono 4.11.3 — package-lock.json
Hono's Cache Middleware ignores Vary: Authorization / Vary: Cookie leading to cross-user cache leakage Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, Cache Middleware does not skip caching for responses that declare per-user variance via Var…
VulnCve 2026 44457
medium System graph security Trivy conf 1.00 CVE-2026-44458: hono 4.11.3 — package-lock.json
Hono has CSS Declaration Injection via Style Object Values in JSX SSR Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, the JSX renderer escapes style attribute object values for HTML but not for CSS. Untrusted input in a style object value or …
VulnCve 2026 44458
medium System graph security Trivy conf 1.00 CVE-2026-45736: ws 8.18.3 — package-lock.json
ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray` ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument.…
VulnCve 2026 45736
medium System graph security Trivy conf 1.00 CVE-2026-47673: hono 4.11.3 — package-lock.json
Hono: JWT middleware accepts any Authorization scheme, not only Bearer Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the jwt and jwk middlewares do not verify that the Authorization header value uses theBearer scheme. Any two-part header va…
VulnCve 2026 47673
medium System graph security Trivy conf 1.00 CVE-2026-47674: hono 4.11.3 — package-lock.json
Hono: IP Restriction bypasses static deny rules for non-canonical IPv6 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the ip-restriction middleware (hono/ip-restriction) compares incoming IP addresses against configured deny and allow rules…
VulnCve 2026 47674
medium System graph security Trivy conf 1.00 CVE-2026-47675: hono 4.11.3 — package-lock.json
Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the serialize() function in hono/cookie validates domain and path options against characters that corru…
VulnCve 2026 47675
medium System graph security Trivy conf 1.00 CVE-2026-47676: hono 4.11.3 — package-lock.json
Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, app.mount() strips the mount prefix from the incoming request path using the raw U…
VulnCve 2026 47676
medium System graph security Trivy conf 1.00 CVE-2026-48988: markdown-it 14.1.0 — package-lock.json
markdown-it is a Markdown parser. Versions 14.1.1 and below contain a ... markdown-it is a Markdown parser. Versions 14.1.1 and below contain a denial-of-service vulnerability when typographer: true is enabled, due to quadratic (O(n^2)) processing in the smartquotes rule. The issue stems from rep…
VulnCve 2026 48988
medium System graph security Trivy conf 1.00 CVE-2026-4923: path-to-regexp 8.3.0 — package-lock.json
path-to-regexp: path-to-regexp: Denial of Service via specially crafted paths with multiple wildcards Impact: When using multiple wildcards, combined with at least one parameter, a regular expression can be generated that is vulnerable to ReDoS. This backtracking vulnerability requires the second…
VulnCve 2026 4923
medium System graph security Trivy conf 1.00 CVE-2026-53550: js-yaml 3.14.2 — package-lock.json
js-yaml: js-yaml: Denial of Service via crafted YAML merge keys js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml merge-key processing (<<) by repeating the same alias many times in a merge sequence.…
VulnCve 2026 53550
medium System graph security Trivy conf 1.00 CVE-2026-53550: js-yaml 4.1.1 — package-lock.json
js-yaml: js-yaml: Denial of Service via crafted YAML merge keys js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml merge-key processing (<<) by repeating the same alias many times in a merge sequence.…
VulnCve 2026 53550
medium System graph security Trivy conf 1.00 CVE-2026-53655: tar 6.2.1 — package-lock.json
node-tar: node-tar: File smuggling due to inconsistent tar archive parsing node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar (node-tar) applies a PAX extended header's size= record (and other PAX overrides) to the next header entry of any type, including intermediary metadata heade…
VulnCve 2026 53655
medium System graph security Trivy conf 1.00 CVE-2026-54286: hono 4.11.3 — package-lock.json
hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`) Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on Windows hosts, an encoded backslash (%5C) in the request path decodes to \, which the Windows path resolver tre…
VulnCve 2026 54286
medium System graph security Trivy conf 1.00 CVE-2026-54287: hono 4.11.3 — package-lock.json
hono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and Lattice Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on AWS Lambda, the ALB single-header response and the VPC Lattice …
VulnCve 2026 54287
medium System graph security Trivy conf 1.00 CVE-2026-54288: hono 4.11.3 — package-lock.json
hono: Body Limit Middleware can be bypassed on AWS Lambda by understating `Content-Length` Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, the Body Limit Middleware trusts the request's Content-Length header to decide whether a body is within…
VulnCve 2026 54288
medium System graph security Trivy conf 1.00 CVE-2026-54289: hono 4.11.3 — package-lock.json
hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on AWS Lambda@Edge, CloudFront delivers a request header that appears more than once as severa…
VulnCve 2026 54289
medium System graph security Trivy conf 1.00 CVE-2026-56761: hono 4.11.3 — package-lock.json
hono Improperly Handles JSX Attribute Names Allows HTML Injection in hono/jsx SSR hono before 4.12.14 contains an html injection vulnerability in jsx server-side rendering that allows attackers to inject unintended html by using malformed attribute names. Attackers can craft specially crafted attr…
VulnCve 2026 56761
medium System graph security Trivy conf 1.00 CVE-2026-59871: tar 6.2.1 — package-lock.json
node-tar: node-tar: Denial of Service due to incorrect PAX path handling node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, node-tar coerces all-digit PAX path and linkpath values in src/pax.ts to JavaScript numbers, causing downstream path handling such as normalizeWindo…
VulnCve 2026 59871
medium System graph security Trivy conf 1.00 CVE-2026-59875: tar 6.2.1 — package-lock.json
node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.17, node-tar does not strip NUL bytes from PAX path and linkpath records in src/pax.ts, allowing a crafted archive with values to reach fs.l…
VulnCve 2026 59875
medium System graph security Trivy conf 1.00 CVE-2026-59895: hono 4.11.3 — package-lock.json
Hono: Server-Side XSS via JSX Escaping Bypass in cx() Utility Hono is a Web application framework that provides support for any JavaScript runtime. From 4.0.0 before 4.12.27, cx() in hono/css composes class names from plain strings but marks the result as already escaped without HTML-escaping the …
VulnCve 2026 59895
medium System graph security Trivy conf 1.00 CVE-2026-59897: hono 4.11.3 — package-lock.json
Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication Hono is a Web application framework that provides support for any JavaScript runtime. From 4.3.3 before 4.12.27, the AWS API Gateway v1 adapter can drop a distinct repeated request header value bec…
VulnCve 2026 59897
medium System graph security Trivy conf 1.00 CVE-2026-8723: qs 6.14.1 — package-lock.json
### Summary `qs.stringify` throws `TypeError` when called with `arr ... ### Summary `qs.stringify` throws `TypeError` when called with `arrayFormat: 'comma'` and `encodeValuesOnly: true` on an array containing `null` or `undefined`. The throw is synchronous and not handled by any of qs's nul…
VulnCve 2026 8723
medium System graph dependencies dependencies conf 0.90 Dependency glob is two or more major versions behind
`glob` is pinned at `10.3.10` in `package.json` while the latest release on the npm registry is `13.0.6` — 3 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `glob` to `13.0.6`.
package.json FreshnessOutdated
medium System graph security Semgrep conf 0.55 detect child process — scripts/download-all-ripgrep.cjs:124
Detected calls to child_process from a function argument `tarPath`. This could lead to a command injection if the input is user controllable. Try to avoid calls to child_process, and if it is needed ensure user input is correctly sanitized or sandboxed. Rule: javascript.lang.security.detect-child-…
scripts/download-all-ripgrep.cjs:124 SecurityJavascript
medium System graph security Semgrep conf 0.55 detect child process — scripts/publish-release.cjs:93
Detected calls to child_process from a function argument `command`. This could lead to a command injection if the input is user controllable. Try to avoid calls to child_process, and if it is needed ensure user input is correctly sanitized or sandboxed. Rule: javascript.lang.security.detect-child-…
scripts/publish-release.cjs:93 SecurityJavascript
medium System graph security Semgrep conf 0.55 detect child process — src/terminal-manager.ts:256
Detected calls to child_process from a function argument `command`. This could lead to a command injection if the input is user controllable. Try to avoid calls to child_process, and if it is needed ensure user input is correctly sanitized or sandboxed. Rule: javascript.lang.security.detect-child-…
src/terminal-manager.ts:256 SecurityJavascript
medium System graph hardware Security conf 1.00 Dockerfile runs as root: Dockerfile
No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image.
Container
medium System graph security Trivy conf 1.00 GHSA-26pp-8wgv-hjvm: hono 4.11.3 — package-lock.json
Hono missing validation of cookie name on write path in setCookie() ## Summary Cookie names are not validated on the write path when using `setCookie()`, `serialize()`, or `serializeSigned()` to generate Set-Cookie headers. While certain cookie attributes such as domain and path are validated, t…
VulnGhsa 26pp 8wgv hjvm
medium System graph security Trivy conf 1.00 GHSA-frvp-7c67-39w9: @hono/node-server 1.19.7 — package-lock.json
Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`) The same as the `hono` core [Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)](https://github.com/honojs/hono/security/advisories/GHSA-wwfh-h76j-fc44). ### Summary On Wind…
VulnGhsa frvp 7c67 39w9
medium System graph security Trivy conf 1.00 GHSA-v8w9-8mx6-g223: hono 4.11.3 — package-lock.json
Hono vulnerable to Prototype Pollution possible through __proto__ key allowed in parseBody({ dot: true }) ## Summary When using `parseBody({ dot: true })` in HonoRequest, specially crafted form field names such as `__proto__.x` could create objects containing a `__proto__` property. If the parse…
VulnGhsa v8w9 8mx6 g223
medium System graph cicd CI/CD security conf 1.00 GitHub Action is tag-pinned rather than SHA-pinned
actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
.github/workflows/codespell.yml:21 CI/CD securitySupply chainGithub actions
medium System graph security security conf 0.65 Insecure pattern 'direct_innerhtml_assignment' in src/ui/config-editor/src/app.ts:594
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
src/ui/config-editor/src/app.ts:594 Direct innerhtml assignment
medium System graph security security conf 0.65 Insecure pattern 'direct_innerhtml_assignment' in src/ui/config-editor/src/array-modal.ts:100
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
src/ui/config-editor/src/array-modal.ts:100 Direct innerhtml assignment
medium System graph security security conf 0.65 Insecure pattern 'direct_innerhtml_assignment' in src/ui/file-preview/src/app.ts:268
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
src/ui/file-preview/src/app.ts:268 Direct innerhtml assignment
medium System graph security security conf 0.65 Insecure pattern 'direct_innerhtml_assignment' in src/ui/file-preview/src/directory-controller.ts:200
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
src/ui/file-preview/src/directory-controller.ts:200 Direct innerhtml assignment
medium System graph security security conf 0.65 Insecure pattern 'direct_innerhtml_assignment' in src/ui/file-preview/src/document-outline.ts:106
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
src/ui/file-preview/src/document-outline.ts:106 Direct innerhtml assignment
medium System graph security security conf 0.65 Insecure pattern 'direct_innerhtml_assignment' in src/ui/shared/tool-shell.ts:39
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
src/ui/shared/tool-shell.ts:39 Direct innerhtml assignment
medium System graph cicd CI/CD security conf 1.00 Install-time lifecycle script performs network/shell-sensitive actions
preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access.
package.json CI/CD securitySupply chainNpm
medium System graph quality Placeholder conf 1.00 Placeholder or mock-heavy implementation detected
Found 30 placeholder/mock markers across 3 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data.
Mock dataIncompleteGenerated repo pattern
medium System graph security Skillspector conf 0.75 SkillSpector EA2 (excessive-agency) in plugins/claude/skills/desktop-commander-overview/SKILL.md
without asking Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: desktop-commander-overview Rule: EA2 Category: excessive-agenc…
plugins/claude/skills/desktop-commander-overview/SKILL.md:84 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.75 SkillSpector EA2 (excessive-agency) in plugins/cursor/skills/desktop-commander-overview/SKILL.md
without asking Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: desktop-commander-overview Rule: EA2 Category: excessive-agenc…
plugins/cursor/skills/desktop-commander-overview/SKILL.md:84 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.75 SkillSpector EA2 (excessive-agency) in skills/desktop-commander-overview/SKILL.md
without asking Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: desktop-commander-overview Rule: EA2 Category: excessive-agenc…
skills/desktop-commander-overview/SKILL.md:84 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.70 SkillSpector PE2 (priv-esc) in plugins/claude/skills/computer-health-check/references/linux.md
sudo Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified. Skill: computer-health-check Rule: PE2 Category: priv-esc Severity: MEDIUM Confidence: 0.70 Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation…
plugins/claude/skills/computer-health-check/references/linux.md:35 Mcp skillPriv escPe2
medium System graph security Skillspector conf 0.70 SkillSpector PE2 (priv-esc) in plugins/claude/skills/computer-health-check/SKILL.md
sudo Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified. Skill: computer-health-check Rule: PE2 Category: priv-esc Severity: MEDIUM Confidence: 0.70 Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation…
plugins/claude/skills/computer-health-check/SKILL.md:16 Mcp skillPriv escPe2
medium System graph security Skillspector conf 0.70 SkillSpector PE2 (priv-esc) in plugins/cursor/skills/computer-health-check/references/linux.md
sudo Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified. Skill: computer-health-check Rule: PE2 Category: priv-esc Severity: MEDIUM Confidence: 0.70 Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation…
plugins/cursor/skills/computer-health-check/references/linux.md:35 Mcp skillPriv escPe2
medium System graph security Skillspector conf 0.70 SkillSpector PE2 (priv-esc) in plugins/cursor/skills/computer-health-check/SKILL.md
sudo Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified. Skill: computer-health-check Rule: PE2 Category: priv-esc Severity: MEDIUM Confidence: 0.70 Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation…
plugins/cursor/skills/computer-health-check/SKILL.md:16 Mcp skillPriv escPe2
medium System graph security Skillspector conf 0.70 SkillSpector PE2 (priv-esc) in skills/computer-health-check/references/linux.md
sudo Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified. Skill: computer-health-check Rule: PE2 Category: priv-esc Severity: MEDIUM Confidence: 0.70 Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation…
skills/computer-health-check/references/linux.md:35 Mcp skillPriv escPe2
medium System graph security Skillspector conf 0.70 SkillSpector PE2 (priv-esc) in skills/computer-health-check/SKILL.md
sudo Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified. Skill: computer-health-check Rule: PE2 Category: priv-esc Severity: MEDIUM Confidence: 0.70 Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation…
skills/computer-health-check/SKILL.md:16 Mcp skillPriv escPe2
medium System graph security Skillspector conf 0.80 SkillSpector RA2 (rogue-agent) in plugins/claude/skills/computer-health-check/references/linux.md
systemctl --user list-unit-files --state=enable Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction. Skill: computer-health-check Rule: RA2 Category: ro…
plugins/claude/skills/computer-health-check/references/linux.md:19 Mcp skillRogue agentRa2
medium System graph security Skillspector conf 0.75 SkillSpector RA2 (rogue-agent) in plugins/claude/skills/computer-health-check/references/macos.md
plist Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction. Skill: computer-health-check Rule: RA2 Category: rogue-agent Severity: MEDIUM Confidence: 0.…
plugins/claude/skills/computer-health-check/references/macos.md:59 Mcp skillRogue agentRa2
medium System graph security Skillspector conf 0.80 SkillSpector RA2 (rogue-agent) in plugins/cursor/skills/computer-health-check/references/linux.md
systemctl --user list-unit-files --state=enable Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction. Skill: computer-health-check Rule: RA2 Category: ro…
plugins/cursor/skills/computer-health-check/references/linux.md:19 Mcp skillRogue agentRa2
medium System graph security Skillspector conf 0.75 SkillSpector RA2 (rogue-agent) in plugins/cursor/skills/computer-health-check/references/macos.md
plist Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction. Skill: computer-health-check Rule: RA2 Category: rogue-agent Severity: MEDIUM Confidence: 0.…
plugins/cursor/skills/computer-health-check/references/macos.md:59 Mcp skillRogue agentRa2
medium System graph security Skillspector conf 0.80 SkillSpector RA2 (rogue-agent) in skills/computer-health-check/references/linux.md
systemctl --user list-unit-files --state=enable Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction. Skill: computer-health-check Rule: RA2 Category: ro…
skills/computer-health-check/references/linux.md:19 Mcp skillRogue agentRa2
medium System graph security Skillspector conf 0.75 SkillSpector RA2 (rogue-agent) in skills/computer-health-check/references/macos.md
plist Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction. Skill: computer-health-check Rule: RA2 Category: rogue-agent Severity: MEDIUM Confidence: 0.…
skills/computer-health-check/references/macos.md:59 Mcp skillRogue agentRa2
medium System graph security Semgrep conf 0.55 unknown value with script tag — src/ui/resources.ts:59
Cannot determine what 'cssInlined' is and it is used with a '<script>' tag. This could be susceptible to cross-site scripting (XSS). Ensure 'cssInlined' is not externally controlled, or sanitize this data. Rule: javascript.lang.security.audit.unknown-value-with-script-tag.unknown-value-with-script…
src/ui/resources.ts:59 SecurityJavascript
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency @hono/node-server 1.19.7: GHSA-92pp-h63x-v22m
OSV.dev reports `@hono/node-server` at version `1.19.7` (resolved in `package-lock.json`) is affected by GHSA-92pp-h63x-v22m (aka CVE-2026-39406). Note: `@hono/node-server` is a transitive dependency — pulled in by another package, not declared directly in a manifest. @hono/node-server: Middleware…
package-lock.json ScaOsvGhsa 92pp h63x v22m
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency @hono/node-server 1.19.7: GHSA-frvp-7c67-39w9
OSV.dev reports `@hono/node-server` at version `1.19.7` (resolved in `package-lock.json`) is affected by GHSA-frvp-7c67-39w9. Note: `@hono/node-server` is a transitive dependency — pulled in by another package, not declared directly in a manifest. Node.js Adapter for Hono: Path traversal in `serve…
package-lock.json ScaOsvGhsa frvp 7c67 39w9
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency @hono/node-server 1.19.7: GHSA-wc8c-qw6v-h7f6
OSV.dev reports `@hono/node-server` at version `1.19.7` (resolved in `package-lock.json`) is affected by GHSA-wc8c-qw6v-h7f6. Note: `@hono/node-server` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.d…
package-lock.json ScaOsvGhsa wc8c qw6v h7f6
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency ajv 8.17.1: GHSA-2g4f-4pwh-qvx6
OSV.dev reports `ajv` at version `8.17.1` (resolved in `package-lock.json`) is affected by GHSA-2g4f-4pwh-qvx6 (aka CVE-2025-69873). Note: `ajv` is a transitive dependency — pulled in by another package, not declared directly in a manifest. ajv has ReDoS when using `$data` option Aliases: CVE-202…
package-lock.json ScaOsvGhsa 2g4f 4pwh qvx6
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency basic-ftp 5.1.0: GHSA-rpmf-866q-6p89
OSV.dev reports `basic-ftp` at version `5.1.0` (resolved in `package-lock.json`) is affected by GHSA-rpmf-866q-6p89. Note: `basic-ftp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/…
package-lock.json ScaOsvGhsa rpmf 866q 6p89
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency body-parser 2.2.2: GHSA-v422-hmwv-36x6
OSV.dev reports `body-parser` at version `2.2.2` (resolved in `package-lock.json`) is affected by GHSA-v422-hmwv-36x6. Note: `body-parser` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerabil…
package-lock.json ScaOsvGhsa v422 hmwv 36x6
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 1.1.12: GHSA-f886-m6hf-6m8v
OSV.dev reports `brace-expansion` at version `1.1.12` (resolved in `package-lock.json`) is affected by GHSA-f886-m6hf-6m8v (aka CVE-2026-33750). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: Zero-step sequen…
package-lock.json ScaOsvGhsa f886 m6hf 6m8v
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 2.0.2: GHSA-f886-m6hf-6m8v
OSV.dev reports `brace-expansion` at version `2.0.2` (resolved in `package-lock.json`) is affected by GHSA-f886-m6hf-6m8v (aka CVE-2026-33750). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: Zero-step sequenc…
package-lock.json ScaOsvGhsa f886 m6hf 6m8v
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency file-type 21.2.0: GHSA-5v7r-6r5c-r473
OSV.dev reports `file-type` at version `21.2.0` (resolved in `package-lock.json`) is affected by GHSA-5v7r-6r5c-r473 (aka CVE-2026-31808). file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header Aliases: CVE-2026-31808 Advisory: https://osv.dev/vulnerability…
package.json ScaOsvGhsa 5v7r 6r5c r473
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency file-type 21.2.0: GHSA-j47w-4g3g-c36v
OSV.dev reports `file-type` at version `21.2.0` (resolved in `package-lock.json`) is affected by GHSA-j47w-4g3g-c36v (aka CVE-2026-32630). file-type: ZIP Decompression Bomb DoS via [Content_Types].xml entry Aliases: CVE-2026-32630 Advisory: https://osv.dev/vulnerability/GHSA-j47w-4g3g-c36v Fix: u…
package.json ScaOsvGhsa j47w 4g3g c36v
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency got 8.3.2: GHSA-pfrx-2q88-qq97
OSV.dev reports `got` at version `8.3.2` (resolved in `package-lock.json`) is affected by GHSA-pfrx-2q88-qq97 (aka CVE-2022-33987). Note: `got` is a transitive dependency — pulled in by another package, not declared directly in a manifest. Got allows a redirect to a UNIX socket Aliases: CVE-2022-…
package-lock.json ScaOsvGhsa pfrx 2q88 qq97
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency js-yaml 4.1.1: GHSA-h67p-54hq-rp68
OSV.dev reports `js-yaml` at version `4.1.1` (resolved in `package-lock.json`) is affected by GHSA-h67p-54hq-rp68 (aka CVE-2026-53550). Note: `js-yaml` is a transitive dependency — pulled in by another package, not declared directly in a manifest. JS-YAML: Quadratic-complexity DoS in merge key han…
package-lock.json ScaOsvGhsa h67p 54hq rp68
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency markdown-it 14.1.0: GHSA-38c4-r59v-3vqw
OSV.dev reports `markdown-it` at version `14.1.0` (resolved in `package-lock.json`) is affected by GHSA-38c4-r59v-3vqw (aka CVE-2026-2327). markdown-it is has a Regular Expression Denial of Service (ReDoS) Aliases: CVE-2026-2327 Advisory: https://osv.dev/vulnerability/GHSA-38c4-r59v-3vqw Fix: upg…
package.json ScaOsvGhsa 38c4 r59v 3vqw
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency markdown-it 14.1.0: GHSA-6v5v-wf23-fmfq
OSV.dev reports `markdown-it` at version `14.1.0` (resolved in `package-lock.json`) is affected by GHSA-6v5v-wf23-fmfq (aka CVE-2026-48988). markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations Aliases: CVE-2026-48988 Advisory: https://osv.dev/vulnerability/GH…
package.json ScaOsvGhsa 6v5v wf23 fmfq
low System graph security Trivy conf 1.00 CVE-2026-12590: body-parser 1.20.4 — package-lock.json
body-parser: body-parser: Denial of Service via invalid limit option Impact: In body-parser versions prior to 1.20.6 (1.x line) and 2.3.0 (2.x line), when the parser is configured with an invalid limit option value such as an unparseable string or NaN, bytes.parse returns null and the request body…
VulnCve 2026 12590
low System graph security Trivy conf 1.00 CVE-2026-12590: body-parser 2.2.2 — package-lock.json
body-parser: body-parser: Denial of Service via invalid limit option Impact: In body-parser versions prior to 1.20.6 (1.x line) and 2.3.0 (2.x line), when the parser is configured with an invalid limit option value such as an unparseable string or NaN, bytes.parse returns null and the request body…
VulnCve 2026 12590
low System graph security Trivy conf 1.00 CVE-2026-2391: qs 6.14.1 — package-lock.json
qs: qs's arrayLimit bypass in comma parsing allows denial of service ### Summary The `arrayLimit` option in qs does not enforce limits for comma-separated values when `comma: true` is enabled, allowing attackers to cause denial-of-service via memory exhaustion. This is a bypass of the array limit …
VulnCve 2026 2391
low System graph security Trivy conf 1.00 CVE-2026-44459: hono 4.11.3 — package-lock.json
Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify() Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, improper validation of the JWT NumericDate claims exp, nbf, and iat in hono/utils/jwt allows tokens with non-sp…
VulnCve 2026 44459
low System graph quality Debug conf 1.00 Debug logging residue appears in source files
Found 424 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup.
CleanupRepo hardeningGenerated repo pattern
low System graph dependencies dependencies conf 0.90 Dependency file-type is a major version behind
`file-type` is pinned at `21.1.1` in `package.json` while the latest release on the npm registry is `22.0.1` — 1 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `file-type` to `22.0.1`.
package.json FreshnessOutdated
low System graph dependencies dependencies conf 0.90 Dependency isbinaryfile is a major version behind
`isbinaryfile` is pinned at `5.0.4` in `package.json` while the latest release on the npm registry is `6.0.0` — 1 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `isbinaryfile` to `6.0.0`.
package.json FreshnessOutdated
low System graph dependencies dependencies conf 0.90 Dependency open is a major version behind
`open` is pinned at `10.2.0` in `package.json` while the latest release on the npm registry is `11.0.0` — 1 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `open` to `11.0.0`.
package.json FreshnessOutdated
low System graph dependencies dependencies conf 0.90 Dependency zod is a major version behind
`zod` is pinned at `3.24.1` in `package.json` while the latest release on the npm registry is `4.4.3` — 1 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `zod` to `4.4.3`.
package.json FreshnessOutdated
low System graph hardware Supply chain conf 1.00 Docker base image is tag-pinned but not digest-pinned: node:lts-alpine
Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter.
Dockerfile:2 containersPinned dependencies
low System graph security Trivy conf 1.00 DS-0026: No HEALTHCHECK defined — Dockerfile
No HEALTHCHECK defined Add HEALTHCHECK instruction in your Dockerfile Rule: DS-0026 Severity: LOW Target: Dockerfile
Misconfig
low System graph security Trivy conf 1.00 GHSA-gq3j-xvxp-8hrf: hono 4.11.3 — package-lock.json
Hono added timing comparison hardening in basicAuth and bearerAuth ## Summary The `basicAuth` and `bearerAuth` middlewares previously used a comparison that was not fully timing-safe. The `timingSafeEqual` function used normal string equality (`===`) when comparing hash values. This comparison m…
VulnGhsa gq3j xvxp 8hrf
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `create_config_backup` in uninstall-claude-server.js:435
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `direct_5option_v2` in src/utils/usageTracker.ts:537
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `previousOld` in src/ui/file-preview/src/markdown/controller.ts:109
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Complexity conf 1.00 Very large file: src/server.ts (1699 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/ui/file-preview/src/markdown/controller.ts (1213 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: src/ui/file-preview/src/markdown/editor.ts (1650 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph dependencies dependencies conf 0.90 Vulnerable dependency diff 4.0.2: GHSA-73rr-hh4g-fpgx
OSV.dev reports `diff` at version `4.0.2` (resolved in `package-lock.json`) is affected by GHSA-73rr-hh4g-fpgx (aka CVE-2026-24001). Note: `diff` is a transitive dependency — pulled in by another package, not declared directly in a manifest. jsdiff has a Denial of Service vulnerability in parsePat…
package-lock.json ScaOsvGhsa 73rr hh4g fpgx
low System graph dependencies dependencies conf 0.90 Vulnerable dependency tmp 0.0.33: GHSA-52f5-9888-hmc6
OSV.dev reports `tmp` at version `0.0.33` (resolved in `package-lock.json`) is affected by GHSA-52f5-9888-hmc6 (aka CVE-2025-54798). Note: `tmp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. tmp allows arbitrary temporary file / directory write via…
package-lock.json ScaOsvGhsa 52f5 9888 hmc6
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/351f5e8b-889d-4065-8afe-e3d29376cb76/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/351f5e8b-889d-4065-8afe-e3d29376cb76/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.