Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

agegr/pi-web

https://github.com/agegr/pi-web · scanned 2026-07-23 19:37 UTC (3 months ago)

108 raw signals (0 security + 108 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 3 months ago · v7 · last Δ -2.2 (diff) · 108 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
66.6
/100
Security checks
67
0 findings
System graph
67
90.0% cov · 108 findings
Critical
1
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 1 High 42 Medium 51 Low 13 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 108 Crowd 0 Layer: Frontend 3 Security 65 Quality 16 Cicd 1 Dependencies 21 Api 2
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 66.6/100 with 90.0% coverage. It contains 925 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 108 findings — concentrated in security (65), dependencies (21), quality (16). Risk profile is high: 1 critical, 42 high, 51 medium. Recommended next step: open the security layer findings first — that's where the highest-impact wins live.

Showing 104 of 108 actionable findings. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

critical System graph security Trivy conf 1.00 CVE-2026-41242: protobufjs 7.5.4 — bun.lock
protobufjs: protobufjs: Arbitrary code execution via injected protobuf definition type fields protobufjs compiles protobuf definitions into JavaScript (JS) functions. In versions prior to 8.0.1 and 7.5.5, attackers can inject arbitrary code in the "type" fields of protobuf definitions, which will …
VulnCve 2026 41242
high System graph security Trivy conf 1.00 CVE-2026-13149: brace-expansion 1.1.12 — bun.lock
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a…
VulnCve 2026 13149
high System graph security Trivy conf 1.00 CVE-2026-44289: protobufjs 7.5.4 — bun.lock
protobufjs: protobufjs: Denial of Service via uncontrolled recursion in protobuf decoding protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs could recurse without a depth limit while decoding nested protobuf data. This affected both skippi…
VulnCve 2026 44289
high System graph security Trivy conf 1.00 CVE-2026-44290: protobufjs 7.5.4 — bun.lock
protobufjs: protobufjs: Denial of Service via crafted schema protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs allowed certain schema option paths to traverse through inherited object properties while applying options. A crafted protobuf …
VulnCve 2026 44290
high System graph security Trivy conf 1.00 CVE-2026-44291: protobufjs 7.5.4 — bun.lock
protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs used plain objects with inherited prototypes for internal type lookup tables used by generated encode and decode fu…
VulnCve 2026 44291
high System graph security Trivy conf 1.00 CVE-2026-44293: protobufjs 7.5.4 — bun.lock
protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript for toObject conversion could include an unsafe …
VulnCve 2026 44293
high System graph security Trivy conf 1.00 CVE-2026-48712: protobufjs 7.5.4 — bun.lock
protobufjs: protobufjs: Denial of Service via uncontrolled recursion with crafted protobuf payload protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.1 and 8.4.1, protobufjs could recurse without a depth limit while converting decoded messages to plain objects or…
VulnCve 2026 48712
high System graph security Trivy conf 1.00 CVE-2026-48779: ws 8.19.0 — bun.lock
ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memor…
VulnCve 2026 48779
high System graph security Trivy conf 1.00 CVE-2026-64641: next 16.2.9 — bun.lock
Next.js: Denial of Service in App Router using Server Actions ## Impact Crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive CPU usage blocking processing of further requests in the same process. ## Workarounds No workaround exis…
VulnCve 2026 64641
high System graph security Trivy conf 1.00 CVE-2026-64641: next 16.2.9 — package-lock.json
Next.js: Denial of Service in App Router using Server Actions ## Impact Crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive CPU usage blocking processing of further requests in the same process. ## Workarounds No workaround exis…
VulnCve 2026 64641
high System graph security Trivy conf 1.00 CVE-2026-64642: next 16.2.9 — bun.lock
Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale ## Impact Crafted requests targeting Next.js applications using App Router built with Turbopack and a **single** entry in `config.i18n.locales` can bypass middleware/proxy based authentication. ## Wor…
VulnCve 2026 64642
high System graph security Trivy conf 1.00 CVE-2026-64642: next 16.2.9 — package-lock.json
Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale ## Impact Crafted requests targeting Next.js applications using App Router built with Turbopack and a **single** entry in `config.i18n.locales` can bypass middleware/proxy based authentication. ## Wor…
VulnCve 2026 64642
high System graph security Trivy conf 1.00 CVE-2026-64645: next 16.2.9 — bun.lock
Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname ## Impact A `rewrites()` or `redirects()` rule that builds its external destination hostname from request-controlled input can be pointed at an arbitrary hostname, regardless of the rule's hostname suffi…
VulnCve 2026 64645
high System graph security Trivy conf 1.00 CVE-2026-64645: next 16.2.9 — package-lock.json
Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname ## Impact A `rewrites()` or `redirects()` rule that builds its external destination hostname from request-controlled input can be pointed at an arbitrary hostname, regardless of the rule's hostname suffi…
VulnCve 2026 64645
high System graph security Trivy conf 1.00 CVE-2026-64649: next 16.2.9 — bun.lock
Next.js: Server-Side Request Forgery in Server Actions on custom servers ## Impact When a Server Action forwards or redirects a request, an attacker can cause the server to send that outbound request to a malicious host (Server-Side Request Forgery). This requires the attacker's request to contro…
VulnCve 2026 64649
high System graph security Trivy conf 1.00 CVE-2026-64649: next 16.2.9 — package-lock.json
Next.js: Server-Side Request Forgery in Server Actions on custom servers ## Impact When a Server Action forwards or redirects a request, an attacker can cause the server to send that outbound request to a malicious host (Server-Side Request Forgery). This requires the attacker's request to contro…
VulnCve 2026 64649
high System graph api Wiring conf 0.90 Dangling fetch: POST /api/models-config/test (components/ModelsConfig.tsx:546)
`components/ModelsConfig.tsx:546` calls `POST /api/models-config/test` but no backend route in the scanned graph matches that path. This is a likely runtime 404 unless an external gateway or unsupported router provides it. Tool: fetch Normalized path used for matching: `/models-config/test`
components/ModelsConfig.tsx:546 Dangling fetchFetch
high System graph security Trivy conf 1.00 GHSA-f88m-g3jw-g9cj: sharp 0.34.5 — package-lock.json
sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 ### Impact A number of vulnerabilities, two rated as "High" severity using CVSSv4, have been discovered and fixed in the upstream libvips dependency. Those processing untrusted input with v…
VulnGhsa f88m g3jw g9cj
high System graph security Skillspector conf 0.80 SkillSpector MP3 (memory-poisoning) in components/ModelsConfig.tsx
Reset state Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior. Skill: unknown Rule: MP3 Category: memory-poisoning Severity: HIGH Confidence: 0.80 Remediation: Protect agent memory and state…
components/ModelsConfig.tsx:721 Mcp skillMemory poisoningMp3
high System graph security Skillspector conf 0.65 SkillSpector OH1 (output-handling) in app/layout.tsx
dangerouslySetInnerHTML={ Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution. Skill: unknown Rule: OH1 Category: output-handling Severity: HIGH Confidence: 0.65 …
app/layout.tsx:27 Mcp skillOutput handlingOh1
high System graph security Skillspector conf 0.65 SkillSpector OH1 (output-handling) in components/MarkdownBody.tsx
dangerouslySetInnerHTML={ Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution. Skill: unknown Rule: OH1 Category: output-handling Severity: HIGH Confidence: 0.65 …
components/MarkdownBody.tsx:193 Mcp skillOutput handlingOh1
high System graph security Skillspector conf 0.60 SkillSpector PE3 (priv-esc) in app/api/files/[...path]/route.ts
.env" Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts. Skill: unknown Rule: PE3 Category: priv-esc Severity: HIGH Confidence: 0.60 Remediation: Remove references to credential paths. Use environment variables or secrets managers. …
app/api/files/[...path]/route.ts:59 Mcp skillPriv escPe3
high System graph security Skillspector conf 0.60 SkillSpector PE3 (priv-esc) in bin/pi-web.js
.env Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts. Skill: unknown Rule: PE3 Category: priv-esc Severity: HIGH Confidence: 0.60 Remediation: Remove references to credential paths. Use environment variables or secrets managers. F…
bin/pi-web.js:46 Mcp skillPriv escPe3
high System graph security Skillspector conf 0.60 SkillSpector PE3 (priv-esc) in components/FileIcons.tsx
.env" Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts. Skill: unknown Rule: PE3 Category: priv-esc Severity: HIGH Confidence: 0.60 Remediation: Remove references to credential paths. Use environment variables or secrets managers. …
components/FileIcons.tsx:207 Mcp skillPriv escPe3
high System graph security Skillspector conf 0.70 SkillSpector RA1 (rogue-agent) in components/SessionSidebar.tsx
remove check Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors. Skill: unknown Rule: RA1 Category: rogue-agent Severity: HIGH Confidence: 0.70 Remediation: P…
components/SessionSidebar.tsx:1223 Mcp skillRogue agentRa1
high System graph security Skillspector conf 0.80 SkillSpector SC4 (supply-chain) in package.json
next==16.2.9 Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits. Skill: unknown Rule: SC4 Category: supply-chain Severity: HIGH Confidence: 0.80 Remediation: Update the dependency to a patched version that address…
package.json:39 Mcp skillSupply chainSc4
high System graph security Skillspector conf 0.70 SkillSpector SC6 (supply-chain) in package.json
next Package name closely resembles a popular package, suggesting possible typosquatting. Attackers publish malicious packages with similar names to trick developers into installing them. Skill: unknown Rule: SC6 Category: supply-chain Severity: HIGH Confidence: 0.70 Remediation: Verify the pa…
package.json:39 Mcp skillSupply chainSc6
high System graph security Skillspector conf 0.80 SkillSpector TM1 (tool-misuse) in app/api/auth/api-key/[provider]/route.ts
DELETE /api/auth/api-key/[provider] Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: unknown Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.80 Remedi…
app/api/auth/api-key/[provider]/route.ts:51 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.80 SkillSpector TM1 (tool-misuse) in app/api/sessions/[id]/route.ts
DELETE /api/sessions/[id] Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: unknown Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.80 Remediation: Val…
app/api/sessions/[id]/route.ts:196 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.80 SkillSpector TM1 (tool-misuse) in app/api/worktrees/route.ts
DELETE /api/worktrees Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: unknown Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.80 Remediation: Validat…
app/api/worktrees/route.ts:75 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in bun.lock
RmB/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: unknown Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.85 Remediation: Validate all tool parame…
bun.lock:816 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in lib/skill-updates.ts
rm } from "fs/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: unknown Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.85 Remediation: Validate all t…
lib/skill-updates.ts:2 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in package-lock.json
rMq+zAPHodfHGZu4sGVehvAQt/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: unknown Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.85 Remediation: Va…
package-lock.json:2236 Mcp skillTool misuseTm1
high System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 1.1.12: GHSA-3jxr-9vmj-r5cp
OSV.dev reports `brace-expansion` at version `1.1.12` (resolved in `bun.lock`) is affected by GHSA-3jxr-9vmj-r5cp (aka CVE-2026-13149). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: DoS via exponential-time …
bun.lock ScaOsvGhsa 3jxr 9vmj r5cp
high System graph dependencies dependencies conf 1.00 Vulnerable dependency next 16.2.9: GHSA-6gpp-xcg3-4w24
OSV.dev reports `next` at version `16.2.9` (resolved in `bun.lock`) is affected by GHSA-6gpp-xcg3-4w24 (aka CVE-2026-64642). Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale Aliases: CVE-2026-64642 Advisory: https://osv.dev/vulnerability/GHSA-6gpp-xc…
package.json ScaOsvGhsa 6gpp xcg3 4w24
high System graph dependencies dependencies conf 1.00 Vulnerable dependency next 16.2.9: GHSA-89xv-2m56-2m9x
OSV.dev reports `next` at version `16.2.9` (resolved in `bun.lock`) is affected by GHSA-89xv-2m56-2m9x (aka CVE-2026-64649). Next.js: Server-Side Request Forgery in Server Actions on custom servers Aliases: CVE-2026-64649 Advisory: https://osv.dev/vulnerability/GHSA-89xv-2m56-2m9x Fix: upgrade `n…
package.json ScaOsvGhsa 89xv 2m56 2m9x
high System graph dependencies dependencies conf 1.00 Vulnerable dependency next 16.2.9: GHSA-m99w-x7hq-7vfj
OSV.dev reports `next` at version `16.2.9` (resolved in `bun.lock`) is affected by GHSA-m99w-x7hq-7vfj (aka CVE-2026-64641). Next.js: Denial of Service in App Router using Server Actions Aliases: CVE-2026-64641 Advisory: https://osv.dev/vulnerability/GHSA-m99w-x7hq-7vfj Fix: upgrade `next` past t…
package.json ScaOsvGhsa m99w x7hq 7vfj
high System graph dependencies dependencies conf 1.00 Vulnerable dependency next 16.2.9: GHSA-p9j2-gv94-2wf4
OSV.dev reports `next` at version `16.2.9` (resolved in `bun.lock`) is affected by GHSA-p9j2-gv94-2wf4 (aka CVE-2026-64645). Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname Aliases: CVE-2026-64645 Advisory: https://osv.dev/vulnerability/GHSA-p9j2-gv94…
package.json ScaOsvGhsa p9j2 gv94 2wf4
high System graph dependencies dependencies conf 0.90 Vulnerable dependency postcss 8.4.31: GHSA-6g55-p6wh-862q
OSV.dev reports `postcss` at version `8.4.31` (resolved in `bun.lock`) is affected by GHSA-6g55-p6wh-862q (aka CVE-2026-45623). PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments Aliases: CVE-2026-45623 Advisory: https://osv.dev/vulner…
bun.lock ScaOsvGhsa 6g55 p6wh 862q
high System graph dependencies dependencies conf 0.90 Vulnerable dependency postcss 8.5.8: GHSA-6g55-p6wh-862q
OSV.dev reports `postcss` at version `8.5.8` (resolved in `bun.lock`) is affected by GHSA-6g55-p6wh-862q (aka CVE-2026-45623). PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments Aliases: CVE-2026-45623 Advisory: https://osv.dev/vulnera…
package.json ScaOsvGhsa 6g55 p6wh 862q
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: AGENTS.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
AGENTS.md VerificationAgents md
medium System graph quality Agent instructions conf 1.00 Agent instructions exist but release-hardening basics are missing
AI-coder instruction files were found, but the repo is missing ci. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable.
Repo hardeningGenerated repo pattern
medium System graph quality Placeholder conf 1.00 Critical user flow still appears backed by mock or placeholder data
A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded.
Mock dataCritical flowGenerated repo pattern
medium System graph security Trivy conf 1.00 CVE-2026-33750: brace-expansion 1.1.12 — bun.lock
brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13, a brace pattern with a zero step value (e.g., `{1..2..0}`) caus…
VulnCve 2026 33750
medium System graph security Trivy conf 1.00 CVE-2026-41305: postcss 8.4.31 — package-lock.json
postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Versions prior to 8.5.10 do not escape `</style>` sequences when stringifyin…
VulnCve 2026 41305
medium System graph security Trivy conf 1.00 CVE-2026-41305: postcss 8.5.8 — bun.lock
postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Versions prior to 8.5.10 do not escape `</style>` sequences when stringifyin…
VulnCve 2026 41305
medium System graph security Trivy conf 1.00 CVE-2026-44288: @protobufjs/utf8 1.1.0 — bun.lock
protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a minimal UTF-8 decoder that accepted overlong UTF-8 byte sequences and decode…
VulnCve 2026 44288
medium System graph security Trivy conf 1.00 CVE-2026-44288: protobufjs 7.5.4 — bun.lock
protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a minimal UTF-8 decoder that accepted overlong UTF-8 byte sequences and decode…
VulnCve 2026 44288
medium System graph security Trivy conf 1.00 CVE-2026-44292: protobufjs 7.5.4 — bun.lock
protobufjs: protobufjs: Data integrity impact due to prototype pollution protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated message constructors copied enumerable properties from a provided properties object without filtering the…
VulnCve 2026 44292
medium System graph security Trivy conf 1.00 CVE-2026-44294: protobufjs 7.5.4 — bun.lock
protobufjs: protobufjs: Denial of Service due to unescaped control characters in field names protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript property accessors from schema-controlled field and oneof names. Certain c…
VulnCve 2026 44294
medium System graph security Trivy conf 1.00 CVE-2026-45736: ws 8.19.0 — bun.lock
ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray` ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument.…
VulnCve 2026 45736
medium System graph security Trivy conf 1.00 CVE-2026-45740: protobufjs 7.5.4 — bun.lock
protobufjs: protobufjs: Denial of Service via crafted JSON descriptors protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.8 and 8.2.0, protobufjs could recurse without a depth limit while expanding nested JSON descriptors through Root.fromJSON() and Namespace.add…
VulnCve 2026 45740
medium System graph security Trivy conf 1.00 CVE-2026-54269: protobufjs 7.5.4 — bun.lock
protobufjs: protobufjs-cli: protobufjs: Denial of Service due to name collision with runtime helpers protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 8.6.0 and 7.6.3, protobufjs accepted certain schema-derived names that could collide with properties used by protob…
VulnCve 2026 54269
medium System graph security Trivy conf 1.00 CVE-2026-59877: protobufjs 7.5.4 — bun.lock
protobufjs: protobufjs: Denial of Service via crafted .proto schema protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.5 and 8.6.6, protobufjs parsed option names by advancing through schema tokens until reaching an = token without checking for end of input, so a…
VulnCve 2026 59877
medium System graph security Trivy conf 1.00 CVE-2026-59877: protobufjs 7.6.4 — package-lock.json
protobufjs: protobufjs: Denial of Service via crafted .proto schema protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.5 and 8.6.6, protobufjs parsed option names by advancing through schema tokens until reaching an = token without checking for end of input, so a…
VulnCve 2026 59877
medium System graph security Trivy conf 1.00 CVE-2026-64643: next 16.2.9 — bun.lock
Next.js: Unauthenticated disclosure of internal Server Function endpoints ## Impact In Next.js applications using App Router, Server Actions (`use server`) or `use cache` endpoints can be disclosed bypassing any authentication on the pages where these endpoints are usually used. Server Action ID…
VulnCve 2026 64643
medium System graph security Trivy conf 1.00 CVE-2026-64643: next 16.2.9 — package-lock.json
Next.js: Unauthenticated disclosure of internal Server Function endpoints ## Impact In Next.js applications using App Router, Server Actions (`use server`) or `use cache` endpoints can be disclosed bypassing any authentication on the pages where these endpoints are usually used. Server Action ID…
VulnCve 2026 64643
medium System graph security Trivy conf 1.00 CVE-2026-64644: next 16.2.9 — bun.lock
Next.js: Denial of Service in the Image Optimization API using SVGs ### Impact When self-hosting Next.js with the default image loader, the Image Optimization API can optimize remotely hosted images if configured (not enabled by default). If those images contain malicious content, they can cause …
VulnCve 2026 64644
medium System graph security Trivy conf 1.00 CVE-2026-64644: next 16.2.9 — package-lock.json
Next.js: Denial of Service in the Image Optimization API using SVGs ### Impact When self-hosting Next.js with the default image loader, the Image Optimization API can optimize remotely hosted images if configured (not enabled by default). If those images contain malicious content, they can cause …
VulnCve 2026 64644
medium System graph security Trivy conf 1.00 CVE-2026-64646: next 16.2.9 — bun.lock
Next.js: Unbounded Server Action payload in Edge runtime ## Impact Requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the Edge runtime ## Workarounds If you cannot upgrade, ensure your hos…
VulnCve 2026 64646
medium System graph security Trivy conf 1.00 CVE-2026-64646: next 16.2.9 — package-lock.json
Next.js: Unbounded Server Action payload in Edge runtime ## Impact Requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the Edge runtime ## Workarounds If you cannot upgrade, ensure your hos…
VulnCve 2026 64646
medium System graph security Trivy conf 1.00 CVE-2026-64647: next 16.2.9 — bun.lock
Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences ## Impact A server-side `fetch` with a request body may return a cached **response** body from a different request to the same URL but different body. Confidential data in the `POST`'s **r…
VulnCve 2026 64647
medium System graph security Trivy conf 1.00 CVE-2026-64647: next 16.2.9 — package-lock.json
Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences ## Impact A server-side `fetch` with a request body may return a cached **response** body from a different request to the same URL but different body. Confidential data in the `POST`'s **r…
VulnCve 2026 64647
medium System graph security Trivy conf 1.00 CVE-2026-64648: next 16.2.9 — bun.lock
Next.js: Cache confusion of response bodies for requests with bodies ## Impact A server-side `fetch` with a request body may return a cached **response** body from a different request to the same URL but different body. Confidential data in the `POST`'s **response** body would then leak to unauth…
VulnCve 2026 64648
medium System graph security Trivy conf 1.00 CVE-2026-64648: next 16.2.9 — package-lock.json
Next.js: Cache confusion of response bodies for requests with bodies ## Impact A server-side `fetch` with a request body may return a cached **response** body from a different request to the same URL but different body. Confidential data in the `POST`'s **response** body would then leak to unauth…
VulnCve 2026 64648
medium System graph quality Integrity conf 0.90 Fire-and-forget `fetch()` has no rejection handler — components/AppShell.tsx:280
This fetch result is neither awaited, returned, assigned, nor followed by `.catch(...)`. A network failure can therefore become an unhandled promise rejection. Await/return the promise or attach an explicit rejection handler.
components/AppShell.tsx:280 runtime safetyRobustnessUnhandled promise
medium System graph quality Integrity conf 0.90 Fire-and-forget `fetch()` has no rejection handler — components/ChatInput.tsx:481
This fetch result is neither awaited, returned, assigned, nor followed by `.catch(...)`. A network failure can therefore become an unhandled promise rejection. Await/return the promise or attach an explicit rejection handler.
components/ChatInput.tsx:481 runtime safetyRobustnessUnhandled promise
medium System graph quality Integrity conf 0.90 Fire-and-forget `fetch()` has no rejection handler — components/FileViewer.tsx:607
This fetch result is neither awaited, returned, assigned, nor followed by `.catch(...)`. A network failure can therefore become an unhandled promise rejection. Await/return the promise or attach an explicit rejection handler.
components/FileViewer.tsx:607 runtime safetyRobustnessUnhandled promise
medium System graph quality Integrity conf 0.90 Fire-and-forget `fetch()` has no rejection handler — components/ModelsConfig.tsx:1301
This fetch result is neither awaited, returned, assigned, nor followed by `.catch(...)`. A network failure can therefore become an unhandled promise rejection. Await/return the promise or attach an explicit rejection handler.
components/ModelsConfig.tsx:1301 runtime safetyRobustnessUnhandled promise
medium System graph quality Integrity conf 0.90 Fire-and-forget `fetch()` has no rejection handler — components/SessionSidebar.tsx:462
This fetch result is neither awaited, returned, assigned, nor followed by `.catch(...)`. A network failure can therefore become an unhandled promise rejection. Await/return the promise or attach an explicit rejection handler.
components/SessionSidebar.tsx:462 runtime safetyRobustnessUnhandled promise
medium System graph quality Integrity conf 0.90 Fire-and-forget `fetch()` has no rejection handler — hooks/useAgentSession.ts:897
This fetch result is neither awaited, returned, assigned, nor followed by `.catch(...)`. A network failure can therefore become an unhandled promise rejection. Await/return the promise or attach an explicit rejection handler.
hooks/useAgentSession.ts:897 runtime safetyRobustnessUnhandled promise
medium System graph security security conf 0.65 Insecure pattern 'dangerous_innerhtml' in components/MarkdownBody.tsx:193
Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible.
components/MarkdownBody.tsx:193 Dangerous innerhtml
medium System graph cicd CI/CD security conf 1.00 No CI/CD pipelines detected
No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints.
CI/CD securityCoverage
medium System graph quality Placeholder conf 1.00 Placeholder or mock-heavy implementation detected
Found 47 placeholder/mock markers across 11 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data.
Mock dataIncompleteGenerated repo pattern
medium System graph security Skillspector conf 0.50 SkillSpector E1 (data-exfil) in components/ModelsConfig.tsx
https://api.example.com/ Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended. Skill: unknown Rule: E1 Category: data-exfil Severity: MEDIUM Confidence: 0.50 Remediation: Verify the destination URL is trusted and necessary…
components/ModelsConfig.tsx:324 Mcp skillData exfilE1
medium System graph security Skillspector conf 0.50 SkillSpector E1 (data-exfil) in lib/skill-updates.ts
https://api.github.com/ Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended. Skill: unknown Rule: E1 Category: data-exfil Severity: MEDIUM Confidence: 0.50 Remediation: Verify the destination URL is trusted and necessary.…
lib/skill-updates.ts:158 Mcp skillData exfilE1
medium System graph security Skillspector conf 0.80 SkillSpector EA1 (excessive-agency) in lib/session-title.ts
call any tools Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution. Skill: unknown Rule: EA1 Category: excessive-agency Severity: MEDIUM Confid…
lib/session-title.ts:18 Mcp skillExcessive agencyEa1
medium System graph security Skillspector conf 0.60 SkillSpector RA2 (rogue-agent) in AGENTS.md
create ~/pi-cwd-YYYYMMDD files/[...path]/route.ts GET file contents for viewer home/route.ts GET user home directory models/route.ts GET { models, modelL Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or sta…
AGENTS.md:56 Mcp skillRogue agentRa2
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency @protobufjs/utf8 1.1.0: GHSA-q6x5-8v7m-xcrf
OSV.dev reports `@protobufjs/utf8` at version `1.1.0` (resolved in `bun.lock`) is affected by GHSA-q6x5-8v7m-xcrf (aka CVE-2026-44288). Note: `@protobufjs/utf8` is a transitive dependency — pulled in by another package, not declared directly in a manifest. protobufjs has overlong UTF-8 decoding A…
bun.lock ScaOsvGhsa q6x5 8v7m xcrf
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 1.1.12: GHSA-f886-m6hf-6m8v
OSV.dev reports `brace-expansion` at version `1.1.12` (resolved in `bun.lock`) is affected by GHSA-f886-m6hf-6m8v (aka CVE-2026-33750). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: Zero-step sequence causes…
bun.lock ScaOsvGhsa f886 m6hf 6m8v
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency mermaid 11.14.0: GHSA-6m6c-36f7-fhxh
OSV.dev reports `mermaid` at version `11.14.0` (resolved in `bun.lock`) is affected by GHSA-6m6c-36f7-fhxh (aka CVE-2026-41150). Mermaid Gantt Charts are vulnerable to an Infinite Loop DoS Aliases: CVE-2026-41150 Advisory: https://osv.dev/vulnerability/GHSA-6m6c-36f7-fhxh Fix: upgrade `mermaid` p…
package.json ScaOsvGhsa 6m6c 36f7 fhxh
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency mermaid 11.14.0: GHSA-87f9-hvmw-gh4p
OSV.dev reports `mermaid` at version `11.14.0` (resolved in `bun.lock`) is affected by GHSA-87f9-hvmw-gh4p (aka CVE-2026-41159). Mermaid: Improper sanitization of configuration leads to CSS injection Aliases: CVE-2026-41159 Advisory: https://osv.dev/vulnerability/GHSA-87f9-hvmw-gh4p Fix: upgrade …
package.json ScaOsvGhsa 87f9 hvmw gh4p
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency mermaid 11.14.0: GHSA-ghcm-xqfw-q4vr
OSV.dev reports `mermaid` at version `11.14.0` (resolved in `bun.lock`) is affected by GHSA-ghcm-xqfw-q4vr (aka CVE-2026-41149). Mermaid: Improper sanitization of `classDef` in state diagrams leads to HTML injection Aliases: CVE-2026-41149 Advisory: https://osv.dev/vulnerability/GHSA-ghcm-xqfw-q4…
package.json ScaOsvGhsa ghcm xqfw q4vr
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency mermaid 11.14.0: GHSA-xcj9-5m2h-648r
OSV.dev reports `mermaid` at version `11.14.0` (resolved in `bun.lock`) is affected by GHSA-xcj9-5m2h-648r. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-xcj9-5m2h-648r Fix: upgrade `mermaid` past the affected range per the advisory.
package.json ScaOsvGhsa xcj9 5m2h 648r
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 16.2.9: GHSA-4633-3j49-mh5q
OSV.dev reports `next` at version `16.2.9` (resolved in `bun.lock`) is affected by GHSA-4633-3j49-mh5q (aka CVE-2026-64647). Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences Aliases: CVE-2026-64647 Advisory: https://osv.dev/vulnerability…
package.json ScaOsvGhsa 4633 3j49 mh5q
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 16.2.9: GHSA-4c39-4ccg-62r3
OSV.dev reports `next` at version `16.2.9` (resolved in `bun.lock`) is affected by GHSA-4c39-4ccg-62r3 (aka CVE-2026-64646). Next.js: Unbounded Server Action payload in Edge runtime Aliases: CVE-2026-64646 Advisory: https://osv.dev/vulnerability/GHSA-4c39-4ccg-62r3 Fix: upgrade `next` past the af…
package.json ScaOsvGhsa 4c39 4ccg 62r3
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 16.2.9: GHSA-68g3-v927-f742
OSV.dev reports `next` at version `16.2.9` (resolved in `bun.lock`) is affected by GHSA-68g3-v927-f742 (aka CVE-2026-64648). Next.js: Cache confusion of response bodies for requests with bodies Aliases: CVE-2026-64648 Advisory: https://osv.dev/vulnerability/GHSA-68g3-v927-f742 Fix: upgrade `next`…
package.json ScaOsvGhsa 68g3 v927 f742
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 16.2.9: GHSA-955p-x3mx-jcvp
OSV.dev reports `next` at version `16.2.9` (resolved in `bun.lock`) is affected by GHSA-955p-x3mx-jcvp (aka CVE-2026-64643). Next.js: Unauthenticated disclosure of internal Server Function endpoints Aliases: CVE-2026-64643 Advisory: https://osv.dev/vulnerability/GHSA-955p-x3mx-jcvp Fix: upgrade `…
package.json ScaOsvGhsa 955p x3mx jcvp
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 16.2.9: GHSA-q8wf-6r8g-63ch
OSV.dev reports `next` at version `16.2.9` (resolved in `bun.lock`) is affected by GHSA-q8wf-6r8g-63ch. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-q8wf-6r8g-63ch Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa q8wf 6r8g 63ch
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency postcss 8.4.31: GHSA-qx2v-qp2m-jg93
OSV.dev reports `postcss` at version `8.4.31` (resolved in `bun.lock`) is affected by GHSA-qx2v-qp2m-jg93 (aka CVE-2026-41305). PostCSS has XSS via Unescaped </style> in its CSS Stringify Output Aliases: CVE-2026-41305 Advisory: https://osv.dev/vulnerability/GHSA-qx2v-qp2m-jg93 Fix: upgrade `post…
bun.lock ScaOsvGhsa qx2v qp2m jg93
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency postcss 8.5.8: GHSA-qx2v-qp2m-jg93
OSV.dev reports `postcss` at version `8.5.8` (resolved in `bun.lock`) is affected by GHSA-qx2v-qp2m-jg93 (aka CVE-2026-41305). PostCSS has XSS via Unescaped </style> in its CSS Stringify Output Aliases: CVE-2026-41305 Advisory: https://osv.dev/vulnerability/GHSA-qx2v-qp2m-jg93 Fix: upgrade `postc…
package.json ScaOsvGhsa qx2v qp2m jg93
low System graph api Wiring conf 1.00 5 backend endpoints not called by scanned frontend
No scanned frontend call matched these backend routes. Sample: GET /api/models, GET /api/auth/api-key/{provider}, GET /api/agent/{id}/bash-output, GET /api/agent/{id}/events, GET /api/agent/running/events. This is fine when endpoints serve external clients (mobile apps, SDKs, third-party integratio…
Unused endpoint
low System graph frontend Frontend quality conf 0.85 Icon-only button without accessible name — components/ModelsConfig.tsx:1466
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
components/ModelsConfig.tsx:1466 Fq button no label
low System graph frontend Frontend quality conf 0.85 Icon-only button without accessible name — components/PluginsConfig.tsx:751
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
components/PluginsConfig.tsx:751 Fq button no label
low System graph frontend Frontend quality conf 0.85 Icon-only button without accessible name — components/SkillsConfig.tsx:905
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
components/SkillsConfig.tsx:905 Fq button no label
low System graph security Skillspector conf 0.70 SkillSpector EA3 (excessive-agency) in LICENSE
NOT LIMITED TO Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface. Skill: unknown Rule: EA3 Category: excessive-agency Severity: LOW Confidence: 0.70 Remediat…
LICENSE:16 Mcp skillExcessive agencyEa3
low System graph security Skillspector conf 0.40 SkillSpector SC1 (supply-chain) in package.json
"react": "^19.2.4" Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions. Skill: unknown Rule: SC1 Category: supply-chain Severity: LOW Confidence: 0.40 Remediation: Pin all dependency versions in requirements.txt or pyproject.toml. Use exac…
package.json:40 Mcp skillSupply chainSc1
low System graph quality Complexity conf 1.00 Very large file: components/AppShell.tsx (1290 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: components/ChatInput.tsx (1967 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: components/MessageView.tsx (1450 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: components/ModelsConfig.tsx (1648 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: components/SessionSidebar.tsx (2065 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: hooks/useAgentSession.ts (1644 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph dependencies dependencies conf 0.90 Vulnerable dependency @babel/core 7.29.0: GHSA-4x5r-pxfx-6jf8
OSV.dev reports `@babel/core` at version `7.29.0` (resolved in `bun.lock`) is affected by GHSA-4x5r-pxfx-6jf8 (aka CVE-2026-49356). Note: `@babel/core` is a transitive dependency — pulled in by another package, not declared directly in a manifest. @babel/core: Arbitrary File Read via sourceMapping…
bun.lock ScaOsvGhsa 4x5r pxfx 6jf8
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/392f9568-620c-4cd2-884a-45ee9103008f/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/392f9568-620c-4cd2-884a-45ee9103008f/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.