Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

SidraChain/blockscout-frontend

https://github.com/SidraChain/blockscout-frontend · scanned 2026-10-15 12:56 UTC (1 week, 5 days ago)

622 raw signals (0 security + 622 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 week, 5 days ago · v1 · 622 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
63.8
/100
Security checks
64
0 findings
System graph
64
100.0% cov · 622 findings
Critical
6
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: severity: medium × excluding tests × Reset all
Severity: Critical 6 High 174 Medium 349 Low 53 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 622 Crowd 0 Layer: Frontend 50 Security 433 Quality 33 Hardware 2 Cicd 1 Dependencies 98 Api 5
Scan summary Repository scanned at 63.8/100 with 100.0% coverage. It contains 7833 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 622 findings — concentrated in security (433), dependencies (98), frontend (50). Risk profile is high: 6 critical, 174 high, 349 medium. Recommended next step: open the security layer findings first — that's where the highest-impact wins live.

Showing 326 of 622 actionable findings. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

medium System graph frontend Frontend quality conf 0.80 `dangerouslySetInnerHTML` used in a React component — ui/address/details/AddressAlerts.tsx:46
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
ui/address/details/AddressAlerts.tsx:46 Fq dangerous html
medium System graph frontend Frontend quality conf 0.80 `dangerouslySetInnerHTML` used in a React component — ui/address/details/AddressQrCode.tsx:93
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
ui/address/details/AddressQrCode.tsx:93 Fq dangerous html
medium System graph frontend Frontend quality conf 0.80 `dangerouslySetInnerHTML` used in a React component — ui/searchResults/SearchResultEntityTag.tsx:25
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
ui/searchResults/SearchResultEntityTag.tsx:25 Fq dangerous html
medium System graph frontend Frontend quality conf 0.80 `dangerouslySetInnerHTML` used in a React component — ui/searchResults/SearchResultListItem.tsx:79
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
ui/searchResults/SearchResultListItem.tsx:79 Fq dangerous html
medium System graph frontend Frontend quality conf 0.80 `dangerouslySetInnerHTML` used in a React component — ui/searchResults/SearchResultTableItem.tsx:85
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
ui/searchResults/SearchResultTableItem.tsx:85 Fq dangerous html
medium System graph frontend Frontend quality conf 0.80 `dangerouslySetInnerHTML` used in a React component — ui/shared/entities/address/AddressIdenticon.tsx:56
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
ui/shared/entities/address/AddressIdenticon.tsx:56 Fq dangerous html
medium System graph frontend Frontend quality conf 0.80 `dangerouslySetInnerHTML` used in a React component — ui/snippets/header/alerts/MaintenanceAlert.tsx:15
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
ui/snippets/header/alerts/MaintenanceAlert.tsx:15 Fq dangerous html
medium System graph frontend Frontend quality conf 0.80 `dangerouslySetInnerHTML` used in a React component — ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestAddress.tsx:67
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestAddress.tsx:67 Fq dangerous html
medium System graph frontend Frontend quality conf 0.80 `dangerouslySetInnerHTML` used in a React component — ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestApp.tsx:46
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestApp.tsx:46 Fq dangerous html
medium System graph frontend Frontend quality conf 0.80 `dangerouslySetInnerHTML` used in a React component — ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestBlock.tsx:46
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestBlock.tsx:46 Fq dangerous html
medium System graph frontend Frontend quality conf 0.80 `dangerouslySetInnerHTML` used in a React component — ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestCluster.tsx:34
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestCluster.tsx:34 Fq dangerous html
medium System graph frontend Frontend quality conf 0.80 `dangerouslySetInnerHTML` used in a React component — ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestDomain.tsx:31
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestDomain.tsx:31 Fq dangerous html
medium System graph frontend Frontend quality conf 0.80 `dangerouslySetInnerHTML` used in a React component — ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestToken.tsx:42
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestToken.tsx:42 Fq dangerous html
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: .cursor/commands/deploy-demo.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
.cursor/commands/deploy-demo.md VerificationCursor rule
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: .cursor/commands/get-checks-status.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
.cursor/commands/get-checks-status.md VerificationCursor rule
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: .cursor/commands/prepare-release.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
.cursor/commands/prepare-release.md VerificationCursor rule
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: .cursor/mcp.json
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
.cursor/mcp.json VerificationMcp config
medium System graph quality Agent instructions conf 1.00 Agent instructions exist but release-hardening basics are missing
AI-coder instruction files were found, but the repo is missing ci. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable.
Repo hardeningGenerated repo pattern
medium System graph quality Placeholder conf 1.00 Critical user flow still appears backed by mock or placeholder data
A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded.
Mock dataCritical flowGenerated repo pattern
medium System graph security Trivy conf 1.00 CVE-2025-13465: lodash 4.17.21 — yarn.lock
lodash: prototype pollution in _.unset and _.omit functions Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes. The issue permits deletion o…
VulnCve 2025 13465
medium System graph security Trivy conf 1.00 CVE-2025-15599: dompurify 3.2.6 — yarn.lock
DOMPurify: DOMPurify: Cross-site scripting DOMPurify 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8 contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting missing textarea rawtext element validation in the SAFE_FOR_XML regex. Attackers can in…
VulnCve 2025 15599
medium System graph security Trivy conf 1.00 CVE-2025-62718: axios 1.12.0 — yarn.lock
axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not correctly handle hostname normalization when checking NO_PROXY rules. Requests to loopback …
VulnCve 2025 62718
medium System graph security Trivy conf 1.00 CVE-2025-62718: axios 1.13.2 — yarn.lock
axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not correctly handle hostname normalization when checking NO_PROXY rules. Requests to loopback …
VulnCve 2025 62718
medium System graph security Trivy conf 1.00 CVE-2025-69873: ajv 6.12.6 — deploy/tools/favicon-generator/yarn.lock
ajv: ReDoS via $data reference ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to the JavaS…
VulnCve 2025 69873
medium System graph security Trivy conf 1.00 CVE-2025-69873: ajv 6.12.6 — deploy/tools/feature-reporter/yarn.lock
ajv: ReDoS via $data reference ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to the JavaS…
VulnCve 2025 69873
medium System graph security Trivy conf 1.00 CVE-2026-0540: dompurify 3.2.6 — yarn.lock
DOMPurify: DOMPurify: Cross-site scripting vulnerability DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through 2.5.8, fixed in commit 2726c74, contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting five missing rawtext elements (noscript, xmp, n…
VulnCve 2026 0540
medium System graph security Trivy conf 1.00 CVE-2026-101900: axios 1.12.0 — yarn.lock
axios: Axios: Outbound HTTP header injection via prototype pollution in fetch adapter Axios is a promise-based HTTP client for the browser and Node.js. From 1.12.0 until 1.20.0, ResolveConfig reads inherited Symbol.toStringTag, append, and getHeaders properties while resolving FormData headers. A …
VulnCve 2026 101900
medium System graph security Trivy conf 1.00 CVE-2026-101900: axios 1.13.2 — yarn.lock
axios: Axios: Outbound HTTP header injection via prototype pollution in fetch adapter Axios is a promise-based HTTP client for the browser and Node.js. From 1.12.0 until 1.20.0, ResolveConfig reads inherited Symbol.toStringTag, append, and getHeaders properties while resolving FormData headers. A …
VulnCve 2026 101900
medium System graph security Trivy conf 1.00 CVE-2026-101902: axios 1.12.0 — yarn.lock
axios: axios: Unintended HTTP method override via prototype pollution gadget Axios is a promise-based HTTP client for the browser and Node.js. From 0.27.2 until 0.34.0 and 1.20.0, Axios default-instance requests that omit an explicit method can read an inherited method value from Object.prototype.…
VulnCve 2026 101902
medium System graph security Trivy conf 1.00 CVE-2026-101902: axios 1.13.2 — yarn.lock
axios: axios: Unintended HTTP method override via prototype pollution gadget Axios is a promise-based HTTP client for the browser and Node.js. From 0.27.2 until 0.34.0 and 1.20.0, Axios default-instance requests that omit an explicit method can read an inherited method value from Object.prototype.…
VulnCve 2026 101902
medium System graph security Trivy conf 1.00 CVE-2026-101904: axios 1.12.0 — yarn.lock
axios: Axios: HTTP header injection via inherited prototype properties Axios is a promise-based HTTP client for the browser and Node.js. From 1.0.0 until 1.20.0, the dispatchRequest function normalizes inherited Object.prototype.headers from a replacement request configuration. A separate same-pro…
VulnCve 2026 101904
medium System graph security Trivy conf 1.00 CVE-2026-101904: axios 1.13.2 — yarn.lock
axios: Axios: HTTP header injection via inherited prototype properties Axios is a promise-based HTTP client for the browser and Node.js. From 1.0.0 until 1.20.0, the dispatchRequest function normalizes inherited Object.prototype.headers from a replacement request configuration. A separate same-pro…
VulnCve 2026 101904
medium System graph security Trivy conf 1.00 CVE-2026-101908: axios 1.12.0 — yarn.lock
axios: Axios: Outbound HTTP request manipulation via fetch adapter prototype pollution Axios is a promise-based HTTP client for the browser and Node.js. From 1.7.0 until 1.20.0, the fetch adapter constructs a Request with sanitized resolvedOptions but then calls fetch with the original fetchOption…
VulnCve 2026 101908
medium System graph security Trivy conf 1.00 CVE-2026-101908: axios 1.13.2 — yarn.lock
axios: Axios: Outbound HTTP request manipulation via fetch adapter prototype pollution Axios is a promise-based HTTP client for the browser and Node.js. From 1.7.0 until 1.20.0, the fetch adapter constructs a Request with sanitized resolvedOptions but then calls fetch with the original fetchOption…
VulnCve 2026 101908
medium System graph security Trivy conf 1.00 CVE-2026-102277: brace-expansion 1.1.12 — deploy/tools/affected-tests/yarn.lock
brace-expansion: brace-expansion: Denial of Service via crafted brace patterns The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand function handles untrusted {a},b}-shaped patterns with many trailing c…
VulnCve 2026 102277
medium System graph security Trivy conf 1.00 CVE-2026-102277: brace-expansion 2.0.1 — yarn.lock
brace-expansion: brace-expansion: Denial of Service via crafted brace patterns The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand function handles untrusted {a},b}-shaped patterns with many trailing c…
VulnCve 2026 102277
medium System graph security Trivy conf 1.00 CVE-2026-104182: stream-json 1.9.1 — yarn.lock
stream-json: stream-json: Denial of Service via inefficient comment scanning stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.6.0, the JSONC parser at stream-json/jsonc/parser.js and verifier at stream-json/jsonc/verifier…
VulnCve 2026 104182
medium System graph security Trivy conf 1.00 CVE-2026-104183: stream-json 1.9.1 — yarn.lock
stream-json: stream-json: Object prototype manipulation via crafted JSON input stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.6.0, Assembler materializes object properties with plain assignment, so an input key named __…
VulnCve 2026 104183
medium System graph security Trivy conf 1.00 CVE-2026-104872: @opentelemetry/instrumentation-cassandra-driver 0.36.0 — yarn.lock
@opentelemetry/instrumentation-cassandra-driver: @opentelemetry/instrumentation-knex: @opentelemetry/instrumentation-mongoose: @opentelemetry/instrumentation-mysql: @opentelemetry/instrumentation-mysql2: @opentelemetry/instrumentation-oracledb: @opentelemetry/instrumentation-pg: @opentelemetry/inst…
VulnCve 2026 104872
medium System graph security Trivy conf 1.00 CVE-2026-104872: @opentelemetry/instrumentation-knex 0.34.0 — yarn.lock
@opentelemetry/instrumentation-cassandra-driver: @opentelemetry/instrumentation-knex: @opentelemetry/instrumentation-mongoose: @opentelemetry/instrumentation-mysql: @opentelemetry/instrumentation-mysql2: @opentelemetry/instrumentation-oracledb: @opentelemetry/instrumentation-pg: @opentelemetry/inst…
VulnCve 2026 104872
medium System graph security Trivy conf 1.00 CVE-2026-104872: @opentelemetry/instrumentation-mongoose 0.36.0 — yarn.lock
@opentelemetry/instrumentation-cassandra-driver: @opentelemetry/instrumentation-knex: @opentelemetry/instrumentation-mongoose: @opentelemetry/instrumentation-mysql: @opentelemetry/instrumentation-mysql2: @opentelemetry/instrumentation-oracledb: @opentelemetry/instrumentation-pg: @opentelemetry/inst…
VulnCve 2026 104872
medium System graph security Trivy conf 1.00 CVE-2026-104872: @opentelemetry/instrumentation-mysql 0.36.0 — yarn.lock
@opentelemetry/instrumentation-cassandra-driver: @opentelemetry/instrumentation-knex: @opentelemetry/instrumentation-mongoose: @opentelemetry/instrumentation-mysql: @opentelemetry/instrumentation-mysql2: @opentelemetry/instrumentation-oracledb: @opentelemetry/instrumentation-pg: @opentelemetry/inst…
VulnCve 2026 104872
medium System graph security Trivy conf 1.00 CVE-2026-104872: @opentelemetry/instrumentation-mysql2 0.36.0 — yarn.lock
@opentelemetry/instrumentation-cassandra-driver: @opentelemetry/instrumentation-knex: @opentelemetry/instrumentation-mongoose: @opentelemetry/instrumentation-mysql: @opentelemetry/instrumentation-mysql2: @opentelemetry/instrumentation-oracledb: @opentelemetry/instrumentation-pg: @opentelemetry/inst…
VulnCve 2026 104872
medium System graph security Trivy conf 1.00 CVE-2026-104872: @opentelemetry/instrumentation-pg 0.39.1 — yarn.lock
@opentelemetry/instrumentation-cassandra-driver: @opentelemetry/instrumentation-knex: @opentelemetry/instrumentation-mongoose: @opentelemetry/instrumentation-mysql: @opentelemetry/instrumentation-mysql2: @opentelemetry/instrumentation-oracledb: @opentelemetry/instrumentation-pg: @opentelemetry/inst…
VulnCve 2026 104872
medium System graph security Trivy conf 1.00 CVE-2026-104872: @opentelemetry/instrumentation-tedious 0.8.0 — yarn.lock
@opentelemetry/instrumentation-cassandra-driver: @opentelemetry/instrumentation-knex: @opentelemetry/instrumentation-mongoose: @opentelemetry/instrumentation-mysql: @opentelemetry/instrumentation-mysql2: @opentelemetry/instrumentation-oracledb: @opentelemetry/instrumentation-pg: @opentelemetry/inst…
VulnCve 2026 104872
medium System graph security Trivy conf 1.00 CVE-2026-15157: undici 6.21.3 — yarn.lock
undici: undici: HTTP header injection via unvalidated blob-like body type property undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1.1 dispatcher. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and f…
VulnCve 2026 15157
medium System graph security Trivy conf 1.00 CVE-2026-1525: undici 6.21.3 — yarn.lock
undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers Undici allows duplicate HTTP Content-Length headers when they are provided in an array with case-variant names (e.g., Content-Length and content-length). This produces malformed HTTP/1.1 requests w…
VulnCve 2026 1525
medium System graph security Trivy conf 1.00 CVE-2026-1527: undici 6.21.3 — yarn.lock
undici: Undici: HTTP header injection and request smuggling vulnerability ImpactWhen an application passes user-controlled input to the upgrade option of client.request(), an attacker can inject CRLF sequences (\r\n) to: * Inject arbitrary HTTP headers * Terminate the HTTP request premature…
VulnCve 2026 1527
medium System graph security Trivy conf 1.00 CVE-2026-16728: undici 6.21.3 — yarn.lock
undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the application after a retry or resume of a partial response. In undici before 6.…
VulnCve 2026 16728
medium System graph security Trivy conf 1.00 CVE-2026-16729: undici 6.21.3 — yarn.lock
undici: Undici: Cookie attribute injection allows bypassing security protections undici's setCookie function does not fully sanitize cookie attributes. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, a domain value is not checked for semicolons and entri…
VulnCve 2026 16729
medium System graph security Trivy conf 1.00 CVE-2026-22036: undici 6.21.3 — yarn.lock
undici: Undici: Denial of Service via excessive decompression steps Undici is an HTTP/1.1 client for Node.js. Prior to 7.18.0 and 6.23.0, the number of links in the decompression chain is unbounded and the default maxHeaderSize allows a malicious server to insert thousands compression steps leadin…
VulnCve 2026 22036
medium System graph security Trivy conf 1.00 CVE-2026-2327: markdown-it 14.1.0 — yarn.lock
markdown-it: markdown-it: Denial of Service via Regular Expression Denial of Service in linkify function Versions of the package markdown-it from 13.0.0 and before 14.1.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the use of the regex /\*+$/ in the linkify function. An a…
VulnCve 2026 2327
medium System graph security Trivy conf 1.00 CVE-2026-24398: hono 4.11.4 — yarn.lock
Hono IPv4 address validation bypass in IP Restriction Middleware allows IP spoofing Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, IP Restriction Middleware in Hono is vulnerable to an IP address validation bypass. The `IPV4_REGEX` pa…
VulnCve 2026 24398
medium System graph security Trivy conf 1.00 CVE-2026-24472: hono 4.11.4 — yarn.lock
Hono cache middleware ignores "Cache-Control: private" leading to Web Cache Deception Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, Cache Middleware contains an information disclosure vulnerability caused by improper handling of HTTP…
VulnCve 2026 24472
medium System graph security Trivy conf 1.00 CVE-2026-24473: hono 4.11.4 — yarn.lock
Hono has an Arbitrary Key Read in Serve static Middleware (Cloudflare Workers Adapter) Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, Serve static Middleware for the Cloudflare Workers adapter contains an information disclosure vulner…
VulnCve 2026 24473
medium System graph security Trivy conf 1.00 CVE-2026-24771: hono 4.11.4 — yarn.lock
Hono vulnerable to XSS through ErrorBoundary component Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, a Cross-Site Scripting (XSS) vulnerability exists in the `ErrorBoundary` component of the hono/jsx library. Under certain usage pat…
VulnCve 2026 24771
medium System graph security Trivy conf 1.00 CVE-2026-2739: bn.js 5.2.1 — yarn.lock
bn.js: bn.js: Denial of Service via calling maskn(0) This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely. Package: bn.j…
VulnCve 2026 2739
medium System graph security Trivy conf 1.00 CVE-2026-2739: bn.js 5.2.2 — yarn.lock
bn.js: bn.js: Denial of Service via calling maskn(0) This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely. Package: bn.j…
VulnCve 2026 2739
medium System graph security Trivy conf 1.00 CVE-2026-27980: next 15.5.10 — yarn.lock
next.js: Next.js: Unbounded next/image disk cache growth can exhaust storage Next.js is a React framework for building full-stack web applications. Starting in version 10.0.0 and prior to version 16.1.7, the default Next.js image optimization disk cache (`/_next/image`) did not have a configurable…
VulnCve 2026 27980
medium System graph security Trivy conf 1.00 CVE-2026-29057: next 15.5.10 — yarn.lock
next.js: Next.js: HTTP request smuggling in rewrites Next.js is a React framework for building full-stack web applications. Starting in version 9.5.0 and prior to versions 15.5.13 and 16.1.7, when Next.js rewrites proxy traffic to an external backend, a crafted `DELETE`/`OPTIONS` request using `Tr…
VulnCve 2026 29057
medium System graph security Trivy conf 1.00 CVE-2026-29085: hono 4.11.4 — yarn.lock
Hono Vulnerable to SSE Control Field Injection via CR/LF in writeSSE() Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, when using streamSSE() in Streaming Helper, the event, id, and retry fields were not validated for carriage return (…
VulnCve 2026 29085
medium System graph security Trivy conf 1.00 CVE-2026-29086: hono 4.11.4 — yarn.lock
Hono Vulnerable to Cookie Attribute Injection via Unsanitized domain and path in setCookie() Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, the setCookie() utility did not validate semicolons (;), carriage returns (\r), or newline cha…
VulnCve 2026 29086
medium System graph security Trivy conf 1.00 CVE-2026-2950: lodash 4.17.21 — yarn.lock
lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass Impact: Lodash versions 4.17.23 and earlier are vulnerable to prototype pollution in the _.unset and _.omit functions. The fix for (CVE-2025-13465: https://github.com/lodash/lodash/security/…
VulnCve 2026 2950
medium System graph security Trivy conf 1.00 CVE-2026-31808: file-type 20.5.0 — yarn.lock
file-type: file-type: Denial of Service due to infinite loop in ASF file parsing file-type detects the file type of a file, stream, or data. Prior to 21.3.1, a denial of service vulnerability exists in the ASF (WMV/WMA) file type detection parser. When parsing a crafted input where an ASF sub-head…
VulnCve 2026 31808
medium System graph security Trivy conf 1.00 CVE-2026-32630: file-type 20.5.0 — yarn.lock
file-type: file-type: Denial of Service via excessive memory growth from crafted ZIP files file-type detects the file type of a file, stream, or data. From 20.0.0 to 21.3.1, a crafted ZIP file can trigger excessive memory growth during type detection in file-type when using fileTypeFromBuffer(), f…
VulnCve 2026 32630
medium System graph security Trivy conf 1.00 CVE-2026-33532: yaml 1.10.2 — yarn.lock
yaml: yaml: Denial of Service via deeply nested YAML document parsing `yaml` is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of `yaml` on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The no…
VulnCve 2026 33532
medium System graph security Trivy conf 1.00 CVE-2026-33672: picomatch 2.3.1 — deploy/tools/affected-tests/yarn.lock
picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the `POSIX_REGEX_SOURCE` object. Becau…
VulnCve 2026 33672
medium System graph security Trivy conf 1.00 CVE-2026-33672: picomatch 2.3.1 — deploy/tools/favicon-generator/yarn.lock
picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the `POSIX_REGEX_SOURCE` object. Becau…
VulnCve 2026 33672
medium System graph security Trivy conf 1.00 CVE-2026-33672: picomatch 2.3.1 — deploy/tools/feature-reporter/yarn.lock
picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the `POSIX_REGEX_SOURCE` object. Becau…
VulnCve 2026 33672
medium System graph security Trivy conf 1.00 CVE-2026-33672: picomatch 2.3.1 — deploy/tools/sitemap-generator/yarn.lock
picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the `POSIX_REGEX_SOURCE` object. Becau…
VulnCve 2026 33672
medium System graph security Trivy conf 1.00 CVE-2026-33672: picomatch 2.3.1 — yarn.lock
picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the `POSIX_REGEX_SOURCE` object. Becau…
VulnCve 2026 33672
medium System graph security Trivy conf 1.00 CVE-2026-33750: brace-expansion 1.1.12 — deploy/tools/affected-tests/yarn.lock
brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13, a brace pattern with a zero step value (e.g., `{1..2..0}`) caus…
VulnCve 2026 33750
medium System graph security Trivy conf 1.00 CVE-2026-33750: brace-expansion 2.0.1 — yarn.lock
brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13, a brace pattern with a zero step value (e.g., `{1..2..0}`) caus…
VulnCve 2026 33750
medium System graph security Trivy conf 1.00 CVE-2026-34043: serialize-javascript 6.0.2 — deploy/tools/favicon-generator/yarn.lock
serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service (DoS) vulnerability caused by CPU exh…
VulnCve 2026 34043
medium System graph security Trivy conf 1.00 CVE-2026-34043: serialize-javascript 6.0.2 — deploy/tools/feature-reporter/yarn.lock
serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service (DoS) vulnerability caused by CPU exh…
VulnCve 2026 34043
medium System graph security Trivy conf 1.00 CVE-2026-39407: hono 4.11.4 — yarn.lock
Hono: Middleware bypass via repeated slashes in serveStatic Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, a path handling inconsistency in serveStatic allows protected static files to be accessed by using repeated slashes (//) in the reques…
VulnCve 2026 39407
medium System graph security Trivy conf 1.00 CVE-2026-39408: hono 4.11.4 — yarn.lock
Hono: Path traversal in toSSG() allows writing files outside the output directory Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, a path traversal issue in toSSG() allows files to be written outside the configured output directory during stat…
VulnCve 2026 39408
medium System graph security Trivy conf 1.00 CVE-2026-39409: hono 4.11.4 — yarn.lock
Hono has incorrect IP matching in ipRestriction() for IPv4-mapped IPv6 addresses Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, ipRestriction() does not canonicalize IPv4-mapped IPv6 client addresses (e.g. ::ffff:127.0.0.1) before applying I…
VulnCve 2026 39409
medium System graph security Trivy conf 1.00 CVE-2026-39410: hono 4.11.4 — yarn.lock
Hono: Non-breaking space prefix bypass in cookie name handling in getCookie() Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.12, a discrepancy between browser cookie parsing and parse() handling allows cookie prefix protections to be bypassed. C…
VulnCve 2026 39410
medium System graph security Trivy conf 1.00 CVE-2026-40175: axios 1.12.0 — yarn.lock
axios: Axios: Remote Code Execution via Prototype Pollution escalation Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leverag…
VulnCve 2026 40175
medium System graph security Trivy conf 1.00 CVE-2026-40175: axios 1.13.2 — yarn.lock
axios: Axios: Remote Code Execution via Prototype Pollution escalation Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leverag…
VulnCve 2026 40175
medium System graph security Trivy conf 1.00 CVE-2026-41238: dompurify 3.2.6 — yarn.lock
DOMPurify: DOMPurify: Cross-Site Scripting bypass via prototype pollution DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Versions 3.0.1 through 3.3.3 are vulnerable to a prototype pollution-based XSS bypass. When an application uses `DOMPurify.sanitize()` with th…
VulnCve 2026 41238
medium System graph security Trivy conf 1.00 CVE-2026-41239: dompurify 3.2.6 — yarn.lock
DOMPurify: Vue 2: DOMPurify: Cross-site scripting due to incomplete sanitization of template expressions DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Starting in version 1.0.10 and prior to version 3.4.0, `SAFE_FOR_TEMPLATES` strips `{{...}}` expressions from u…
VulnCve 2026 41239
medium System graph security Trivy conf 1.00 CVE-2026-41240: dompurify 3.2.6 — yarn.lock
DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Versions prior to 3.4.0 have an inconsistency between FORBID_TAGS and FORBID_ATTR handling when function-based ADD_TAGS is used. Comm…
VulnCve 2026 41240
medium System graph security Trivy conf 1.00 CVE-2026-41305: postcss 8.4.31 — yarn.lock
postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Versions prior to 8.5.10 do not escape `</style>` sequences when stringifyin…
VulnCve 2026 41305
medium System graph security Trivy conf 1.00 CVE-2026-41305: postcss 8.4.33 — deploy/tools/affected-tests/yarn.lock
postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Versions prior to 8.5.10 do not escape `</style>` sequences when stringifyin…
VulnCve 2026 41305
medium System graph security Trivy conf 1.00 CVE-2026-41305: postcss 8.5.6 — yarn.lock
postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Versions prior to 8.5.10 do not escape `</style>` sequences when stringifyin…
VulnCve 2026 41305
medium System graph security Trivy conf 1.00 CVE-2026-41907: uuid 8.3.2 — yarn.lock
uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (small buf or large offset). This allows silen…
VulnCve 2026 41907
medium System graph security Trivy conf 1.00 CVE-2026-41907: uuid 9.0.1 — yarn.lock
uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (small buf or large offset). This allows silen…
VulnCve 2026 41907
medium System graph security Trivy conf 1.00 CVE-2026-42034: axios 1.12.0 — yarn.lock
axios: Axios: Denial of Service via oversized streamed uploads bypassing body limits Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, for stream request bodies, maxBodyLength is bypassed when maxRedirects is set to 0 (native http/https transport path). …
VulnCve 2026 42034
medium System graph security Trivy conf 1.00 CVE-2026-42034: axios 1.13.2 — yarn.lock
axios: Axios: Denial of Service via oversized streamed uploads bypassing body limits Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, for stream request bodies, maxBodyLength is bypassed when maxRedirects is set to 0 (native http/https transport path). …
VulnCve 2026 42034
medium System graph security Trivy conf 1.00 CVE-2026-42036: axios 1.12.0 — yarn.lock
axios: Axios: Denial of Service via unbounded stream consumption when 'responseType: 'stream'' is used Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when responseType: 'stream' is used, Axios returns the response stream without enforcing maxContentLe…
VulnCve 2026 42036
medium System graph security Trivy conf 1.00 CVE-2026-42036: axios 1.13.2 — yarn.lock
axios: Axios: Denial of Service via unbounded stream consumption when 'responseType: 'stream'' is used Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when responseType: 'stream' is used, Axios returns the response stream without enforcing maxContentLe…
VulnCve 2026 42036
medium System graph security Trivy conf 1.00 CVE-2026-42037: axios 1.12.0 — yarn.lock
axios: Node.js: Axios: Information disclosure via CRLF injection in multipart Content-Type header Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.1, the FormDataPart constructor in lib/helpers/formDataToStream.js interpolates value.type directly into the…
VulnCve 2026 42037
medium System graph security Trivy conf 1.00 CVE-2026-42037: axios 1.13.2 — yarn.lock
axios: Node.js: Axios: Information disclosure via CRLF injection in multipart Content-Type header Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.1, the FormDataPart constructor in lib/helpers/formDataToStream.js interpolates value.type directly into the…
VulnCve 2026 42037
medium System graph security Trivy conf 1.00 CVE-2026-42038: axios 1.12.0 — yarn.lock
axios: Axios: Information disclosure due to `no_proxy` bypass Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, he fix for no_proxy hostname normalization bypass is incomplete. When no_proxy=localhost is set, requests to 127.0.0.1 and [::1] still route t…
VulnCve 2026 42038
medium System graph security Trivy conf 1.00 CVE-2026-42038: axios 1.13.2 — yarn.lock
axios: Axios: Information disclosure due to `no_proxy` bypass Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, he fix for no_proxy hostname normalization bypass is incomplete. When no_proxy=localhost is set, requests to 127.0.0.1 and [::1] still route t…
VulnCve 2026 42038
medium System graph security Trivy conf 1.00 CVE-2026-42039: axios 1.12.0 — yarn.lock
axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, toFormData recursively walks nested objects with no depth limit, so a deeply nested value pas…
VulnCve 2026 42039
medium System graph security Trivy conf 1.00 CVE-2026-42039: axios 1.13.2 — yarn.lock
axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, toFormData recursively walks nested objects with no depth limit, so a deeply nested value pas…
VulnCve 2026 42039
medium System graph security Trivy conf 1.00 CVE-2026-42041: axios 1.12.0 — yarn.lock
axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype pollution to…
VulnCve 2026 42041
medium System graph security Trivy conf 1.00 CVE-2026-42041: axios 1.13.2 — yarn.lock
axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype pollution to…
VulnCve 2026 42041
medium System graph security Trivy conf 1.00 CVE-2026-42042: axios 1.12.0 — yarn.lock
axios: Axios: XSRF token bypass leading to information disclosure Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library's XSRF token protection logic uses JavaScript truthy/falsy semantics instead of strict boolean comparison for the withXS…
VulnCve 2026 42042
medium System graph security Trivy conf 1.00 CVE-2026-42042: axios 1.13.2 — yarn.lock
axios: Axios: XSRF token bypass leading to information disclosure Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library's XSRF token protection logic uses JavaScript truthy/falsy semantics instead of strict boolean comparison for the withXS…
VulnCve 2026 42042
medium System graph security Trivy conf 1.00 CVE-2026-42044: axios 1.12.0 — yarn.lock
axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.2, he Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype pollution in the ap…
VulnCve 2026 42044
medium System graph security Trivy conf 1.00 CVE-2026-42044: axios 1.13.2 — yarn.lock
axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.2, he Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype pollution in the ap…
VulnCve 2026 42044
medium System graph security Trivy conf 1.00 CVE-2026-44288: @protobufjs/utf8 1.1.0 — yarn.lock
protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a minimal UTF-8 decoder that accepted overlong UTF-8 byte sequences and decode…
VulnCve 2026 44288
medium System graph security Trivy conf 1.00 CVE-2026-44288: protobufjs 7.2.5 — yarn.lock
protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a minimal UTF-8 decoder that accepted overlong UTF-8 byte sequences and decode…
VulnCve 2026 44288
medium System graph security Trivy conf 1.00 CVE-2026-44288: protobufjs 7.3.2 — yarn.lock
protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a minimal UTF-8 decoder that accepted overlong UTF-8 byte sequences and decode…
VulnCve 2026 44288
medium System graph security Trivy conf 1.00 CVE-2026-44292: protobufjs 7.2.5 — yarn.lock
protobufjs: protobufjs: Data integrity impact due to prototype pollution protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated message constructors copied enumerable properties from a provided properties object without filtering the…
VulnCve 2026 44292
medium System graph security Trivy conf 1.00 CVE-2026-44292: protobufjs 7.3.2 — yarn.lock
protobufjs: protobufjs: Data integrity impact due to prototype pollution protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated message constructors copied enumerable properties from a provided properties object without filtering the…
VulnCve 2026 44292
medium System graph security Trivy conf 1.00 CVE-2026-44294: protobufjs 7.2.5 — yarn.lock
protobufjs: protobufjs: Denial of Service due to unescaped control characters in field names protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript property accessors from schema-controlled field and oneof names. Certain c…
VulnCve 2026 44294
medium System graph security Trivy conf 1.00 CVE-2026-44294: protobufjs 7.3.2 — yarn.lock
protobufjs: protobufjs: Denial of Service due to unescaped control characters in field names protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript property accessors from schema-controlled field and oneof names. Certain c…
VulnCve 2026 44294
medium System graph security Trivy conf 1.00 CVE-2026-44455: hono 4.11.4 — yarn.lock
hono/jsx has Unvalidated JSX Tag Names that May Allow HTML Injection Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.16, Improper handling of JSX element tag names in hono/jsx allowed unvalidated tag names to be directly inserted into the generat…
VulnCve 2026 44455
medium System graph security Trivy conf 1.00 CVE-2026-44456: hono 4.11.4 — yarn.lock
Hono: bodyLimit() can be bypassed for chunked / unknown-length requests Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.16, bodyLimit() does not reliably enforce maxSize for requests without a usable Content-Length (e.g. Transfer-Encoding: chunke…
VulnCve 2026 44456
medium System graph security Trivy conf 1.00 CVE-2026-44457: hono 4.11.4 — yarn.lock
Hono's Cache Middleware ignores Vary: Authorization / Vary: Cookie leading to cross-user cache leakage Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, Cache Middleware does not skip caching for responses that declare per-user variance via Var…
VulnCve 2026 44457
medium System graph security Trivy conf 1.00 CVE-2026-44458: hono 4.11.4 — yarn.lock
Hono has CSS Declaration Injection via Style Object Values in JSX SSR Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, the JSX renderer escapes style attribute object values for HTML but not for CSS. Untrusted input in a style object value or …
VulnCve 2026 44458
medium System graph security Trivy conf 1.00 CVE-2026-44490: axios 1.12.0 — yarn.lock
axios: Axios: Information disclosure and denial of service due to prototype pollution Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, axios exposes two read-side prototype-pollution gadgets. When Object.prototype is polluted by an upstream dependency i…
VulnCve 2026 44490
medium System graph security Trivy conf 1.00 CVE-2026-44490: axios 1.13.2 — yarn.lock
axios: Axios: Information disclosure and denial of service due to prototype pollution Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, axios exposes two read-side prototype-pollution gadgets. When Object.prototype is polluted by an upstream dependency i…
VulnCve 2026 44490
medium System graph security Trivy conf 1.00 CVE-2026-44576: next 15.5.10 — yarn.lock
Next.js: Next.js: Cache poisoning vulnerability in React Server Components Next.js is a React framework for building full-stack web applications. From 14.2.0 to before 15.5.16 and 16.2.5, applications using React Server Components can be vulnerable to cache poisoning when shared caches do not corr…
VulnCve 2026 44576
medium System graph security Trivy conf 1.00 CVE-2026-44577: next 15.5.10 — yarn.lock
Next.js: Next.js: Denial of Service via Image Optimization API Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into mem…
VulnCve 2026 44577
medium System graph security Trivy conf 1.00 CVE-2026-44580: next 15.5.10 — yarn.lock
next.js: Next.js: Cross-site scripting allows arbitrary code execution via untrusted script content Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untrusted content can b…
VulnCve 2026 44580
medium System graph security Trivy conf 1.00 CVE-2026-44581: next 15.5.10 — yarn.lock
next.js: Next.js: Stored Cross-Site Scripting via malformed nonce values in cached responses Next.js is a React framework for building full-stack web applications. From 13.4.0 to before 15.5.16 and 16.2.5, App Router applications that rely on CSP nonces can be vulnerable to stored cross-site scrip…
VulnCve 2026 44581
medium System graph security Trivy conf 1.00 CVE-2026-45736: ws 8.17.1 — yarn.lock
ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray` ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument.…
VulnCve 2026 45736
medium System graph security Trivy conf 1.00 CVE-2026-45736: ws 8.18.2 — yarn.lock
ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray` ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument.…
VulnCve 2026 45736
medium System graph security Trivy conf 1.00 CVE-2026-45736: ws 8.18.3 — deploy/tools/essential-dapps-chains-config-generator/yarn.lock
ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray` ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument.…
VulnCve 2026 45736
medium System graph security Trivy conf 1.00 CVE-2026-45736: ws 8.18.3 — yarn.lock
ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray` ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument.…
VulnCve 2026 45736
medium System graph security Trivy conf 1.00 CVE-2026-45740: protobufjs 7.2.5 — yarn.lock
protobufjs: protobufjs: Denial of Service via crafted JSON descriptors protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.8 and 8.2.0, protobufjs could recurse without a depth limit while expanding nested JSON descriptors through Root.fromJSON() and Namespace.add…
VulnCve 2026 45740
medium System graph security Trivy conf 1.00 CVE-2026-45740: protobufjs 7.3.2 — yarn.lock
protobufjs: protobufjs: Denial of Service via crafted JSON descriptors protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.8 and 8.2.0, protobufjs could recurse without a depth limit while expanding nested JSON descriptors through Root.fromJSON() and Namespace.add…
VulnCve 2026 45740
medium System graph security Trivy conf 1.00 CVE-2026-45820: fflate 0.4.8 — yarn.lock
fflate: fflate: Denial of Service via crafted ZIP archives fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with a central directory entry declaring compressed_size=0xFFFFFFFF (ZIP64 sentinel) but missing the required ZIP64 extra fi…
VulnCve 2026 45820
medium System graph security Trivy conf 1.00 CVE-2026-45820: fflate 0.8.2 — yarn.lock
fflate: fflate: Denial of Service via crafted ZIP archives fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with a central directory entry declaring compressed_size=0xFFFFFFFF (ZIP64 sentinel) but missing the required ZIP64 extra fi…
VulnCve 2026 45820
medium System graph security Trivy conf 1.00 CVE-2026-45822: decode-uri-component 0.2.2 — yarn.lock
decode-uri-component: decode-uri-component: Denial of Service via crafted input decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits input on '%' producing N tokens and calls decodeComponents(), exhibiting super-linear parsing time: 200 '%ab' tokens t…
VulnCve 2026 45822
medium System graph security Trivy conf 1.00 CVE-2026-47673: hono 4.11.4 — yarn.lock
Hono: JWT middleware accepts any Authorization scheme, not only Bearer Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the jwt and jwk middlewares do not verify that the Authorization header value uses theBearer scheme. Any two-part header va…
VulnCve 2026 47673
medium System graph security Trivy conf 1.00 CVE-2026-47674: hono 4.11.4 — yarn.lock
Hono: IP Restriction bypasses static deny rules for non-canonical IPv6 Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the ip-restriction middleware (hono/ip-restriction) compares incoming IP addresses against configured deny and allow rules…
VulnCve 2026 47674
medium System graph security Trivy conf 1.00 CVE-2026-47675: hono 4.11.4 — yarn.lock
Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the serialize() function in hono/cookie validates domain and path options against characters that corru…
VulnCve 2026 47675
medium System graph security Trivy conf 1.00 CVE-2026-47676: hono 4.11.4 — yarn.lock
Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, app.mount() strips the mount prefix from the incoming request path using the raw U…
VulnCve 2026 47676
medium System graph security Trivy conf 1.00 CVE-2026-48038: joi 17.13.3 — yarn.lock
joi: joi: Denial of Service via uncaught RangeError on deeply nested input through recursive link() schemas joi is a schema description language and data validator for JavaScript. Prior to 17.13.4 and 18.2.1, denial of service is possible via an untrapped exception in services validating user-supp…
VulnCve 2026 48038
medium System graph security Trivy conf 1.00 CVE-2026-48988: markdown-it 14.1.0 — yarn.lock
markdown-it: markdown-it: Denial of Service via quadratic processing of smartquotes with typographer enabled markdown-it is a Markdown parser. Versions 14.1.1 and below contain a denial-of-service vulnerability when typographer: true is enabled, due to quadratic (O(n^2)) processing in the smartquo…
VulnCve 2026 48988
medium System graph security Trivy conf 1.00 CVE-2026-4923: path-to-regexp 8.1.0 — yarn.lock
path-to-regexp: path-to-regexp: Denial of Service via specially crafted paths with multiple wildcards Impact: When using multiple wildcards, combined with at least one parameter, a regular expression can be generated that is vulnerable to ReDoS. This backtracking vulnerability requires the second…
VulnCve 2026 4923
medium System graph security Trivy conf 1.00 CVE-2026-49458: dompurify 3.2.6 — yarn.lock
dompurify: DOMPurify: Cross-site scripting due to improper sanitization of DOM nodes DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitize(node, { IN_PLACE: true }) accepted same-origin foreign-realm DOM nodes while follow-on checks us…
VulnCve 2026 49458
medium System graph security Trivy conf 1.00 CVE-2026-49459: dompurify 3.2.6 — yarn.lock
dompurify: DOMPurify: Cross-site scripting bypass allows arbitrary script execution DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitize(root, { IN_PLACE: true }) could preserve event-handler attributes on an attacker-controlled <form…
VulnCve 2026 49459
medium System graph security Trivy conf 1.00 CVE-2026-49978: dompurify 3.2.6 — yarn.lock
dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.7, DOMPurify IN_PLACE sanitization could skip shadow contents attached to an element inside <template>.content, allowing att…
VulnCve 2026 49978
medium System graph security Trivy conf 1.00 CVE-2026-53550: js-yaml 4.1.1 — yarn.lock
js-yaml: js-yaml: Denial of Service via crafted YAML merge keys js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml merge-key processing (<<) by repeating the same alias many times in a merge sequence.…
VulnCve 2026 53550
medium System graph security Trivy conf 1.00 CVE-2026-54269: protobufjs 7.2.5 — yarn.lock
protobufjs: protobufjs-cli: protobufjs: Denial of Service due to name collision with runtime helpers protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 8.6.0 and 7.6.3, protobufjs accepted certain schema-derived names that could collide with properties used by protob…
VulnCve 2026 54269
medium System graph security Trivy conf 1.00 CVE-2026-54269: protobufjs 7.3.2 — yarn.lock
protobufjs: protobufjs-cli: protobufjs: Denial of Service due to name collision with runtime helpers protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 8.6.0 and 7.6.3, protobufjs accepted certain schema-derived names that could collide with properties used by protob…
VulnCve 2026 54269
medium System graph security Trivy conf 1.00 CVE-2026-54285: @opentelemetry/core 1.22.0 — yarn.lock
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 2.8.0, W3CBaggagePropagator.extract() in @opentelemetry/core does not enforce size limits when parsing inbound baggage …
VulnCve 2026 54285
medium System graph security Trivy conf 1.00 CVE-2026-54285: @opentelemetry/core 1.27.0 — yarn.lock
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 2.8.0, W3CBaggagePropagator.extract() in @opentelemetry/core does not enforce size limits when parsing inbound baggage …
VulnCve 2026 54285
medium System graph security Trivy conf 1.00 CVE-2026-54285: @opentelemetry/core 1.30.1 — yarn.lock
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 2.8.0, W3CBaggagePropagator.extract() in @opentelemetry/core does not enforce size limits when parsing inbound baggage …
VulnCve 2026 54285
medium System graph security Trivy conf 1.00 CVE-2026-54286: hono 4.11.4 — yarn.lock
hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`) Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on Windows hosts, an encoded backslash (%5C) in the request path decodes to \, which the Windows path resolver tre…
VulnCve 2026 54286
medium System graph security Trivy conf 1.00 CVE-2026-54287: hono 4.11.4 — yarn.lock
hono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and Lattice Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on AWS Lambda, the ALB single-header response and the VPC Lattice …
VulnCve 2026 54287
medium System graph security Trivy conf 1.00 CVE-2026-54288: hono 4.11.4 — yarn.lock
hono: Body Limit Middleware can be bypassed on AWS Lambda by understating `Content-Length` Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, the Body Limit Middleware trusts the request's Content-Length header to decide whether a body is within…
VulnCve 2026 54288
medium System graph security Trivy conf 1.00 CVE-2026-54289: hono 4.11.4 — yarn.lock
hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on AWS Lambda@Edge, CloudFront delivers a request header that appears more than once as severa…
VulnCve 2026 54289
medium System graph security Trivy conf 1.00 CVE-2026-56761: hono 4.11.4 — yarn.lock
hono Improperly Handles JSX Attribute Names Allows HTML Injection in hono/jsx SSR hono before 4.12.14 contains an html injection vulnerability in jsx server-side rendering that allows attackers to inject unintended html by using malformed attribute names. Attackers can craft specially crafted attr…
VulnCve 2026 56761
medium System graph security Trivy conf 1.00 CVE-2026-56762: hono 4.11.4 — yarn.lock
Hono missing validation of cookie name on write path in setCookie() Hono before 4.12.12 does not validate cookie names on the write path in the setCookie(), serialize(), and serializeSigned() functions, allowing invalid characters such as control characters (e.g. \r or \n) when an application pass…
VulnCve 2026 56762
medium System graph security Trivy conf 1.00 CVE-2026-56763: hono 4.11.4 — yarn.lock
Hono vulnerable to Prototype Pollution possible through __proto__ key allowed in parseBody({ dot: true }) Hono before 4.12.7 allows __proto__ key in parseBody with dot option enabled, permitting specially crafted form field names to create objects with __proto__ properties. When parsed results are…
VulnCve 2026 56763
medium System graph security Trivy conf 1.00 CVE-2026-56812: phoenix 1.6.15 — yarn.lock
Phoenix: Presence keys colliding with `Object.prototype` members break existence checks Improper Check for Unusual or Exceptional Conditions vulnerability in phoenixframework phoenix (Presence JavaScript client) allows an attacker with ordinary channel access to cause a persistent client-side deni…
VulnCve 2026 56812
medium System graph security Trivy conf 1.00 CVE-2026-59895: hono 4.11.4 — yarn.lock
hono: Hono: Arbitrary markup injection via improper handling of class names in server-side rendering. Hono is a Web application framework that provides support for any JavaScript runtime. From 4.0.0 before 4.12.27, cx() in hono/css composes class names from plain strings but marks the result as al…
VulnCve 2026 59895
medium System graph security Trivy conf 1.00 CVE-2026-59897: hono 4.11.4 — yarn.lock
hono: Hono: Information disclosure due to incorrect header de-duplication in AWS API Gateway v1 adapter Hono is a Web application framework that provides support for any JavaScript runtime. From 4.3.3 before 4.12.27, the AWS API Gateway v1 adapter can drop a distinct repeated request header value …
VulnCve 2026 59897
medium System graph security Trivy conf 1.00 CVE-2026-59952: valibot 1.2.0 — yarn.lock
Valibot: record() issue paths can make flatten() throw for inherited Object property names Valibot helps validate data using a schema. Versions prior to 1.4.2 can throw a TypeError inside its flatten() helper when validation issues contain attacker-controlled object keys such as toString, valueOf,…
VulnCve 2026 59952
medium System graph security Trivy conf 1.00 CVE-2026-64643: next 15.5.10 — yarn.lock
next: Next.js: Information disclosure via Server Action ID exposure Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, Next.js applications using App Router, Server Actions (use server) or use cache endpoints can be…
VulnCve 2026 64643
medium System graph security Trivy conf 1.00 CVE-2026-64644: next 15.5.10 — yarn.lock
next: Next.js: Denial of Service via malicious image optimization Next.js is a React framework for building full-stack web applications. In versions 15.5.0 through 15.5.20 and 16.0.0 through 16.2.10, when self-hosting Next.js with the default image loader, the Image Optimization API can optimize r…
VulnCve 2026 64644
medium System graph security Trivy conf 1.00 CVE-2026-64646: next 15.5.10 — yarn.lock
next: Next.js: Denial of Service via excessive memory consumption in Server Actions Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests targeting Next.js applications using App Router with at least one Serve…
VulnCve 2026 64646
medium System graph security Trivy conf 1.00 CVE-2026-64647: next 15.5.10 — yarn.lock
next: Next.js: Information disclosure via server-side request caching Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a request body may return a cached response body from a different req…
VulnCve 2026 64647
medium System graph security Trivy conf 1.00 CVE-2026-64648: next 15.5.10 — yarn.lock
next: Next.js: Information disclosure via server-side fetch cache Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a request body may return a cached response body from a different reques…
VulnCve 2026 64648
medium System graph security Trivy conf 1.00 CVE-2026-65898: dompurify 3.2.6 — yarn.lock
dompurify: DOMPurify: Cross-site scripting via permanent attribute allowlist pollution DOMPurify before 3.4.11 fails to clone the ALLOWED_ATTR allowlist when setConfig() is used with an uponSanitizeAttribute hook, allowing the hook to permanently mutate the shared allowlist. Attackers can register…
VulnCve 2026 65898
medium System graph security Trivy conf 1.00 CVE-2026-65902: dompurify 3.2.6 — yarn.lock
dompurify: DOMPurify: Sanitization bypass via hook manipulation DOMPurify before 3.4.7 (affected versions <= 3.4.5) passes direct references to the module-level DEFAULT_ALLOWED_TAGS and DEFAULT_ALLOWED_ATTR sets to the uponSanitizeElement and uponSanitizeAttribute hooks via data.allowedTags / data…
VulnCve 2026 65902
medium System graph security Trivy conf 1.00 CVE-2026-65903: dompurify 3.2.6 — yarn.lock
dompurify: DOMPurify: Security bypass allows injection of malicious content DOMPurify before 3.4.0 contains a logic error in the ADD_TAGS function where short-circuit evaluation allows forbidden tags to bypass FORBID_TAGS restrictions. Attackers can craft input containing tags listed in FORBID_TAG…
VulnCve 2026 65903
medium System graph security Trivy conf 1.00 CVE-2026-65912: dompurify 3.2.6 — yarn.lock
dompurify: DOMPurify: URI validation bypass leads to cross-site scripting DOMPurify before 3.3.2 contains a URI validation bypass vulnerability when ADD_ATTR is provided as a predicate function via EXTRA_ELEMENT_HANDLING.attributeCheck. Attackers can supply a predicate that accepts specific attrib…
VulnCve 2026 65912
medium System graph security Trivy conf 1.00 CVE-2026-65913: dompurify 3.2.6 — yarn.lock
dompurify: DOMPurify: Cross-Site Scripting (XSS) via prototype pollution in USE_PROFILES mode DOMPurify before 3.3.2 contains a prototype pollution vulnerability in USE_PROFILES mode that allows attackers to bypass attribute filtering by polluting Array.prototype properties. Attackers can set Arra…
VulnCve 2026 65913
medium System graph security Trivy conf 1.00 CVE-2026-65914: dompurify 3.2.6 — yarn.lock
dompurify: DOMPurify: Cross-Site Scripting vulnerability allows arbitrary code execution DOMPurify before 3.3.2 contains a mutation-XSS vulnerability when sanitized HTML is reinserted into special parsing contexts using innerHTML with wrappers like script, xmp, iframe, noembed, noframes, or noscri…
VulnCve 2026 65914
medium System graph security Trivy conf 1.00 CVE-2026-67312: axios 1.12.0 — yarn.lock
axios: axios: Denial of Service via uncontrolled recursion in form data processing axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON (exposed as axios.formToJSON() and used internally when serializing FormData with Content-Type: …
VulnCve 2026 67312
medium System graph security Trivy conf 1.00 CVE-2026-67312: axios 1.13.2 — yarn.lock
axios: axios: Denial of Service via uncontrolled recursion in form data processing axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON (exposed as axios.formToJSON() and used internally when serializing FormData with Content-Type: …
VulnCve 2026 67312
medium System graph security Trivy conf 1.00 CVE-2026-67313: axios 1.12.0 — yarn.lock
axios versions 0.28.0 and later contain uncontrolled recursion in form ... axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names with deeply nested bracket segments. Attackers can supply FormData with field names containing thousands …
VulnCve 2026 67313
medium System graph security Trivy conf 1.00 CVE-2026-67313: axios 1.13.2 — yarn.lock
axios versions 0.28.0 and later contain uncontrolled recursion in form ... axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names with deeply nested bracket segments. Attackers can supply FormData with field names containing thousands …
VulnCve 2026 67313
medium System graph security Trivy conf 1.00 CVE-2026-67316: axios 1.12.0 — yarn.lock
axios: axios: Prototype Pollution allows unauthorized data transmission and network redirection axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or dependency. In the bodyles…
VulnCve 2026 67316
medium System graph security Trivy conf 1.00 CVE-2026-67316: axios 1.13.2 — yarn.lock
axios: axios: Prototype Pollution allows unauthorized data transmission and network redirection axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or dependency. In the bodyles…
VulnCve 2026 67316
medium System graph security Trivy conf 1.00 CVE-2026-67317: axios 1.12.0 — yarn.lock
axios: axios: Denial of Service via maxBodyLength bypass with ReadableStream axios versions 1.7.0 before 1.18.0 fail to enforce maxBodyLength for WHATWG ReadableStream request bodies in the fetch adapter when Content-Length cannot be determined. Attackers can supply unknown-length stream data to b…
VulnCve 2026 67317
medium System graph security Trivy conf 1.00 CVE-2026-67317: axios 1.13.2 — yarn.lock
axios: axios: Denial of Service via maxBodyLength bypass with ReadableStream axios versions 1.7.0 before 1.18.0 fail to enforce maxBodyLength for WHATWG ReadableStream request bodies in the fetch adapter when Content-Length cannot be determined. Attackers can supply unknown-length stream data to b…
VulnCve 2026 67317
medium System graph security Trivy conf 1.00 CVE-2026-67318: axios 1.13.2 — yarn.lock
axios: axios: Denial of Service due to maxBodyLength bypass in HTTP/2 requests axios versions >=1.13.0 (Node.js HTTP adapter) fail to enforce the configured maxBodyLength limit on streamed request bodies when requests are sent with httpVersion: 2. Because Node's HTTP/2 request API does not honor t…
VulnCve 2026 67318
medium System graph security Trivy conf 1.00 CVE-2026-67319: axios 1.12.0 — yarn.lock
axios: axios: Information disclosure and data manipulation via prototype pollution axios before 0.33.0 (and 1.x before 1.18.0) can consume inherited properties from nested request option objects when the JavaScript process's Object.prototype has already been polluted by another component. While th…
VulnCve 2026 67319
medium System graph security Trivy conf 1.00 CVE-2026-67319: axios 1.13.2 — yarn.lock
axios: axios: Information disclosure and data manipulation via prototype pollution axios before 0.33.0 (and 1.x before 1.18.0) can consume inherited properties from nested request option objects when the JavaScript process's Object.prototype has already been polluted by another component. While th…
VulnCve 2026 67319
medium System graph security Trivy conf 1.00 CVE-2026-69153: postcss 8.4.31 — yarn.lock
postcss: PostCSS: Information disclosure via crafted sourceMappingURL PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attacker can cause PreviousMap.loadFile() to read an unin…
VulnCve 2026 69153
medium System graph security Trivy conf 1.00 CVE-2026-69153: postcss 8.4.33 — deploy/tools/affected-tests/yarn.lock
postcss: PostCSS: Information disclosure via crafted sourceMappingURL PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attacker can cause PreviousMap.loadFile() to read an unin…
VulnCve 2026 69153
medium System graph security Trivy conf 1.00 CVE-2026-69153: postcss 8.5.6 — yarn.lock
postcss: PostCSS: Information disclosure via crafted sourceMappingURL PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attacker can cause PreviousMap.loadFile() to read an unin…
VulnCve 2026 69153
medium System graph security Trivy conf 1.00 CVE-2026-69207: hono 4.11.4 — yarn.lock
Hono: ReDoS in CORS middleware via Access-Control-Request-Headers Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.34, the built-in CORS middleware, hono/cors, is vulnerable to a regular expression denial of service (ReDoS). During a preflight OPT…
VulnCve 2026 69207
medium System graph security Trivy conf 1.00 CVE-2026-71429: stream-json 1.9.1 — yarn.lock
stream-json: stream-json: Denial of Service due to inefficient processing of deeply nested JSON stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignore, filter, and replace in src/core/filters/…
VulnCve 2026 71429
medium System graph security Trivy conf 1.00 CVE-2026-71850: hono 4.11.4 — yarn.lock
Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure Hono is a Web application framework that provides support for any JavaScript runtime. From 3.8.0 to 4.12.33, memo() from hono/jsx retains the result of a server side render and reuses it for later renders with…
VulnCve 2026 71850
medium System graph security Trivy conf 1.00 CVE-2026-84363: hono 4.11.4 — yarn.lock
Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.5, Hono's query helpers treat a question mark after a literal hash fragment as th…
VulnCve 2026 84363
medium System graph security Trivy conf 1.00 CVE-2026-84364: hono 4.11.4 — yarn.lock
Hono: Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.5, when parseBody() expands dot-separated form field names into nested objects with dot-notation parsing enabled, it…
VulnCve 2026 84364
medium System graph security Trivy conf 1.00 CVE-2026-84365: hono 4.11.4 — yarn.lock
Hono: Incomplete fix for CVE-2026-39408: `toSSG()` still writes files outside the output directory Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.12 until 4.13.5, the fix released for CVE-2026-39408 does not cover every traversal sequence, and toSSG…
VulnCve 2026 84365
medium System graph security Trivy conf 1.00 CVE-2026-90771: joi 17.13.3 — yarn.lock
joi: joi: Prototype Pollution via custom messages joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages compilation function that accepts __proto__ as an error code. Attackers can supply __proto__ keys in custom messages to replace the returned object'…
VulnCve 2026 90771
medium System graph security Trivy conf 1.00 CVE-2026-93981: hono 4.11.4 — yarn.lock
hono: hono/jsx: Cross-Site Scripting via Unescaped Strings hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of Suspense, as a string child of ErrorBoundary alongside an asynchronous sibling, as the single child of a Context.Provider, or as the root …
VulnCve 2026 93981
medium System graph security Trivy conf 1.00 CVE-2026-94484: next 15.5.10 — yarn.lock
next: Next.js: Denial of Service via response cache poisoning Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shar…
VulnCve 2026 94484
medium System graph security Trivy conf 1.00 CVE-2026-94543: next 15.5.10 — yarn.lock
next: Next.js: Response cache poisoning via improper route binding Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key…
VulnCve 2026 94543
medium System graph security Trivy conf 1.00 CVE-2026-9679: undici 6.21.3 — yarn.lock
undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding Impact: undici's cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences like %0D%0A, %00, %3B, and %3D into their literal byte equivalents. RFC 6265 §5.4 does not spe…
VulnCve 2026 9679
medium System graph dependencies dependencies conf 0.90 Dependency @helia/verified-fetch is two or more major versions behind
`@helia/verified-fetch` is pinned at `2.6.12` in `package.json` while the latest release on the npm registry is `8.1.2` — 6 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `@helia/verified-f…
package.json FreshnessOutdated
medium System graph dependencies dependencies conf 0.90 Dependency @metamask/post-message-stream is two or more major versions behind
`@metamask/post-message-stream` is pinned at `7.0.0` in `package.json` while the latest release on the npm registry is `10.0.0` — 3 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `@metamask…
package.json FreshnessOutdated
medium System graph dependencies dependencies conf 0.90 Dependency @metamask/providers is two or more major versions behind
`@metamask/providers` is pinned at `10.2.1` in `package.json` while the latest release on the npm registry is `22.1.1` — 12 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `@metamask/provide…
package.json FreshnessOutdated
medium System graph security Trivy conf 1.00 DS-0013: 'RUN cd ...' to change directory — Dockerfile
'RUN cd ...' to change directory RUN should not be used to change directory: 'cd ./deploy/tools/envs-validator && yarn build'. Use 'WORKDIR' statement instead. Rule: DS-0013 Severity: MEDIUM Target: Dockerfile
Misconfig
medium System graph quality Integrity conf 0.90 Fire-and-forget `fetch()` has no rejection handler — lib/hooks/useAdblockDetect.tsx:30
This fetch result is neither awaited, returned, assigned, nor followed by `.catch(...)`. A network failure can therefore become an unhandled promise rejection. Await/return the promise or attach an explicit rejection handler.
lib/hooks/useAdblockDetect.tsx:30 runtime safetyRobustnessUnhandled promise
medium System graph quality Integrity conf 0.90 Fire-and-forget `fetch()` has no rejection handler — lib/solidityScan/useFetchReport.ts:40
This fetch result is neither awaited, returned, assigned, nor followed by `.catch(...)`. A network failure can therefore become an unhandled promise rejection. Await/return the promise or attach an explicit rejection handler.
lib/solidityScan/useFetchReport.ts:40 runtime safetyRobustnessUnhandled promise
medium System graph quality Integrity conf 0.90 Fire-and-forget `fetch()` has no rejection handler — lib/xStarScore/useFetchXStarScore.ts:40
This fetch result is neither awaited, returned, assigned, nor followed by `.catch(...)`. A network failure can therefore become an unhandled promise rejection. Await/return the promise or attach an explicit rejection handler.
lib/xStarScore/useFetchXStarScore.ts:40 runtime safetyRobustnessUnhandled promise
medium System graph quality Integrity conf 0.90 Fire-and-forget `fetch()` has no rejection handler — nextjs/getServerSideProps/handlers.ts:60
This fetch result is neither awaited, returned, assigned, nor followed by `.catch(...)`. A network failure can therefore become an unhandled promise rejection. Await/return the promise or attach an explicit rejection handler.
nextjs/getServerSideProps/handlers.ts:60 runtime safetyRobustnessUnhandled promise
medium System graph quality Integrity conf 0.90 Fire-and-forget `fetch()` has no rejection handler — ui/address/details/AddressSaveOnGas.tsx:57
This fetch result is neither awaited, returned, assigned, nor followed by `.catch(...)`. A network failure can therefore become an unhandled promise rejection. Await/return the promise or attach an explicit rejection handler.
ui/address/details/AddressSaveOnGas.tsx:57 runtime safetyRobustnessUnhandled promise
medium System graph quality Integrity conf 0.90 Fire-and-forget `fetch()` has no rejection handler — ui/shared/ad/CoinzillaTextAd.tsx:37
This fetch result is neither awaited, returned, assigned, nor followed by `.catch(...)`. A network failure can therefore become an unhandled promise rejection. Await/return the promise or attach an explicit rejection handler.
ui/shared/ad/CoinzillaTextAd.tsx:37 runtime safetyRobustnessUnhandled promise
medium System graph security Trivy conf 1.00 GHSA-253c-mchw-3w2r: markdown-it 14.1.0 — yarn.lock
markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds ## Summary Two independent quadratic paths in the `linkify: true` handling. Both are in markdown-it's own code rather than in linkify-it, which stays linear on both payload…
VulnGhsa 253c mchw 3w2r
medium System graph security Trivy conf 1.00 GHSA-4hxc-9384-m385: h3 1.9.0 — yarn.lock
h3: SSE Event Injection via Unsanitized Carriage Return (`\r`) in EventStream Data and Comment Fields (Bypass of CVE Fix) ## Summary The `EventStream` class in h3 fails to sanitize carriage return (`\r`) characters in `data` and `comment` fields. Per the SSE specification, `\r` is a valid line te…
VulnGhsa 4hxc 9384 m385
medium System graph security Trivy conf 1.00 GHSA-55q2-fjhq-7xh7: dompurify 3.2.6 — yarn.lock
DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS ### Summary During `IN_PLACE` sanitization, a hook that removes an element can leave that element's detached descendants executable. A descendant image can retain its attacker-provided `onload` handler and fire aft…
VulnGhsa 55q2 fjhq 7xh7
medium System graph security Trivy conf 1.00 GHSA-72gr-qfp7-vwhw: h3 1.9.0 — yarn.lock
h3: Double Decoding in `serveStatic` Bypasses `resolveDotSegments` Path Traversal Protection via `%252e%252e` ## Summary The `serveStatic` utility in h3 applies a redundant `decodeURI()` call to the request pathname after `H3Event` has already performed percent-decoding with `%25` preservation. T…
VulnGhsa 72gr qfp7 vwhw
medium System graph security Trivy conf 1.00 GHSA-jggr-w7fw-pc2j: fast-copy 3.0.0 — yarn.lock
fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values ## Summary `fast-copy` traverses values recursively with no bound on depth. Copying a sufficiently deeply-nested value exhausts the JavaScript call stack and throws a native `RangeError: Maximum call stack size exceeded` f…
VulnGhsa jggr w7fw pc2j
medium System graph security Trivy conf 1.00 GHSA-r4q5-vmmm-2653: follow-redirects 1.15.9 — yarn.lock
follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets ## Summary When an HTTP request follows a cross-domain redirect (301/302/307/308), `follow-redirects` only strips `authorization`, `proxy-authorization`, and `cookie` headers (matched by regex at index.js:469-47…
VulnGhsa r4q5 vmmm 2653
medium System graph security Trivy conf 1.00 GHSA-wr4h-v87w-p3r7: h3 1.9.0 — yarn.lock
h3 has a Path Traversal via Percent-Encoded Dot Segments in serveStatic Allows Arbitrary File Read ## Summary `serveStatic()` in h3 is vulnerable to path traversal via percent-encoded dot segments (`%2e%2e`), allowing an unauthenticated attacker to read arbitrary files outside the intended static…
VulnGhsa wr4h v87w p3r7
medium System graph security security conf 0.65 Insecure pattern 'dangerous_innerhtml' in ui/address/details/AddressAlerts.tsx:46
Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible.
ui/address/details/AddressAlerts.tsx:46 Dangerous innerhtml
medium System graph security security conf 0.65 Insecure pattern 'dangerous_innerhtml' in ui/address/details/AddressQrCode.tsx:93
Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible.
ui/address/details/AddressQrCode.tsx:93 Dangerous innerhtml
medium System graph security security conf 0.65 Insecure pattern 'dangerous_innerhtml' in ui/searchResults/SearchResultEntityTag.tsx:25
Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible.
ui/searchResults/SearchResultEntityTag.tsx:25 Dangerous innerhtml
medium System graph security security conf 0.65 Insecure pattern 'dangerous_innerhtml' in ui/searchResults/SearchResultListItem.tsx:79
Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible.
ui/searchResults/SearchResultListItem.tsx:79 Dangerous innerhtml
medium System graph security security conf 0.65 Insecure pattern 'dangerous_innerhtml' in ui/searchResults/SearchResultTableItem.tsx:85
Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible.
ui/searchResults/SearchResultTableItem.tsx:85 Dangerous innerhtml
medium System graph security security conf 0.65 Insecure pattern 'dangerous_innerhtml' in ui/shared/entities/address/AddressIdenticon.tsx:56
Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible.
ui/shared/entities/address/AddressIdenticon.tsx:56 Dangerous innerhtml
medium System graph security security conf 0.65 Insecure pattern 'dangerous_innerhtml' in ui/snippets/header/alerts/MaintenanceAlert.tsx:15
Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible.
ui/snippets/header/alerts/MaintenanceAlert.tsx:15 Dangerous innerhtml
medium System graph security security conf 0.65 Insecure pattern 'dangerous_innerhtml' in ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestAddress.tsx:67
Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible.
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestAddress.tsx:67 Dangerous innerhtml
medium System graph security security conf 0.65 Insecure pattern 'dangerous_innerhtml' in ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestApp.tsx:46
Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible.
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestApp.tsx:46 Dangerous innerhtml
medium System graph security security conf 0.65 Insecure pattern 'dangerous_innerhtml' in ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestBlock.tsx:46
Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible.
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestBlock.tsx:46 Dangerous innerhtml
medium System graph security security conf 0.65 Insecure pattern 'dangerous_innerhtml' in ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestCluster.tsx:34
Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible.
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestCluster.tsx:34 Dangerous innerhtml
medium System graph security security conf 0.65 Insecure pattern 'dangerous_innerhtml' in ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestDomain.tsx:31
Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible.
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestDomain.tsx:31 Dangerous innerhtml
medium System graph security security conf 0.65 Insecure pattern 'dangerous_innerhtml' in ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestLabel.tsx:23
Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible.
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestLabel.tsx:23 Dangerous innerhtml
medium System graph security security conf 0.65 Insecure pattern 'dangerous_innerhtml' in ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestToken.tsx:42
Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible.
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestToken.tsx:42 Dangerous innerhtml
medium System graph security security conf 0.65 Insecure pattern 'direct_innerhtml_assignment' in public/static/capibara/index.js:458
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
public/static/capibara/index.js:458 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'weak_hash' in ui/shared/entities/address/NounsIdenticon.tsx:24
Found a known-risky pattern (weak_hash). Review and replace if possible.
ui/shared/entities/address/NounsIdenticon.tsx:24 Weak hash
medium System graph quality Placeholder conf 1.00 Placeholder or mock-heavy implementation detected
Found 285 placeholder/mock markers across 142 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data.
Mock dataIncompleteGenerated repo pattern
medium System graph security Semgrep conf 0.70 react dangerouslysetinnerhtml — ui/searchResults/SearchResultEntityTag.tsx:25
Detection of dangerouslySetInnerHTML from non-constant definition. This can inadvertently expose users to cross-site scripting (XSS) attacks if this comes from user-provided input. If you have to use dangerouslySetInnerHTML, consider using a sanitization library such as DOMPurify to sanitize your H…
ui/searchResults/SearchResultEntityTag.tsx:25 SecurityReact
medium System graph security Semgrep conf 0.70 react dangerouslysetinnerhtml — ui/searchResults/SearchResultListItem.tsx:79
Detection of dangerouslySetInnerHTML from non-constant definition. This can inadvertently expose users to cross-site scripting (XSS) attacks if this comes from user-provided input. If you have to use dangerouslySetInnerHTML, consider using a sanitization library such as DOMPurify to sanitize your H…
ui/searchResults/SearchResultListItem.tsx:79 SecurityReact
medium System graph security Semgrep conf 0.70 react dangerouslysetinnerhtml — ui/searchResults/SearchResultTableItem.tsx:85
Detection of dangerouslySetInnerHTML from non-constant definition. This can inadvertently expose users to cross-site scripting (XSS) attacks if this comes from user-provided input. If you have to use dangerouslySetInnerHTML, consider using a sanitization library such as DOMPurify to sanitize your H…
ui/searchResults/SearchResultTableItem.tsx:85 SecurityReact
medium System graph security Semgrep conf 0.70 react dangerouslysetinnerhtml — ui/shared/entities/address/AddressIdenticon.tsx:56
Detection of dangerouslySetInnerHTML from non-constant definition. This can inadvertently expose users to cross-site scripting (XSS) attacks if this comes from user-provided input. If you have to use dangerouslySetInnerHTML, consider using a sanitization library such as DOMPurify to sanitize your H…
ui/shared/entities/address/AddressIdenticon.tsx:56 SecurityReact
medium System graph security Semgrep conf 0.70 react dangerouslysetinnerhtml — ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestAddress.tsx:67
Detection of dangerouslySetInnerHTML from non-constant definition. This can inadvertently expose users to cross-site scripting (XSS) attacks if this comes from user-provided input. If you have to use dangerouslySetInnerHTML, consider using a sanitization library such as DOMPurify to sanitize your H…
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestAddress.tsx:67 SecurityReact
medium System graph security Semgrep conf 0.70 react dangerouslysetinnerhtml — ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestApp.tsx:46
Detection of dangerouslySetInnerHTML from non-constant definition. This can inadvertently expose users to cross-site scripting (XSS) attacks if this comes from user-provided input. If you have to use dangerouslySetInnerHTML, consider using a sanitization library such as DOMPurify to sanitize your H…
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestApp.tsx:46 SecurityReact
medium System graph security Semgrep conf 0.70 react dangerouslysetinnerhtml — ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestBlock.tsx:46
Detection of dangerouslySetInnerHTML from non-constant definition. This can inadvertently expose users to cross-site scripting (XSS) attacks if this comes from user-provided input. If you have to use dangerouslySetInnerHTML, consider using a sanitization library such as DOMPurify to sanitize your H…
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestBlock.tsx:46 SecurityReact
medium System graph security Semgrep conf 0.70 react dangerouslysetinnerhtml — ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestCluster.tsx:34
Detection of dangerouslySetInnerHTML from non-constant definition. This can inadvertently expose users to cross-site scripting (XSS) attacks if this comes from user-provided input. If you have to use dangerouslySetInnerHTML, consider using a sanitization library such as DOMPurify to sanitize your H…
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestCluster.tsx:34 SecurityReact
medium System graph security Semgrep conf 0.70 react dangerouslysetinnerhtml — ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestDomain.tsx:31
Detection of dangerouslySetInnerHTML from non-constant definition. This can inadvertently expose users to cross-site scripting (XSS) attacks if this comes from user-provided input. If you have to use dangerouslySetInnerHTML, consider using a sanitization library such as DOMPurify to sanitize your H…
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestDomain.tsx:31 SecurityReact
medium System graph security Semgrep conf 0.70 react dangerouslysetinnerhtml — ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestLabel.tsx:23
Detection of dangerouslySetInnerHTML from non-constant definition. This can inadvertently expose users to cross-site scripting (XSS) attacks if this comes from user-provided input. If you have to use dangerouslySetInnerHTML, consider using a sanitization library such as DOMPurify to sanitize your H…
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestLabel.tsx:23 SecurityReact
medium System graph security Semgrep conf 0.70 react dangerouslysetinnerhtml — ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestToken.tsx:42
Detection of dangerouslySetInnerHTML from non-constant definition. This can inadvertently expose users to cross-site scripting (XSS) attacks if this comes from user-provided input. If you have to use dangerouslySetInnerHTML, consider using a sanitization library such as DOMPurify to sanitize your H…
ui/snippets/searchBar/SearchBarSuggest/SearchBarSuggestToken.tsx:42 SecurityReact
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.arbitrum
`configs/envs/.env.arbitrum` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.arbitrum ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.arbitrum_nova
`configs/envs/.env.arbitrum_nova` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.arbitrum_nova ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.arbitrum_sepolia
`configs/envs/.env.arbitrum_sepolia` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.arbitrum_sepolia ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.base
`configs/envs/.env.base` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.base ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.eth
`configs/envs/.env.eth` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.eth ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.eth_sepolia
`configs/envs/.env.eth_sepolia` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.eth_sepolia ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.filecoin
`configs/envs/.env.filecoin` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.filecoin ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.garnet
`configs/envs/.env.garnet` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.garnet ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.gnosis
`configs/envs/.env.gnosis` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.gnosis ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.immutable
`configs/envs/.env.immutable` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.immutable ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.localhost
`configs/envs/.env.localhost` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.localhost ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.main
`configs/envs/.env.main` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.main ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.mega_eth
`configs/envs/.env.mega_eth` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.mega_eth ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.mekong
`configs/envs/.env.mekong` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.mekong ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.neon_devnet
`configs/envs/.env.neon_devnet` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.neon_devnet ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.optimism
`configs/envs/.env.optimism` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.optimism ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.optimism_interop_0
`configs/envs/.env.optimism_interop_0` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.optimism_interop_0 ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.optimism_sepolia
`configs/envs/.env.optimism_sepolia` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.optimism_sepolia ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.optimism_superchain
`configs/envs/.env.optimism_superchain` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.optimism_superchain ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.polygon
`configs/envs/.env.polygon` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.polygon ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.pw
`configs/envs/.env.pw` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.pw ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.scroll_sepolia
`configs/envs/.env.scroll_sepolia` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.scroll_sepolia ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.shibarium
`configs/envs/.env.shibarium` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.shibarium ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.tac
`configs/envs/.env.tac` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.tac ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.tac_spb
`configs/envs/.env.tac_spb` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.tac_spb ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.zetachain
`configs/envs/.env.zetachain` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.zetachain ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.zilliqa
`configs/envs/.env.zilliqa` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.zilliqa ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.zkevm
`configs/envs/.env.zkevm` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.zkevm ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.zksync
`configs/envs/.env.zksync` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.zksync ConfigEnv fileRuntime env
medium System graph security Secrets conf 0.65 Runtime dotenv file present in repo: configs/envs/.env.zora
`configs/envs/.env.zora` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control.
configs/envs/.env.zora ConfigEnv fileRuntime env
medium System graph quality Placeholder conf 1.00 Runtime service client appears to use placeholder configuration
A runtime source file appears to wire Supabase/Firebase/AI/payment-style clients to placeholder URLs, keys, or fallback values. In the Fable corpus this often means the UI/API shape is present while the backend service is not actually configured.
Runtime configService clientGenerated repo pattern
medium System graph security Trivy conf 1.00 Secret leak: JWT token — playwright/fixtures/rewards.ts
Trivy detected a possible secret in `playwright/fixtures/rewards.ts`. Rule: jwt-token Severity: MEDIUM Match (redacted): const token = '***************************************************************** Action: rotate the credential and remove it from the repo. Use a secrets manager or environment…
Secret
medium System graph quality Tests conf 1.00 Very low test-to-source ratio
37 test file(s) for 2518 source file(s) (ratio 0.01). Consider adding integration or unit tests for critical paths.
Coverage
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency js-cookie 3.0.1: GHSA-qjx8-664m-686j
OSV.dev reports `js-cookie` at version `3.0.1` (resolved in `yarn.lock`) is affected by GHSA-qjx8-664m-686j. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-qjx8-664m-686j Fix: upgrade `js-cookie` past the affected range per the advisory.
package.json ScaOsvGhsa qjx8 664m 686j
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency nanoid 3.3.11: GHSA-xwg4-73v4-xw9w
OSV.dev reports `nanoid` at version `3.3.11` (resolved in `deploy/tools/envs-validator/yarn.lock`) is affected by GHSA-xwg4-73v4-xw9w. Note: `nanoid` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev…
deploy/tools/envs-validator/yarn.lock ScaOsvGhsa xwg4 73v4 xw9w
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-267c-6grr-h53f
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-267c-6grr-h53f. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-267c-6grr-h53f Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa 267c 6grr h53f
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-26hh-7cqf-hhc6
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-26hh-7cqf-hhc6. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-26hh-7cqf-hhc6 Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa 26hh 7cqf hhc6
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-2xp9-vwfh-vxw4
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-2xp9-vwfh-vxw4. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-2xp9-vwfh-vxw4 Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa 2xp9 vwfh vxw4
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-36qx-fr4f-26g5
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-36qx-fr4f-26g5. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-36qx-fr4f-26g5 Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa 36qx fr4f 26g5
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-3g8h-86w9-wvmq
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-3g8h-86w9-wvmq. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-3g8h-86w9-wvmq Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa 3g8h 86w9 wvmq
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-3x4c-7xq6-9pq8
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-3x4c-7xq6-9pq8. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-3x4c-7xq6-9pq8 Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa 3x4c 7xq6 9pq8
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-4633-3j49-mh5q
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-4633-3j49-mh5q. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-4633-3j49-mh5q Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa 4633 3j49 mh5q
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-492v-c6pp-mqqv
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-492v-c6pp-mqqv. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-492v-c6pp-mqqv Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa 492v c6pp mqqv
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-4c39-4ccg-62r3
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-4c39-4ccg-62r3. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-4c39-4ccg-62r3 Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa 4c39 4ccg 62r3
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-4jqv-mc3x-m676
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-4jqv-mc3x-m676. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-4jqv-mc3x-m676 Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa 4jqv mc3x m676
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-68g3-v927-f742
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-68g3-v927-f742. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-68g3-v927-f742 Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa 68g3 v927 f742
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-89xv-2m56-2m9x
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-89xv-2m56-2m9x. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-89xv-2m56-2m9x Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa 89xv 2m56 2m9x
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-8h8q-6873-q5fj
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-8h8q-6873-q5fj. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-8h8q-6873-q5fj Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa 8h8q 6873 q5fj
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-955p-x3mx-jcvp
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-955p-x3mx-jcvp. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-955p-x3mx-jcvp Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa 955p x3mx jcvp
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-c4j6-fc7j-m34r
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-c4j6-fc7j-m34r. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-c4j6-fc7j-m34r Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa c4j6 fc7j m34r
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-ffhc-5mcf-pf4q
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-ffhc-5mcf-pf4q. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-ffhc-5mcf-pf4q Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa ffhc 5mcf pf4q
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-ggv3-7p47-pfv8
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-ggv3-7p47-pfv8. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-ggv3-7p47-pfv8 Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa ggv3 7p47 pfv8
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-gx5p-jg67-6x7h
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-gx5p-jg67-6x7h. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-gx5p-jg67-6x7h Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa gx5p jg67 6x7h
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-h64f-5h5j-jqjh
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-h64f-5h5j-jqjh. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-h64f-5h5j-jqjh Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa h64f 5h5j jqjh
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-m99w-x7hq-7vfj
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-m99w-x7hq-7vfj. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-m99w-x7hq-7vfj Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa m99w x7hq 7vfj
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-mcj8-r9mp-w47p
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-mcj8-r9mp-w47p. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-mcj8-r9mp-w47p Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa mcj8 r9mp w47p
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-mg66-mrh9-m8jx
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-mg66-mrh9-m8jx. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-mg66-mrh9-m8jx Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa mg66 mrh9 m8jx
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-p293-qw3h-jr36
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-p293-qw3h-jr36. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-p293-qw3h-jr36 Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa p293 qw3h jr36
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-p9j2-gv94-2wf4
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-p9j2-gv94-2wf4. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-p9j2-gv94-2wf4 Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa p9j2 gv94 2wf4
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-q4gf-8mx6-v5v3
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-q4gf-8mx6-v5v3. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-q4gf-8mx6-v5v3 Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa q4gf 8mx6 v5v3
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 15.5.10: GHSA-q8wf-6r8g-63ch
OSV.dev reports `next` at version `15.5.10` (declared in `package.json`) is affected by GHSA-q8wf-6r8g-63ch. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-q8wf-6r8g-63ch Fix: upgrade `next` past the affected range per the advisory.
package.json ScaOsvGhsa q8wf 6r8g 63ch

Showing first 300 of 326. Refine filters or use the findings page for deep search.

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/47fd2768-aaf7-41d1-8bb9-34854e5b2338/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/47fd2768-aaf7-41d1-8bb9-34854e5b2338/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.