← Back to scan
File as GitHub Issue repo: MrRobotoGit/gostream

Push this scan report to MrRobotoGit/gostream

Click the green button below to open GitHub’s new-issue form, pre-filled with the report title, summary table, top findings, and an embedded score-card image. No authentication needed — you review on GitHub before submitting. Repobility is credited as the scanner.

Embedded score card image

This image will render at the top of the issue body. Hosted on Repobility, refreshes automatically after re-scans.

Repobility score card

Issue title

stdlib: GO-2026-4982

Curate findings to include

Pick exactly which findings appear in the issue body. By default the top 5 are included. Uncheck noise, check what matters.

Top 5 (default)
Severity Rule Title File:line
HIGH GO-2026-5039 stdlib: GO-2026-5039 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5038 stdlib: GO-2026-5038 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5037 stdlib: GO-2026-5037 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4986 stdlib: GO-2026-4986 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4982 stdlib: GO-2026-4982 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4981 stdlib: GO-2026-4981 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4980 stdlib: GO-2026-4980 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4977 stdlib: GO-2026-4977 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4976 stdlib: GO-2026-4976 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4971 stdlib: GO-2026-4971 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4947 stdlib: GO-2026-4947 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4946 stdlib: GO-2026-4946 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4918 stdlib: GO-2026-4918 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4870 stdlib: GO-2026-4870 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4869 stdlib: GO-2026-4869 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4865 stdlib: GO-2026-4865 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4864 stdlib: GO-2026-4864 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4603 stdlib: GO-2026-4603 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4602 stdlib: GO-2026-4602 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4601 stdlib: GO-2026-4601 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4403 stdlib: GO-2026-4403 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4342 stdlib: GO-2026-4342 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4341 stdlib: GO-2026-4341 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4340 stdlib: GO-2026-4340 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4337 stdlib: GO-2026-4337 internal/anacrolix-torrent/go.mod
HIGH GO-2025-4175 stdlib: GO-2025-4175 internal/anacrolix-torrent/go.mod
HIGH GO-2025-4155 stdlib: GO-2025-4155 internal/anacrolix-torrent/go.mod
HIGH GO-2025-4015 stdlib: GO-2025-4015 internal/anacrolix-torrent/go.mod
HIGH GO-2025-4014 stdlib: GO-2025-4014 internal/anacrolix-torrent/go.mod
HIGH GO-2025-4013 stdlib: GO-2025-4013 internal/anacrolix-torrent/go.mod
HIGH GO-2025-4012 stdlib: GO-2025-4012 internal/anacrolix-torrent/go.mod
HIGH GO-2025-4011 stdlib: GO-2025-4011 internal/anacrolix-torrent/go.mod
HIGH GO-2025-4010 stdlib: GO-2025-4010 internal/anacrolix-torrent/go.mod
HIGH GO-2025-4009 stdlib: GO-2025-4009 internal/anacrolix-torrent/go.mod
HIGH GO-2025-4008 stdlib: GO-2025-4008 internal/anacrolix-torrent/go.mod
HIGH GO-2025-4007 stdlib: GO-2025-4007 internal/anacrolix-torrent/go.mod
HIGH GO-2025-4006 stdlib: GO-2025-4006 internal/anacrolix-torrent/go.mod
HIGH GO-2025-3956 stdlib: GO-2025-3956 internal/anacrolix-torrent/go.mod
HIGH GO-2025-3849 stdlib: GO-2025-3849 internal/anacrolix-torrent/go.mod
HIGH GO-2025-3751 stdlib: GO-2025-3751 internal/anacrolix-torrent/go.mod
HIGH GO-2025-3750 stdlib: GO-2025-3750 internal/anacrolix-torrent/go.mod
HIGH GO-2025-3563 stdlib: GO-2025-3563 internal/anacrolix-torrent/go.mod
HIGH GO-2025-3503 stdlib: GO-2025-3503 internal/anacrolix-torrent/go.mod
HIGH GO-2025-3447 stdlib: GO-2025-3447 internal/anacrolix-torrent/go.mod
HIGH GO-2025-3420 stdlib: GO-2025-3420 internal/anacrolix-torrent/go.mod
HIGH GO-2025-3373 stdlib: GO-2025-3373 internal/anacrolix-torrent/go.mod
HIGH GO-2024-3107 stdlib: GO-2024-3107 internal/anacrolix-torrent/go.mod
HIGH GO-2024-3106 stdlib: GO-2024-3106 internal/anacrolix-torrent/go.mod
HIGH GO-2024-3105 stdlib: GO-2024-3105 internal/anacrolix-torrent/go.mod
HIGH GO-2024-2963 stdlib: GO-2024-2963 internal/anacrolix-torrent/go.mod
HIGH GO-2024-2888 stdlib: GO-2024-2888 internal/anacrolix-torrent/go.mod
HIGH GO-2024-2887 stdlib: GO-2024-2887 internal/anacrolix-torrent/go.mod
HIGH GO-2024-2687 stdlib: GO-2024-2687 internal/anacrolix-torrent/go.mod
HIGH GO-2024-2610 stdlib: GO-2024-2610 internal/anacrolix-torrent/go.mod
HIGH GO-2024-2609 stdlib: GO-2024-2609 internal/anacrolix-torrent/go.mod
HIGH GO-2024-2600 stdlib: GO-2024-2600 internal/anacrolix-torrent/go.mod
HIGH GO-2024-2599 stdlib: GO-2024-2599 internal/anacrolix-torrent/go.mod
HIGH GO-2024-2598 stdlib: GO-2024-2598 internal/anacrolix-torrent/go.mod
HIGH GO-2024-2611 google.golang.org/protobuf: GO-2024-2611 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5024 golang.org/x/sys: GO-2026-5024 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5030 golang.org/x/net: GO-2026-5030 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5029 golang.org/x/net: GO-2026-5029 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5028 golang.org/x/net: GO-2026-5028 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5027 golang.org/x/net: GO-2026-5027 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5026 golang.org/x/net: GO-2026-5026 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5025 golang.org/x/net: GO-2026-5025 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4918 golang.org/x/net: GO-2026-4918 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4441 golang.org/x/net: GO-2026-4441 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4440 golang.org/x/net: GO-2026-4440 internal/anacrolix-torrent/go.mod
HIGH GO-2025-3595 golang.org/x/net: GO-2025-3595 internal/anacrolix-torrent/go.mod
HIGH GO-2025-3503 golang.org/x/net: GO-2025-3503 internal/anacrolix-torrent/go.mod
HIGH GO-2024-3333 golang.org/x/net: GO-2024-3333 internal/anacrolix-torrent/go.mod
HIGH GO-2024-2687 golang.org/x/net: GO-2024-2687 internal/anacrolix-torrent/go.mod
HIGH GO-2023-2102 golang.org/x/net: GO-2023-2102 internal/anacrolix-torrent/go.mod
HIGH GO-2023-1988 golang.org/x/net: GO-2023-1988 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5033 golang.org/x/crypto: GO-2026-5033 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5023 golang.org/x/crypto: GO-2026-5023 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5021 golang.org/x/crypto: GO-2026-5021 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5020 golang.org/x/crypto: GO-2026-5020 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5019 golang.org/x/crypto: GO-2026-5019 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5018 golang.org/x/crypto: GO-2026-5018 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5017 golang.org/x/crypto: GO-2026-5017 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5016 golang.org/x/crypto: GO-2026-5016 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5015 golang.org/x/crypto: GO-2026-5015 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5014 golang.org/x/crypto: GO-2026-5014 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5013 golang.org/x/crypto: GO-2026-5013 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5006 golang.org/x/crypto: GO-2026-5006 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5005 golang.org/x/crypto: GO-2026-5005 internal/anacrolix-torrent/go.mod
HIGH GO-2025-4135 golang.org/x/crypto: GO-2025-4135 internal/anacrolix-torrent/go.mod
HIGH GO-2025-4134 golang.org/x/crypto: GO-2025-4134 internal/anacrolix-torrent/go.mod
HIGH GO-2025-4116 golang.org/x/crypto: GO-2025-4116 internal/anacrolix-torrent/go.mod
HIGH GO-2025-3487 golang.org/x/crypto: GO-2025-3487 internal/anacrolix-torrent/go.mod
HIGH GO-2026-4479 github.com/pion/dtls/v2: GO-2026-4479 internal/anacrolix-torrent/go.mod
HIGH GO-2026-5039 stdlib: GO-2026-5039 go.mod
HIGH GO-2026-5038 stdlib: GO-2026-5038 go.mod
HIGH GO-2026-5037 stdlib: GO-2026-5037 go.mod
HIGH GO-2026-4986 stdlib: GO-2026-4986 go.mod
HIGH GO-2026-4982 stdlib: GO-2026-4982 go.mod
HIGH GO-2026-4981 stdlib: GO-2026-4981 go.mod
HIGH GO-2026-4980 stdlib: GO-2026-4980 go.mod
HIGH GO-2026-4977 stdlib: GO-2026-4977 go.mod
HIGH GO-2026-4976 stdlib: GO-2026-4976 go.mod
HIGH GO-2026-4971 stdlib: GO-2026-4971 go.mod
HIGH GO-2026-4947 stdlib: GO-2026-4947 go.mod
HIGH GO-2026-4946 stdlib: GO-2026-4946 go.mod
HIGH GO-2026-4918 stdlib: GO-2026-4918 go.mod
HIGH GO-2026-4870 stdlib: GO-2026-4870 go.mod
HIGH GO-2026-4869 stdlib: GO-2026-4869 go.mod
HIGH GO-2026-4865 stdlib: GO-2026-4865 go.mod
HIGH GO-2026-4864 stdlib: GO-2026-4864 go.mod
HIGH GO-2026-4603 stdlib: GO-2026-4603 go.mod
HIGH GO-2026-4602 stdlib: GO-2026-4602 go.mod
HIGH GO-2026-4601 stdlib: GO-2026-4601 go.mod
HIGH GO-2026-4403 stdlib: GO-2026-4403 go.mod
HIGH GO-2026-4342 stdlib: GO-2026-4342 go.mod
HIGH GO-2026-4341 stdlib: GO-2026-4341 go.mod
HIGH GO-2026-4340 stdlib: GO-2026-4340 go.mod
HIGH GO-2026-4337 stdlib: GO-2026-4337 go.mod
HIGH GO-2025-4175 stdlib: GO-2025-4175 go.mod
HIGH GO-2025-4155 stdlib: GO-2025-4155 go.mod
HIGH GO-2025-4015 stdlib: GO-2025-4015 go.mod
HIGH GO-2025-4014 stdlib: GO-2025-4014 go.mod
HIGH GO-2025-4013 stdlib: GO-2025-4013 go.mod
HIGH GO-2025-4012 stdlib: GO-2025-4012 go.mod
HIGH GO-2025-4011 stdlib: GO-2025-4011 go.mod
HIGH GO-2025-4010 stdlib: GO-2025-4010 go.mod
HIGH GO-2025-4009 stdlib: GO-2025-4009 go.mod
HIGH GO-2025-4008 stdlib: GO-2025-4008 go.mod
HIGH GO-2025-4007 stdlib: GO-2025-4007 go.mod
HIGH GO-2025-4006 stdlib: GO-2025-4006 go.mod
HIGH GO-2025-3956 stdlib: GO-2025-3956 go.mod
HIGH GO-2025-3849 stdlib: GO-2025-3849 go.mod
HIGH GO-2025-3751 stdlib: GO-2025-3751 go.mod
HIGH GO-2025-3750 stdlib: GO-2025-3750 go.mod
HIGH GO-2025-3749 stdlib: GO-2025-3749 go.mod
HIGH GO-2025-3563 stdlib: GO-2025-3563 go.mod
HIGH GO-2025-3503 stdlib: GO-2025-3503 go.mod
MED SEC089 [SEC089] Go: bind to all interfaces (0.0.0.0): Server binds to all network interfaces — e… internal/anacrolix-torrent/tracker/udp/…:89
MED SEC045 [SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even … internal/metadb/db.go:59
MED SEC045 [SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even … internal/metadb/caches.go:22
MED SEC045 [SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even … internal/anacrolix-torrent/storage/sqli…:51
MED SEC123 [SEC123] Production stack trace / debug output exposed: Debug mode left on in production … internal/anacrolix-torrent/internal/cmd…:15
MED DKR003 Dockerfile base image uses the latest tag docker-windows/templates/Dockerfile.ple…:29
MED DKR003 Dockerfile base image uses the latest tag docker-windows/templates/Dockerfile.jel…:29
MED AUC001 [AUC001] No Repobility access matrix policy found: The repository uses web/API frameworks…
MED DKR017 Dockerfile installs dependencies after copying the full source tree internal/anacrolix-torrent/Dockerfile:17
MED DKR002 Dockerfile base image has no explicit tag internal/anacrolix-torrent/Dockerfile:3
MED DKR007 Docker build context has no .dockerignore .dockerignore
MED DEPCUR-GHA GitHub Action `peter-evans/dockerhub-description@v4` is 1 major version(s) behind (latest… .github/workflows/docker-publish.yml:88
MED DEPCUR-GHA GitHub Action `actions/checkout@v4` is 2 major version(s) behind (latest v6.0.3) .github/workflows/docker-publish.yml:32
MED GHSA-qppj-fm5r-hxr3 golang.org/x/net: GHSA-qppj-fm5r-hxr3 internal/anacrolix-torrent/go.mod
MED GHSA-vvgj-x9jq-8cj9 github.com/quic-go/quic-go: GHSA-vvgj-x9jq-8cj9 go.mod
MED DKR001 Docker final stage has no non-root USER internal/anacrolix-torrent/Dockerfile:3
MED DKR001 Docker final stage has no non-root USER docker-windows/templates/Dockerfile.ple…:29
MED DKR001 Docker final stage has no non-root USER docker-windows/templates/Dockerfile.jel…:29
MED DKR001 Docker final stage has no non-root USER docker/Dockerfile:17
MED JRN003 Frontend API reference is not matched by discovered backend routes settings.html:1578
MED JRN003 Frontend API reference is not matched by discovered backend routes settings.html:1555
MED JRN003 Frontend API reference is not matched by discovered backend routes settings.html:1511
MED JRN003 Frontend API reference is not matched by discovered backend routes settings.html:1327
MED JRN003 Frontend API reference is not matched by discovered backend routes settings.html:1223
MED JRN003 Frontend API reference is not matched by discovered backend routes settings.html:1059
MED JRN003 Frontend API reference is not matched by discovered backend routes settings.html:1054
MED JRN003 Frontend API reference is not matched by discovered backend routes internal/monitor/dashboard/dashboard.ht…:304
MED JRN003 Frontend API reference is not matched by discovered backend routes internal/monitor/dashboard/dashboard.ht…:295
MED JRN003 Frontend API reference is not matched by discovered backend routes internal/monitor/dashboard/dashboard.ht…:288
MED JRN003 Frontend API reference is not matched by discovered backend routes internal/monitor/dashboard/dashboard.ht…:280
MED JRN003 Frontend API reference is not matched by discovered backend routes internal/monitor/dashboard/dashboard.ht…:264
MED JRN003 Frontend API reference is not matched by discovered backend routes internal/monitor/dashboard/dashboard.ht…:237
MED JRN003 Frontend API reference is not matched by discovered backend routes internal/monitor/dashboard/dashboard.ht…:170
MED AUC002 [AUC002] Low visible authorization coverage in route inventory: Only 34.8% of discovered …
MED AUC009 [AUC009] Sensitive function route lacks elevated authorization evidence: A route appears … internal/anacrolix-torrent/metainfo/mag…:71
MED AUC009 [AUC009] Sensitive function route lacks elevated authorization evidence: A route appears … internal/anacrolix-torrent/webseed/clie…:168
MED AUC009 [AUC009] Sensitive function route lacks elevated authorization evidence: A route appears … internal/monitor/dashboard/handler.go:146
MED AUC004 [AUC004] Admin route does not show super_admin separation: An administrative route was de… internal/gostorm/web/api/route.go:40
MED AUC004 [AUC004] Admin route does not show super_admin separation: An administrative route was de… internal/gostorm/web/api/route.go:39
MED AUC004 [AUC004] Admin route does not show super_admin separation: An administrative route was de… internal/gostorm/web/api/route.go:19
MED AUC004 [AUC004] Admin route does not show super_admin separation: An administrative route was de… internal/gostorm/settings/settings.go:124
MED AUC004 [AUC004] Admin route does not show super_admin separation: An administrative route was de… internal/gostorm/settings/settings.go:117
MED AUC004 [AUC004] Admin route does not show super_admin separation: An administrative route was de… internal/gostorm/settings/btsets.go:192
LOW ERR003 [ERR003] Ignored Error (Go): Ignoring error return values. internal/catalog/torrentio/client.go:180
LOW ERR003 [ERR003] Ignored Error (Go): Ignoring error return values. internal/anacrolix-torrent/tracker/serv…:82
LOW ERR003 [ERR003] Ignored Error (Go): Ignoring error return values. autoremove.go:48
LOW AIC003 Duplicated implementation block across source files internal/syncer/quality/scorer.go:7
LOW AIC003 Duplicated implementation block across source files internal/syncer/engines/watchlist_go.go:1
LOW AIC003 Duplicated implementation block across source files internal/gostorm/web/blocker/iplist.go:6
LOW AIC003 Duplicated implementation block across source files internal/gostorm/web/api/utils/link.go:17
LOW AIC003 Duplicated implementation block across source files internal/gostorm/web/api/stream.go:181
LOW AUC005 [AUC005] No authorization-focused tests detected: No test files with common authorization…
LOW WEB005 robots.txt does not advertise a sitemap internal/catalog/torrentio/client.go
INFO MINED060 [MINED060] Go Context No Cancel: context.Background() at request handler boundary leaks g… internal/anacrolix-torrent/socket.go:66
INFO MINED060 [MINED060] Go Context No Cancel: context.Background() at request handler boundary leaks g… internal/anacrolix-torrent/reader.go:128
INFO MINED060 [MINED060] Go Context No Cancel: context.Background() at request handler boundary leaks g… internal/anacrolix-torrent/ratelimitrea…:24
INFO MINED043 [MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle cr… internal/vfs/metadata.go:42
INFO MINED043 [MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle cr… internal/gostorm/torr/utils/torrent.go:37
INFO MINED043 [MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle cr… internal/anacrolix-torrent/peer_protoco…:21
INFO MINED069 [MINED069] Debug True Prod: Django/Flask DEBUG=True or app.debug=True in non-test files. internal/anacrolix-torrent/internal/cmd…:15
INFO MINED071 [MINED071] Go Panic Call: panic() crashes the process. Should return error in most cases. internal/anacrolix-torrent/bep40.go:48
INFO MINED071 [MINED071] Go Panic Call: panic() crashes the process. Should return error in most cases. internal/anacrolix-torrent/bencode/enco…:31
INFO MINED071 [MINED071] Go Panic Call: panic() crashes the process. Should return error in most cases. internal/anacrolix-torrent/analysis/pee…:33
Reset to top 5 200 findings available (after auto-suppression of test files + won't-fix)

Issue body (markdown)

## Code-quality scan: `MrRobotoGit/gostream`

**Score: 62/100 (D)**  ·  262 findings  ·  scanned 2026-06-05 19:30 UTC  ·  46,037 LOC

| Severity | Count |
|---|---|
| CRITICAL | 7 |
| HIGH | 192 |
| MEDIUM | 43 |
| LOW | 10 |

📊 [Full filterable report](https://repobility.com/scan/8a8c2cee-d3d2-41c8-8d0a-dfcaa04825f2/)  ·  ![scorecard](https://repobility.com/scan/8a8c2cee-d3d2-41c8-8d0a-dfcaa04825f2/report.png?v=1780687818-s2)

### Top findings

1. **HIGH** `GO-2026-5039` — stdlib: GO-2026-5039
   `internal/anacrolix-torrent/go.mod`
2. **HIGH** `GO-2026-5038` — stdlib: GO-2026-5038
   `internal/anacrolix-torrent/go.mod`
3. **HIGH** `GO-2026-5037` — stdlib: GO-2026-5037
   `internal/anacrolix-torrent/go.mod`
4. **HIGH** `GO-2026-4986` — stdlib: GO-2026-4986
   `internal/anacrolix-torrent/go.mod`
5. **HIGH** `GO-2026-4982` — stdlib: GO-2026-4982
   `internal/anacrolix-torrent/go.mod`

---

_Filed automatically. Close this issue if not useful — we won't refile. Full report: https://repobility.com/scan/8a8c2cee-d3d2-41c8-8d0a-dfcaa04825f2/_
Megaproject â high spam risk
Could not determine 'MrRobotoGit/gostream' star count (GitHub API rate-limited or unreachable). When in doubt about repo size, prefer opening a focused PR or a discussion rather than an issue.

The button opens GitHubâs new-issue page in a new tab. You will see the title + body pre-filled â review, edit if you want, then click GitHubâs "Submit new issue" button. Repobility never posts anything on your behalf.

For real security findings on big repos: use the project's SECURITY.md or private advisory flow instead of a public issue.