Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

OrchestratorInc/agent-orchestrator

https://github.com/OrchestratorInc/agent-orchestrator · scanned 2026-10-22 06:14 UTC (5 days, 2 hours ago)

518 raw signals (0 security + 518 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 2 hours ago · v1 · 517 actionable findings from 1 signal source. 1 repeated signal grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
54.7
/100
Security checks
55
0 findings
System graph
55
100.0% cov · 517 findings
Critical
11
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 11 High 98 Medium 138 Low 178 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 517 Crowd 0 Layer: Software 2 Frontend 94 Security 178 Quality 150 Network 2 Hardware 5 Cicd 4 Dependencies 68 Api 14
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 54.7/100 with 100.0% coverage. It contains 16518 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 518 findings — concentrated in security (178), quality (150), frontend (94). Risk profile is high: 11 critical, 98 high, 138 medium. Recommended next step: open the security layer findings first — that's where the highest-impact wins live.

Showing 411 of 517 actionable findings. 518 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

critical System graph security Trivy conf 1.00 CVE-2026-102422: shell-quote 1.10.0 — packages/mobile/package-lock.json
shell-quote: shell-quote: Arbitrary command execution via improper line terminator handling shell-quote's `quote()` function emits a `{ comment }` token as `#` followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line termina…
VulnCve 2026 102422
critical System graph security Trivy conf 1.00 CVE-2026-102422: shell-quote 1.10.0 — scripts/package-lock.json
shell-quote: shell-quote: Arbitrary command execution via improper line terminator handling shell-quote's `quote()` function emits a `{ comment }` token as `#` followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line termina…
VulnCve 2026 102422
critical System graph security Trivy conf 1.00 CVE-2026-104846: seroval 1.5.4 — frontend/package-lock.json
seroval: Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940) Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. From 0.12.0 until 1.6.2, fromJSON deserialization of a fulfilled …
VulnCve 2026 104846
critical System graph security Trivy conf 1.00 CVE-2026-75604: next 16.2.11 — frontend/src/docs/package-lock.json
next: Next.js: Unauthenticated Remote Code Execution on windows-hosted servers Next.js is a React framework for building full-stack web applications. From 13.4.0 until 15.5.24 and 16.3.3, Next.js applications using Pages Router or App Router without Cache Components on Windows-hosted servers do no…
VulnCve 2026 75604
critical System graph security Trivy conf 1.00 CVE-2026-90711: proxy-addr 2.0.7 — frontend/acp-runtime/package-lock.json
proxy-addr: proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions 1.1.0 through 2.0.7, a trust subnet written in IPv4-mapp…
VulnCve 2026 90711
critical System graph security Trivy conf 1.00 GHSA-2xp9-vwfh-vxw4: next 16.2.11 — frontend/src/docs/package-lock.json
Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used A vulnerability in the underlying `libheif` library used by `sharp` which Next.js uses for image optimization can lead to remote code execution when AVIF files are optimized. Until a fix has propagat…
VulnGhsa 2xp9 vwfh vxw4
critical System graph security Trivy conf 1.00 GHSA-vcvr-r3jv-pc5j: next 16.2.11 — frontend/src/docs/package-lock.json
Next.js: Remote Code Execution in next/og ImageResponse ## Impact The Node.js `ImageResponse` implementation from `next/og` is affected by an upstream vulnerability. This can lead to remote code execution. Affected applications pass attacker-controlled values into SVG content, attributes, or sty…
VulnGhsa vcvr r3jv pc5j
critical System graph security security conf 1.00 Insecure pattern 'private_key_in_repo' in .github/.gitleaks.toml:76
Found a known-risky pattern (private_key_in_repo). Review and replace if possible.
.github/.gitleaks.toml:76 Private key in repo
critical System graph security Trivy conf 1.00 Secret leak: Google (GCP) Service-account — .github/.gitleaks.toml
Trivy detected a possible secret in `.github/.gitleaks.toml`. Rule: gcp-service-account Severity: CRITICAL Match (redacted): regex = '''*************************''' Action: rotate the credential and remove it from the repo. Use a secrets manager or environment variables.
Secret
high System graph security Trivy conf 1.00 CVE-2025-71329: image-size 2.0.2 — frontend/src/docs/package-lock.json
image-size: image-size: Denial of Service via crafted image buffer with zero-valued size field image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valu…
VulnCve 2025 71329
high System graph security Trivy conf 1.00 CVE-2025-71330: image-size 2.0.2 — frontend/src/docs/package-lock.json
image-size: image-size: Denial of Service via crafted ICNS image buffer image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer. Attackers can craft an ICNS buffe…
VulnCve 2025 71330
high System graph security Trivy conf 1.00 CVE-2026-101898: axios 1.18.1 — scripts/package-lock.json
axios: axios: Security control bypass via unapplied HTTP/2 proxy and DNS settings Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Axios HTTP/2 request setup does not consistently apply proxy settings and caller-supplied DNS lookup policy. An HTTPS reques…
VulnCve 2026 101898
high System graph security Trivy conf 1.00 CVE-2026-101901: axios 1.18.1 — scripts/package-lock.json
axios: Axios: Denial of Service via unhandled error in HTTP/2 session initialization Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Http2Sessions does not install adequate error handling for a ClientHttp2Session during Axios HTTP/2 session initializatio…
VulnCve 2026 101901
high System graph security Trivy conf 1.00 CVE-2026-101903: axios 1.18.1 — scripts/package-lock.json
axios: Axios: Denial of Service via malformed data URLs Axios is a promise-based HTTP client for the browser and Node.js. From 1.16.1 until 1.20.0, the RFC 2397 regular expression allows slash characters on both sides of the media-type separator. An application passes an attacker-controlled malfor…
VulnCve 2026 101903
high System graph security Trivy conf 1.00 CVE-2026-101905: axios 1.18.1 — scripts/package-lock.json
axios: axios: Request socket hijacking via inherited createConnection property Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib/adapters/http.js supplies request options without an own createConnection value. A separate same-p…
VulnCve 2026 101905
high System graph security Trivy conf 1.00 CVE-2026-101906: axios 1.18.1 — scripts/package-lock.json
axios: axios: Denial of Service via crafted redirect hostname Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy applies a quadratic trailing-dot regular expression to redirect hostnames. HTTP_PROXY or HTTPS_PROXY is configured, NO_P…
VulnCve 2026 101906
high System graph security Trivy conf 1.00 CVE-2026-101907: axios 1.18.1 — scripts/package-lock.json
axios: Axios: Server-Side Request Forgery via bypassed redirect restrictions in fetch adapter Axios is a promise-based HTTP client for the browser and Node.js. From 1.17.0 until 1.20.0, the fetch adapter bypasses the maxRedirects: 0 redirect policy. An Axios request uses the fetch adapter with max…
VulnCve 2026 101907
high System graph security Trivy conf 1.00 CVE-2026-101909: axios 1.18.1 — scripts/package-lock.json
axios: axios: Denial of Service via prototype pollution gadget in form serialization Axios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15.1 until 1.20.0, ToFormData processes inherited serialization options and visitor properties supplied through prot…
VulnCve 2026 101909
high System graph security Trivy conf 1.00 CVE-2026-101916: @grpc/grpc-js 1.14.4 — scripts/package-lock.json
grpc-js: grpc-js: Authentication bypass via improper peer certificate validation @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5, getAuthContext does not distinguish authorized from unauthorized peer certificates when se…
VulnCve 2026 101916
high System graph security Trivy conf 1.00 CVE-2026-102276: brace-expansion 1.1.15 — frontend/package-lock.json
brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in pars…
VulnCve 2026 102276
high System graph security Trivy conf 1.00 CVE-2026-102276: brace-expansion 5.0.8 — frontend/src/docs/package-lock.json
brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in pars…
VulnCve 2026 102276
high System graph security Trivy conf 1.00 CVE-2026-102276: brace-expansion 5.0.9 — packages/mobile/package-lock.json
brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in pars…
VulnCve 2026 102276
high System graph security Trivy conf 1.00 CVE-2026-102278: brace-expansion 1.1.15 — frontend/package-lock.json
brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() to recurse on…
VulnCve 2026 102278
high System graph security Trivy conf 1.00 CVE-2026-102278: brace-expansion 5.0.8 — frontend/src/docs/package-lock.json
brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() to recurse on…
VulnCve 2026 102278
high System graph security Trivy conf 1.00 CVE-2026-102278: brace-expansion 5.0.9 — packages/mobile/package-lock.json
brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() to recurse on…
VulnCve 2026 102278
high System graph security Trivy conf 1.00 CVE-2026-104845: seroval 1.5.4 — frontend/package-lock.json
seroval: seroval: Denial of Service via unbounded memory allocation during deserialization Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.3, deserializeTypedArray in fromJSON and fromCrossJSON trusts a deserialized source…
VulnCve 2026 104845
high System graph security Trivy conf 1.00 CVE-2026-104850: @modelcontextprotocol/sdk 1.30.0 — frontend/acp-runtime/package-lock.json
@modelcontextprotocol/sdk: @modelcontextprotocol/client: MCP TypeScript SDK: Information disclosure via unbound OAuth credentials MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the…
VulnCve 2026 104850
high System graph security Trivy conf 1.00 CVE-2026-111755: follow-redirects 1.16.0 — scripts/package-lock.json
follow-redirects: follow-redirects: Information disclosure via improper regular expression escaping in sensitive header filtering follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.1, escapeRegex leaves valid header-name metacha…
VulnCve 2026 111755
high System graph security Trivy conf 1.00 CVE-2026-111756: follow-redirects 1.16.0 — scripts/package-lock.json
follow-redirects: follow-redirects: Information disclosure via array-formatted headers during cross-origin redirects follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From version 1.16.0 to before version 1.16.1, follow-redirects removes sensitive cr…
VulnCve 2026 111756
high System graph security Trivy conf 1.00 CVE-2026-111767: @modelcontextprotocol/sdk 1.30.0 — frontend/acp-runtime/package-lock.json
@modelcontextprotocol/sdk: @modelcontextprotocol/sdk: Unauthorized cross-session task access via taskStore MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature (taskStore) did …
VulnCve 2026 111767
high System graph security Trivy conf 1.00 CVE-2026-111768: @modelcontextprotocol/sdk 1.30.0 — frontend/acp-runtime/package-lock.json
MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation ### Summary In affected versions, servers put no limit on how many array elements and object keys they validated in one request. One HTTP request within the default 4 MiB size limit cou…
VulnCve 2026 111768
high System graph security Trivy conf 1.00 CVE-2026-13149: brace-expansion 1.1.15 — frontend/package-lock.json
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a…
VulnCve 2026 13149
high System graph security Trivy conf 1.00 CVE-2026-14257: brace-expansion 1.1.15 — frontend/package-lock.json
brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the lengt…
VulnCve 2026 14257
high System graph security Trivy conf 1.00 CVE-2026-39828: golang.org/x/crypto v0.51.0 — backend/go.mod
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions …
VulnCve 2026 39828
high System graph security Trivy conf 1.00 CVE-2026-39829: golang.org/x/crypto v0.51.0 — backend/go.mod
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes…
VulnCve 2026 39829
high System graph security Trivy conf 1.00 CVE-2026-39830: golang.org/x/crypto v0.51.0 — backend/go.mod
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by …
VulnCve 2026 39830
high System graph security Trivy conf 1.00 CVE-2026-39831: golang.org/x/crypto v0.51.0 — backend/go.mod
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check The Verify() method for FIDO/U2F security key types ([email protected], [email protected]) did not check the User Presence flag. Signatures generated without physical …
VulnCve 2026 39831
high System graph security Trivy conf 1.00 CVE-2026-39832: golang.org/x/crypto v0.51.0 — backend/go.mod
golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions When adding a key to a remote agent constraint extensions such as [email protected] were not serialized in the request. Destination restrictions were silent…
VulnCve 2026 39832
high System graph security Trivy conf 1.00 CVE-2026-39835: golang.org/x/crypto v0.51.0 — backend/go.mod
golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now retur…
VulnCve 2026 39835
high System graph security Trivy conf 1.00 CVE-2026-42508: golang.org/x/crypto v0.51.0 — backend/go.mod
golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked. Packag…
VulnCve 2026 42508
high System graph security Trivy conf 1.00 CVE-2026-45623: postcss 8.4.31 — frontend/src/docs/package-lock.json
postcss: PostCSS: Information disclosure and denial of service via crafted CSS input PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the /*# sourceMappingURL=PA…
VulnCve 2026 45623
high System graph security Trivy conf 1.00 CVE-2026-46595: golang.org/x/crypto v0.51.0 — backend/go.mod
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address val…
VulnCve 2026 46595
high System graph security Trivy conf 1.00 CVE-2026-46597: golang.org/x/crypto v0.51.0 — backend/go.mod
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs. Package: golang.org/x/crypto Installed: v0.51.0 Fixed in:…
VulnCve 2026 46597
high System graph security Trivy conf 1.00 CVE-2026-56854: golang.org/x/crypto v0.51.0 — backend/go.mod
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extend…
VulnCve 2026 56854
high System graph security Trivy conf 1.00 CVE-2026-56854: golang.org/x/crypto v0.54.0 — cloud/go.mod
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extend…
VulnCve 2026 56854
high System graph security Trivy conf 1.00 CVE-2026-59869: js-yaml 4.2.0 — frontend/package-lock.json
js-yaml: js-yaml: Denial of Service via crafted YAML documents js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where…
VulnCve 2026 59869
high System graph security Trivy conf 1.00 CVE-2026-59892: @opentelemetry/propagator-jaeger 2.8.0 — scripts/package-lock.json
@opentelemetry/propagator-jaeger: OpenTelemetry JavaScript: Denial of Service via malformed HTTP header decoding OpenTelemetry JavaScript is the OpenTelemetry JavaScript client. Prior to 2.9.0, @opentelemetry/propagator-jaeger decodes incoming uber-trace-id and uberctx-* HTTP header values with de…
VulnCve 2026 59892
high System graph security Trivy conf 1.00 CVE-2026-67213: nanoid 3.3.16 — frontend/src/docs/package-lock.json
nanoid: nanoid: Denial of Service via infinite loop in random ID generation nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit conditio…
VulnCve 2026 67213
high System graph security Trivy conf 1.00 CVE-2026-69152: brace-expansion 1.1.15 — frontend/package-lock.json
brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-altern…
VulnCve 2026 69152
high System graph security Trivy conf 1.00 CVE-2026-69152: brace-expansion 5.0.8 — frontend/src/docs/package-lock.json
brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-altern…
VulnCve 2026 69152
high System graph security Trivy conf 1.00 CVE-2026-73566: tar 7.5.20 — scripts/package-lock.json
tar: node-tar: Denial of Service via crafted long-path tar archive node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an archive entry path upward with path.dirname() and no segment cap when ta…
VulnCve 2026 73566
high System graph security Trivy conf 1.00 CVE-2026-73646: postcss 8.4.31 — frontend/src/docs/package-lock.json
postcss: PostCSS: Information disclosure via path traversal in source map auto-loading PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.18, lib/previous-map.js loadMap() passes attacker-controlled sour…
VulnCve 2026 73646
high System graph security Trivy conf 1.00 CVE-2026-84292: fast-uri 3.1.6 — frontend/acp-runtime/package-lock.json
fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated verbatim, so a port value that is not a sequen…
VulnCve 2026 84292
high System graph security Trivy conf 1.00 CVE-2026-84375: js-yaml 4.2.0 — frontend/package-lock.json
js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2, 4.3.2, and 5.4.1, maxTotalMergeKeys in lib/js-yaml/loader.js and lib/loader.js does not count empty mapping sources while processing the merge key <<. An attac…
VulnCve 2026 84375
high System graph security Trivy conf 1.00 CVE-2026-84394: fast-uri 3.1.6 — frontend/acp-runtime/package-lock.json
fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error. A host that starts with an opening bracket but does not end with a closing bracket is neither v…
VulnCve 2026 84394
high System graph security Trivy conf 1.00 CVE-2026-85393: node-forge 1.4.0 — packages/mobile/package-lock.json
node-forge: node-forge: Signature forgery vulnerability in RSA PKCS#1 v1.5 verification node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence …
VulnCve 2026 85393
high System graph security Trivy conf 1.00 CVE-2026-87776: compression 1.8.1 — packages/mobile/package-lock.json
compression: compression: Denial of Service via memory leak on premature response close compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib stream created to compress th…
VulnCve 2026 87776
high System graph security Trivy conf 1.00 CVE-2026-93687: braces 3.0.3 — packages/mobile/package-lock.json
braces: braces: Denial of Service via Stack Overflow from Deeply Nested Patterns braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack a…
VulnCve 2026 93687
high System graph security Trivy conf 1.00 CVE-2026-93687: braces 3.0.3 — scripts/package-lock.json
braces: braces: Denial of Service via Stack Overflow from Deeply Nested Patterns braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack a…
VulnCve 2026 93687
high System graph security Trivy conf 1.00 CVE-2026-93749: source-map-js 1.2.1 — frontend/src/docs/package-lock.json
source-map-js: source-map-js: Denial of Service via malformed indexed source maps source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values …
VulnCve 2026 93749
high System graph security Trivy conf 1.00 CVE-2026-93749: source-map-js 1.2.1 — packages/mobile/package-lock.json
source-map-js: source-map-js: Denial of Service via malformed indexed source maps source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values …
VulnCve 2026 93749
high System graph security Trivy conf 1.00 CVE-2026-94483: next 16.2.11 — frontend/src/docs/package-lock.json
next: Next.js: Information disclosure via SSRF in Image Optimization Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns, allowing the o…
VulnCve 2026 94483
high System graph api Wiring conf 0.90 Dangling fetch: DELETE /api/cloud/v1/github/user (packages/cloud-client/src/client.ts:225)
`packages/cloud-client/src/client.ts:225` calls `DELETE /api/cloud/v1/github/user` but no backend route in the scanned graph matches that path. This is a likely runtime 404 unless an external gateway or unsupported router provides it. Tool: helper:request Normalized path used for matching: `/cloud…
packages/cloud-client/src/client.ts:225 Dangling fetchHelper:request
high System graph api Wiring conf 0.90 Dangling fetch: GET /api/cloud/v1/worker/children${suffix} (packages/cloud-client/src/client.ts:1042)
`packages/cloud-client/src/client.ts:1042` calls `GET /api/cloud/v1/worker/children${suffix}` but no backend route in the scanned graph matches that path. This is a likely runtime 404 unless an external gateway or unsupported router provides it. Tool: helper:request Normalized path used for matchi…
packages/cloud-client/src/client.ts:1042 Dangling fetchHelper:request
high System graph api Wiring conf 0.90 Dangling fetch: GET /api/cloud/v1/worker/credential?reviewRunId=${encodeURIComponent(reviewRunId)} (packages/cloud-client/src/client.ts:1020)
`packages/cloud-client/src/client.ts:1020` calls `GET /api/cloud/v1/worker/credential?reviewRunId=${encodeURIComponent(reviewRunId)}` but no backend route in the scanned graph matches that path. This is a likely runtime 404 unless an external gateway or unsupported router provides it. Tool: helper…
packages/cloud-client/src/client.ts:1020 Dangling fetchHelper:request
high System graph api Wiring conf 0.90 Dangling fetch: POST /api/cloud/v1/github/user/authorize (packages/cloud-client/src/client.ts:218)
`packages/cloud-client/src/client.ts:218` calls `POST /api/cloud/v1/github/user/authorize` but no backend route in the scanned graph matches that path. This is a likely runtime 404 unless an external gateway or unsupported router provides it. Tool: helper:request Normalized path used for matching:…
packages/cloud-client/src/client.ts:218 Dangling fetchHelper:request
high System graph api Wiring conf 0.90 Dangling fetch: POST /api/cloud/v1/worker/checkout-grant (packages/cloud-client/src/client.ts:1028)
`packages/cloud-client/src/client.ts:1028` calls `POST /api/cloud/v1/worker/checkout-grant` but no backend route in the scanned graph matches that path. This is a likely runtime 404 unless an external gateway or unsupported router provides it. Tool: helper:request Normalized path used for matching…
packages/cloud-client/src/client.ts:1028 Dangling fetchHelper:request
high System graph api Wiring conf 0.90 Dangling fetch: POST /api/cloud/v1/worker/children (packages/cloud-client/src/client.ts:1051)
`packages/cloud-client/src/client.ts:1051` calls `POST /api/cloud/v1/worker/children` but no backend route in the scanned graph matches that path. This is a likely runtime 404 unless an external gateway or unsupported router provides it. Tool: helper:request Normalized path used for matching: `/cl…
packages/cloud-client/src/client.ts:1051 Dangling fetchHelper:request
high System graph api Wiring conf 0.90 Dangling fetch: POST /api/cloud/v1/worker/children/${encodeURIComponent(sessionId)}/messages (packages/cloud-client/src/client.ts:1064)
`packages/cloud-client/src/client.ts:1064` calls `POST /api/cloud/v1/worker/children/${encodeURIComponent(sessionId)}/messages` but no backend route in the scanned graph matches that path. This is a likely runtime 404 unless an external gateway or unsupported router provides it. Tool: helper:reque…
packages/cloud-client/src/client.ts:1064 Dangling fetchHelper:request
high System graph api Wiring conf 0.90 Dangling fetch: POST /api/cloud/v1/worker/events (packages/cloud-client/src/client.ts:961)
`packages/cloud-client/src/client.ts:961` calls `POST /api/cloud/v1/worker/events` but no backend route in the scanned graph matches that path. This is a likely runtime 404 unless an external gateway or unsupported router provides it. Tool: helper:request Normalized path used for matching: `/cloud…
packages/cloud-client/src/client.ts:961 Dangling fetchHelper:request
high System graph api Wiring conf 0.90 Dangling fetch: POST /api/cloud/v1/worker/heartbeat (packages/cloud-client/src/client.ts:949)
`packages/cloud-client/src/client.ts:949` calls `POST /api/cloud/v1/worker/heartbeat` but no backend route in the scanned graph matches that path. This is a likely runtime 404 unless an external gateway or unsupported router provides it. Tool: helper:request Normalized path used for matching: `/cl…
packages/cloud-client/src/client.ts:949 Dangling fetchHelper:request
high System graph api Wiring conf 0.90 Dangling fetch: POST /api/cloud/v1/worker/terminals/${encodeURIComponent(terminalId)}/output (packages/cloud-client/src/client.ts:1135)
`packages/cloud-client/src/client.ts:1135` calls `POST /api/cloud/v1/worker/terminals/${encodeURIComponent(terminalId)}/output` but no backend route in the scanned graph matches that path. This is a likely runtime 404 unless an external gateway or unsupported router provides it. Tool: helper:reque…
packages/cloud-client/src/client.ts:1135 Dangling fetchHelper:request
high System graph api Wiring conf 0.90 Dangling fetch: POST /api/cloud/v1/worker/transport/${encodeURIComponent(requestId)}/complete (packages/cloud-client/src/client.ts:1103)
`packages/cloud-client/src/client.ts:1103` calls `POST /api/cloud/v1/worker/transport/${encodeURIComponent(requestId)}/complete` but no backend route in the scanned graph matches that path. This is a likely runtime 404 unless an external gateway or unsupported router provides it. Tool: helper:requ…
packages/cloud-client/src/client.ts:1103 Dangling fetchHelper:request
high System graph api Wiring conf 0.90 Dangling fetch: POST /api/cloud/v1/worker/turns/${encodeURIComponent(turnId)}/cancellation?${query.toString()} (packages/cloud-client/src/client.ts:982)
`packages/cloud-client/src/client.ts:982` calls `POST /api/cloud/v1/worker/turns/${encodeURIComponent(turnId)}/cancellation?${query.toString()}` but no backend route in the scanned graph matches that path. This is a likely runtime 404 unless an external gateway or unsupported router provides it. T…
packages/cloud-client/src/client.ts:982 Dangling fetchHelper:request
high System graph api Wiring conf 0.90 Dangling fetch: POST /api/cloud/v1/worker/turns/claim (packages/cloud-client/src/client.ts:969)
`packages/cloud-client/src/client.ts:969` calls `POST /api/cloud/v1/worker/turns/claim` but no backend route in the scanned graph matches that path. This is a likely runtime 404 unless an external gateway or unsupported router provides it. Tool: helper:request Normalized path used for matching: `/…
packages/cloud-client/src/client.ts:969 Dangling fetchHelper:request
high System graph security Trivy conf 1.00 DS-0002: Image user should not be 'root' — cloud/nodeops/harness/claude-code.Dockerfile
Image user should not be 'root' Specify at least 1 USER command in Dockerfile with non-root user as argument Rule: DS-0002 Severity: HIGH Target: cloud/nodeops/harness/claude-code.Dockerfile
Misconfig
high System graph security Trivy conf 1.00 DS-0002: Image user should not be 'root' — cloud/nodeops/harness/codex.Dockerfile
Image user should not be 'root' Specify at least 1 USER command in Dockerfile with non-root user as argument Rule: DS-0002 Severity: HIGH Target: cloud/nodeops/harness/codex.Dockerfile
Misconfig
high System graph security Trivy conf 1.00 DS-0002: Image user should not be 'root' — cloud/nodeops/harness/cursor.Dockerfile
Image user should not be 'root' Specify at least 1 USER command in Dockerfile with non-root user as argument Rule: DS-0002 Severity: HIGH Target: cloud/nodeops/harness/cursor.Dockerfile
Misconfig
high System graph security Trivy conf 1.00 DS-0002: Image user should not be 'root' — cloud/nodeops/Sandbox.base.Dockerfile
Image user should not be 'root' Specify at least 1 USER command in Dockerfile with non-root user as argument Rule: DS-0002 Severity: HIGH Target: cloud/nodeops/Sandbox.base.Dockerfile
Misconfig
high System graph security Trivy conf 1.00 DS-0002: Image user should not be 'root' — cloud/nodeops/Sandbox.Dockerfile
Image user should not be 'root' Specify at least 1 USER command in Dockerfile with non-root user as argument Rule: DS-0002 Severity: HIGH Target: cloud/nodeops/Sandbox.Dockerfile
Misconfig
high System graph security Trivy conf 1.00 DS-0002: Image user should not be 'root' — experiments/remote-browser-poc/Dockerfile
Image user should not be 'root' Specify at least 1 USER command in Dockerfile with non-root user as argument Rule: DS-0002 Severity: HIGH Target: experiments/remote-browser-poc/Dockerfile
Misconfig
high System graph security Trivy conf 1.00 GHSA-5p4m-2wfm-xmqj: js-yaml 4.2.0 — frontend/package-lock.json
JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported # Quadratic CPU consumption in `!!omap` resolution (js-yaml 3.x and 4.x) ## Summary `resolveYamlOmap()` enforces key uniqueness for `!!omap` sequences with a linear scan (`objectKeys.indexOf…
VulnGhsa 5p4m 2wfm xmqj
high System graph security Trivy conf 1.00 GHSA-f88m-g3jw-g9cj: sharp 0.34.5 — frontend/src/docs/package-lock.json
sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 ### Impact A number of vulnerabilities, two rated as "High" severity using CVSSv4, have been discovered and fixed in the upstream libvips dependency. Those processing untrusted input with v…
VulnGhsa f88m g3jw g9cj
high System graph security Trivy conf 1.00 GHSA-rgj7-g3m4-5g8c: sharp 0.34.5 — frontend/src/docs/package-lock.json
sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545 ### Impact A number of vulnerabilities, two rated as "Critical" severity using CVSSv3, have been discovered and fixed in the upstream libheif dependency. These can lead to possible remote code execution (RCE) on glibc-b…
VulnGhsa rgj7 g3m4 5g8c
high System graph security Trivy conf 1.00 GHSA-wq5f-xc86-pv6w: sharp 0.34.5 — frontend/src/docs/package-lock.json
sharp : Vulnerability in librsvg dependency CVE-2026-96889 ### Impact A memory-related vulnerability has been discovered and fixed in the upstream librsvg dependency. When certain runtime-specific conditions apply, this vulnerability can lead to possible remote code execution (RCE) on glibc-based…
VulnGhsa wq5f xc86 pv6w
high System graph security security conf 1.00 Insecure pattern 'exec_used' in frontend/scripts/verify-mac-artifact.sh:63
Found a known-risky pattern (exec_used). Review and replace if possible.
frontend/scripts/verify-mac-artifact.sh:63 Exec used
high System graph security security conf 1.00 Insecure pattern 'exec_used' in frontend/src/types/better-sqlite3.d.ts:18
Found a known-risky pattern (exec_used). Review and replace if possible.
frontend/src/types/better-sqlite3.d.ts:18 Exec used
high System graph security Skillspector conf 0.95 SkillSpector OH1 (output-handling) in .claude/skills/bug-triage/scripts/push_fix_to_github.py
subprocess.run(cmd, capture_output Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution. Skill: bug-triage Rule: OH1 Category: output-handling Severity: HIGH Confid…
.claude/skills/bug-triage/scripts/push_fix_to_github.py:28 Mcp skillOutput handlingOh1
high System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 1.1.15: GHSA-3jxr-9vmj-r5cp
OSV.dev reports `brace-expansion` at version `1.1.15` (resolved in `frontend/package-lock.json`) is affected by GHSA-3jxr-9vmj-r5cp (aka CVE-2026-13149). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: DoS via…
frontend/package-lock.json ScaOsvGhsa 3jxr 9vmj r5cp
high System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 1.1.15: GHSA-6j4f-fj2g-mc7p
OSV.dev reports `brace-expansion` at version `1.1.15` (resolved in `frontend/package-lock.json`) is affected by GHSA-6j4f-fj2g-mc7p (aka CVE-2026-102276). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: DoS vi…
frontend/package-lock.json ScaOsvGhsa 6j4f fj2g mc7p
high System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 1.1.15: GHSA-mh99-v99m-4gvg
OSV.dev reports `brace-expansion` at version `1.1.15` (resolved in `frontend/package-lock.json`) is affected by GHSA-mh99-v99m-4gvg (aka CVE-2026-14257). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: DoS via…
frontend/package-lock.json ScaOsvGhsa mh99 v99m 4gvg
high System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 1.1.15: GHSA-qhr7-859c-m2p7
OSV.dev reports `brace-expansion` at version `1.1.15` (resolved in `frontend/package-lock.json`) is affected by GHSA-qhr7-859c-m2p7 (aka CVE-2026-102278). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: DoS vi…
frontend/package-lock.json ScaOsvGhsa qhr7 859c m2p7
high System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 1.1.15: GHSA-rgw5-rvv9-x895
OSV.dev reports `brace-expansion` at version `1.1.15` (resolved in `frontend/package-lock.json`) is affected by GHSA-rgw5-rvv9-x895 (aka CVE-2026-69152). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: DoS via…
frontend/package-lock.json ScaOsvGhsa rgw5 rvv9 x895
high System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 2.1.1: GHSA-3jxr-9vmj-r5cp
OSV.dev reports `brace-expansion` at version `2.1.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-3jxr-9vmj-r5cp (aka CVE-2026-13149). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: DoS via …
frontend/package-lock.json ScaOsvGhsa 3jxr 9vmj r5cp
high System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 2.1.1: GHSA-6j4f-fj2g-mc7p
OSV.dev reports `brace-expansion` at version `2.1.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-6j4f-fj2g-mc7p (aka CVE-2026-102276). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: DoS via…
frontend/package-lock.json ScaOsvGhsa 6j4f fj2g mc7p
high System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 2.1.1: GHSA-mh99-v99m-4gvg
OSV.dev reports `brace-expansion` at version `2.1.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-mh99-v99m-4gvg (aka CVE-2026-14257). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: DoS via …
frontend/package-lock.json ScaOsvGhsa mh99 v99m 4gvg
high System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 2.1.1: GHSA-qhr7-859c-m2p7
OSV.dev reports `brace-expansion` at version `2.1.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-qhr7-859c-m2p7 (aka CVE-2026-102278). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: DoS via…
frontend/package-lock.json ScaOsvGhsa qhr7 859c m2p7
high System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 2.1.1: GHSA-rgw5-rvv9-x895
OSV.dev reports `brace-expansion` at version `2.1.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-rgw5-rvv9-x895 (aka CVE-2026-69152). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: DoS via …
frontend/package-lock.json ScaOsvGhsa rgw5 rvv9 x895
high System graph dependencies dependencies conf 0.90 Vulnerable dependency tar 6.2.1: GHSA-23hp-3jrh-7fpw
OSV.dev reports `tar` at version `6.2.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-23hp-3jrh-7fpw (aka CVE-2026-59873). Note: `tar` is a transitive dependency — pulled in by another package, not declared directly in a manifest. node-tar: Decompression/parse DoS via unlimited i…
frontend/package-lock.json ScaOsvGhsa 23hp 3jrh 7fpw
high System graph dependencies dependencies conf 0.90 Vulnerable dependency vite 8.0.16: GHSA-587h-7wmj-h5pm
OSV.dev reports `vite` at version `8.0.16` (resolved in `frontend/package-lock.json`) is affected by GHSA-587h-7wmj-h5pm (aka CVE-2026-112942). launch-editor: `fs.existsSync()` existence check can be bypassed on Windows Aliases: CVE-2026-112942 Advisory: https://osv.dev/vulnerability/GHSA-587h-7w…
frontend/package.json ScaOsvGhsa 587h 7wmj h5pm
high System graph dependencies dependencies conf 0.90 Vulnerable dependency vite 8.2.1: GHSA-587h-7wmj-h5pm
OSV.dev reports `vite` at version `8.2.1` (resolved in `packages/product-ui/package-lock.json`) is affected by GHSA-587h-7wmj-h5pm (aka CVE-2026-112942). launch-editor: `fs.existsSync()` existence check can be bypassed on Windows Aliases: CVE-2026-112942 Advisory: https://osv.dev/vulnerability/GH…
packages/product-ui/package.json ScaOsvGhsa 587h 7wmj h5pm
high System graph dependencies dependencies conf 0.90 Vulnerable dependency vite 8.2.2: GHSA-587h-7wmj-h5pm
OSV.dev reports `vite` at version `8.2.2` (resolved in `packages/mobile/package-lock.json`) is affected by GHSA-587h-7wmj-h5pm (aka CVE-2026-112942). launch-editor: `fs.existsSync()` existence check can be bypassed on Windows Aliases: CVE-2026-112942 Advisory: https://osv.dev/vulnerability/GHSA-5…
packages/mobile/package-lock.json ScaOsvGhsa 587h 7wmj h5pm
medium System graph frontend Frontend quality conf 0.80 `dangerouslySetInnerHTML` used in a React component — frontend/src/renderer/components/chat/MermaidBlock.tsx:206
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
frontend/src/renderer/components/chat/MermaidBlock.tsx:206 Fq dangerous html
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: AGENTS.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
AGENTS.md VerificationAgents md
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: cloud/internal/skillassets/using-ao/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
cloud/internal/skillassets/using-ao/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent instructions exist but release-hardening basics are missing
AI-coder instruction files were found, but the repo is missing lockfile. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable.
Repo hardeningGenerated repo pattern
medium System graph security Trivy conf 1.00 AZU-0068: VM Not Attached To Network — cloud/coder-azure-vm/main.tf
VM Not Attached To Network Virtual machine network interface is not associated with a network security group. Rule: AZU-0068 Severity: MEDIUM Target: cloud/coder-azure-vm/main.tf
Misconfig
medium System graph security Trivy conf 1.00 AZU-0076: Network Interfaces With Public IP — cloud/coder-azure-vm/main.tf
Network Interfaces With Public IP Network interface has a public IP address assigned, which increases attack surface. Rule: AZU-0076 Severity: MEDIUM Target: cloud/coder-azure-vm/main.tf
Misconfig
medium System graph quality Placeholder conf 1.00 Critical user flow still appears backed by mock or placeholder data
A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded.
Mock dataCritical flowGenerated repo pattern
medium System graph security Trivy conf 1.00 CVE-2025-71405: github.com/go-chi/chi/v5 v5.1.0 — backend/go.mod
github.com/go-chi/chi: go-chi/chi: Open Redirect vulnerability via RedirectSlashes middleware chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header …
VulnCve 2025 71405
medium System graph security Trivy conf 1.00 CVE-2026-101899: axios 1.18.1 — scripts/package-lock.json
axios: Axios: Information disclosure via improper CIDR proxy bypass handling Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy treats the NO_PROXY CIDR form as a textual hostname suffix instead of evaluating the network range. A req…
VulnCve 2026 101899
medium System graph security Trivy conf 1.00 CVE-2026-101900: axios 1.18.1 — scripts/package-lock.json
axios: Axios: Outbound HTTP header injection via prototype pollution in fetch adapter Axios is a promise-based HTTP client for the browser and Node.js. From 1.12.0 until 1.20.0, ResolveConfig reads inherited Symbol.toStringTag, append, and getHeaders properties while resolving FormData headers. A …
VulnCve 2026 101900
medium System graph security Trivy conf 1.00 CVE-2026-101902: axios 1.18.1 — scripts/package-lock.json
axios: axios: Unintended HTTP method override via prototype pollution gadget Axios is a promise-based HTTP client for the browser and Node.js. From 0.27.2 until 0.34.0 and 1.20.0, Axios default-instance requests that omit an explicit method can read an inherited method value from Object.prototype.…
VulnCve 2026 101902
medium System graph security Trivy conf 1.00 CVE-2026-101904: axios 1.18.1 — scripts/package-lock.json
axios: Axios: HTTP header injection via inherited prototype properties Axios is a promise-based HTTP client for the browser and Node.js. From 1.0.0 until 1.20.0, the dispatchRequest function normalizes inherited Object.prototype.headers from a replacement request configuration. A separate same-pro…
VulnCve 2026 101904
medium System graph security Trivy conf 1.00 CVE-2026-101908: axios 1.18.1 — scripts/package-lock.json
axios: Axios: Outbound HTTP request manipulation via fetch adapter prototype pollution Axios is a promise-based HTTP client for the browser and Node.js. From 1.7.0 until 1.20.0, the fetch adapter constructs a Request with sanitized resolvedOptions but then calls fetch with the original fetchOption…
VulnCve 2026 101908
medium System graph security Trivy conf 1.00 CVE-2026-101910: ip-address 10.5.0 — frontend/acp-runtime/package-lock.json
ip-address: ip-address: Security boundary bypass via unclassified NAT64 local-use address range ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.2.0 until 10.5.1, the Address6 isPrivate classifier in src/ipv6.ts does not recognize the NAT64 local-…
VulnCve 2026 101910
medium System graph security Trivy conf 1.00 CVE-2026-101911: ip-address 10.5.0 — frontend/acp-runtime/package-lock.json
ip-address: ip-address: Denial of Service via unbounded IPv6 address parsing ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the Address6 constructor, Address6.isValid, and parse code in src/ipv6.ts accept unbounded strings and expand in…
VulnCve 2026 101911
medium System graph security Trivy conf 1.00 CVE-2026-101912: ip-address 10.5.0 — frontend/acp-runtime/package-lock.json
ip-address: ip-address: Access control bypass via cross-family subnet comparison ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating …
VulnCve 2026 101912
medium System graph security Trivy conf 1.00 CVE-2026-101913: ip-address 10.5.0 — frontend/acp-runtime/package-lock.json
ip-address: ip-address: Security bypass via incomplete IPv6 link-local address validation ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.5.1, the Address6 isLinkLocal method in src/ipv6.ts recognizes only fe80::/64 instead of the complete fe…
VulnCve 2026 101913
medium System graph security Trivy conf 1.00 CVE-2026-102277: brace-expansion 1.1.15 — frontend/package-lock.json
brace-expansion: brace-expansion: Denial of Service via crafted brace patterns The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand function handles untrusted {a},b}-shaped patterns with many trailing c…
VulnCve 2026 102277
medium System graph security Trivy conf 1.00 CVE-2026-102277: brace-expansion 5.0.8 — frontend/src/docs/package-lock.json
brace-expansion: brace-expansion: Denial of Service via crafted brace patterns The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand function handles untrusted {a},b}-shaped patterns with many trailing c…
VulnCve 2026 102277
medium System graph security Trivy conf 1.00 CVE-2026-102277: brace-expansion 5.0.9 — packages/mobile/package-lock.json
brace-expansion: brace-expansion: Denial of Service via crafted brace patterns The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand function handles untrusted {a},b}-shaped patterns with many trailing c…
VulnCve 2026 102277
medium System graph security Trivy conf 1.00 CVE-2026-111757: hono 4.13.5 — frontend/acp-runtime/package-lock.json
hono: hono: Information disclosure via malformed percent-encoded paths in serveStatic Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.4 until 4.13.11, serveStatic can interpret a malformed percent-encoded path differently from upstream routing middle…
VulnCve 2026 111757
medium System graph security Trivy conf 1.00 CVE-2026-111769: @modelcontextprotocol/sdk 1.30.0 — frontend/acp-runtime/package-lock.json
MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies ### Summary In affected versions, the SDK's HTTP client transports and OAuth requests followed redirects to any origin. If an MCP server or authorizat…
VulnCve 2026 111769
medium System graph security Trivy conf 1.00 CVE-2026-111771: @modelcontextprotocol/sdk 1.30.0 — frontend/acp-runtime/package-lock.json
MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service ### Summary In affected versions, the SDK's server-side bearer authentication had no way to check that a token was issued for your server (its audience). Where one authorization server issues tokens for sev…
VulnCve 2026 111771
medium System graph security Trivy conf 1.00 CVE-2026-39827: golang.org/x/crypto v0.51.0 — backend/go.mod
golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all …
VulnCve 2026 39827
medium System graph security Trivy conf 1.00 CVE-2026-39833: golang.org/x/crypto v0.51.0 — backend/go.mod
golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. The key would sign without any confirmation prompt, wit…
VulnCve 2026 39833
medium System graph security Trivy conf 1.00 CVE-2026-39834: golang.org/x/crypto v0.51.0 — backend/go.mod
golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinite…
VulnCve 2026 39834
medium System graph security Trivy conf 1.00 CVE-2026-41305: postcss 8.4.31 — frontend/src/docs/package-lock.json
postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Versions prior to 8.5.10 do not escape `</style>` sequences when stringifyin…
VulnCve 2026 41305
medium System graph security Trivy conf 1.00 CVE-2026-41907: uuid 7.0.3 — packages/mobile/package-lock.json
uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (small buf or large offset). This allows silen…
VulnCve 2026 41907
medium System graph security Trivy conf 1.00 CVE-2026-45820: fflate 0.4.8 — frontend/package-lock.json
fflate: fflate: Denial of Service via crafted ZIP archives fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with a central directory entry declaring compressed_size=0xFFFFFFFF (ZIP64 sentinel) but missing the required ZIP64 extra fi…
VulnCve 2026 45820
medium System graph security Trivy conf 1.00 CVE-2026-45822: decode-uri-component 0.2.2 — packages/mobile/package-lock.json
decode-uri-component: decode-uri-component: Denial of Service via crafted input decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits input on '%' producing N tokens and calls decodeComponents(), exhibiting super-linear parsing time: 200 '%ab' tokens t…
VulnCve 2026 45822
medium System graph security Trivy conf 1.00 CVE-2026-46598: golang.org/x/crypto v0.51.0 — backend/go.mod
golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used. Package: golang.org/x/crypto Installed: v0.51.0 Fixed in: 0.52.…
VulnCve 2026 46598
medium System graph security Trivy conf 1.00 CVE-2026-56855: golang.org/x/crypto v0.51.0 — backend/go.mod
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handl…
VulnCve 2026 56855
medium System graph security Trivy conf 1.00 CVE-2026-56855: golang.org/x/crypto v0.54.0 — cloud/go.mod
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handl…
VulnCve 2026 56855
medium System graph security Trivy conf 1.00 CVE-2026-69153: postcss 8.4.31 — frontend/src/docs/package-lock.json
postcss: PostCSS: Information disclosure via crafted sourceMappingURL PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attacker can cause PreviousMap.loadFile() to read an unin…
VulnCve 2026 69153
medium System graph security Trivy conf 1.00 CVE-2026-78662: golang.org/x/crypto v0.51.0 — backend/go.mod
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we …
VulnCve 2026 78662
medium System graph security Trivy conf 1.00 CVE-2026-78662: golang.org/x/crypto v0.54.0 — cloud/go.mod
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we …
VulnCve 2026 78662
medium System graph security Trivy conf 1.00 CVE-2026-82417: qs 6.15.3 — frontend/acp-runtime/package-lock.json
qs: qs: Denial of Service via improper validation in stringify function ### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a truthy, non-callable `isBuffer` member. `utils.isBuffer` duck-types buffers by calling `obj.constructor.isB…
VulnCve 2026 82417
medium System graph security Trivy conf 1.00 CVE-2026-82562: qs 6.15.3 — frontend/acp-runtime/package-lock.json
qs: qs: Denial of Service via array limit bypass in query string parsing ### Summary When `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a bracket-push key (`a[]=1,2,3,4`) is split into an array without being compared against `arrayLimit`…
VulnCve 2026 82562
medium System graph security Trivy conf 1.00 CVE-2026-86472: fast-uri 3.1.6 — frontend/acp-runtime/package-lock.json
fast-uri: fast-uri: Security bypass due to inconsistent host case normalization fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv. In versions before 2.4.7, from 3.0.0 through 3.1.7, and from 4.0.0 through 4.1.4, fast-uri folds the host to lowercase before it p…
VulnCve 2026 86472
medium System graph security Trivy conf 1.00 CVE-2026-93981: hono 4.13.5 — frontend/acp-runtime/package-lock.json
hono: hono/jsx: Cross-Site Scripting via Unescaped Strings hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of Suspense, as a string child of ErrorBoundary alongside an asynchronous sibling, as the single child of a Context.Provider, or as the root …
VulnCve 2026 93981
medium System graph security Trivy conf 1.00 CVE-2026-94484: next 16.2.11 — frontend/src/docs/package-lock.json
next: Next.js: Denial of Service via response cache poisoning Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shar…
VulnCve 2026 94484
medium System graph security Trivy conf 1.00 CVE-2026-94485: next 16.2.11 — frontend/src/docs/package-lock.json
next: Next.js: Information disclosure via unrestricted cross-site requests on development server Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the `next dev` development server exposes a Model Context Protocol endpoint without reliably restricting…
VulnCve 2026 94485
medium System graph security Trivy conf 1.00 CVE-2026-94543: next 16.2.11 — frontend/src/docs/package-lock.json
next: Next.js: Response cache poisoning via improper route binding Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key…
VulnCve 2026 94543
medium System graph hardware Security conf 1.00 Dockerfile runs as root: experiments/remote-browser-poc/Dockerfile
No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image.
Container
medium System graph security Trivy conf 1.00 DS-0013: 'RUN cd ...' to change directory — cloud/Dockerfile
'RUN cd ...' to change directory RUN should not be used to change directory: 'dpkg-source -x expat_2.9.0-1.dsc source && cd source && dpkg-buildpackage -b -us -uc -Pstage1,noudeb --jobs=2 && make -C build check && cd /build && dpkg -i libexpat1_2.9.0-1_*.deb libexpat1-dev_2.9.0…
Misconfig
medium System graph security Trivy conf 1.00 DS-0013: 'RUN cd ...' to change directory — test/cli/Dockerfile
'RUN cd ...' to change directory RUN should not be used to change directory: 'cd backend && CGO_ENABLED=0 go build -trimpath -ldflags "-X github.com/aoagents/agent-orchestrator/backend/internal/cli.releaseRepo=AgentWrapper/ao-fresh-install-fixture" -o /out/ao ./cmd/ao'. Use 'WORKDIR' s…
Misconfig
medium System graph security Semgrep conf 0.55 dynamic urllib use detected — cloud/scripts/dev-connect-agent-credential.py:117
Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. R…
cloud/scripts/dev-connect-agent-credential.py:117 SecurityPython
medium System graph security Semgrep conf 0.55 dynamic urllib use detected — cloud/scripts/workos-copy-environment.py:54
Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. R…
cloud/scripts/workos-copy-environment.py:54 SecurityPython
medium System graph quality Integrity conf 0.90 Fire-and-forget `fetch()` has no rejection handler — frontend/src/main.ts:671
This fetch result is neither awaited, returned, assigned, nor followed by `.catch(...)`. A network failure can therefore become an unhandled promise rejection. Await/return the promise or attach an explicit rejection handler.
frontend/src/main.ts:671 runtime safetyRobustnessUnhandled promise
medium System graph quality Integrity conf 0.90 Fire-and-forget `fetch()` has no rejection handler — frontend/src/renderer/lib/event-transport.ts:83
This fetch result is neither awaited, returned, assigned, nor followed by `.catch(...)`. A network failure can therefore become an unhandled promise rejection. Await/return the promise or attach an explicit rejection handler.
frontend/src/renderer/lib/event-transport.ts:83 runtime safetyRobustnessUnhandled promise
medium System graph cicd CI/CD security conf 1.00 GitHub Action is tag-pinned rather than SHA-pinned
golangci/golangci-lint-action@v8 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
.github/workflows/go.yml:263 CI/CD securitySupply chainGithub actions
medium System graph cicd CI/CD security conf 1.00 GitHub Actions workflow grants broad write permissions
CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions.
.github/workflows/deploy-docs.yml CI/CD securitySupply chainGithub actions
medium System graph security security conf 0.65 Insecure pattern 'dangerous_innerhtml' in frontend/src/renderer/components/chat/MermaidBlock.tsx:206
Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible.
frontend/src/renderer/components/chat/MermaidBlock.tsx:206 Dangerous innerhtml
medium System graph security security conf 0.65 Insecure pattern 'direct_innerhtml_assignment' in cloud/internal/agentbrowser/host/viewer.html:139
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
cloud/internal/agentbrowser/host/viewer.html:139 Direct innerhtml assignment
medium System graph security security conf 0.65 Insecure pattern 'domparser_html_parse' in frontend/src/renderer/components/SessionLinkPreviewCard.tsx:233
Found a known-risky pattern (domparser_html_parse). Review and replace if possible.
frontend/src/renderer/components/SessionLinkPreviewCard.tsx:233 Domparser html parse
medium System graph security security conf 0.65 Insecure pattern 'insert_adjacent_html' in frontend/src/annotate-preload.ts:569
Found a known-risky pattern (insert_adjacent_html). Review and replace if possible.
frontend/src/annotate-preload.ts:569 Insert adjacent html
medium System graph security security conf 0.80 Insecure pattern 'node_child_process' in frontend/scripts/build-host-bundle.mjs:1
Found a known-risky pattern (node_child_process). Review and replace if possible.
frontend/scripts/build-host-bundle.mjs:1 Node child process
medium System graph security security conf 0.80 Insecure pattern 'node_child_process' in frontend/scripts/dev-web.mjs:1
Found a known-risky pattern (node_child_process). Review and replace if possible.
frontend/scripts/dev-web.mjs:1 Node child process
medium System graph security security conf 0.80 Insecure pattern 'node_child_process' in frontend/scripts/e2e-mac-update.mjs:39
Found a known-risky pattern (node_child_process). Review and replace if possible.
frontend/scripts/e2e-mac-update.mjs:39 Node child process
medium System graph security security conf 1.00 Insecure pattern 'weak_hash' in backend/internal/service/chat/handoff_history_files.go:5
Found a known-risky pattern (weak_hash). Review and replace if possible.
backend/internal/service/chat/handoff_history_files.go:5 Weak hash
medium System graph security Semgrep conf 0.70 math random used — backend/internal/pricing/refresher.go:7
Do not use `math/rand`. Use `crypto/rand` instead. Rule: go.lang.security.audit.crypto.math_random.math-random-used Severity: WARNING OWASP: A02:2021 - Cryptographic Failures, A04:2025 - Cryptographic Failures CWE: CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Catego…
backend/internal/pricing/refresher.go:7 SecurityGo
medium System graph security Semgrep conf 0.70 math random used — cloud/internal/notification/service.go:9
Do not use `math/rand`. Use `crypto/rand` instead. Rule: go.lang.security.audit.crypto.math_random.math-random-used Severity: WARNING OWASP: A02:2021 - Cryptographic Failures, A04:2025 - Cryptographic Failures CWE: CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Catego…
cloud/internal/notification/service.go:9 SecurityGo
medium System graph security Semgrep conf 0.70 math random used — cloud/internal/notificationoutbox/flusher.go:7
Do not use `math/rand`. Use `crypto/rand` instead. Rule: go.lang.security.audit.crypto.math_random.math-random-used Severity: WARNING OWASP: A02:2021 - Cryptographic Failures, A04:2025 - Cryptographic Failures CWE: CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Catego…
cloud/internal/notificationoutbox/flusher.go:7 SecurityGo
medium System graph quality Integrity conf 0.85 Network/subprocess call without timeout or try/except — cloud/scripts/configure-monitoring.py:17
`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
cloud/scripts/configure-monitoring.py:17 runtime safetyRobustness
medium System graph quality Integrity conf 0.85 Network/subprocess call without timeout or try/except — cloud/scripts/configure-offering-monitoring.py:81
`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
cloud/scripts/configure-offering-monitoring.py:81 runtime safetyRobustness
medium System graph quality Integrity conf 0.85 Network/subprocess call without timeout or try/except — cloud/scripts/verify-ecs-service.py:18
`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
cloud/scripts/verify-ecs-service.py:18 runtime safetyRobustness
medium System graph quality Placeholder conf 1.00 Placeholder or mock-heavy implementation detected
Found 1098 placeholder/mock markers across 299 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data.
Mock dataIncompleteGenerated repo pattern
medium System graph security Secrets conf 0.58 Possible secret in cloud/scripts/cloud-local-up.sh
Detected 1 occurrence(s) matching password_literal. Rotate real credentials and move them to a secret manager.
cloud/scripts/cloud-local-up.sh:95 Password literal
medium System graph security Semgrep conf 0.55 potential dos via decompression bomb — cloud/internal/workertransport/harness.go:145
Detected a possible denial-of-service via a zip bomb attack. By limiting the max bytes read, you can mitigate this attack. `io.CopyN()` can specify a size. Rule: go.lang.security.decompression_bomb.potential-dos-via-decompression-bomb Severity: WARNING OWASP: — CWE: CWE-400: Uncontrolled Resource …
cloud/internal/workertransport/harness.go:145 SecurityGo
medium System graph network Security conf 1.00 Privileged port 18 in use
Port 18 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer.
cloud/scripts/verify-image-contract.sh Ports
medium System graph network Security conf 1.00 Privileged port 20 in use
Port 20 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer.
cloud/scripts/verify-image-contract.sh Ports
medium System graph security Skillspector conf 0.60 SkillSpector AST4 (behavioral-ast) in .claude/skills/bug-triage/scripts/push_fix_to_github.py
result = subprocess.run(cmd, capture_output=True, text=True, timeout=30) subprocess module calls execute external commands. Without careful input validation, this enables command injection. Skill: bug-triage Rule: AST4 Category: behavioral-ast Severity: MEDIUM Confidence: 0.60 Remediation: Use…
.claude/skills/bug-triage/scripts/push_fix_to_github.py:28 Mcp skillBehavioral astAst4
medium System graph security Skillspector conf 0.60 SkillSpector E1 (data-exfil) in cloud/internal/skillassets/using-ao/commands/pull-requests.md
curl --unix-socket $AO_PULL_REQUEST_SOCKET -X POST http://localhost/pull-request \ -H 'Content-Type: application/json' \ -d Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended. Skill: using-ao Rule: E1 Category: data-ex…
cloud/internal/skillassets/using-ao/commands/pull-requests.md:14 Mcp skillData exfilE1
medium System graph security Skillspector conf 0.85 SkillSpector EA2 (excessive-agency) in backend/internal/skillassets/using-ao/commands/project.md
Skip confirmation Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: using-ao Rule: EA2 Category: excessive-agency Severity: MED…
backend/internal/skillassets/using-ao/commands/project.md:111 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.85 SkillSpector EA2 (excessive-agency) in backend/internal/skillassets/using-ao/commands/session.md
Skip confirmation Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: using-ao Rule: EA2 Category: excessive-agency Severity: MED…
backend/internal/skillassets/using-ao/commands/session.md:277 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.70 SkillSpector LP3 (mcp-least-priv) in .claude/skills/bug-triage/SKILL.md
MCP Least Privilege Without declared permissions the skill's intent is opaque and cannot be validated. Skill: bug-triage Rule: LP3 Category: mcp-least-priv Severity: MEDIUM Confidence: 0.70 Remediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires.
.claude/skills/bug-triage/SKILL.md:1 Mcp skillMcp least privLp3
medium System graph security Skillspector conf 0.60 SkillSpector TM3 (tool-misuse) in backend/internal/skillassets/using-ao/commands/project.md
NODE_ENV=development" Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface. Skill: using-ao Rule: TM3 Category: tool-misuse Severity: MEDIUM Confidence: 0.60 Remediation: Override…
backend/internal/skillassets/using-ao/commands/project.md:184 Mcp skillTool misuseTm3
medium System graph security Semgrep conf 0.55 string formatted query — backend/internal/storage/sqlite/db.go:1255
String-formatted SQL query detected. This could lead to SQL injection if the string is not sanitized properly. Audit this call to ensure the SQL is not manipulable by external data. Rule: go.lang.security.audit.database.string-formatted-query.string-formatted-query Severity: WARNING OWASP: A01:201…
backend/internal/storage/sqlite/db.go:1255 SecurityGo
medium System graph security Semgrep conf 0.70 use of md5 — backend/internal/service/chat/handoff_history_files.go:36
Detected MD5 hash algorithm which is considered insecure. MD5 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead. Rule: go.lang.security.audit.crypto.use_of_weak_crypto.use-of-md5 Severity: WARNING OWASP: A03:2017 - Sensitive Data Expo…
backend/internal/service/chat/handoff_history_files.go:36 SecurityGo
medium System graph security Semgrep conf 0.55 use of unsafe block — backend/internal/adapters/chatdriver/codexappserver/account_home_windows.go:96
Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'…
backend/internal/adapters/chatdriver/codexappserver/account_home_windows.go:96 SecurityGo
medium System graph security Semgrep conf 0.55 use of unsafe block — backend/internal/adapters/chatdriver/persistenthost/child_windows.go:39
Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'…
backend/internal/adapters/chatdriver/persistenthost/child_windows.go:39 SecurityGo
medium System graph security Semgrep conf 0.55 use of unsafe block — backend/internal/procmem/snapshot_windows.go:39
Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'…
backend/internal/procmem/snapshot_windows.go:39 SecurityGo
medium System graph security Semgrep conf 0.55 use of unsafe block — backend/internal/procmem/system_windows.go:54
Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'…
backend/internal/procmem/system_windows.go:54 SecurityGo
medium System graph security Semgrep conf 0.55 use of unsafe block — backend/internal/runfile/rename_windows.go:33
Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'…
backend/internal/runfile/rename_windows.go:33 SecurityGo
medium System graph security Semgrep conf 0.55 use of unsafe block — backend/internal/service/agent/codex_secure_fs_windows.go:300
Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'…
backend/internal/service/agent/codex_secure_fs_windows.go:300 SecurityGo
medium System graph security Semgrep conf 0.70 use tls — cloud/internal/agentbrowser/host/main.go:342
Found an HTTP server without TLS. Use 'http.ListenAndServeTLS' instead. See https://golang.org/pkg/net/http/#ListenAndServeTLS for more information. Rule: go.lang.security.audit.net.use-tls.use-tls Severity: WARNING OWASP: A03:2017 - Sensitive Data Exposure, A02:2021 - Cryptographic Failures, A04:…
cloud/internal/agentbrowser/host/main.go:342 SecurityGo
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 1.1.15: GHSA-q2hr-2g5m-vwhr
OSV.dev reports `brace-expansion` at version `1.1.15` (resolved in `frontend/package-lock.json`) is affected by GHSA-q2hr-2g5m-vwhr (aka CVE-2026-102277). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: Quadra…
frontend/package-lock.json ScaOsvGhsa q2hr 2g5m vwhr
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency brace-expansion 2.1.1: GHSA-q2hr-2g5m-vwhr
OSV.dev reports `brace-expansion` at version `2.1.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-q2hr-2g5m-vwhr (aka CVE-2026-102277). Note: `brace-expansion` is a transitive dependency — pulled in by another package, not declared directly in a manifest. brace-expansion: Quadrat…
frontend/package-lock.json ScaOsvGhsa q2hr 2g5m vwhr
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency dompurify 3.4.14: GHSA-6688-9rhm-gjv2
OSV.dev reports `dompurify` at version `3.4.14` (resolved in `frontend/package-lock.json`) is affected by GHSA-6688-9rhm-gjv2. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-6688-9rhm-gjv2 Fix: upgrade `dompurify` past the affected range per the advisory.
frontend/package.json ScaOsvGhsa 6688 9rhm gjv2
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency dompurify 3.4.14: GHSA-p98j-92pf-mc4p
OSV.dev reports `dompurify` at version `3.4.14` (resolved in `frontend/package-lock.json`) is affected by GHSA-p98j-92pf-mc4p. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-p98j-92pf-mc4p Fix: upgrade `dompurify` past the affected range per the advisory.
frontend/package.json ScaOsvGhsa p98j 92pf mc4p
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency fast-uri 3.1.6: GHSA-58mr-gqgx-xq4g
OSV.dev reports `fast-uri` at version `3.1.6` (resolved in `frontend/acp-runtime/package-lock.json`) is affected by GHSA-58mr-gqgx-xq4g. Note: `fast-uri` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv…
frontend/acp-runtime/package-lock.json ScaOsvGhsa 58mr gqgx xq4g
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency fast-uri 3.1.6: GHSA-hrr3-gc8f-f4qj
OSV.dev reports `fast-uri` at version `3.1.6` (resolved in `frontend/acp-runtime/package-lock.json`) is affected by GHSA-hrr3-gc8f-f4qj. Note: `fast-uri` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv…
frontend/acp-runtime/package-lock.json ScaOsvGhsa hrr3 gc8f f4qj
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency fast-uri 3.1.6: GHSA-qw65-cvwx-89v3
OSV.dev reports `fast-uri` at version `3.1.6` (resolved in `frontend/acp-runtime/package-lock.json`) is affected by GHSA-qw65-cvwx-89v3. Note: `fast-uri` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv…
frontend/acp-runtime/package-lock.json ScaOsvGhsa qw65 cvwx 89v3
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency ip-address 10.5.0: GHSA-2vr4-cq9g-pvrc
OSV.dev reports `ip-address` at version `10.5.0` (resolved in `frontend/acp-runtime/package-lock.json`) is affected by GHSA-2vr4-cq9g-pvrc. Note: `ip-address` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https:…
frontend/acp-runtime/package-lock.json ScaOsvGhsa 2vr4 cq9g pvrc
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency ip-address 10.5.0: GHSA-h3mg-xc3c-68pw
OSV.dev reports `ip-address` at version `10.5.0` (resolved in `frontend/acp-runtime/package-lock.json`) is affected by GHSA-h3mg-xc3c-68pw. Note: `ip-address` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https:…
frontend/acp-runtime/package-lock.json ScaOsvGhsa h3mg xc3c 68pw
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency ip-address 10.5.0: GHSA-j6r3-76f7-8jcv
OSV.dev reports `ip-address` at version `10.5.0` (resolved in `frontend/acp-runtime/package-lock.json`) is affected by GHSA-j6r3-76f7-8jcv. Note: `ip-address` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https:…
frontend/acp-runtime/package-lock.json ScaOsvGhsa j6r3 76f7 8jcv
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency ip-address 10.5.0: GHSA-rpw4-54j3-4h4q
OSV.dev reports `ip-address` at version `10.5.0` (resolved in `frontend/acp-runtime/package-lock.json`) is affected by GHSA-rpw4-54j3-4h4q. Note: `ip-address` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https:…
frontend/acp-runtime/package-lock.json ScaOsvGhsa rpw4 54j3 4h4q
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 16.2.11: GHSA-2xp9-vwfh-vxw4
OSV.dev reports `next` at version `16.2.11` (resolved in `frontend/src/docs/package-lock.json`) is affected by GHSA-2xp9-vwfh-vxw4. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-2xp9-vwfh-vxw4 Fix: upgrade `next` past the affected range per the advisory.
frontend/src/docs/package.json ScaOsvGhsa 2xp9 vwfh vxw4
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 16.2.11: GHSA-39w2-rjm5-chcv
OSV.dev reports `next` at version `16.2.11` (resolved in `frontend/src/docs/package-lock.json`) is affected by GHSA-39w2-rjm5-chcv. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-39w2-rjm5-chcv Fix: upgrade `next` past the affected range per the advisory.
frontend/src/docs/package.json ScaOsvGhsa 39w2 rjm5 chcv
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 16.2.11: GHSA-4jqv-mc3x-m676
OSV.dev reports `next` at version `16.2.11` (resolved in `frontend/src/docs/package-lock.json`) is affected by GHSA-4jqv-mc3x-m676. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-4jqv-mc3x-m676 Fix: upgrade `next` past the affected range per the advisory.
frontend/src/docs/package.json ScaOsvGhsa 4jqv mc3x m676
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 16.2.11: GHSA-cjq9-62q9-8jv4
OSV.dev reports `next` at version `16.2.11` (resolved in `frontend/src/docs/package-lock.json`) is affected by GHSA-cjq9-62q9-8jv4. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-cjq9-62q9-8jv4 Fix: upgrade `next` past the affected range per the advisory.
frontend/src/docs/package.json ScaOsvGhsa cjq9 62q9 8jv4
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 16.2.11: GHSA-f87g-xv8r-7p7x
OSV.dev reports `next` at version `16.2.11` (resolved in `frontend/src/docs/package-lock.json`) is affected by GHSA-f87g-xv8r-7p7x. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-f87g-xv8r-7p7x Fix: upgrade `next` past the affected range per the advisory.
frontend/src/docs/package.json ScaOsvGhsa f87g xv8r 7p7x
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 16.2.11: GHSA-mcj8-r9mp-w47p
OSV.dev reports `next` at version `16.2.11` (resolved in `frontend/src/docs/package-lock.json`) is affected by GHSA-mcj8-r9mp-w47p. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-mcj8-r9mp-w47p Fix: upgrade `next` past the affected range per the advisory.
frontend/src/docs/package.json ScaOsvGhsa mcj8 r9mp w47p
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 16.2.11: GHSA-p293-qw3h-jr36
OSV.dev reports `next` at version `16.2.11` (resolved in `frontend/src/docs/package-lock.json`) is affected by GHSA-p293-qw3h-jr36. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-p293-qw3h-jr36 Fix: upgrade `next` past the affected range per the advisory.
frontend/src/docs/package.json ScaOsvGhsa p293 qw3h jr36
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency next 16.2.11: GHSA-vcvr-r3jv-pc5j
OSV.dev reports `next` at version `16.2.11` (resolved in `frontend/src/docs/package-lock.json`) is affected by GHSA-vcvr-r3jv-pc5j. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-vcvr-r3jv-pc5j Fix: upgrade `next` past the affected range per the advisory.
frontend/src/docs/package.json ScaOsvGhsa vcvr r3jv pc5j
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency proxy-addr 2.0.7: GHSA-jqcg-44mw-7w3h
OSV.dev reports `proxy-addr` at version `2.0.7` (resolved in `frontend/acp-runtime/package-lock.json`) is affected by GHSA-jqcg-44mw-7w3h. Note: `proxy-addr` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https:/…
frontend/acp-runtime/package-lock.json ScaOsvGhsa jqcg 44mw 7w3h
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency qs 6.15.3: GHSA-4mjr-xmp4-gh2g
OSV.dev reports `qs` at version `6.15.3` (resolved in `frontend/acp-runtime/package-lock.json`) is affected by GHSA-4mjr-xmp4-gh2g. Note: `qs` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulner…
frontend/acp-runtime/package-lock.json ScaOsvGhsa 4mjr xmp4 gh2g
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency qs 6.15.3: GHSA-x5fp-wj9c-mxmx
OSV.dev reports `qs` at version `6.15.3` (resolved in `frontend/acp-runtime/package-lock.json`) is affected by GHSA-x5fp-wj9c-mxmx. Note: `qs` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulner…
frontend/acp-runtime/package-lock.json ScaOsvGhsa x5fp wj9c mxmx
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency tar 6.2.1: GHSA-34x7-hfp2-rc4v
OSV.dev reports `tar` at version `6.2.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-34x7-hfp2-rc4v. Note: `tar` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHS…
frontend/package-lock.json ScaOsvGhsa 34x7 hfp2 rc4v
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency tar 6.2.1: GHSA-83g3-92jg-28cx
OSV.dev reports `tar` at version `6.2.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-83g3-92jg-28cx. Note: `tar` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHS…
frontend/package-lock.json ScaOsvGhsa 83g3 92jg 28cx
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency tar 6.2.1: GHSA-8qq5-rm4j-mr97
OSV.dev reports `tar` at version `6.2.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-8qq5-rm4j-mr97. Note: `tar` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHS…
frontend/package-lock.json ScaOsvGhsa 8qq5 rm4j mr97
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency tar 6.2.1: GHSA-8x88-c5mf-7j5w
OSV.dev reports `tar` at version `6.2.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-8x88-c5mf-7j5w. Note: `tar` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHS…
frontend/package-lock.json ScaOsvGhsa 8x88 c5mf 7j5w
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency tar 6.2.1: GHSA-9ppj-qmqm-q256
OSV.dev reports `tar` at version `6.2.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-9ppj-qmqm-q256. Note: `tar` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHS…
frontend/package-lock.json ScaOsvGhsa 9ppj qmqm q256
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency tar 6.2.1: GHSA-gvwx-54wh-qm9j
OSV.dev reports `tar` at version `6.2.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-gvwx-54wh-qm9j. Note: `tar` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHS…
frontend/package-lock.json ScaOsvGhsa gvwx 54wh qm9j
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency tar 6.2.1: GHSA-qffp-2rhf-9h96
OSV.dev reports `tar` at version `6.2.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-qffp-2rhf-9h96. Note: `tar` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHS…
frontend/package-lock.json ScaOsvGhsa qffp 2rhf 9h96
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency tar 6.2.1: GHSA-r292-9mhp-454m
OSV.dev reports `tar` at version `6.2.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-r292-9mhp-454m. Note: `tar` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHS…
frontend/package-lock.json ScaOsvGhsa r292 9mhp 454m
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency tar 6.2.1: GHSA-r6q2-hw4h-h46w
OSV.dev reports `tar` at version `6.2.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-r6q2-hw4h-h46w. Note: `tar` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHS…
frontend/package-lock.json ScaOsvGhsa r6q2 hw4h h46w
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency tar 6.2.1: GHSA-vmf3-w455-68vh
OSV.dev reports `tar` at version `6.2.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-vmf3-w455-68vh. Note: `tar` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHS…
frontend/package-lock.json ScaOsvGhsa vmf3 w455 68vh
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency tar 6.2.1: GHSA-w8wr-v893-vjvp
OSV.dev reports `tar` at version `6.2.1` (resolved in `frontend/package-lock.json`) is affected by GHSA-w8wr-v893-vjvp. Note: `tar` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHS…
frontend/package-lock.json ScaOsvGhsa w8wr v893 vjvp
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency vite 8.0.16: GHSA-698v-4r3x-3vcv
OSV.dev reports `vite` at version `8.0.16` (resolved in `frontend/package-lock.json`) is affected by GHSA-698v-4r3x-3vcv (aka CVE-2026-112943). launch-editor: escapeCmdArgs() omits % escaping on Windows Aliases: CVE-2026-112943 Advisory: https://osv.dev/vulnerability/GHSA-698v-4r3x-3vcv Fix: upgr…
frontend/package.json ScaOsvGhsa 698v 4r3x 3vcv
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency vite 8.0.16: GHSA-r825-w8mm-5pxw
OSV.dev reports `vite` at version `8.0.16` (resolved in `frontend/package-lock.json`) is affected by GHSA-r825-w8mm-5pxw (aka CVE-2026-112944). launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors Aliases: CVE-2026-112944 Advisory: https://osv.dev/…
frontend/package.json ScaOsvGhsa r825 w8mm 5pxw
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency vite 8.0.16: GHSA-rq7h-c2jc-7f22
OSV.dev reports `vite` at version `8.0.16` (resolved in `frontend/package-lock.json`) is affected by GHSA-rq7h-c2jc-7f22 (aka CVE-2026-112946). Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine Aliases: CVE-2026-112946 Advisory: htt…
frontend/package.json ScaOsvGhsa rq7h c2jc 7f22
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency vite 8.2.1: GHSA-698v-4r3x-3vcv
OSV.dev reports `vite` at version `8.2.1` (resolved in `packages/product-ui/package-lock.json`) is affected by GHSA-698v-4r3x-3vcv (aka CVE-2026-112943). launch-editor: escapeCmdArgs() omits % escaping on Windows Aliases: CVE-2026-112943 Advisory: https://osv.dev/vulnerability/GHSA-698v-4r3x-3vcv…
packages/product-ui/package.json ScaOsvGhsa 698v 4r3x 3vcv
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency vite 8.2.1: GHSA-r825-w8mm-5pxw
OSV.dev reports `vite` at version `8.2.1` (resolved in `packages/product-ui/package-lock.json`) is affected by GHSA-r825-w8mm-5pxw (aka CVE-2026-112944). launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors Aliases: CVE-2026-112944 Advisory: https:…
packages/product-ui/package.json ScaOsvGhsa r825 w8mm 5pxw
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency vite 8.2.1: GHSA-rq7h-c2jc-7f22
OSV.dev reports `vite` at version `8.2.1` (resolved in `packages/product-ui/package-lock.json`) is affected by GHSA-rq7h-c2jc-7f22 (aka CVE-2026-112946). Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine Aliases: CVE-2026-112946 Adv…
packages/product-ui/package.json ScaOsvGhsa rq7h c2jc 7f22
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency vite 8.2.1: GHSA-vfpm-58rq-9qcg
OSV.dev reports `vite` at version `8.2.1` (resolved in `packages/product-ui/package-lock.json`) is affected by GHSA-vfpm-58rq-9qcg (aka CVE-2026-112947). Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance` Aliases: CVE-2026-112947 Advisory: https://osv.…
packages/product-ui/package.json ScaOsvGhsa vfpm 58rq 9qcg
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency vite 8.2.2: GHSA-698v-4r3x-3vcv
OSV.dev reports `vite` at version `8.2.2` (resolved in `packages/mobile/package-lock.json`) is affected by GHSA-698v-4r3x-3vcv (aka CVE-2026-112943). launch-editor: escapeCmdArgs() omits % escaping on Windows Aliases: CVE-2026-112943 Advisory: https://osv.dev/vulnerability/GHSA-698v-4r3x-3vcv Fix…
packages/mobile/package-lock.json ScaOsvGhsa 698v 4r3x 3vcv
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency vite 8.2.2: GHSA-r825-w8mm-5pxw
OSV.dev reports `vite` at version `8.2.2` (resolved in `packages/mobile/package-lock.json`) is affected by GHSA-r825-w8mm-5pxw (aka CVE-2026-112944). launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors Aliases: CVE-2026-112944 Advisory: https://os…
packages/mobile/package-lock.json ScaOsvGhsa r825 w8mm 5pxw
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency vite 8.2.2: GHSA-rq7h-c2jc-7f22
OSV.dev reports `vite` at version `8.2.2` (resolved in `packages/mobile/package-lock.json`) is affected by GHSA-rq7h-c2jc-7f22 (aka CVE-2026-112946). Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine Aliases: CVE-2026-112946 Advisor…
packages/mobile/package-lock.json ScaOsvGhsa rq7h c2jc 7f22
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency vite 8.2.2: GHSA-vfpm-58rq-9qcg
OSV.dev reports `vite` at version `8.2.2` (resolved in `packages/mobile/package-lock.json`) is affected by GHSA-vfpm-58rq-9qcg (aka CVE-2026-112947). Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance` Aliases: CVE-2026-112947 Advisory: https://osv.dev/…
packages/mobile/package-lock.json ScaOsvGhsa vfpm 58rq 9qcg
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency vitest 4.1.10: GHSA-82fw-gwwq-j7x9
OSV.dev reports `vitest` at version `4.1.10` (resolved in `packages/cloud-client/package-lock.json`) is affected by GHSA-82fw-gwwq-j7x9 (aka CVE-2026-84373). Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock Aliases: CVE-2026-84373 Advisory: https://osv.dev/vulnerabili…
packages/cloud-client/package.json ScaOsvGhsa 82fw gwwq j7x9
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency vitest 4.1.8: GHSA-82fw-gwwq-j7x9
OSV.dev reports `vitest` at version `4.1.8` (resolved in `frontend/package-lock.json`) is affected by GHSA-82fw-gwwq-j7x9 (aka CVE-2026-84373). Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock Aliases: CVE-2026-84373 Advisory: https://osv.dev/vulnerability/GHSA-82fw-g…
frontend/package.json ScaOsvGhsa 82fw gwwq j7x9
low System graph api Wiring conf 1.00 1 backend endpoint not called by scanned frontend
No scanned frontend call matched these backend routes. Sample: GET /api/search. This is fine when endpoints serve external clients (mobile apps, SDKs, third-party integrations, server-side webhooks). Otherwise document consumers or remove dead routes.
Unused endpoint
low System graph quality Integrity conf 1.00 92 env vars used in code but missing from .env.example
Drift between code and config docs. The first few: `AO_ACP_RUNTIME_DIR`, `AO_AGENT_BROWSER_PATH`, `AO_ALLOWED_ORIGINS`, `AO_APP_RUN_ID`, `AO_ARTIFACTS_DIR`, `AO_CLOUDFLARED_PATH`, `AO_CLOUD_ALERT_TOPIC_ARN`, `AO_CLOUD_AUTH_REDIRECT` + 84 more. Add them (with a placeholder/comment) to .env.example s…
config drift
low System graph security Trivy conf 1.00 CVE-2026-101915: @grpc/grpc-js 1.14.4 — scripts/package-lock.json
@grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5, when an application method handler throws an uncaught er…
VulnCve 2026 101915
low System graph security Trivy conf 1.00 CVE-2026-103923: katex 0.16.47 — frontend/package-lock.json
katex: katex: Cross-site scripting via prototype pollution inheritance KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. From 0.11.0 until 0.18.2, KaTeX uses ordinary JavaScript property access for the renderer options object, the trust setting, default and process…
VulnCve 2026 103923
low System graph security Trivy conf 1.00 CVE-2026-103923: katex 0.18.1 — frontend/src/docs/package-lock.json
katex: katex: Cross-site scripting via prototype pollution inheritance KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. From 0.11.0 until 0.18.2, KaTeX uses ordinary JavaScript property access for the renderer options object, the trust setting, default and process…
VulnCve 2026 103923
low System graph security Trivy conf 1.00 CVE-2026-94486: next 16.2.11 — frontend/src/docs/package-lock.json
next: Next.js: Information disclosure via unrestricted cross-site requests Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A …
VulnCve 2026 94486
low System graph frontend Frontend quality conf 0.85 Debug `console.log` remains in browser-facing code — frontend/makers/maker-dmg.ts:215
Remove debug output or route intentional diagnostics through the project's structured logger. Browser console output can expose state and create noise; server and CLI output are outside this rule's scope. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
frontend/makers/maker-dmg.ts:215 Fq console leak
low System graph frontend Frontend quality conf 0.85 Debug `console.log` remains in browser-facing code — frontend/src/main.ts:792
Remove debug output or route intentional diagnostics through the project's structured logger. Browser console output can expose state and create noise; server and CLI output are outside this rule's scope. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
frontend/src/main.ts:792 Fq console leak
low System graph frontend Frontend quality conf 0.85 Debug `console.log` remains in browser-facing code — frontend/src/main/remote-proxy.ts:128
Remove debug output or route intentional diagnostics through the project's structured logger. Browser console output can expose state and create noise; server and CLI output are outside this rule's scope. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
frontend/src/main/remote-proxy.ts:128 Fq console leak
low System graph frontend Frontend quality conf 0.85 Debug `console.log` remains in browser-facing code — frontend/src/renderer/main.tsx:81
Remove debug output or route intentional diagnostics through the project's structured logger. Browser console output can expose state and create noise; server and CLI output are outside this rule's scope. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
frontend/src/renderer/main.tsx:81 Fq console leak
low System graph frontend Frontend quality conf 0.85 Debug `console.log` remains in browser-facing code — packages/mobile/app/pair.tsx:127
Remove debug output or route intentional diagnostics through the project's structured logger. Browser console output can expose state and create noise; server and CLI output are outside this rule's scope. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
packages/mobile/app/pair.tsx:127 Fq console leak
low System graph quality Debug conf 1.00 Debug logging residue appears in source files
Found 123 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup.
CleanupRepo hardeningGenerated repo pattern
low System graph dependencies dependencies conf 0.90 Dependency @expo/ui is a major version behind
`@expo/ui` is pinned at `57.0.14` in `packages/mobile/package.json` while the latest release on the npm registry is `58.0.22` — 1 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `@expo/ui` t…
packages/mobile/package.json FreshnessOutdated
low System graph dependencies dependencies conf 0.90 Dependency @react-native-async-storage/async-storage is a major version behind
`@react-native-async-storage/async-storage` is pinned at `2.2.0` in `packages/mobile/package.json` while the latest release on the npm registry is `3.1.1` — 1 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration g…
packages/mobile/package.json FreshnessOutdated
low System graph dependencies dependencies conf 0.90 Dependency @sentry/electron is a major version behind
`@sentry/electron` is pinned at `7.17.0` in `frontend/package.json` while the latest release on the npm registry is `8.3.0` — 1 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `@sentry/elect…
frontend/package.json FreshnessOutdated
low System graph dependencies dependencies conf 0.90 Dependency @workos-inc/node is a major version behind
`@workos-inc/node` is pinned at `10.9.0` in `frontend/package.json` while the latest release on the npm registry is `11.0.0` — 1 major version(s) behind. Old majors stop receiving security backports and accumulate known CVEs. Review the upstream changelog / migration guide and upgrade `@workos-inc/…
frontend/package.json FreshnessOutdated
low System graph hardware Supply chain conf 1.00 Docker base image is tag-pinned but not digest-pinned: debian:trixie-slim
Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter.
experiments/remote-browser-poc/Dockerfile:5 containersPinned dependencies
low System graph hardware Supply chain conf 1.00 Docker base image is tag-pinned but not digest-pinned: gcr.io/distroless/static-debian12:nonroot
Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter.
cloud/Dockerfile:157 containersPinned dependencies
low System graph hardware Supply chain conf 1.00 Docker base image is tag-pinned but not digest-pinned: golang:1.27.1-bookworm
Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter.
cloud/Dockerfile:7 containersPinned dependencies
low System graph hardware Supply chain conf 1.00 Docker base image is tag-pinned but not digest-pinned: node:22-trixie-slim
Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter.
cloud/Dockerfile:60 containersPinned dependencies
low System graph security Trivy conf 1.00 DS-0026: No HEALTHCHECK defined — cloud/coder/Sandbox.Dockerfile
No HEALTHCHECK defined Add HEALTHCHECK instruction in your Dockerfile Rule: DS-0026 Severity: LOW Target: cloud/coder/Sandbox.Dockerfile
Misconfig
low System graph security Trivy conf 1.00 DS-0026: No HEALTHCHECK defined — cloud/Dockerfile
No HEALTHCHECK defined Add HEALTHCHECK instruction in your Dockerfile Rule: DS-0026 Severity: LOW Target: cloud/Dockerfile
Misconfig
low System graph security Trivy conf 1.00 DS-0026: No HEALTHCHECK defined — cloud/nodeops/harness/claude-code.Dockerfile
No HEALTHCHECK defined Add HEALTHCHECK instruction in your Dockerfile Rule: DS-0026 Severity: LOW Target: cloud/nodeops/harness/claude-code.Dockerfile
Misconfig
low System graph security Trivy conf 1.00 DS-0026: No HEALTHCHECK defined — cloud/nodeops/harness/codex.Dockerfile
No HEALTHCHECK defined Add HEALTHCHECK instruction in your Dockerfile Rule: DS-0026 Severity: LOW Target: cloud/nodeops/harness/codex.Dockerfile
Misconfig
low System graph security Trivy conf 1.00 DS-0026: No HEALTHCHECK defined — cloud/nodeops/harness/cursor.Dockerfile
No HEALTHCHECK defined Add HEALTHCHECK instruction in your Dockerfile Rule: DS-0026 Severity: LOW Target: cloud/nodeops/harness/cursor.Dockerfile
Misconfig
low System graph security Trivy conf 1.00 DS-0026: No HEALTHCHECK defined — cloud/nodeops/Sandbox.base.Dockerfile
No HEALTHCHECK defined Add HEALTHCHECK instruction in your Dockerfile Rule: DS-0026 Severity: LOW Target: cloud/nodeops/Sandbox.base.Dockerfile
Misconfig
low System graph security Trivy conf 1.00 DS-0026: No HEALTHCHECK defined — cloud/nodeops/Sandbox.Dockerfile
No HEALTHCHECK defined Add HEALTHCHECK instruction in your Dockerfile Rule: DS-0026 Severity: LOW Target: cloud/nodeops/Sandbox.Dockerfile
Misconfig
low System graph security Trivy conf 1.00 DS-0026: No HEALTHCHECK defined — cloud/test/Dockerfile.worker-smoke
No HEALTHCHECK defined Add HEALTHCHECK instruction in your Dockerfile Rule: DS-0026 Severity: LOW Target: cloud/test/Dockerfile.worker-smoke
Misconfig
low System graph security Trivy conf 1.00 DS-0026: No HEALTHCHECK defined — experiments/remote-browser-poc/Dockerfile
No HEALTHCHECK defined Add HEALTHCHECK instruction in your Dockerfile Rule: DS-0026 Severity: LOW Target: experiments/remote-browser-poc/Dockerfile
Misconfig
low System graph security Trivy conf 1.00 DS-0026: No HEALTHCHECK defined — test/cli/Dockerfile
No HEALTHCHECK defined Add HEALTHCHECK instruction in your Dockerfile Rule: DS-0026 Severity: LOW Target: test/cli/Dockerfile
Misconfig
low System graph security Trivy conf 1.00 GHSA-6688-9rhm-gjv2: dompurify 3.4.14 — frontend/package-lock.json
DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes ## Environment - dompurify 3.4.15 (current npm release); reproduced independently on jsdom 30.0.1 and 29.1.1 (Node.js 20.x / 26.x) - Config: `DOMPurify.sanitize(node, { IN_PLAC…
VulnGhsa 6688 9rhm gjv2
low System graph security Trivy conf 1.00 GHSA-p98j-92pf-mc4p: dompurify 3.4.14 — frontend/package-lock.json
DOMPurify: IN_PLACE: node-removing afterSanitize hook leaves detached subtree event handlers armed, causing DOM XSS ## Summary In `IN_PLACE` mode DOMPurify sanitizes the caller's live DOM subtree directly. To close a known hazard (GHSA-55q2-fjhq-7xh7), the library neutralizes any node a hook deta…
VulnGhsa p98j 92pf mc4p
low System graph cicd CI/CD security conf 1.00 2 occurrences GitHub Action is tag-pinned rather than SHA-pinned
actions/upload-artifact@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
2 files, 2 locations
.github/workflows/build-artifacts.yml:192
.github/workflows/deploy-docs.yml:53
CI/CD securitySupply chainGithub actions
low System graph quality Agent instructions conf 1.00 Multiple root agent instruction files without precedence
The repo has multiple top-level AI-coder instruction files. Without precedence rules, different agents may follow different policies.
Governance
low System graph dependencies dependencies conf 1.00 Node manifest has dependencies but no lockfile: packages/ao/package.json
`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely.
packages/ao/package.json LockfileReproducibilityGenerated repo pattern
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `clearsLegacy` in frontend/src/renderer/components/AutomationsView.tsx:259
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `firstOld` in packages/mobile/lib/files/model.ts:151
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph cicd CI/CD security conf 1.00 package.json defines install-time lifecycle scripts
preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access.
packages/mobile/package.json CI/CD securitySupply chainNpm
low System graph software Dead code conf 1.00 Possibly dead Python function: do_GET
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
cloud/scripts/dev-connect-agent-credential.py:135
low System graph software Dead code conf 1.00 Possibly dead Python function: log_message
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
cloud/scripts/dev-connect-agent-credential.py:132
low System graph quality Complexity conf 1.00 Very large file: backend/internal/adapters/agent/claudecode/claudecode_test.go (1700 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/adapters/agent/hermes/hermes.go (1811 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/adapters/agent/hermes/hermes_test.go (1878 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/adapters/agent/modelcatalog/catalog.go (1473 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/adapters/agent/modelcatalog/catalog_test.go (1393 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/adapters/chatdriver/acp/driver_test.go (5149 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/adapters/chatdriver/codexappserver/codexproto/protocol.gen.go (5365 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/adapters/chatdriver/codexappserver/driver_test.go (1865 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/adapters/chatdriver/codexappserver/normalize.go (1442 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/adapters/runtime/tmux/tmux.go (1749 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/adapters/runtime/tmux/tmux_test.go (2327 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/adapters/scm/github/provider_test.go (1933 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/adapters/scm/gitlab/provider_test.go (3237 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/adapters/workspace/gitworktree/workspace.go (2343 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/adapters/workspace/gitworktree/workspace_integration_test.go (1618 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/cli/hooks_test.go (2452 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/cli/spawn_test.go (1174 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/daemon/daemon.go (1388 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/httpd/apispec/specgen/build.go (3720 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/httpd/controllers/conversations.go (1770 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/httpd/controllers/dto.go (3807 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/httpd/controllers/sessions.go (3187 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/httpd/controllers/sessions_test.go (5237 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/lifecycle/manager.go (1888 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/lifecycle/manager_test.go (4970 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: backend/internal/observe/scm/observer.go (2297 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.

Showing first 300 of 411. Refine filters or use the findings page for deep search.

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/fbdee8ef-b200-4ece-803e-0fc6ef3118ee/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/fbdee8ef-b200-4ece-803e-0fc6ef3118ee/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.