Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

skin306152-star/pearnly-app

https://github.com/skin306152-star/pearnly-app · scanned 2026-06-16 00:15 UTC (2 months, 2 weeks ago)

855 raw signals (0 security + 855 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 2 weeks ago · v1 · 809 actionable findings from 1 signal source. 46 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
57.4
/100
Security checks
57
0 findings
System graph
57
100.0% cov · 809 findings
Critical
4
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 4 High 272 Medium 184 Low 197 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 809 Crowd 0 Layer: Software 13 Frontend 11 Hardware 3 Security 417 Cicd 1 Quality 303 Api 61
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 57.4/100 with 100.0% coverage. It contains 15344 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 855 findings — concentrated in security (431), quality (319), api (61). Risk profile is high: 18 critical, 272 high, 184 medium. Recommended next step: open the security layer findings first — that's where the highest-impact wins live.

Showing 656 of 809 actionable findings. 855 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

critical System graph security Secrets conf 1.00 Possible secret in services/erp/erp_mrerp_listing.py
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
services/erp/erp_mrerp_listing.py:32
critical System graph security Secrets conf 1.00 4 occurrences Possible secret in static/console/invite.js
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
lines 19, 38, 58, 78
static/console/invite.js:19, 38, 58, 78 (4 hits)
critical System graph security Secrets conf 1.00 11 occurrences Possible secret in static/landing/landing-i18n.js
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
lines 72, 87, 89, 123, 138, 140, 191, 228, +3 more
static/landing/landing-i18n.js:72, 87, 89, 123, 138, 140, 191, 228, +3 more (11 hits)
critical System graph security Secrets conf 1.00 2 occurrences Possible secret in static/landing/landing.js
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
lines 101, 129
static/landing/landing.js:101, 129 (2 hits)
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/purchase/export/${encodeURIComponent(jobId)} (src/home/purchase-export.ts:125)
`src/home/purchase-export.ts:125` calls `GET /api/purchase/export/${encodeURIComponent(jobId)}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/purchase/export/<p>` If this points at an external API, prefix it with `…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/reports/templates?lang=${encodeURIComponent(lang)} (src/home/report-templates.ts:103)
`src/home/report-templates.ts:103` calls `GET /api/reports/templates?lang=${encodeURIComponent(lang)}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/reports/templates` If this points at an external API, prefix it w…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/ocr/recognize (src/home/dms-intake-invoice.ts:238)
`src/home/dms-intake-invoice.ts:238` calls `POST /api/ocr/recognize` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/ocr/recognize` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/ocr/recognize?source=folder (src/home/folder-watcher-io.ts:96)
`src/home/folder-watcher-io.ts:96` calls `POST /api/ocr/recognize?source=folder` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/ocr/recognize` If this points at an external API, prefix it with `https://` so the matc…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/purchase/export (src/home/purchase-export.ts:161)
`src/home/purchase-export.ts:161` calls `POST /api/purchase/export` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/purchase/export` If this points at an external API, prefix it with `https://` so the matcher skips i…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/purchase/export (src/home/purchase-export.ts:86)
`src/home/purchase-export.ts:86` calls `POST /api/purchase/export` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/purchase/export` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/reports/history/batch_export (src/home/dms-intake-invoice-submit.ts:291)
`src/home/dms-intake-invoice-submit.ts:291` calls `POST /api/reports/history/batch_export` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/reports/history/batch_export` If this points at an external API, prefix it wi…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/reports/history/batch_export (src/home/report-templates.ts:326)
`src/home/report-templates.ts:326` calls `POST /api/reports/history/batch_export` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/reports/history/batch_export` If this points at an external API, prefix it with `https…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/me/onboarding (src/home/onboarding-business.ts:153)
`src/home/onboarding-business.ts:153` calls `PUT /api/me/onboarding` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/me/onboarding` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/me/onboarding (src/home/onboarding-flow.ts:335)
`src/home/onboarding-flow.ts:335` calls `PUT /api/me/onboarding` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/me/onboarding` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/pos/admin/onboarding (src/home/pos-onboarding.ts:146)
`src/home/pos-onboarding.ts:146` calls `PUT /api/pos/admin/onboarding` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/pos/admin/onboarding` If this points at an external API, prefix it with `https://` so the matcher…
Dangling fetchFetch
high System graph security auth conf 1.00 FastAPI DELETE `admin_remove_employee` without auth dependency — routes/admin_users_mutation_routes.py:201
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/admin_users_mutation_routes.py:201 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_admin_delete_cashier` without auth dependency — routes/pos_auth_routes.py:280
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_auth_routes.py:280 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_delete_area` without auth dependency — routes/pos_restaurant_admin_routes.py:91
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_restaurant_admin_routes.py:91 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_delete_attachment` without auth dependency — routes/purchase_routes.py:355
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_routes.py:355 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_delete_category` without auth dependency — routes/purchase_config_routes.py:188
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_config_routes.py:188 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_delete_client` without auth dependency — routes/clients_routes.py:164
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/clients_routes.py:164 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_delete_doc` without auth dependency — routes/purchase_routes.py:221
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_routes.py:221 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_delete_draft` without auth dependency — routes/sales_routes.py:365
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/sales_routes.py:365 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_delete_exception_whitelist` without auth dependency — routes/exceptions_routes.py:185
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/exceptions_routes.py:185 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_delete_learned` without auth dependency — routes/accounting_routes.py:429
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_routes.py:429 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_delete_line` without auth dependency — routes/pos_restaurant_routes.py:162
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_restaurant_routes.py:162 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_delete_product` without auth dependency — routes/products_routes.py:242
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/products_routes.py:242 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_delete_supplier` without auth dependency — routes/purchase_config_routes.py:112
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_config_routes.py:112 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_delete_table` without auth dependency — routes/pos_restaurant_admin_routes.py:171
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_restaurant_admin_routes.py:171 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_delete_template` without auth dependency — routes/accounting_routes.py:195
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_routes.py:195 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_delete_unit` without auth dependency — routes/products_routes.py:310
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/products_routes.py:310 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_notif_delete_rule` without auth dependency — routes/notification_routes.py:139
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/notification_routes.py:139 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `archive_workspace_client_route` without auth dependency — routes/workspace_routes.py:237
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/workspace_routes.py:237 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `bank_recon_delete_session` without auth dependency — routes/bank_recon_routes.py:210
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/bank_recon_routes.py:210 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `clear_old_tasks` without auth dependency — routes/vat_excel_tasks_routes.py:88
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/vat_excel_tasks_routes.py:88 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_custom_role` without auth dependency — routes/console_roles_routes.py:101
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/console_roles_routes.py:101 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_document` without auth dependency — routes/knowledge_routes.py:294
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/knowledge_routes.py:294 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_line_binding` without auth dependency — routes/line_binding_routes.py:84
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/line_binding_routes.py:84 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_mapping_product` without auth dependency — routes/erp_mappings_routes.py:234
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_mappings_routes.py:234 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_mapping` without auth dependency — routes/import_routes.py:81
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/import_routes.py:81 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_rule` without auth dependency — routes/knowledge_rules_routes.py:130
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/knowledge_rules_routes.py:130 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_task` without auth dependency — routes/vat_excel_tasks_routes.py:108
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/vat_excel_tasks_routes.py:108 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `email_account_unbind` without auth dependency — routes/email_ingest_routes.py:99
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/email_ingest_routes.py:99 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `erp_endpoints_delete` without auth dependency — routes/erp_endpoints_routes.py:277
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_endpoints_routes.py:277 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `erp_map_delete_account` without auth dependency — routes/erp_mappings_routes.py:124
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_mappings_routes.py:124 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `erp_map_delete_client` without auth dependency — routes/erp_mappings_routes.py:85
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_mappings_routes.py:85 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `erp_map_delete_tax` without auth dependency — routes/erp_mappings_routes.py:162
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_mappings_routes.py:162 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `history_delete` without auth dependency — routes/history_routes.py:172
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/history_routes.py:172 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `remove_member` without auth dependency — routes/console_team_routes.py:196
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/console_team_routes.py:196 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `revoke_invitation` without auth dependency — routes/console_invite_routes.py:123
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/console_invite_routes.py:123 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `v1_history_delete` without auth dependency — routes/history_routes.py:280
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/history_routes.py:280 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `admin_toggle_employee_active` without auth dependency — routes/admin_users_mutation_routes.py:185
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/admin_users_mutation_routes.py:185 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `admin_update_tenant_quota` without auth dependency — routes/tenant_routes.py:100
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/tenant_routes.py:100 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `admin_update_tenant_status` without auth dependency — routes/tenant_routes.py:112
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/tenant_routes.py:112 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `admin_update_user_quota` without auth dependency — routes/admin_users_mutation_routes.py:95
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/admin_users_mutation_routes.py:95 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `admin_update_user_status` without auth dependency — routes/admin_users_mutation_routes.py:119
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/admin_users_mutation_routes.py:119 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `api_notif_update_rule` without auth dependency — routes/notification_routes.py:109
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/notification_routes.py:109 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `api_patch_voucher` without auth dependency — routes/accounting_routes.py:235
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_routes.py:235 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `api_update_account` without auth dependency — routes/accounting_routes.py:345
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_routes.py:345 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `api_update_area` without auth dependency — routes/pos_restaurant_admin_routes.py:78
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_restaurant_admin_routes.py:78 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `api_update_category` without auth dependency — routes/purchase_config_routes.py:168
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_config_routes.py:168 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `api_update_client` without auth dependency — routes/clients_routes.py:148
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/clients_routes.py:148 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `api_update_document` without auth dependency — routes/sales_routes.py:292
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/sales_routes.py:292 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `api_update_line` without auth dependency — routes/pos_restaurant_routes.py:150
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_restaurant_routes.py:150 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `api_update_product` without auth dependency — routes/products_routes.py:223
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/products_routes.py:223 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `api_update_supplier` without auth dependency — routes/purchase_config_routes.py:87
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_config_routes.py:87 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `api_update_table` without auth dependency — routes/pos_restaurant_admin_routes.py:158
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_restaurant_admin_routes.py:158 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `api_update_unit` without auth dependency — routes/products_routes.py:286
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/products_routes.py:286 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `bank_recon_set_session_client` without auth dependency — routes/bank_recon_routes.py:282
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/bank_recon_routes.py:282 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `erp_endpoints_update_seed` without auth dependency — routes/erp_endpoints_routes.py:294
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_endpoints_routes.py:294 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `erp_endpoints_update` without auth dependency — routes/erp_endpoints_routes.py:190
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_endpoints_routes.py:190 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `row_field_override` without auth dependency — routes/recon_routes.py:355
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/recon_routes.py:355 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `toggle_member` without auth dependency — routes/console_team_routes.py:174
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/console_team_routes.py:174 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_custom_role` without auth dependency — routes/console_roles_routes.py:74
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/console_roles_routes.py:74 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_rule` without auth dependency — routes/knowledge_rules_routes.py:108
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/knowledge_rules_routes.py:108 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_workspace_client_route` without auth dependency — routes/workspace_routes.py:203
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/workspace_routes.py:203 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `accept_invitation` without auth dependency — routes/console_invite_routes.py:147
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/console_invite_routes.py:147 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `accept_transfer` without auth dependency — routes/console_invite_routes.py:204
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/console_invite_routes.py:204 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `admin_backfill_tenant_ids` without auth dependency — routes/admin_migration_routes.py:107
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/admin_migration_routes.py:107 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `admin_ban_user` without auth dependency — routes/auth_admin_risk_routes.py:178
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/auth_admin_risk_routes.py:178 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `admin_cascade_delete` without auth dependency — routes/admin_users_mutation_routes.py:208
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/admin_users_mutation_routes.py:208 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `admin_cleanup_demo` without auth dependency — routes/auth_admin_routes.py:82
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/auth_admin_routes.py:82 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `admin_create_tenant` without auth dependency — routes/tenant_routes.py:85
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/tenant_routes.py:85 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `admin_create_user` without auth dependency — routes/admin_users_mutation_routes.py:62
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/admin_users_mutation_routes.py:62 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `admin_delete_user` without auth dependency — routes/admin_users_mutation_routes.py:143
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/admin_users_mutation_routes.py:143 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `admin_fix_orphans` without auth dependency — routes/admin_migration_routes.py:75
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/admin_migration_routes.py:75 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `admin_migration_dry_run` without auth dependency — routes/admin_migration_routes.py:42
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/admin_migration_routes.py:42 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `admin_migration_execute` without auth dependency — routes/admin_migration_routes.py:52
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/admin_migration_routes.py:52 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `admin_reset_employee_password` without auth dependency — routes/admin_users_mutation_routes.py:194
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/admin_users_mutation_routes.py:194 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `admin_reset_user_password` without auth dependency — routes/admin_users_mutation_routes.py:177
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/admin_users_mutation_routes.py:177 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `admin_risk_batch_ban` without auth dependency — routes/auth_admin_risk_routes.py:233
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/auth_admin_risk_routes.py:233 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `admin_rls_run_tests` without auth dependency — routes/admin_migration_routes.py:97
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/admin_migration_routes.py:97 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `admin_topup_approve` without auth dependency — routes/billing_topup_routes.py:288
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/billing_topup_routes.py:288 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `admin_topup_reject` without auth dependency — routes/billing_topup_routes.py:331
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/billing_topup_routes.py:331 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `admin_unban_user` without auth dependency — routes/auth_admin_risk_routes.py:206
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/auth_admin_risk_routes.py:206 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_add_attachment` without auth dependency — routes/purchase_routes.py:343
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_routes.py:343 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_add_lines` without auth dependency — routes/pos_restaurant_routes.py:126
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_restaurant_routes.py:126 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_adjust` without auth dependency — routes/inventory_routes.py:206
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/inventory_routes.py:206 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_admin_create_cashier` without auth dependency — routes/pos_auth_routes.py:242
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_auth_routes.py:242 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_approve_document` without auth dependency — routes/sales_routes.py:389
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/sales_routes.py:389 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_assign_client` without auth dependency — routes/history_routes.py:289
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/history_routes.py:289 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_bank_exclude` without auth dependency — routes/accounting_bank_routes.py:305
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_bank_routes.py:305 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_bank_harvest` without auth dependency — routes/accounting_bank_routes.py:333
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_bank_routes.py:333 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_bank_import` without auth dependency — routes/accounting_bank_routes.py:100
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_bank_routes.py:100 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_bank_match` without auth dependency — routes/accounting_bank_routes.py:259
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_bank_routes.py:259 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_bank_restore` without auth dependency — routes/accounting_bank_routes.py:319
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_bank_routes.py:319 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_bank_unmatch` without auth dependency — routes/accounting_bank_routes.py:281
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_bank_routes.py:281 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_batch_delete_clients` without auth dependency — routes/clients_routes.py:178
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/clients_routes.py:178 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_batch_exceptions` without auth dependency — routes/exceptions_routes.py:135
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/exceptions_routes.py:135 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_bind_device` without auth dependency — routes/pos_auth_routes.py:111
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_auth_routes.py:111 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_cancel_session` without auth dependency — routes/pos_restaurant_routes.py:202
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_restaurant_routes.py:202 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_check_filing` without auth dependency — routes/tax_routes.py:164
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/tax_routes.py:164 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_checkout` without auth dependency — routes/pos_restaurant_routes.py:332
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_restaurant_routes.py:332 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_close_period` without auth dependency — routes/accounting_books_routes.py:131
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_books_routes.py:131 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_close_shift` without auth dependency — routes/pos_sales_routes.py:139
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_sales_routes.py:139 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_convert_quotation` without auth dependency — routes/sales_routes.py:465
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/sales_routes.py:465 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_count` without auth dependency — routes/inventory_routes.py:189
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/inventory_routes.py:189 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_create_account` without auth dependency — routes/accounting_routes.py:330
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_routes.py:330 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_create_area` without auth dependency — routes/pos_restaurant_admin_routes.py:66
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_restaurant_admin_routes.py:66 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_create_bank_account` without auth dependency — routes/accounting_bank_routes.py:60
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_bank_routes.py:60 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_create_category` without auth dependency — routes/purchase_config_routes.py:149
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_config_routes.py:149 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_create_client` without auth dependency — routes/clients_routes.py:126
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/clients_routes.py:126 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_create_doc` without auth dependency — routes/purchase_routes.py:79
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_routes.py:79 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_create_document` without auth dependency — routes/sales_routes.py:213
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/sales_routes.py:213 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_create_product` without auth dependency — routes/products_routes.py:149
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/products_routes.py:149 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_create_sale` without auth dependency — routes/pos_sales_routes.py:193
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_sales_routes.py:193 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_create_supplier` without auth dependency — routes/purchase_config_routes.py:62
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_config_routes.py:62 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_create_table` without auth dependency — routes/pos_restaurant_admin_routes.py:140
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_restaurant_admin_routes.py:140 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_create_template` without auth dependency — routes/accounting_routes.py:170
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_routes.py:170 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_create_unit` without auth dependency — routes/products_routes.py:267
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/products_routes.py:267 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_credit_note` without auth dependency — routes/sales_routes.py:453
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/sales_routes.py:453 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_debit_note` without auth dependency — routes/sales_routes.py:459
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/sales_routes.py:459 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_disconnect` without auth dependency — routes/google_oauth_routes.py:112
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/google_oauth_routes.py:112 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_export` without auth dependency — routes/export_routes.py:34
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/export_routes.py:34 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_file_filing` without auth dependency — routes/tax_routes.py:180
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/tax_routes.py:180 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_full_tax_invoice` without auth dependency — routes/pos_sales_routes.py:319
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_sales_routes.py:319 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_generate_filings` without auth dependency — routes/tax_routes.py:124
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/tax_routes.py:124 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_ignore_exception` without auth dependency — routes/exceptions_routes.py:114
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/exceptions_routes.py:114 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_import_products` without auth dependency — routes/products_routes.py:186
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/products_routes.py:186 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_inbox_resolve` without auth dependency — routes/purchase_intake_routes.py:193
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_intake_routes.py:193 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_intake` without auth dependency — routes/purchase_intake_routes.py:69
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_intake_routes.py:69 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_issue_document` without auth dependency — routes/sales_routes.py:327
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/sales_routes.py:327 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_issue_wht_cert` without auth dependency — routes/tax_routes.py:292
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/tax_routes.py:292 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_kot_item_status` without auth dependency — routes/pos_restaurant_routes.py:250
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_restaurant_routes.py:250 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_kot_status` without auth dependency — routes/pos_restaurant_routes.py:238
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_restaurant_routes.py:238 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_liff_auth` without auth dependency — routes/line_liff_routes.py:54
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/line_liff_routes.py:54 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_manual_voucher` without auth dependency — routes/accounting_routes.py:134
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_routes.py:134 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_mark_filed` without auth dependency — routes/tax_routes.py:213
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/tax_routes.py:213 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_match_product` without auth dependency — routes/purchase_routes.py:233
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_routes.py:233 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_notif_create_rule` without auth dependency — routes/notification_routes.py:84
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/notification_routes.py:84 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_notif_test_send` without auth dependency — routes/notification_routes.py:152
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/notification_routes.py:152 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_open_shift` without auth dependency — routes/pos_sales_routes.py:119
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_sales_routes.py:119 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_open_table` without auth dependency — routes/pos_restaurant_routes.py:79
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_restaurant_routes.py:79 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_pay_doc` without auth dependency — routes/purchase_routes.py:180
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_routes.py:180 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_pin_login` without auth dependency — routes/pos_auth_routes.py:143
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_auth_routes.py:143 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_post_doc` without auth dependency — routes/purchase_routes.py:161
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_routes.py:161 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_quick_expense` without auth dependency — routes/purchase_intake_routes.py:138
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_intake_routes.py:138 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_receive` without auth dependency — routes/inventory_routes.py:169
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/inventory_routes.py:169 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_recompute_filing` without auth dependency — routes/tax_routes.py:152
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/tax_routes.py:152 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_refund` without auth dependency — routes/pos_sales_routes.py:269
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_sales_routes.py:269 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_reject_document` without auth dependency — routes/sales_routes.py:415
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/sales_routes.py:415 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_request_bill` without auth dependency — routes/pos_restaurant_routes.py:263
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_restaurant_routes.py:263 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_reset_store_code` without auth dependency — routes/pos_auth_routes.py:183
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_auth_routes.py:183 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_resolve_exception` without auth dependency — routes/exceptions_routes.py:102
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/exceptions_routes.py:102 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_review_voucher` without auth dependency — routes/accounting_routes.py:211
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_routes.py:211 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_send_document` without auth dependency — routes/sales_send_routes.py:71
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/sales_send_routes.py:71 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_send_kitchen` without auth dependency — routes/pos_restaurant_routes.py:185
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_restaurant_routes.py:185 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_set_payment_status` without auth dependency — routes/purchase_routes.py:192
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_routes.py:192 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_submit_for_approval` without auth dependency — routes/sales_routes.py:377
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/sales_routes.py:377 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_substitute_receipt` without auth dependency — routes/purchase_routes.py:281
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_routes.py:281 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_sync_sales` without auth dependency — routes/pos_sales_routes.py:214
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_sales_routes.py:214 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_unpost_voucher` without auth dependency — routes/accounting_routes.py:282
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_routes.py:282 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_upload_image` without auth dependency — routes/uploads_routes.py:39
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/uploads_routes.py:39 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_void_doc` without auth dependency — routes/purchase_routes.py:205
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_routes.py:205 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_void_document` without auth dependency — routes/sales_routes.py:354
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/sales_routes.py:354 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_void_voucher` without auth dependency — routes/accounting_routes.py:268
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_routes.py:268 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_void` without auth dependency — routes/pos_sales_routes.py:288
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_sales_routes.py:288 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_wht_cert` without auth dependency — routes/purchase_routes.py:286
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_routes.py:286 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `archive_rename_preview` without auth dependency — routes/settings_routes.py:102
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/settings_routes.py:102 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `ask_question` without auth dependency — routes/knowledge_ask_routes.py:51
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/knowledge_ask_routes.py:51 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `bank_recon_run_match` without auth dependency — routes/bank_recon_routes.py:224
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/bank_recon_routes.py:224 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `bank_recon_tx_override` without auth dependency — routes/bank_recon_routes.py:252
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/bank_recon_routes.py:252 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `bank_recon_upload` without auth dependency — routes/bank_recon_routes.py:41
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/bank_recon_routes.py:41 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `bank_v2_confirm_rows` without auth dependency — routes/recon_jobs_routes.py:400
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/recon_jobs_routes.py:400 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `bank_v2_submit` without auth dependency — routes/recon_jobs_routes.py:172
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/recon_jobs_routes.py:172 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `batch_export_history` without auth dependency — routes/report_routes.py:231
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/report_routes.py:231 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `build_excel_endpoint` without auth dependency — routes/vat_excel_routes.py:74
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/vat_excel_routes.py:74 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `change_password` without auth dependency — routes/auth_password_routes.py:417
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/auth_password_routes.py:417 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_custom_role` without auth dependency — routes/console_roles_routes.py:50
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/console_roles_routes.py:50 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_invitation` without auth dependency — routes/console_invite_routes.py:66
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/console_invite_routes.py:66 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_line_binding_code` without auth dependency — routes/line_binding_routes.py:45
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/line_binding_routes.py:45 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_rule` without auth dependency — routes/knowledge_rules_routes.py:79
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/knowledge_rules_routes.py:79 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_task` without auth dependency — routes/recon_routes.py:199
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/recon_routes.py:199 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_workspace_client` without auth dependency — routes/workspace_routes.py:143
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/workspace_routes.py:143 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `credits_topup_request` without auth dependency — routes/billing_topup_routes.py:106
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/billing_topup_routes.py:106 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `credits_topup_upload_slip` without auth dependency — routes/billing_topup_routes.py:132
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/billing_topup_routes.py:132 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `dms_customer_fields` without auth dependency — routes/dms_routes.py:206
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/dms_routes.py:206 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `dms_id_card_push` without auth dependency — routes/dms_routes.py:241
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/dms_routes.py:241 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `dms_id_card_recognize` without auth dependency — routes/dms_routes.py:171
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/dms_routes.py:171 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `download_mrerp_xlsx_batch` without auth dependency — routes/erp_export_routes.py:38
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_export_routes.py:38 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `email_account_test` without auth dependency — routes/email_ingest_routes.py:107
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/email_ingest_routes.py:107 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `email_account_trigger` without auth dependency — routes/email_ingest_routes.py:127
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/email_ingest_routes.py:127 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `erp_batch_delete` without auth dependency — routes/erp_push_log_routes.py:463
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_push_log_routes.py:463 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `erp_batch_retry` without auth dependency — routes/erp_push_log_routes.py:372
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_push_log_routes.py:372 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `erp_endpoint_test_connection` without auth dependency — routes/erp_listing_routes.py:143
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_listing_routes.py:143 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `erp_endpoints_create` without auth dependency — routes/erp_endpoints_routes.py:70
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_endpoints_routes.py:70 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `erp_map_upsert_account` without auth dependency — routes/erp_mappings_routes.py:105
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_mappings_routes.py:105 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `erp_map_upsert_client` without auth dependency — routes/erp_mappings_routes.py:67
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_mappings_routes.py:67 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `erp_map_upsert_tax` without auth dependency — routes/erp_mappings_routes.py:144
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_mappings_routes.py:144 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `erp_push` without auth dependency — routes/erp_push_log_routes.py:34
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_push_log_routes.py:34 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `erp_retry_push` without auth dependency — routes/erp_push_log_routes.py:309
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_push_log_routes.py:309 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `erp_test_connection` without auth dependency — routes/erp_listing_routes.py:37
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_listing_routes.py:37 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `erp_wizard_products` without auth dependency — routes/erp_listing_routes.py:436
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_listing_routes.py:436 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `export_records` without auth dependency — routes/report_routes.py:123
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/report_routes.py:123 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `forgot_password` without auth dependency — routes/auth_password_routes.py:222
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/auth_password_routes.py:222 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `github_deploy_webhook` without auth dependency — routes/admin_diagnostics_routes.py:95
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/admin_diagnostics_routes.py:95 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `gl_vat_submit` without auth dependency — routes/recon_jobs_routes.py:238
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/recon_jobs_routes.py:238 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `history_batch_delete` without auth dependency — routes/history_routes.py:233
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/history_routes.py:233 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `initiate_transfer` without auth dependency — routes/console_invite_routes.py:177
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/console_invite_routes.py:177 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `install_playwright` without auth dependency — routes/admin_diagnostics_routes.py:224
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/admin_diagnostics_routes.py:224 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `line_webhook` without auth dependency — routes/line_webhook_routes.py:251
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/line_webhook_routes.py:251 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `link_line_dev` without auth dependency — routes/auth_me_routes.py:89
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/auth_me_routes.py:89 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `link_line` without auth dependency — routes/auth_me_routes.py:34
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/auth_me_routes.py:34 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `me_line_complete_email` without auth dependency — routes/line_account_merge_routes.py:40
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/line_account_merge_routes.py:40 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `ocr_export_by_history_ids` without auth dependency — routes/ocr_export_routes.py:153
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/ocr_export_routes.py:153 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `ocr_export` without auth dependency — routes/ocr_export_routes.py:75
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/ocr_export_routes.py:75 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `ocr_recognize` without auth dependency — routes/ocr_recognize_routes.py:38
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/ocr_recognize_routes.py:38 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `rd_lookup` without auth dependency — routes/rd_routes.py:78
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/rd_routes.py:78 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `rd_verify` without auth dependency — routes/rd_routes.py:64
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/rd_routes.py:64 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `regenerate_task` without auth dependency — routes/vat_excel_routes.py:402
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/vat_excel_routes.py:402 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reset_password` without auth dependency — routes/auth_password_routes.py:333
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/auth_password_routes.py:333 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `row_action` without auth dependency — routes/recon_routes.py:334
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/recon_routes.py:334 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `row_ai` without auth dependency — routes/recon_routes.py:302
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/recon_routes.py:302 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_check` without auth dependency — routes/knowledge_risk_routes.py:37
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/knowledge_risk_routes.py:37 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_recon` without auth dependency — routes/recon_routes.py:217
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/recon_routes.py:217 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `save_mapping` without auth dependency — routes/import_routes.py:44
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/import_routes.py:44 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `search_documents` without auth dependency — routes/knowledge_routes.py:325
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/knowledge_routes.py:325 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `send_email_code` without auth dependency — routes/auth_email_code_routes.py:179
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/auth_email_code_routes.py:179 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `switch_company` without auth dependency — routes/billing_credits_routes.py:186
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/billing_credits_routes.py:186 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `update_my_lang` without auth dependency — routes/line_binding_routes.py:104
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/line_binding_routes.py:104 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_document` without auth dependency — routes/knowledge_routes.py:100
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/knowledge_routes.py:100 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upsert_mapping_product` without auth dependency — routes/erp_mappings_routes.py:210
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_mappings_routes.py:210 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `v1_export` without auth dependency — routes/ocr_export_routes.py:218
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/ocr_export_routes.py:218 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `v1_rd_lookup` without auth dependency — routes/rd_routes.py:98
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/rd_routes.py:98 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `v1_rd_verify` without auth dependency — routes/rd_routes.py:93
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/rd_routes.py:93 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `v1_recognize` without auth dependency — routes/meta_aliases_routes.py:52
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/meta_aliases_routes.py:52 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `vat_excel_submit` without auth dependency — routes/recon_jobs_routes.py:299
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/recon_jobs_routes.py:299 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `verify_email_code` without auth dependency — routes/auth_email_code_routes.py:289
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/auth_email_code_routes.py:289 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `xero_disconnect` without auth dependency — routes/erp_xero_routes.py:293
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_xero_routes.py:293 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `xero_push` without auth dependency — routes/erp_xero_routes.py:338
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_xero_routes.py:338 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `xero_select_org` without auth dependency — routes/erp_xero_routes.py:279
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_xero_routes.py:279 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `xero_set_auto_push` without auth dependency — routes/erp_xero_routes.py:268
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/erp_xero_routes.py:268 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_admin_update_cashier` without auth dependency — routes/pos_auth_routes.py:259
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_auth_routes.py:259 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_onboarding` without auth dependency — routes/modules_routes.py:48
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/modules_routes.py:48 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_onboarding` without auth dependency — routes/pos_auth_routes.py:298
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_auth_routes.py:298 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_save_payment_settings` without auth dependency — routes/pos_payment_routes.py:54
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_payment_routes.py:54 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_save_settings` without auth dependency — routes/purchase_config_routes.py:224
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_config_routes.py:224 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_set_mapping` without auth dependency — routes/accounting_routes.py:378
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_routes.py:378 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_set_module` without auth dependency — routes/pos_modules_routes.py:39
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/pos_modules_routes.py:39 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_set_seller` without auth dependency — routes/sales_seller_routes.py:81
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/sales_seller_routes.py:81 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_set_settings` without auth dependency — routes/sales_settings_routes.py:59
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/sales_settings_routes.py:59 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_toggle_module` without auth dependency — routes/modules_routes.py:59
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/modules_routes.py:59 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_update_doc` without auth dependency — routes/purchase_routes.py:142
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/purchase_routes.py:142 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_update_settings` without auth dependency — routes/accounting_routes.py:405
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/accounting_routes.py:405 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_update_settings` without auth dependency — routes/tax_routes.py:326
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/tax_routes.py:326 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `archive_settings_put` without auth dependency — routes/settings_routes.py:85
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/settings_routes.py:85 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `assign_role` without auth dependency — routes/console_roles_routes.py:119
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/console_roles_routes.py:119 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `bind_workspace_endpoint` without auth dependency — routes/workspace_routes.py:186
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/workspace_routes.py:186 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `change_member_role` without auth dependency — routes/console_team_routes.py:121
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/console_team_routes.py:121 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `change_member_scope` without auth dependency — routes/console_team_routes.py:146
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/console_team_routes.py:146 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `dup_check_put` without auth dependency — routes/settings_routes.py:129
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/settings_routes.py:129 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `email_account_bind` without auth dependency — routes/email_ingest_routes.py:66
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/email_ingest_routes.py:66 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `erp_push_mode_put` without auth dependency — routes/settings_routes.py:152
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/settings_routes.py:152 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `history_update` without auth dependency — routes/history_routes.py:105
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/history_routes.py:105 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_me_profile` without auth dependency — routes/me_routes.py:245
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/me_routes.py:245 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `v1_history_update` without auth dependency — routes/history_routes.py:275
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
routes/history_routes.py:275 securityAuth fastapi unauth mutation
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — src/home/access-log.ts:108
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — src/home/bank-recon-detail.ts:39
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — src/home/billing.ts:37
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — src/home/core-boot.ts:165
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — src/home/core.ts:223
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — src/home/dms-intake-invoice-submit.ts:274
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — src/home/erp-exceptions.ts:409
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — src/home/erp-integration.ts:91
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — src/home/exceptions-drawer.ts:150
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — src/home/exceptions-list.ts:26
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — src/home/notifications.ts:23
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — src/home/recon-center-x-results.ts:259
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — src/home/report-templates.ts:303
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — src/home/rules-settings.ts:26
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — src/home/sales-report.ts:83
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — src/home/unified-push.ts:159
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/admin/admin.js:52
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/console/console.js:1682
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/console/invite.js:120
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/erp-mrerp-connect.js:2280
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/pos/pos-restaurant-ops.js:344
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/recon-mapping.js:288
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: .claude/settings.json
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
.claude/settings.json VerificationClaude instruction
medium System graph quality Agent instructions conf 1.00 Agent instructions exist but release-hardening basics are missing
AI-coder instruction files were found, but the repo is missing license. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable.
Repo hardeningGenerated repo pattern

Showing first 300 of 656. Refine filters or use the findings page for deep search.

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/fe8c17ea-929d-4c6b-ba1f-1087c9a7f6bf/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/fe8c17ea-929d-4c6b-ba1f-1087c9a7f6bf/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.