https://github.com/supertone-inc/supertonic.git ·
lang: swift ·
LOC: ·
source: user_submitted
| Rule | Severity | Count |
|---|---|---|
SEC015 Insecure Randomness for Security |
medium | 2 |
SEC006 XSS Risk |
high | 1 |
SEC006
XSS Risk
web/main.js:38
· conf 0.40
[SEC006] XSS Risk: Direct HTML injection without sanitization.
SEC015
Insecure Randomness for Security
nodejs/helper.js:174
· conf 0.25
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
SEC015
Insecure Randomness for Security
web/helper.js:320
· conf 0.25
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/3040d5b8-70f5-496d-a2f0-f5d19878614e/.