https://github.com/stablyai/orca.git ·
lang: typescript ·
source: corpus_mined
| Rule | Severity | Count |
|---|---|---|
SEC015 Insecure Randomness for Security |
medium | 4 |
SEC005 Command Injection Risk |
high | 2 |
SEC020 Secret Printed to Logs |
high | 2 |
SEC006 XSS Risk |
high | 1 |
SEC020
Secret Printed to Logs
mobile/scripts/mock-server.ts:319
· conf 0.92
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…SEC005
Command Injection Risk
mobile/src/terminal/TerminalWebView.tsx:427
· conf 0.50
[SEC005] Command Injection Risk: Unsafe shell execution or eval of user input.SEC005
Command Injection Risk
src/main/persistence.ts:455
· conf 0.50
[SEC005] Command Injection Risk: Unsafe shell execution or eval of user input.SEC015
Insecure Randomness for Security
src/renderer/src/runtime/runtime-file-client.ts:474
· conf 1.00
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.SEC006
XSS Risk
src/renderer/src/components/editor/MermaidBlock.tsx:60
· conf 0.10
[SEC006] XSS Risk: Direct HTML injection without sanitization.SEC015
Insecure Randomness for Security
[SEC015] Insecure Randomness for Security (and 1 more): Same pattern found in 1 additional files. Review if needed.SEC015
Insecure Randomness for Security
mobile/src/hooks/use-mobile-dictation.ts:40
· conf 0.25
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.SEC015
Insecure Randomness for Security
src/main/persistence.ts:1477
· conf 0.25
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.SEC020
Secret Printed to Logs
src/shared/browser-annotation-viewport-bridge.ts:135
· conf 0.15
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/88a6d1fc-0db6-4008-b0ba-7049edc67514/.