https://github.com/erxes/erxes ·
lang: typescript ·
LOC: ·
source: both
| Rule | Severity | Count |
|---|---|---|
MINED115 GitHub Action pinned to mutable ref (not 40-char SHA) |
high | 25 |
MINED116 GHA pull_request workflow leaks secrets to forks |
critical | 25 |
AIC003 Duplicated implementation block across source files |
low | 8 |
MINED052 Ts Any Typed |
info | 4 |
MINED056 React Key As Index |
info | 4 |
MINED045 Ts Non Null Assertion |
info | 4 |
MINED054 Ts As Any |
info | 4 |
MINED058 React Dangerously Set Html |
info | 3 |
MINED122 package.json dep pulled from git URL or tarball |
high | 3 |
MINED044 Js Console Log Prod |
info | 2 |
MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-api-accounting.yml:61
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_USERNAME` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_USERNA…MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-api-accounting.yml:62
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_TOKEN` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_TOKEN }` …MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-api-content.yml:61
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_USERNAME` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_USERNA…MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-api-content.yml:62
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_TOKEN` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_TOKEN }` …MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-api-frontline.yml:62
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_USERNAME` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_USERNA…MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-api-frontline.yml:63
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_TOKEN` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_TOKEN }` …MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-api-gateway.yml:50
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_USERNAME` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_USERNA…MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-api-gateway.yml:51
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_TOKEN` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_TOKEN }` …MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-api-loyalty.yml:61
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_USERNAME` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_USERNA…MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-api-loyalty.yml:62
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_TOKEN` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_TOKEN }` …MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-api-operation.yml:61
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_USERNAME` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_USERNA…MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-api-operation.yml:62
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_TOKEN` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_TOKEN }` …MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-api-payment.yml:61
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_USERNAME` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_USERNA…MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-api-payment.yml:62
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_TOKEN` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_TOKEN }` …MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-api-tourism.yml:61
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_USERNAME` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_USERNA…MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-api-tourism.yml:62
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_TOKEN` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_TOKEN }` …MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-apps-frontline-widgets.yml:37
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_USERNAME` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_USERNA…MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-apps-frontline-widgets.yml:38
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_TOKEN` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_TOKEN }` …MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-core-ui.yml:37
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_USERNAME` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_USERNA…MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-core-ui.yml:38
· conf 0.90
[MINED116] Workflow uses `secrets.DOCKERHUB_TOKEN` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.DOCKERHUB_TOKEN }` …MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-ui-frontline.yml:30
· conf 0.90
[MINED116] Workflow uses `secrets.AWS_ACCESS_KEY_ID` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.AWS_ACCESS_KEY_ID…MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-ui-frontline.yml:31
· conf 0.90
[MINED116] Workflow uses `secrets.AWS_SECRET_ACCESS_KEY` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.AWS_SECRET_AC…MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-ui-payment.yml:29
· conf 0.90
[MINED116] Workflow uses `secrets.AWS_ACCESS_KEY_ID` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.AWS_ACCESS_KEY_ID…MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/ci-ui-payment.yml:30
· conf 0.90
[MINED116] Workflow uses `secrets.AWS_SECRET_ACCESS_KEY` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.AWS_SECRET_AC…MINED116
GHA pull_request workflow leaks secrets to forks
CWE-829
.github/workflows/claude-code.yml:24
· conf 0.90
[MINED116] Workflow uses `secrets.ANTHROPIC_API_KEY` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.ANTHROPIC_API_KEY…CORE_NO_TESTS
No test files found
No test files foundMINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-accounting.yml:25
· conf 0.90
[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-accounting.yml:28
· conf 0.90
[MINED115] Action `pnpm/action-setup` pinned to mutable ref `@v2`: `uses: pnpm/action-setup@v2` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj…MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-accounting.yml:33
· conf 0.90
[MINED115] Action `actions/setup-node` pinned to mutable ref `@v4`: `uses: actions/setup-node@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the …MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-content.yml:25
· conf 0.90
[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-content.yml:28
· conf 0.90
[MINED115] Action `pnpm/action-setup` pinned to mutable ref `@v2`: `uses: pnpm/action-setup@v2` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj…MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-content.yml:33
· conf 0.90
[MINED115] Action `actions/setup-node` pinned to mutable ref `@v4`: `uses: actions/setup-node@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the …MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-frontline.yml:26
· conf 0.90
[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-frontline.yml:29
· conf 0.90
[MINED115] Action `pnpm/action-setup` pinned to mutable ref `@v2`: `uses: pnpm/action-setup@v2` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj…MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-frontline.yml:34
· conf 0.90
[MINED115] Action `actions/setup-node` pinned to mutable ref `@v4`: `uses: actions/setup-node@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the …MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-loyalty.yml:25
· conf 0.90
[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-loyalty.yml:28
· conf 0.90
[MINED115] Action `pnpm/action-setup` pinned to mutable ref `@v2`: `uses: pnpm/action-setup@v2` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj…MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-loyalty.yml:33
· conf 0.90
[MINED115] Action `actions/setup-node` pinned to mutable ref `@v4`: `uses: actions/setup-node@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the …MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-operation.yml:25
· conf 0.90
[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-payment.yml:25
· conf 0.90
[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-payment.yml:28
· conf 0.90
[MINED115] Action `pnpm/action-setup` pinned to mutable ref `@v2`: `uses: pnpm/action-setup@v2` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj…MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-payment.yml:33
· conf 0.90
[MINED115] Action `actions/setup-node` pinned to mutable ref `@v4`: `uses: actions/setup-node@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the …MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-tourism.yml:25
· conf 0.90
[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-tourism.yml:28
· conf 0.90
[MINED115] Action `pnpm/action-setup` pinned to mutable ref `@v2`: `uses: pnpm/action-setup@v2` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj…MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-api-tourism.yml:33
· conf 0.90
[MINED115] Action `actions/setup-node` pinned to mutable ref `@v4`: `uses: actions/setup-node@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the …MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/ci-apps-frontline-widgets.yml:26
· conf 0.90
[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/claude-code.yml:22
· conf 0.90
[MINED115] Action `anthropics/claude-code-action` pinned to mutable ref `@v1`: `uses: anthropics/claude-code-action@v1` resolves at workflow-run time. Tags and branches can be re-pushed by the action…MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/codeql.yml:24
· conf 0.90
[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/codeql.yml:27
· conf 0.90
[MINED115] Action `github/codeql-action/init` pinned to mutable ref `@v3`: `uses: github/codeql-action/init@v3` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; …MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/codeql.yml:32
· conf 0.90
[MINED115] Action `github/codeql-action/autobuild` pinned to mutable ref `@v3`: `uses: github/codeql-action/autobuild@v3` resolves at workflow-run time. Tags and branches can be re-pushed by the acti…MINED115
GitHub Action pinned to mutable ref (not 40-char SHA)
CWE-829
.github/workflows/codeql.yml:35
· conf 0.90
[MINED115] Action `github/codeql-action/analyze` pinned to mutable ref `@v3`: `uses: github/codeql-action/analyze@v3` resolves at workflow-run time. Tags and branches can be re-pushed by the action o…MINED122
package.json dep pulled from git URL or tarball
CWE-829
package.json:1
· conf 0.90
[MINED122] package.json dep `testing` pulled from URL/Git: `devDependencies.testing` = `link:@apollo/client/testing` bypasses the npm registry. No integrity hash, no version locking, no registry-side…MINED122
package.json dep pulled from git URL or tarball
CWE-829
package.json:1
· conf 0.90
[MINED122] package.json dep `js:tsc@latest` pulled from URL/Git: `devDependencies.js:tsc@latest` = `link:@nrwl/js:tsc@latest` bypasses the npm registry. No integrity hash, no version locking, no regi…MINED122
package.json dep pulled from git URL or tarball
CWE-829
package.json:1
· conf 0.90
[MINED122] package.json dep `bullMQAdapter` pulled from URL/Git: `dependencies.bullMQAdapter` = `link:@bull-board/api/bullMQAdapter` bypasses the npm registry. No integrity hash, no version locking, …SEC083
JS: new RegExp() with non-literal
apps/frontline-widgets/src/app/form/components/ErxesFormValues.tsx:37
· conf 1.00
[SEC083] JS: new RegExp() with non-literal: new RegExp(<variable>) — variable input can craft a ReDoS pattern. Ported from eslint-plugin-security detect-non-literal-regexp (Apache-2.0).SEC085
JS: child_process.exec with non-literal
apps/posclient-front/app/(main)/report/utils/date.ts:12
· conf 1.00
[SEC085] JS: child_process.exec with non-literal: child_process.exec with user-derived input enables command injection. Ported from eslint-plugin-security detect-child-process (Apache-2.0).SEC128
Async function without await — fire-and-forget Promise (AI mistake)
apps/posclient-front/components/ui/use-toast.ts:62
· conf 1.00
[SEC128] Async function without await — fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work comple…AUC001
[AUC001] No Repobility access matrix policy found: The repository uses web/API frameworks but does not define .repobility/access.yml or equivalent authorization documentation.
[AUC001] No Repobility access matrix policy found: The repository uses web/API frameworks but does not define .repobility/access.yml or equivalent authorization documentation.CFG006
[CFG006] Missing .gitignore: No .gitignore file. Risk of committing secrets and build artifacts.
[CFG006] Missing .gitignore: No .gitignore file. Risk of committing secrets and build artifacts.SEC045
eval()/exec() on stored or user-supplied data
apps/posclient-front/app/(main)/report/utils/date.ts:12
· conf 1.00
[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even admin-stored data — is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ …SEC136
AI-typical over-broad exception handler swallowing all errors
apps/posclient-front/app/(main)/report/utils/date.ts:28
· conf 1.00
[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unf…WEB003
Public web service has no security.txt
.well-known/security.txt
· conf 0.78
Public web service has no security.txtWEB015
Public web app has no Content Security Policy
index.html
· conf 0.70
Public web app has no Content Security PolicyAIC003
Duplicated implementation block across source files
apps/frontline-widgets/src/app/form/live-form.tsx:55
· conf 0.86
Duplicated implementation block across source filesAIC003
Duplicated implementation block across source files
apps/frontline-widgets/src/app/messenger/ticket/graphql/mutations.ts:4
· conf 0.86
Duplicated implementation block across source filesAIC003
Duplicated implementation block across source files
apps/frontline-widgets/src/messengerBundle.js:2
· conf 0.86
Duplicated implementation block across source filesAIC003
Duplicated implementation block across source files
apps/frontline-widgets/src/messengerBundle.js:116
· conf 0.86
Duplicated implementation block across source filesAIC003
Duplicated implementation block across source files
apps/frontline-widgets/src/messenger-widget.js:254
· conf 0.86
Duplicated implementation block across source filesAIC003
Duplicated implementation block across source files
apps/posclient-front/app/(main)/cover/components/tdb.tsx:22
· conf 0.86
Duplicated implementation block across source filesAIC003
Duplicated implementation block across source files
apps/posclient-front/modules/apolloClientMain.tsx:7
· conf 0.86
Duplicated implementation block across source filesAIC003
Duplicated implementation block across source files
apps/posclient-front/modules/auth/configsFetch.tsx:3
· conf 0.86
Duplicated implementation block across source filesAUC005
[AUC005] No authorization-focused tests detected: No test files with common authorization, ownership, 403, admin, or super_admin assertions were found.
[AUC005] No authorization-focused tests detected: No test files with common authorization, ownership, 403, admin, or super_admin assertions were found.WEB001
Public web app has no robots.txt
robots.txt
· conf 0.74
Public web app has no robots.txtWEB002
Public web app has no sitemap
sitemap.xml
· conf 0.72
Public web app has no sitemapWEB008
Public docs site has no llms.txt
llms.txt
· conf 0.64
Public docs site has no llms.txtWEB011
Public web app has no humans.txt
humans.txt
· conf 0.50
Public web app has no humans.txtMINED044
Js Console Log Prod
CWE-532
apps/frontline-widgets/src/app/messenger/hooks/useSaveBrowserInfo.tsx:34
· conf 1.00
[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed.MINED044
Js Console Log Prod
CWE-532
apps/posclient-front/app/(main)/report/components/form.tsx:165
· conf 1.00
[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed.MINED045
Ts Non Null Assertion
CWE-476
[MINED045] Ts Non Null Assertion (and 1 more): Same pattern found in 1 additional files. Review if needed.MINED045
Ts Non Null Assertion
CWE-476
apps/frontline-widgets/src/formIndex.ts:347
· conf 1.00
[MINED045] Ts Non Null Assertion: x! asserts not null - bypasses null checks - TypeError if wrong.MINED045
Ts Non Null Assertion
CWE-476
apps/posclient-front/app/(main)/(orders)/components/progress/ActiveOrderItem.tsx:71
· conf 1.00
[MINED045] Ts Non Null Assertion: x! asserts not null - bypasses null checks - TypeError if wrong.MINED045
Ts Non Null Assertion
CWE-476
apps/posclient-front/components/ui/button.tsx:87
· conf 1.00
[MINED045] Ts Non Null Assertion: x! asserts not null - bypasses null checks - TypeError if wrong.MINED052
Ts Any Typed
CWE-704
[MINED052] Ts Any Typed (and 23 more): Same pattern found in 23 additional files. Review if needed.MINED052
Ts Any Typed
CWE-704
apps/frontline-widgets/rspack.config.ts:5
· conf 1.00
[MINED052] Ts Any Typed: : any used as type annotation. Defeats TypeScript type safety.MINED052
Ts Any Typed
CWE-704
apps/frontline-widgets/src/app/form/types/formTypes.ts:49
· conf 1.00
[MINED052] Ts Any Typed: : any used as type annotation. Defeats TypeScript type safety.MINED052
Ts Any Typed
CWE-704
apps/frontline-widgets/src/app/messenger/hooks/useWidgetNotifications.ts:108
· conf 1.00
[MINED052] Ts Any Typed: : any used as type annotation. Defeats TypeScript type safety.MINED054
Ts As Any
CWE-704
[MINED054] Ts As Any (and 4 more): Same pattern found in 4 additional files. Review if needed.MINED054
Ts As Any
CWE-704
apps/frontline-widgets/src/app/messenger/components/header-tab-item.tsx:23
· conf 1.00
[MINED054] Ts As Any: Casting to any (as any) bypasses type checking entirely.MINED054
Ts As Any
CWE-704
apps/frontline-widgets/src/app/messenger/hooks/useConversationDetail.tsx:97
· conf 1.00
[MINED054] Ts As Any: Casting to any (as any) bypasses type checking entirely.MINED054
Ts As Any
CWE-704
apps/frontline-widgets/src/app/messenger/hooks/useTicketsForm.tsx:15
· conf 1.00
[MINED054] Ts As Any: Casting to any (as any) bypasses type checking entirely.MINED056
React Key As Index
CWE-682
[MINED056] React Key As Index (and 7 more): Same pattern found in 7 additional files. Review if needed.MINED056
React Key As Index
CWE-682
apps/frontline-widgets/src/app/form/components/steps.tsx:26
· conf 1.00
[MINED056] React Key As Index: key={index} in map() — re-renders the wrong elements on re-order.MINED056
React Key As Index
CWE-682
apps/frontline-widgets/src/app/messenger/components/avatar-group.tsx:31
· conf 1.00
[MINED056] React Key As Index: key={index} in map() — re-renders the wrong elements on re-order.MINED056
React Key As Index
CWE-682
apps/frontline-widgets/src/app/messenger/components/persistent-menu.tsx:30
· conf 1.00
[MINED056] React Key As Index: key={index} in map() — re-renders the wrong elements on re-order.MINED058
React Dangerously Set Html
CWE-79
apps/posclient-front/app/reciept/components/footer.tsx:24
· conf 1.00
[MINED058] React Dangerously Set Html: dangerouslySetInnerHTML bypasses Reacts JSX escaping. Pair with DOMPurify or never use with user data.MINED058
React Dangerously Set Html
CWE-79
apps/posclient-front/app/reciept/components/header.tsx:75
· conf 1.00
[MINED058] React Dangerously Set Html: dangerouslySetInnerHTML bypasses Reacts JSX escaping. Pair with DOMPurify or never use with user data.MINED058
React Dangerously Set Html
CWE-79
apps/posclient-front/app/reciept/cover/page.tsx:143
· conf 1.00
[MINED058] React Dangerously Set Html: dangerouslySetInnerHTML bypasses Reacts JSX escaping. Pair with DOMPurify or never use with user data.Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/b925c108-67c6-44cc-b208-3b57b7f7314c/.