@clear-capabilities/agentic-security-scanner 0.74.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (331) hide show
  1. package/CHANGELOG.md +1580 -0
  2. package/bin/.agentic-security/findings.json +1577 -0
  3. package/bin/.agentic-security/last-scan.json +1577 -0
  4. package/bin/.agentic-security/last-scan.json.sig +1 -0
  5. package/bin/.agentic-security/scan-history.json +465 -0
  6. package/bin/.agentic-security/streak.json +25 -0
  7. package/bin/agentic-security-audit.js +198 -0
  8. package/bin/agentic-security-consistency.js +80 -0
  9. package/bin/agentic-security-diff.js +136 -0
  10. package/bin/agentic-security-lsp.js +12 -0
  11. package/bin/agentic-security-mcp.js +40 -0
  12. package/bin/agentic-security-rule.js +153 -0
  13. package/bin/agentic-security.js +1683 -0
  14. package/dist/117.index.js +207 -0
  15. package/dist/178.index.js +250 -0
  16. package/dist/218.index.js +793 -0
  17. package/dist/227.index.js +192 -0
  18. package/dist/301.index.js +167 -0
  19. package/dist/384.index.js +18 -0
  20. package/dist/476.index.js +126 -0
  21. package/dist/513.index.js +373 -0
  22. package/dist/520.index.js +13 -0
  23. package/dist/601.index.js +1038 -0
  24. package/dist/634.index.js +1892 -0
  25. package/dist/637.index.js +216 -0
  26. package/dist/660.index.js +131 -0
  27. package/dist/675.index.js +451 -0
  28. package/dist/826.index.js +188 -0
  29. package/dist/830.index.js +133 -0
  30. package/dist/agentic-security.mjs +272 -0
  31. package/dist/agentic-security.mjs.sha256 +1 -0
  32. package/dist/calibration-seed.json +27 -0
  33. package/package.json +77 -0
  34. package/src/.agentic-security/findings.json +80844 -0
  35. package/src/.agentic-security/last-scan.json +80844 -0
  36. package/src/.agentic-security/last-scan.json.sig +1 -0
  37. package/src/.agentic-security/scan-history.json +8408 -0
  38. package/src/.agentic-security/streak.json +26 -0
  39. package/src/badge.js +188 -0
  40. package/src/compare.js +203 -0
  41. package/src/dataflow/.agentic-security/findings.json +3487 -0
  42. package/src/dataflow/.agentic-security/last-scan.json +3487 -0
  43. package/src/dataflow/.agentic-security/last-scan.json.sig +1 -0
  44. package/src/dataflow/.agentic-security/scan-history.json +735 -0
  45. package/src/dataflow/.agentic-security/streak.json +24 -0
  46. package/src/dataflow/CLAUDE.md +38 -0
  47. package/src/dataflow/access-paths.js +172 -0
  48. package/src/dataflow/async-sequencing.js +177 -0
  49. package/src/dataflow/backward.js +201 -0
  50. package/src/dataflow/catalog-expanded.js +485 -0
  51. package/src/dataflow/catalog.js +659 -0
  52. package/src/dataflow/cross-repo.js +219 -0
  53. package/src/dataflow/engine.js +588 -0
  54. package/src/dataflow/exception-flow.js +116 -0
  55. package/src/dataflow/exploit-prover.js +187 -0
  56. package/src/dataflow/higher-order.js +221 -0
  57. package/src/dataflow/ifds.js +347 -0
  58. package/src/dataflow/implicit-flow.js +129 -0
  59. package/src/dataflow/incremental.js +229 -0
  60. package/src/dataflow/index.js +181 -0
  61. package/src/dataflow/numeric-domain.js +192 -0
  62. package/src/dataflow/path-feasibility.js +114 -0
  63. package/src/dataflow/points-to.js +337 -0
  64. package/src/dataflow/polyglot.js +190 -0
  65. package/src/dataflow/proven-clean.js +159 -0
  66. package/src/dataflow/receiver-context.js +76 -0
  67. package/src/dataflow/sanitizer-proof.js +154 -0
  68. package/src/dataflow/soft-taint.js +140 -0
  69. package/src/dataflow/string-domain.js +234 -0
  70. package/src/dataflow/stub-aware-filter.js +100 -0
  71. package/src/dataflow/summaries.js +132 -0
  72. package/src/dataflow/symbolic-exec.js +238 -0
  73. package/src/dataflow/tabulation.js +135 -0
  74. package/src/engine.js +7763 -0
  75. package/src/history-scan.js +229 -0
  76. package/src/index.js +3 -0
  77. package/src/integrations/.agentic-security/findings.json +1504 -0
  78. package/src/integrations/.agentic-security/last-scan.json +1504 -0
  79. package/src/integrations/.agentic-security/scan-history.json +40 -0
  80. package/src/integrations/.agentic-security/streak.json +21 -0
  81. package/src/integrations/index.js +321 -0
  82. package/src/integrations/tickets.js +200 -0
  83. package/src/ir/.agentic-security/findings.json +3036 -0
  84. package/src/ir/.agentic-security/last-scan.json +3036 -0
  85. package/src/ir/.agentic-security/last-scan.json.sig +1 -0
  86. package/src/ir/.agentic-security/scan-history.json +364 -0
  87. package/src/ir/.agentic-security/streak.json +23 -0
  88. package/src/ir/CLAUDE.md +172 -0
  89. package/src/ir/callgraph.js +73 -0
  90. package/src/ir/class-hierarchy.js +195 -0
  91. package/src/ir/index.js +152 -0
  92. package/src/ir/parser-cs.js +260 -0
  93. package/src/ir/parser-java.js +286 -0
  94. package/src/ir/parser-js.js +413 -0
  95. package/src/ir/parser-kt.js +258 -0
  96. package/src/ir/parser-py-cst.js +136 -0
  97. package/src/ir/parser-py.helper.py +501 -0
  98. package/src/ir/parser-py.js +312 -0
  99. package/src/ir/ssa.js +315 -0
  100. package/src/ir/type-stubs.js +288 -0
  101. package/src/leaderboard.js +152 -0
  102. package/src/llm-validator/.agentic-security/findings.json +1891 -0
  103. package/src/llm-validator/.agentic-security/last-scan.json +1891 -0
  104. package/src/llm-validator/.agentic-security/last-scan.json.sig +1 -0
  105. package/src/llm-validator/.agentic-security/scan-history.json +168 -0
  106. package/src/llm-validator/.agentic-security/streak.json +20 -0
  107. package/src/llm-validator/consistency.js +141 -0
  108. package/src/llm-validator/index.js +437 -0
  109. package/src/lsp/.agentic-security/findings.json +28 -0
  110. package/src/lsp/.agentic-security/last-scan.json +28 -0
  111. package/src/lsp/.agentic-security/scan-history.json +79 -0
  112. package/src/lsp/.agentic-security/streak.json +22 -0
  113. package/src/lsp/server.js +275 -0
  114. package/src/mcp/.agentic-security/findings.json +8358 -0
  115. package/src/mcp/.agentic-security/last-scan.json +8358 -0
  116. package/src/mcp/.agentic-security/last-scan.json.sig +1 -0
  117. package/src/mcp/.agentic-security/scan-history.json +1125 -0
  118. package/src/mcp/.agentic-security/streak.json +22 -0
  119. package/src/mcp/CLAUDE.md +54 -0
  120. package/src/mcp/audit.js +136 -0
  121. package/src/mcp/redact.js +75 -0
  122. package/src/mcp/server.js +158 -0
  123. package/src/mcp/stdio.js +83 -0
  124. package/src/mcp/tools.js +940 -0
  125. package/src/mcp/validate.js +49 -0
  126. package/src/personality.js +164 -0
  127. package/src/poc-video.js +239 -0
  128. package/src/posture/.agentic-security/findings.json +51239 -0
  129. package/src/posture/.agentic-security/last-scan.json +51239 -0
  130. package/src/posture/.agentic-security/last-scan.json.sig +1 -0
  131. package/src/posture/.agentic-security/scan-history.json +5557 -0
  132. package/src/posture/.agentic-security/streak.json +24 -0
  133. package/src/posture/CLAUDE.md +42 -0
  134. package/src/posture/adversarial-self-test.js +114 -0
  135. package/src/posture/adversary-agent.js +204 -0
  136. package/src/posture/agents-memory.js +135 -0
  137. package/src/posture/ai-code-fingerprint.js +171 -0
  138. package/src/posture/aibom.js +284 -0
  139. package/src/posture/api-inventory.js +96 -0
  140. package/src/posture/attack-playbooks.js +305 -0
  141. package/src/posture/auditor-agent.js +115 -0
  142. package/src/posture/auth-posture-import.js +135 -0
  143. package/src/posture/baseline-compare.js +114 -0
  144. package/src/posture/blast-radius.js +836 -0
  145. package/src/posture/bounty-prediction.js +141 -0
  146. package/src/posture/business-logic.js +239 -0
  147. package/src/posture/calibration-drift.js +93 -0
  148. package/src/posture/calibration-seed.json +27 -0
  149. package/src/posture/calibration.js +204 -0
  150. package/src/posture/clustering.js +75 -0
  151. package/src/posture/concurrency-checker.js +265 -0
  152. package/src/posture/confidence.js +65 -0
  153. package/src/posture/container-runtime.js +149 -0
  154. package/src/posture/counterfactual.js +109 -0
  155. package/src/posture/cross-lang-graphql.js +165 -0
  156. package/src/posture/cross-lang-grpc.js +166 -0
  157. package/src/posture/cross-lang-meta.js +101 -0
  158. package/src/posture/cross-lang-openapi.js +187 -0
  159. package/src/posture/cross-lang-orm.js +153 -0
  160. package/src/posture/cross-lang-queues.js +210 -0
  161. package/src/posture/crown-jewels.js +110 -0
  162. package/src/posture/custom-rules.js +361 -0
  163. package/src/posture/cve-alert-daemon.js +433 -0
  164. package/src/posture/cve-lookup.js +129 -0
  165. package/src/posture/dead-code.js +430 -0
  166. package/src/posture/defender-agent.js +158 -0
  167. package/src/posture/deploy-platform.js +204 -0
  168. package/src/posture/detector-fuzz.js +61 -0
  169. package/src/posture/deterministic.js +99 -0
  170. package/src/posture/drift.js +165 -0
  171. package/src/posture/epss.js +156 -0
  172. package/src/posture/exploitability-probability.js +212 -0
  173. package/src/posture/exploitability.js +121 -0
  174. package/src/posture/feature-flags.js +110 -0
  175. package/src/posture/finding-defaults.js +132 -0
  176. package/src/posture/fix-history.js +411 -0
  177. package/src/posture/fix-plan.js +121 -0
  178. package/src/posture/fix-verify-loop.js +157 -0
  179. package/src/posture/fix-verify.js +130 -0
  180. package/src/posture/flow-narration.js +105 -0
  181. package/src/posture/grader-calibration.js +156 -0
  182. package/src/posture/harness-discovery.js +113 -0
  183. package/src/posture/holdout-eval.js +144 -0
  184. package/src/posture/iac-reachability.js +163 -0
  185. package/src/posture/iam-policy.js +128 -0
  186. package/src/posture/integrity.js +97 -0
  187. package/src/posture/learning.js +166 -0
  188. package/src/posture/license-policy.js +109 -0
  189. package/src/posture/llm-redteam-prompts.js +418 -0
  190. package/src/posture/llm-redteam.js +303 -0
  191. package/src/posture/material-change.js +163 -0
  192. package/src/posture/mitigation-composite.js +55 -0
  193. package/src/posture/mttr.js +91 -0
  194. package/src/posture/network-policy-import.js +126 -0
  195. package/src/posture/path-predicates.js +99 -0
  196. package/src/posture/persona-prioritization.js +153 -0
  197. package/src/posture/poc-cwe-map.js +51 -0
  198. package/src/posture/poc-generator.js +500 -0
  199. package/src/posture/policy-gate.js +174 -0
  200. package/src/posture/pre-incident-archaeology.js +110 -0
  201. package/src/posture/profile.js +93 -0
  202. package/src/posture/reachability-filter.js +42 -0
  203. package/src/posture/regression-test-gen.js +200 -0
  204. package/src/posture/reverse-blast-radius.js +110 -0
  205. package/src/posture/router.js +109 -0
  206. package/src/posture/rule-overrides.js +198 -0
  207. package/src/posture/rule-pack-signing.js +209 -0
  208. package/src/posture/rule-packs.js +143 -0
  209. package/src/posture/rule-synthesis.js +108 -0
  210. package/src/posture/ruleset-version.js +71 -0
  211. package/src/posture/sbom.js +129 -0
  212. package/src/posture/schema-aware-bridge.js +207 -0
  213. package/src/posture/security-trend.js +87 -0
  214. package/src/posture/semantic-clone.js +114 -0
  215. package/src/posture/specification-mining.js +170 -0
  216. package/src/posture/stable-id.js +75 -0
  217. package/src/posture/stack-playbook.js +229 -0
  218. package/src/posture/streak.js +249 -0
  219. package/src/posture/suppressions.js +135 -0
  220. package/src/posture/telemetry-ingest.js +112 -0
  221. package/src/posture/threat-model.js +145 -0
  222. package/src/posture/three-agent-pipeline.js +74 -0
  223. package/src/posture/triage.js +146 -0
  224. package/src/posture/trust-boundary-diagram.js +115 -0
  225. package/src/posture/type-narrowing.js +129 -0
  226. package/src/posture/validator-metrics.js +179 -0
  227. package/src/posture/verifier-ephemeral.js +118 -0
  228. package/src/posture/verifier-target.js +147 -0
  229. package/src/posture/verifier.js +257 -0
  230. package/src/posture/version.js +75 -0
  231. package/src/posture/waf-ingest.js +200 -0
  232. package/src/posture/why-fired.js +141 -0
  233. package/src/pr-comment.js +172 -0
  234. package/src/pr-delta.js +198 -0
  235. package/src/report/.agentic-security/findings.json +79 -0
  236. package/src/report/.agentic-security/last-scan.json +79 -0
  237. package/src/report/.agentic-security/last-scan.json.sig +1 -0
  238. package/src/report/.agentic-security/scan-history.json +332 -0
  239. package/src/report/.agentic-security/streak.json +23 -0
  240. package/src/report/index.js +1136 -0
  241. package/src/report/mascot.js +42 -0
  242. package/src/runScan.js +141 -0
  243. package/src/sast/.agentic-security/findings.json +5051 -0
  244. package/src/sast/.agentic-security/last-scan.json +5051 -0
  245. package/src/sast/.agentic-security/last-scan.json.sig +1 -0
  246. package/src/sast/.agentic-security/scan-history.json +788 -0
  247. package/src/sast/.agentic-security/streak.json +23 -0
  248. package/src/sast/CLAUDE.md +39 -0
  249. package/src/sast/_comment-strip.js +46 -0
  250. package/src/sast/agent-tool-escalation.js +131 -0
  251. package/src/sast/auth-provider.js +171 -0
  252. package/src/sast/authz.js +236 -0
  253. package/src/sast/bench-shape/.agentic-security/findings.json +28 -0
  254. package/src/sast/bench-shape/.agentic-security/last-scan.json +28 -0
  255. package/src/sast/bench-shape/.agentic-security/scan-history.json +24 -0
  256. package/src/sast/bench-shape/.agentic-security/streak.json +22 -0
  257. package/src/sast/bench-shape/index.js +62 -0
  258. package/src/sast/claude-hook-injection.js +199 -0
  259. package/src/sast/claude-md-prompt-injection.js +170 -0
  260. package/src/sast/claude-settings.js +165 -0
  261. package/src/sast/client-side.js +149 -0
  262. package/src/sast/cpp-bench-extras.js +122 -0
  263. package/src/sast/cpp-dataflow.js +430 -0
  264. package/src/sast/cpp.js +248 -0
  265. package/src/sast/csharp.js +152 -0
  266. package/src/sast/csrf.js +82 -0
  267. package/src/sast/dart-flutter.js +173 -0
  268. package/src/sast/db-rls.js +147 -0
  269. package/src/sast/db-taint.js +215 -0
  270. package/src/sast/defi-deep.js +242 -0
  271. package/src/sast/deserialization-gadgets.js +113 -0
  272. package/src/sast/django-hardening.js +230 -0
  273. package/src/sast/env-hygiene.js +125 -0
  274. package/src/sast/fastapi-hardening.js +145 -0
  275. package/src/sast/go-extended.js +84 -0
  276. package/src/sast/host-header.js +106 -0
  277. package/src/sast/index.js +17 -0
  278. package/src/sast/java-ast-folding.js +561 -0
  279. package/src/sast/java-bench-extras.js +708 -0
  280. package/src/sast/java-collection-passthrough.js +178 -0
  281. package/src/sast/java-constant-fold.js +244 -0
  282. package/src/sast/java-deserialization.js +125 -0
  283. package/src/sast/jndi.js +104 -0
  284. package/src/sast/juliet-shape.js +324 -0
  285. package/src/sast/jwt-exp.js +104 -0
  286. package/src/sast/kotlin.js +82 -0
  287. package/src/sast/laravel-hardening.js +198 -0
  288. package/src/sast/ldap-injection.js +100 -0
  289. package/src/sast/llm-owasp.js +465 -0
  290. package/src/sast/llm-stored-prompt.js +103 -0
  291. package/src/sast/llm-trading-agent.js +161 -0
  292. package/src/sast/llm.js +308 -0
  293. package/src/sast/logic.js +140 -0
  294. package/src/sast/mass-assignment.js +101 -0
  295. package/src/sast/mcp-audit.js +242 -0
  296. package/src/sast/mobile-manifest.js +195 -0
  297. package/src/sast/model-load.js +164 -0
  298. package/src/sast/mutation-xss.js +87 -0
  299. package/src/sast/nosql-injection.js +82 -0
  300. package/src/sast/open-redirect.js +119 -0
  301. package/src/sast/php.js +91 -0
  302. package/src/sast/pipeline.js +122 -0
  303. package/src/sast/primary-cwe-java.js +155 -0
  304. package/src/sast/prompt-firewall.js +151 -0
  305. package/src/sast/prompt-template.js +157 -0
  306. package/src/sast/prototype-pollution.js +112 -0
  307. package/src/sast/python-sinks.js +195 -0
  308. package/src/sast/quarkus-hardening.js +102 -0
  309. package/src/sast/rag-poisoning.js +118 -0
  310. package/src/sast/rate-limit.js +128 -0
  311. package/src/sast/response-splitting.js +138 -0
  312. package/src/sast/ruby.js +108 -0
  313. package/src/sast/rust.js +105 -0
  314. package/src/sast/solidity.js +167 -0
  315. package/src/sast/springboot-hardening.js +186 -0
  316. package/src/sast/ssrf-cloud-metadata.js +80 -0
  317. package/src/sast/ssti.js +116 -0
  318. package/src/sast/swift.js +162 -0
  319. package/src/sast/toctou.js +95 -0
  320. package/src/sast/webhook.js +101 -0
  321. package/src/sast/xpath-injection.js +51 -0
  322. package/src/sast/xxe.js +140 -0
  323. package/src/sast/zip-slip.js +200 -0
  324. package/src/sca/base-images.json +45 -0
  325. package/src/sca/container.js +107 -0
  326. package/src/sca/dep-confusion.js +134 -0
  327. package/src/sca/index.js +6 -0
  328. package/src/sca/popular-packages.json +41 -0
  329. package/src/sca/sarif-ingest.js +187 -0
  330. package/src/sca/vuln-function-hints.json +89 -0
  331. package/src/secrets/index.js +4 -0
package/src/mcp/.agentic-security/scan-history.json ADDED
@@ -0,0 +1,1125 @@
1
+ [
2
+ {
3
+ "timestamp": "2026-05-18T21:08:19.904Z",
4
+ "label": "scan",
5
+ "total": 14,
6
+ "critical": 0,
7
+ "high": 0,
8
+ "medium": 14,
9
+ "low": 0,
10
+ "kev": 0,
11
+ "ids": [
12
+ "struct:audit.js:34:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
13
+ "struct:audit.js:36:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
14
+ "struct:audit.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
15
+ "struct:audit.js:66:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
16
+ "struct:audit.js:67:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
17
+ "struct:server.js:35:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
18
+ "struct:tools.js:140:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
19
+ "struct:tools.js:148:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
20
+ "struct:tools.js:289:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
21
+ "struct:tools.js:403:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
22
+ "struct:tools.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
23
+ "struct:tools.js:83:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
24
+ "struct:tools.js:98:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
25
+ "struct:tools.js:99:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
26
+ ]
27
+ },
28
+ {
29
+ "timestamp": "2026-05-19T00:08:13.198Z",
30
+ "label": "scan",
31
+ "total": 14,
32
+ "critical": 0,
33
+ "high": 0,
34
+ "medium": 14,
35
+ "low": 0,
36
+ "kev": 0,
37
+ "ids": [
38
+ "struct:audit.js:34:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
39
+ "struct:audit.js:36:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
40
+ "struct:audit.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
41
+ "struct:audit.js:66:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
42
+ "struct:audit.js:67:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
43
+ "struct:server.js:35:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
44
+ "struct:tools.js:140:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
45
+ "struct:tools.js:148:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
46
+ "struct:tools.js:289:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
47
+ "struct:tools.js:404:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
48
+ "struct:tools.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
49
+ "struct:tools.js:83:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
50
+ "struct:tools.js:98:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
51
+ "struct:tools.js:99:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
52
+ ]
53
+ },
54
+ {
55
+ "timestamp": "2026-05-19T20:18:42.254Z",
56
+ "label": "scan",
57
+ "total": 17,
58
+ "critical": 0,
59
+ "high": 0,
60
+ "medium": 17,
61
+ "low": 0,
62
+ "kev": 0,
63
+ "ids": [
64
+ "struct:audit.js:34:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
65
+ "struct:audit.js:36:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
66
+ "struct:audit.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
67
+ "struct:audit.js:66:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
68
+ "struct:audit.js:67:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
69
+ "struct:server.js:35:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
70
+ "struct:tools.js:113:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
71
+ "struct:tools.js:128:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
72
+ "struct:tools.js:143:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
73
+ "struct:tools.js:144:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
74
+ "struct:tools.js:185:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
75
+ "struct:tools.js:193:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
76
+ "struct:tools.js:334:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
77
+ "struct:tools.js:449:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
78
+ "toctou-fs:audit.js:34",
79
+ "toctou-fs:audit.js:66",
80
+ "toctou-fs:tools.js:113"
81
+ ]
82
+ },
83
+ {
84
+ "timestamp": "2026-05-19T20:18:51.483Z",
85
+ "label": "scan",
86
+ "total": 17,
87
+ "critical": 0,
88
+ "high": 0,
89
+ "medium": 17,
90
+ "low": 0,
91
+ "kev": 0,
92
+ "ids": [
93
+ "struct:audit.js:34:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
94
+ "struct:audit.js:36:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
95
+ "struct:audit.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
96
+ "struct:audit.js:66:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
97
+ "struct:audit.js:67:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
98
+ "struct:server.js:35:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
99
+ "struct:tools.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
100
+ "struct:tools.js:132:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
101
+ "struct:tools.js:147:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
102
+ "struct:tools.js:148:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
103
+ "struct:tools.js:189:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
104
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
105
+ "struct:tools.js:338:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
106
+ "struct:tools.js:453:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
107
+ "toctou-fs:audit.js:34",
108
+ "toctou-fs:audit.js:66",
109
+ "toctou-fs:tools.js:117"
110
+ ]
111
+ },
112
+ {
113
+ "timestamp": "2026-05-19T20:19:03.411Z",
114
+ "label": "scan",
115
+ "total": 17,
116
+ "critical": 0,
117
+ "high": 0,
118
+ "medium": 17,
119
+ "low": 0,
120
+ "kev": 0,
121
+ "ids": [
122
+ "struct:audit.js:34:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
123
+ "struct:audit.js:36:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
124
+ "struct:audit.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
125
+ "struct:audit.js:66:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
126
+ "struct:audit.js:67:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
127
+ "struct:server.js:35:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
128
+ "struct:tools.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
129
+ "struct:tools.js:132:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
130
+ "struct:tools.js:147:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
131
+ "struct:tools.js:148:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
132
+ "struct:tools.js:189:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
133
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
134
+ "struct:tools.js:338:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
135
+ "struct:tools.js:453:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
136
+ "toctou-fs:audit.js:34",
137
+ "toctou-fs:audit.js:66",
138
+ "toctou-fs:tools.js:117"
139
+ ]
140
+ },
141
+ {
142
+ "timestamp": "2026-05-19T20:19:22.417Z",
143
+ "label": "scan",
144
+ "total": 17,
145
+ "critical": 0,
146
+ "high": 0,
147
+ "medium": 17,
148
+ "low": 0,
149
+ "kev": 0,
150
+ "ids": [
151
+ "struct:audit.js:34:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
152
+ "struct:audit.js:36:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
153
+ "struct:audit.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
154
+ "struct:audit.js:66:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
155
+ "struct:audit.js:67:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
156
+ "struct:server.js:35:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
157
+ "struct:tools.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
158
+ "struct:tools.js:132:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
159
+ "struct:tools.js:147:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
160
+ "struct:tools.js:148:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
161
+ "struct:tools.js:189:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
162
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
163
+ "struct:tools.js:340:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
164
+ "struct:tools.js:455:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
165
+ "toctou-fs:audit.js:34",
166
+ "toctou-fs:audit.js:66",
167
+ "toctou-fs:tools.js:117"
168
+ ]
169
+ },
170
+ {
171
+ "timestamp": "2026-05-19T20:21:06.260Z",
172
+ "label": "scan",
173
+ "total": 18,
174
+ "critical": 0,
175
+ "high": 0,
176
+ "medium": 18,
177
+ "low": 0,
178
+ "kev": 0,
179
+ "ids": [
180
+ "struct:audit.js:34:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
181
+ "struct:audit.js:36:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
182
+ "struct:audit.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
183
+ "struct:audit.js:66:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
184
+ "struct:audit.js:67:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
185
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
186
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
187
+ "struct:tools.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
188
+ "struct:tools.js:132:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
189
+ "struct:tools.js:147:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
190
+ "struct:tools.js:148:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
191
+ "struct:tools.js:189:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
192
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
193
+ "struct:tools.js:340:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
194
+ "struct:tools.js:455:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
195
+ "toctou-fs:audit.js:34",
196
+ "toctou-fs:audit.js:66",
197
+ "toctou-fs:tools.js:117"
198
+ ]
199
+ },
200
+ {
201
+ "timestamp": "2026-05-19T21:20:12.571Z",
202
+ "label": "scan",
203
+ "total": 18,
204
+ "critical": 0,
205
+ "high": 0,
206
+ "medium": 18,
207
+ "low": 0,
208
+ "kev": 0,
209
+ "ids": [
210
+ "struct:audit.js:34:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
211
+ "struct:audit.js:36:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
212
+ "struct:audit.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
213
+ "struct:audit.js:66:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
214
+ "struct:audit.js:67:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
215
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
216
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
217
+ "struct:tools.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
218
+ "struct:tools.js:132:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
219
+ "struct:tools.js:147:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
220
+ "struct:tools.js:148:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
221
+ "struct:tools.js:189:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
222
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
223
+ "struct:tools.js:340:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
224
+ "struct:tools.js:455:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
225
+ "toctou-fs:audit.js:34",
226
+ "toctou-fs:audit.js:66",
227
+ "toctou-fs:tools.js:117"
228
+ ]
229
+ },
230
+ {
231
+ "timestamp": "2026-05-19T21:25:35.015Z",
232
+ "label": "scan",
233
+ "total": 23,
234
+ "critical": 0,
235
+ "high": 0,
236
+ "medium": 23,
237
+ "low": 0,
238
+ "kev": 0,
239
+ "ids": [
240
+ "struct:audit.js:34:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
241
+ "struct:audit.js:36:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
242
+ "struct:audit.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
243
+ "struct:audit.js:66:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
244
+ "struct:audit.js:67:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
245
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
246
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
247
+ "struct:tools.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
248
+ "struct:tools.js:132:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
249
+ "struct:tools.js:147:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
250
+ "struct:tools.js:148:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
251
+ "struct:tools.js:189:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
252
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
253
+ "struct:tools.js:340:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
254
+ "struct:tools.js:455:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
255
+ "struct:tools.js:516:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
256
+ "struct:tools.js:518:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
257
+ "struct:tools.js:523:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
258
+ "struct:tools.js:526:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
259
+ "toctou-fs:audit.js:34",
260
+ "toctou-fs:audit.js:66",
261
+ "toctou-fs:tools.js:117",
262
+ "toctou-fs:tools.js:523"
263
+ ]
264
+ },
265
+ {
266
+ "timestamp": "2026-05-19T21:25:45.592Z",
267
+ "label": "scan",
268
+ "total": 23,
269
+ "critical": 0,
270
+ "high": 0,
271
+ "medium": 23,
272
+ "low": 0,
273
+ "kev": 0,
274
+ "ids": [
275
+ "struct:audit.js:34:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
276
+ "struct:audit.js:36:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
277
+ "struct:audit.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
278
+ "struct:audit.js:66:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
279
+ "struct:audit.js:67:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
280
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
281
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
282
+ "struct:tools.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
283
+ "struct:tools.js:132:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
284
+ "struct:tools.js:147:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
285
+ "struct:tools.js:148:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
286
+ "struct:tools.js:189:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
287
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
288
+ "struct:tools.js:340:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
289
+ "struct:tools.js:455:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
290
+ "struct:tools.js:516:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
291
+ "struct:tools.js:518:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
292
+ "struct:tools.js:523:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
293
+ "struct:tools.js:526:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
294
+ "toctou-fs:audit.js:34",
295
+ "toctou-fs:audit.js:66",
296
+ "toctou-fs:tools.js:117",
297
+ "toctou-fs:tools.js:523"
298
+ ]
299
+ },
300
+ {
301
+ "timestamp": "2026-05-19T21:26:27.903Z",
302
+ "label": "scan",
303
+ "total": 23,
304
+ "critical": 0,
305
+ "high": 0,
306
+ "medium": 23,
307
+ "low": 0,
308
+ "kev": 0,
309
+ "ids": [
310
+ "struct:audit.js:34:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
311
+ "struct:audit.js:36:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
312
+ "struct:audit.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
313
+ "struct:audit.js:66:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
314
+ "struct:audit.js:67:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
315
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
316
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
317
+ "struct:tools.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
318
+ "struct:tools.js:132:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
319
+ "struct:tools.js:147:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
320
+ "struct:tools.js:148:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
321
+ "struct:tools.js:189:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
322
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
323
+ "struct:tools.js:340:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
324
+ "struct:tools.js:455:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
325
+ "struct:tools.js:523:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
326
+ "struct:tools.js:525:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
327
+ "struct:tools.js:530:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
328
+ "struct:tools.js:533:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
329
+ "toctou-fs:audit.js:34",
330
+ "toctou-fs:audit.js:66",
331
+ "toctou-fs:tools.js:117",
332
+ "toctou-fs:tools.js:530"
333
+ ]
334
+ },
335
+ {
336
+ "timestamp": "2026-05-19T21:26:39.195Z",
337
+ "label": "scan",
338
+ "total": 23,
339
+ "critical": 0,
340
+ "high": 0,
341
+ "medium": 23,
342
+ "low": 0,
343
+ "kev": 0,
344
+ "ids": [
345
+ "struct:audit.js:34:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
346
+ "struct:audit.js:36:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
347
+ "struct:audit.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
348
+ "struct:audit.js:66:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
349
+ "struct:audit.js:67:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
350
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
351
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
352
+ "struct:tools.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
353
+ "struct:tools.js:132:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
354
+ "struct:tools.js:147:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
355
+ "struct:tools.js:148:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
356
+ "struct:tools.js:189:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
357
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
358
+ "struct:tools.js:340:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
359
+ "struct:tools.js:455:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
360
+ "struct:tools.js:523:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
361
+ "struct:tools.js:525:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
362
+ "struct:tools.js:530:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
363
+ "struct:tools.js:533:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
364
+ "toctou-fs:audit.js:34",
365
+ "toctou-fs:audit.js:66",
366
+ "toctou-fs:tools.js:117",
367
+ "toctou-fs:tools.js:530"
368
+ ]
369
+ },
370
+ {
371
+ "timestamp": "2026-05-19T21:28:12.702Z",
372
+ "label": "scan",
373
+ "total": 23,
374
+ "critical": 0,
375
+ "high": 0,
376
+ "medium": 23,
377
+ "low": 0,
378
+ "kev": 0,
379
+ "ids": [
380
+ "struct:audit.js:34:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
381
+ "struct:audit.js:36:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
382
+ "struct:audit.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
383
+ "struct:audit.js:66:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
384
+ "struct:audit.js:67:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
385
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
386
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
387
+ "struct:tools.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
388
+ "struct:tools.js:132:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
389
+ "struct:tools.js:147:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
390
+ "struct:tools.js:148:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
391
+ "struct:tools.js:189:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
392
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
393
+ "struct:tools.js:340:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
394
+ "struct:tools.js:455:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
395
+ "struct:tools.js:530:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
396
+ "struct:tools.js:532:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
397
+ "struct:tools.js:537:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
398
+ "struct:tools.js:540:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
399
+ "toctou-fs:audit.js:34",
400
+ "toctou-fs:audit.js:66",
401
+ "toctou-fs:tools.js:117",
402
+ "toctou-fs:tools.js:537"
403
+ ]
404
+ },
405
+ {
406
+ "timestamp": "2026-05-19T21:52:27.325Z",
407
+ "label": "scan",
408
+ "total": 23,
409
+ "critical": 0,
410
+ "high": 0,
411
+ "medium": 23,
412
+ "low": 0,
413
+ "kev": 0,
414
+ "ids": [
415
+ "struct:audit.js:34:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
416
+ "struct:audit.js:36:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
417
+ "struct:audit.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
418
+ "struct:audit.js:66:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
419
+ "struct:audit.js:67:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
420
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
421
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
422
+ "struct:tools.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
423
+ "struct:tools.js:132:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
424
+ "struct:tools.js:147:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
425
+ "struct:tools.js:148:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
426
+ "struct:tools.js:189:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
427
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
428
+ "struct:tools.js:355:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
429
+ "struct:tools.js:470:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
430
+ "struct:tools.js:545:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
431
+ "struct:tools.js:547:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
432
+ "struct:tools.js:552:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
433
+ "struct:tools.js:555:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
434
+ "toctou-fs:audit.js:34",
435
+ "toctou-fs:audit.js:66",
436
+ "toctou-fs:tools.js:117",
437
+ "toctou-fs:tools.js:552"
438
+ ]
439
+ },
440
+ {
441
+ "timestamp": "2026-05-19T21:53:39.250Z",
442
+ "label": "scan",
443
+ "total": 23,
444
+ "critical": 0,
445
+ "high": 0,
446
+ "medium": 23,
447
+ "low": 0,
448
+ "kev": 0,
449
+ "ids": [
450
+ "struct:audit.js:34:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
451
+ "struct:audit.js:36:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
452
+ "struct:audit.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
453
+ "struct:audit.js:66:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
454
+ "struct:audit.js:67:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
455
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
456
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
457
+ "struct:tools.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
458
+ "struct:tools.js:132:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
459
+ "struct:tools.js:147:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
460
+ "struct:tools.js:148:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
461
+ "struct:tools.js:189:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
462
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
463
+ "struct:tools.js:355:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
464
+ "struct:tools.js:490:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
465
+ "struct:tools.js:565:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
466
+ "struct:tools.js:567:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
467
+ "struct:tools.js:572:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
468
+ "struct:tools.js:575:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
469
+ "toctou-fs:audit.js:34",
470
+ "toctou-fs:audit.js:66",
471
+ "toctou-fs:tools.js:117",
472
+ "toctou-fs:tools.js:572"
473
+ ]
474
+ },
475
+ {
476
+ "timestamp": "2026-05-19T21:57:16.356Z",
477
+ "label": "scan",
478
+ "total": 23,
479
+ "critical": 0,
480
+ "high": 0,
481
+ "medium": 23,
482
+ "low": 0,
483
+ "kev": 0,
484
+ "ids": [
485
+ "struct:audit.js:45:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
486
+ "struct:audit.js:47:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
487
+ "struct:audit.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
488
+ "struct:audit.js:77:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
489
+ "struct:audit.js:78:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
490
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
491
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
492
+ "struct:tools.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
493
+ "struct:tools.js:132:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
494
+ "struct:tools.js:147:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
495
+ "struct:tools.js:148:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
496
+ "struct:tools.js:189:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
497
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
498
+ "struct:tools.js:355:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
499
+ "struct:tools.js:490:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
500
+ "struct:tools.js:565:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
501
+ "struct:tools.js:567:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
502
+ "struct:tools.js:572:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
503
+ "struct:tools.js:575:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
504
+ "toctou-fs:audit.js:45",
505
+ "toctou-fs:audit.js:77",
506
+ "toctou-fs:tools.js:117",
507
+ "toctou-fs:tools.js:572"
508
+ ]
509
+ },
510
+ {
511
+ "timestamp": "2026-05-19T21:57:31.768Z",
512
+ "label": "scan",
513
+ "total": 24,
514
+ "critical": 0,
515
+ "high": 0,
516
+ "medium": 24,
517
+ "low": 0,
518
+ "kev": 0,
519
+ "ids": [
520
+ "struct:audit.js:100:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
521
+ "struct:audit.js:114:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
522
+ "struct:audit.js:115:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
523
+ "struct:audit.js:45:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
524
+ "struct:audit.js:47:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
525
+ "struct:audit.js:89:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
526
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
527
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
528
+ "struct:tools.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
529
+ "struct:tools.js:132:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
530
+ "struct:tools.js:147:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
531
+ "struct:tools.js:148:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
532
+ "struct:tools.js:189:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
533
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
534
+ "struct:tools.js:355:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
535
+ "struct:tools.js:490:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
536
+ "struct:tools.js:565:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
537
+ "struct:tools.js:567:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
538
+ "struct:tools.js:572:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
539
+ "struct:tools.js:575:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
540
+ "toctou-fs:audit.js:114",
541
+ "toctou-fs:audit.js:45",
542
+ "toctou-fs:tools.js:117",
543
+ "toctou-fs:tools.js:572"
544
+ ]
545
+ },
546
+ {
547
+ "timestamp": "2026-05-19T21:57:38.971Z",
548
+ "label": "scan",
549
+ "total": 24,
550
+ "critical": 0,
551
+ "high": 0,
552
+ "medium": 24,
553
+ "low": 0,
554
+ "kev": 0,
555
+ "ids": [
556
+ "struct:audit.js:100:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
557
+ "struct:audit.js:114:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
558
+ "struct:audit.js:115:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
559
+ "struct:audit.js:45:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
560
+ "struct:audit.js:47:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
561
+ "struct:audit.js:89:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
562
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
563
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
564
+ "struct:tools.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
565
+ "struct:tools.js:132:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
566
+ "struct:tools.js:147:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
567
+ "struct:tools.js:148:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
568
+ "struct:tools.js:189:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
569
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
570
+ "struct:tools.js:355:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
571
+ "struct:tools.js:490:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
572
+ "struct:tools.js:565:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
573
+ "struct:tools.js:567:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
574
+ "struct:tools.js:572:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
575
+ "struct:tools.js:575:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
576
+ "toctou-fs:audit.js:114",
577
+ "toctou-fs:audit.js:45",
578
+ "toctou-fs:tools.js:117",
579
+ "toctou-fs:tools.js:572"
580
+ ]
581
+ },
582
+ {
583
+ "timestamp": "2026-05-19T22:46:30.520Z",
584
+ "label": "scan",
585
+ "total": 27,
586
+ "critical": 0,
587
+ "high": 0,
588
+ "medium": 27,
589
+ "low": 0,
590
+ "kev": 0,
591
+ "ids": [
592
+ "struct:audit.js:100:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
593
+ "struct:audit.js:114:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
594
+ "struct:audit.js:115:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
595
+ "struct:audit.js:45:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
596
+ "struct:audit.js:47:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
597
+ "struct:audit.js:89:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
598
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
599
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
600
+ "struct:tools.js:145:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
601
+ "struct:tools.js:149:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
602
+ "struct:tools.js:153:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
603
+ "struct:tools.js:182:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
604
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
605
+ "struct:tools.js:212:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
606
+ "struct:tools.js:213:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
607
+ "struct:tools.js:254:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
608
+ "struct:tools.js:262:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
609
+ "struct:tools.js:420:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
610
+ "struct:tools.js:555:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
611
+ "struct:tools.js:630:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
612
+ "struct:tools.js:632:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
613
+ "struct:tools.js:637:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
614
+ "struct:tools.js:640:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
615
+ "toctou-fs:audit.js:114",
616
+ "toctou-fs:audit.js:45",
617
+ "toctou-fs:tools.js:182",
618
+ "toctou-fs:tools.js:637"
619
+ ]
620
+ },
621
+ {
622
+ "timestamp": "2026-05-19T22:47:05.626Z",
623
+ "label": "scan",
624
+ "total": 32,
625
+ "critical": 0,
626
+ "high": 0,
627
+ "medium": 32,
628
+ "low": 0,
629
+ "kev": 0,
630
+ "ids": [
631
+ "struct:audit.js:100:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
632
+ "struct:audit.js:114:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
633
+ "struct:audit.js:115:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
634
+ "struct:audit.js:45:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
635
+ "struct:audit.js:47:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
636
+ "struct:audit.js:89:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
637
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
638
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
639
+ "struct:tools.js:145:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
640
+ "struct:tools.js:149:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
641
+ "struct:tools.js:153:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
642
+ "struct:tools.js:182:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
643
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
644
+ "struct:tools.js:212:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
645
+ "struct:tools.js:213:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
646
+ "struct:tools.js:254:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
647
+ "struct:tools.js:262:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
648
+ "struct:tools.js:420:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
649
+ "struct:tools.js:555:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
650
+ "struct:tools.js:630:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
651
+ "struct:tools.js:632:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
652
+ "struct:tools.js:637:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
653
+ "struct:tools.js:640:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
654
+ "struct:tools.js:719:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
655
+ "struct:tools.js:728:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
656
+ "struct:tools.js:757:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
657
+ "struct:tools.js:759:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
658
+ "toctou-fs:audit.js:114",
659
+ "toctou-fs:audit.js:45",
660
+ "toctou-fs:tools.js:182",
661
+ "toctou-fs:tools.js:637",
662
+ "toctou-fs:tools.js:719"
663
+ ]
664
+ },
665
+ {
666
+ "timestamp": "2026-05-19T22:49:49.179Z",
667
+ "label": "scan",
668
+ "total": 34,
669
+ "critical": 0,
670
+ "high": 0,
671
+ "medium": 34,
672
+ "low": 0,
673
+ "kev": 0,
674
+ "ids": [
675
+ "struct:audit.js:100:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
676
+ "struct:audit.js:114:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
677
+ "struct:audit.js:115:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
678
+ "struct:audit.js:45:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
679
+ "struct:audit.js:47:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
680
+ "struct:audit.js:89:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
681
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
682
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
683
+ "struct:tools.js:145:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
684
+ "struct:tools.js:149:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
685
+ "struct:tools.js:153:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
686
+ "struct:tools.js:182:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
687
+ "struct:tools.js:197:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
688
+ "struct:tools.js:212:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
689
+ "struct:tools.js:213:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
690
+ "struct:tools.js:265:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
691
+ "struct:tools.js:304:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
692
+ "struct:tools.js:312:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
693
+ "struct:tools.js:470:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
694
+ "struct:tools.js:605:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
695
+ "struct:tools.js:680:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
696
+ "struct:tools.js:682:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
697
+ "struct:tools.js:687:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
698
+ "struct:tools.js:690:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
699
+ "struct:tools.js:769:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
700
+ "struct:tools.js:778:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
701
+ "struct:tools.js:807:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
702
+ "struct:tools.js:809:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
703
+ "toctou-fs:audit.js:114",
704
+ "toctou-fs:audit.js:45",
705
+ "toctou-fs:tools.js:182",
706
+ "toctou-fs:tools.js:304",
707
+ "toctou-fs:tools.js:687",
708
+ "toctou-fs:tools.js:769"
709
+ ]
710
+ },
711
+ {
712
+ "timestamp": "2026-05-19T22:50:07.374Z",
713
+ "label": "scan",
714
+ "total": 34,
715
+ "critical": 0,
716
+ "high": 0,
717
+ "medium": 34,
718
+ "low": 0,
719
+ "kev": 0,
720
+ "ids": [
721
+ "struct:audit.js:100:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
722
+ "struct:audit.js:114:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
723
+ "struct:audit.js:115:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
724
+ "struct:audit.js:45:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
725
+ "struct:audit.js:47:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
726
+ "struct:audit.js:89:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
727
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
728
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
729
+ "struct:tools.js:146:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
730
+ "struct:tools.js:150:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
731
+ "struct:tools.js:154:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
732
+ "struct:tools.js:183:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
733
+ "struct:tools.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
734
+ "struct:tools.js:213:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
735
+ "struct:tools.js:214:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
736
+ "struct:tools.js:266:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
737
+ "struct:tools.js:305:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
738
+ "struct:tools.js:313:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
739
+ "struct:tools.js:471:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
740
+ "struct:tools.js:606:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
741
+ "struct:tools.js:681:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
742
+ "struct:tools.js:683:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
743
+ "struct:tools.js:688:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
744
+ "struct:tools.js:691:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
745
+ "struct:tools.js:770:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
746
+ "struct:tools.js:779:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
747
+ "struct:tools.js:808:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
748
+ "struct:tools.js:810:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
749
+ "toctou-fs:audit.js:114",
750
+ "toctou-fs:audit.js:45",
751
+ "toctou-fs:tools.js:183",
752
+ "toctou-fs:tools.js:305",
753
+ "toctou-fs:tools.js:688",
754
+ "toctou-fs:tools.js:770"
755
+ ]
756
+ },
757
+ {
758
+ "timestamp": "2026-05-19T22:50:28.102Z",
759
+ "label": "scan",
760
+ "total": 34,
761
+ "critical": 0,
762
+ "high": 0,
763
+ "medium": 34,
764
+ "low": 0,
765
+ "kev": 0,
766
+ "ids": [
767
+ "struct:audit.js:100:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
768
+ "struct:audit.js:114:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
769
+ "struct:audit.js:115:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
770
+ "struct:audit.js:45:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
771
+ "struct:audit.js:47:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
772
+ "struct:audit.js:89:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
773
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
774
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
775
+ "struct:tools.js:146:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
776
+ "struct:tools.js:150:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
777
+ "struct:tools.js:154:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
778
+ "struct:tools.js:183:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
779
+ "struct:tools.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
780
+ "struct:tools.js:213:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
781
+ "struct:tools.js:214:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
782
+ "struct:tools.js:266:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
783
+ "struct:tools.js:305:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
784
+ "struct:tools.js:313:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
785
+ "struct:tools.js:487:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
786
+ "struct:tools.js:622:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
787
+ "struct:tools.js:697:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
788
+ "struct:tools.js:699:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
789
+ "struct:tools.js:704:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
790
+ "struct:tools.js:707:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
791
+ "struct:tools.js:786:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
792
+ "struct:tools.js:795:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
793
+ "struct:tools.js:824:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
794
+ "struct:tools.js:826:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
795
+ "toctou-fs:audit.js:114",
796
+ "toctou-fs:audit.js:45",
797
+ "toctou-fs:tools.js:183",
798
+ "toctou-fs:tools.js:305",
799
+ "toctou-fs:tools.js:704",
800
+ "toctou-fs:tools.js:786"
801
+ ]
802
+ },
803
+ {
804
+ "timestamp": "2026-05-19T22:50:58.488Z",
805
+ "label": "scan",
806
+ "total": 34,
807
+ "critical": 0,
808
+ "high": 0,
809
+ "medium": 34,
810
+ "low": 0,
811
+ "kev": 0,
812
+ "ids": [
813
+ "struct:audit.js:100:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
814
+ "struct:audit.js:114:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
815
+ "struct:audit.js:115:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
816
+ "struct:audit.js:45:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
817
+ "struct:audit.js:47:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
818
+ "struct:audit.js:89:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
819
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
820
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
821
+ "struct:tools.js:146:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
822
+ "struct:tools.js:150:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
823
+ "struct:tools.js:154:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
824
+ "struct:tools.js:183:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
825
+ "struct:tools.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
826
+ "struct:tools.js:213:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
827
+ "struct:tools.js:214:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
828
+ "struct:tools.js:266:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
829
+ "struct:tools.js:305:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
830
+ "struct:tools.js:313:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
831
+ "struct:tools.js:506:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
832
+ "struct:tools.js:641:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
833
+ "struct:tools.js:716:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
834
+ "struct:tools.js:718:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
835
+ "struct:tools.js:723:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
836
+ "struct:tools.js:726:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
837
+ "struct:tools.js:805:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
838
+ "struct:tools.js:814:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
839
+ "struct:tools.js:843:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
840
+ "struct:tools.js:845:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
841
+ "toctou-fs:audit.js:114",
842
+ "toctou-fs:audit.js:45",
843
+ "toctou-fs:tools.js:183",
844
+ "toctou-fs:tools.js:305",
845
+ "toctou-fs:tools.js:723",
846
+ "toctou-fs:tools.js:805"
847
+ ]
848
+ },
849
+ {
850
+ "timestamp": "2026-05-19T22:53:00.859Z",
851
+ "label": "scan",
852
+ "total": 34,
853
+ "critical": 0,
854
+ "high": 0,
855
+ "medium": 34,
856
+ "low": 0,
857
+ "kev": 0,
858
+ "ids": [
859
+ "struct:audit.js:100:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
860
+ "struct:audit.js:114:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
861
+ "struct:audit.js:115:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
862
+ "struct:audit.js:45:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
863
+ "struct:audit.js:47:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
864
+ "struct:audit.js:89:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
865
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
866
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
867
+ "struct:tools.js:146:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
868
+ "struct:tools.js:150:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
869
+ "struct:tools.js:154:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
870
+ "struct:tools.js:183:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
871
+ "struct:tools.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
872
+ "struct:tools.js:213:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
873
+ "struct:tools.js:214:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
874
+ "struct:tools.js:266:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
875
+ "struct:tools.js:305:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
876
+ "struct:tools.js:313:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
877
+ "struct:tools.js:506:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
878
+ "struct:tools.js:641:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
879
+ "struct:tools.js:716:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
880
+ "struct:tools.js:718:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
881
+ "struct:tools.js:723:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
882
+ "struct:tools.js:726:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
883
+ "struct:tools.js:805:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
884
+ "struct:tools.js:814:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
885
+ "struct:tools.js:843:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
886
+ "struct:tools.js:845:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
887
+ "toctou-fs:audit.js:114",
888
+ "toctou-fs:audit.js:45",
889
+ "toctou-fs:tools.js:183",
890
+ "toctou-fs:tools.js:305",
891
+ "toctou-fs:tools.js:723",
892
+ "toctou-fs:tools.js:805"
893
+ ]
894
+ },
895
+ {
896
+ "timestamp": "2026-05-19T22:59:41.672Z",
897
+ "label": "scan",
898
+ "total": 34,
899
+ "critical": 0,
900
+ "high": 0,
901
+ "medium": 34,
902
+ "low": 0,
903
+ "kev": 0,
904
+ "ids": [
905
+ "struct:audit.js:107:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
906
+ "struct:audit.js:121:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
907
+ "struct:audit.js:122:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
908
+ "struct:audit.js:52:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
909
+ "struct:audit.js:54:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
910
+ "struct:audit.js:96:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
911
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
912
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
913
+ "struct:tools.js:146:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
914
+ "struct:tools.js:150:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
915
+ "struct:tools.js:154:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
916
+ "struct:tools.js:183:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
917
+ "struct:tools.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
918
+ "struct:tools.js:213:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
919
+ "struct:tools.js:214:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
920
+ "struct:tools.js:266:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
921
+ "struct:tools.js:305:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
922
+ "struct:tools.js:313:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
923
+ "struct:tools.js:506:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
924
+ "struct:tools.js:641:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
925
+ "struct:tools.js:716:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
926
+ "struct:tools.js:718:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
927
+ "struct:tools.js:723:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
928
+ "struct:tools.js:726:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
929
+ "struct:tools.js:805:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
930
+ "struct:tools.js:814:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
931
+ "struct:tools.js:843:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
932
+ "struct:tools.js:845:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
933
+ "toctou-fs:audit.js:121",
934
+ "toctou-fs:audit.js:52",
935
+ "toctou-fs:tools.js:183",
936
+ "toctou-fs:tools.js:305",
937
+ "toctou-fs:tools.js:723",
938
+ "toctou-fs:tools.js:805"
939
+ ]
940
+ },
941
+ {
942
+ "timestamp": "2026-05-19T22:59:48.611Z",
943
+ "label": "scan",
944
+ "total": 34,
945
+ "critical": 0,
946
+ "high": 0,
947
+ "medium": 34,
948
+ "low": 0,
949
+ "kev": 0,
950
+ "ids": [
951
+ "struct:audit.js:108:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
952
+ "struct:audit.js:122:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
953
+ "struct:audit.js:123:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
954
+ "struct:audit.js:52:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
955
+ "struct:audit.js:54:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
956
+ "struct:audit.js:97:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
957
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
958
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
959
+ "struct:tools.js:146:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
960
+ "struct:tools.js:150:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
961
+ "struct:tools.js:154:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
962
+ "struct:tools.js:183:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
963
+ "struct:tools.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
964
+ "struct:tools.js:213:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
965
+ "struct:tools.js:214:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
966
+ "struct:tools.js:266:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
967
+ "struct:tools.js:305:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
968
+ "struct:tools.js:313:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
969
+ "struct:tools.js:506:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
970
+ "struct:tools.js:641:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
971
+ "struct:tools.js:716:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
972
+ "struct:tools.js:718:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
973
+ "struct:tools.js:723:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
974
+ "struct:tools.js:726:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
975
+ "struct:tools.js:805:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
976
+ "struct:tools.js:814:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
977
+ "struct:tools.js:843:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
978
+ "struct:tools.js:845:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
979
+ "toctou-fs:audit.js:122",
980
+ "toctou-fs:audit.js:52",
981
+ "toctou-fs:tools.js:183",
982
+ "toctou-fs:tools.js:305",
983
+ "toctou-fs:tools.js:723",
984
+ "toctou-fs:tools.js:805"
985
+ ]
986
+ },
987
+ {
988
+ "timestamp": "2026-05-19T23:02:47.712Z",
989
+ "label": "scan",
990
+ "total": 34,
991
+ "critical": 0,
992
+ "high": 0,
993
+ "medium": 34,
994
+ "low": 0,
995
+ "kev": 0,
996
+ "ids": [
997
+ "struct:audit.js:108:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
998
+ "struct:audit.js:122:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
999
+ "struct:audit.js:123:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1000
+ "struct:audit.js:52:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1001
+ "struct:audit.js:54:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1002
+ "struct:audit.js:97:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1003
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1004
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1005
+ "struct:tools.js:146:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1006
+ "struct:tools.js:150:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1007
+ "struct:tools.js:154:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1008
+ "struct:tools.js:183:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1009
+ "struct:tools.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1010
+ "struct:tools.js:213:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1011
+ "struct:tools.js:214:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1012
+ "struct:tools.js:266:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1013
+ "struct:tools.js:305:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1014
+ "struct:tools.js:313:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1015
+ "struct:tools.js:506:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1016
+ "struct:tools.js:641:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1017
+ "struct:tools.js:716:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1018
+ "struct:tools.js:718:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1019
+ "struct:tools.js:723:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1020
+ "struct:tools.js:726:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1021
+ "struct:tools.js:805:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1022
+ "struct:tools.js:814:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1023
+ "struct:tools.js:843:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1024
+ "struct:tools.js:845:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1025
+ "toctou-fs:audit.js:122",
1026
+ "toctou-fs:audit.js:52",
1027
+ "toctou-fs:tools.js:183",
1028
+ "toctou-fs:tools.js:305",
1029
+ "toctou-fs:tools.js:723",
1030
+ "toctou-fs:tools.js:805"
1031
+ ]
1032
+ },
1033
+ {
1034
+ "timestamp": "2026-05-19T23:02:59.075Z",
1035
+ "label": "scan",
1036
+ "total": 34,
1037
+ "critical": 0,
1038
+ "high": 0,
1039
+ "medium": 34,
1040
+ "low": 0,
1041
+ "kev": 0,
1042
+ "ids": [
1043
+ "struct:audit.js:108:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1044
+ "struct:audit.js:122:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1045
+ "struct:audit.js:123:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1046
+ "struct:audit.js:52:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1047
+ "struct:audit.js:54:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1048
+ "struct:audit.js:97:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1049
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1050
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1051
+ "struct:tools.js:146:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1052
+ "struct:tools.js:150:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1053
+ "struct:tools.js:154:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1054
+ "struct:tools.js:183:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1055
+ "struct:tools.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1056
+ "struct:tools.js:213:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1057
+ "struct:tools.js:214:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1058
+ "struct:tools.js:266:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1059
+ "struct:tools.js:305:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1060
+ "struct:tools.js:313:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1061
+ "struct:tools.js:506:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1062
+ "struct:tools.js:641:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1063
+ "struct:tools.js:716:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1064
+ "struct:tools.js:718:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1065
+ "struct:tools.js:723:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1066
+ "struct:tools.js:726:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1067
+ "struct:tools.js:805:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1068
+ "struct:tools.js:814:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1069
+ "struct:tools.js:843:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1070
+ "struct:tools.js:845:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1071
+ "toctou-fs:audit.js:122",
1072
+ "toctou-fs:audit.js:52",
1073
+ "toctou-fs:tools.js:183",
1074
+ "toctou-fs:tools.js:305",
1075
+ "toctou-fs:tools.js:723",
1076
+ "toctou-fs:tools.js:805"
1077
+ ]
1078
+ },
1079
+ {
1080
+ "timestamp": "2026-05-19T23:06:35.133Z",
1081
+ "label": "scan",
1082
+ "total": 34,
1083
+ "critical": 0,
1084
+ "high": 0,
1085
+ "medium": 34,
1086
+ "low": 0,
1087
+ "kev": 0,
1088
+ "ids": [
1089
+ "struct:audit.js:108:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1090
+ "struct:audit.js:122:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1091
+ "struct:audit.js:123:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1092
+ "struct:audit.js:52:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1093
+ "struct:audit.js:54:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1094
+ "struct:audit.js:97:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1095
+ "struct:server.js:32:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1096
+ "struct:server.js:49:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1097
+ "struct:tools.js:146:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1098
+ "struct:tools.js:150:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1099
+ "struct:tools.js:154:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1100
+ "struct:tools.js:183:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1101
+ "struct:tools.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1102
+ "struct:tools.js:213:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1103
+ "struct:tools.js:214:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1104
+ "struct:tools.js:266:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1105
+ "struct:tools.js:305:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1106
+ "struct:tools.js:313:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1107
+ "struct:tools.js:506:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1108
+ "struct:tools.js:641:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1109
+ "struct:tools.js:716:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1110
+ "struct:tools.js:718:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1111
+ "struct:tools.js:723:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1112
+ "struct:tools.js:726:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1113
+ "struct:tools.js:805:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1114
+ "struct:tools.js:814:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1115
+ "struct:tools.js:843:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1116
+ "struct:tools.js:845:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
1117
+ "toctou-fs:audit.js:122",
1118
+ "toctou-fs:audit.js:52",
1119
+ "toctou-fs:tools.js:183",
1120
+ "toctou-fs:tools.js:305",
1121
+ "toctou-fs:tools.js:723",
1122
+ "toctou-fs:tools.js:805"
1123
+ ]
1124
+ }
1125
+ ]