@clear-capabilities/agentic-security-scanner 0.76.1 → 0.78.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (108) hide show
  1. package/bin/.agentic-security/findings.json +320 -9
  2. package/bin/.agentic-security/last-scan.json +320 -9
  3. package/bin/.agentic-security/last-scan.json.sig +1 -1
  4. package/bin/.agentic-security/scan-history.json +17 -377
  5. package/bin/.agentic-security/streak.json +11 -16
  6. package/bin/agentic-security.js +33 -2
  7. package/dist/178.index.js +1 -1
  8. package/dist/384.index.js +1 -1
  9. package/dist/637.index.js +1 -1
  10. package/dist/718.index.js +106 -0
  11. package/dist/824.index.js +126 -0
  12. package/dist/838.index.js +1 -1
  13. package/dist/agentic-security.mjs +32 -32
  14. package/dist/agentic-security.mjs.sha256 +1 -1
  15. package/package.json +7 -7
  16. package/src/.agentic-security/findings.json +5731 -3933
  17. package/src/.agentic-security/last-scan.json +5731 -3933
  18. package/src/.agentic-security/last-scan.json.sig +1 -1
  19. package/src/.agentic-security/scan-history.json +2533 -887
  20. package/src/.agentic-security/streak.json +11 -16
  21. package/src/dataflow/.agentic-security/findings.json +52 -24
  22. package/src/dataflow/.agentic-security/last-scan.json +52 -24
  23. package/src/dataflow/.agentic-security/last-scan.json.sig +1 -1
  24. package/src/dataflow/.agentic-security/scan-history.json +101 -134
  25. package/src/dataflow/.agentic-security/streak.json +8 -10
  26. package/src/dataflow/async-sequencing.js +16 -7
  27. package/src/dataflow/builtin-summaries.js +131 -0
  28. package/src/dataflow/catalog.js +107 -0
  29. package/src/dataflow/cross-repo.js +75 -1
  30. package/src/dataflow/engine.js +129 -0
  31. package/src/dataflow/implicit-flow.js +24 -6
  32. package/src/dataflow/stub-aware-filter.js +69 -11
  33. package/src/dataflow/summaries.js +28 -3
  34. package/src/engine-parallel.js +70 -0
  35. package/src/engine.js +165 -15
  36. package/src/ir/.agentic-security/findings.json +757 -16
  37. package/src/ir/.agentic-security/last-scan.json +757 -16
  38. package/src/ir/.agentic-security/last-scan.json.sig +1 -1
  39. package/src/ir/.agentic-security/scan-history.json +545 -138
  40. package/src/ir/.agentic-security/streak.json +11 -13
  41. package/src/ir/index.js +22 -1
  42. package/src/ir/parser-go.js +403 -0
  43. package/src/ir/parser-js.js +2 -0
  44. package/src/ir/parser-php.js +330 -0
  45. package/src/ir/parser-py.helper.py +137 -11
  46. package/src/ir/parser-rb.js +309 -0
  47. package/src/posture/.agentic-security/findings.json +407 -84
  48. package/src/posture/.agentic-security/last-scan.json +407 -84
  49. package/src/posture/.agentic-security/last-scan.json.sig +1 -1
  50. package/src/posture/.agentic-security/scan-history.json +16 -4923
  51. package/src/posture/.agentic-security/streak.json +10 -14
  52. package/src/posture/calibration.js +14 -0
  53. package/src/posture/triage.js +13 -0
  54. package/src/report/.agentic-security/findings.json +6 -5
  55. package/src/report/.agentic-security/last-scan.json +6 -5
  56. package/src/report/.agentic-security/last-scan.json.sig +1 -1
  57. package/src/report/.agentic-security/scan-history.json +3 -300
  58. package/src/report/.agentic-security/streak.json +7 -8
  59. package/src/report/index.js +23 -2
  60. package/src/sast/.agentic-security/findings.json +195 -56
  61. package/src/sast/.agentic-security/last-scan.json +195 -56
  62. package/src/sast/.agentic-security/last-scan.json.sig +1 -1
  63. package/src/sast/.agentic-security/scan-history.json +14 -394
  64. package/src/sast/.agentic-security/streak.json +10 -13
  65. package/src/sast/cache-poisoning.js +77 -0
  66. package/src/sast/comparison-safety.js +73 -0
  67. package/src/sast/db-taint.js +54 -0
  68. package/src/sast/graphql.js +127 -0
  69. package/src/sast/llm-stored-prompt.js +57 -0
  70. package/src/sast/mutation-xss.js +43 -0
  71. package/src/sast/nosql-injection.js +5 -0
  72. package/src/sast/null-byte-injection.js +76 -0
  73. package/src/sast/redos-nfa.js +338 -0
  74. package/src/sast/sensitive-data-logging.js +73 -0
  75. package/src/sast/weak-password-hash.js +77 -0
  76. package/src/sast/weak-randomness.js +100 -0
  77. package/src/sca/.agentic-security/findings.json +502 -11
  78. package/src/sca/.agentic-security/last-scan.json +502 -11
  79. package/src/sca/.agentic-security/last-scan.json.sig +1 -1
  80. package/src/sca/.agentic-security/scan-history.json +19 -1
  81. package/src/sca/.agentic-security/streak.json +6 -6
  82. package/src/sca/llm-function-extract.js +107 -0
  83. package/src/sca/vendor-detect.js +91 -0
  84. package/dist/218.index.js +0 -793
  85. package/dist/601.index.js +0 -1038
  86. package/dist/634.index.js +0 -1892
  87. package/src/integrations/.agentic-security/findings.json +0 -1504
  88. package/src/integrations/.agentic-security/last-scan.json +0 -1504
  89. package/src/integrations/.agentic-security/scan-history.json +0 -40
  90. package/src/integrations/.agentic-security/streak.json +0 -21
  91. package/src/llm-validator/.agentic-security/findings.json +0 -1891
  92. package/src/llm-validator/.agentic-security/last-scan.json +0 -1891
  93. package/src/llm-validator/.agentic-security/last-scan.json.sig +0 -1
  94. package/src/llm-validator/.agentic-security/scan-history.json +0 -168
  95. package/src/llm-validator/.agentic-security/streak.json +0 -20
  96. package/src/lsp/.agentic-security/findings.json +0 -28
  97. package/src/lsp/.agentic-security/last-scan.json +0 -28
  98. package/src/lsp/.agentic-security/scan-history.json +0 -79
  99. package/src/lsp/.agentic-security/streak.json +0 -22
  100. package/src/mcp/.agentic-security/findings.json +0 -8403
  101. package/src/mcp/.agentic-security/last-scan.json +0 -8403
  102. package/src/mcp/.agentic-security/last-scan.json.sig +0 -1
  103. package/src/mcp/.agentic-security/scan-history.json +0 -1182
  104. package/src/mcp/.agentic-security/streak.json +0 -22
  105. package/src/sast/bench-shape/.agentic-security/findings.json +0 -28
  106. package/src/sast/bench-shape/.agentic-security/last-scan.json +0 -28
  107. package/src/sast/bench-shape/.agentic-security/scan-history.json +0 -24
  108. package/src/sast/bench-shape/.agentic-security/streak.json +0 -22
package/src/ir/.agentic-security/scan-history.json CHANGED
@@ -1,355 +1,762 @@
1
1
  [
2
2
  {
3
- "timestamp": "2026-05-18T18:07:37.257Z",
3
+ "timestamp": "2026-05-26T15:14:23.916Z",
4
4
  "label": "scan",
5
- "total": 0,
5
+ "total": 12,
6
6
  "critical": 0,
7
- "high": 0,
8
- "medium": 0,
7
+ "high": 2,
8
+ "medium": 10,
9
9
  "low": 0,
10
10
  "kev": 0,
11
- "ids": []
11
+ "ids": [
12
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
13
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
14
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
15
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
16
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
17
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
18
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
19
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
20
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
21
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
22
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
23
+ "toctou-fs:type-stubs.js:48"
24
+ ]
12
25
  },
13
26
  {
14
- "timestamp": "2026-05-18T18:07:52.302Z",
27
+ "timestamp": "2026-05-26T15:15:39.575Z",
15
28
  "label": "scan",
16
- "total": 0,
29
+ "total": 12,
17
30
  "critical": 0,
18
- "high": 0,
19
- "medium": 0,
31
+ "high": 2,
32
+ "medium": 10,
20
33
  "low": 0,
21
34
  "kev": 0,
22
- "ids": []
35
+ "ids": [
36
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
37
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
38
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
39
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
40
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
41
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
42
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
43
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
44
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
45
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
46
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
47
+ "toctou-fs:type-stubs.js:48"
48
+ ]
23
49
  },
24
50
  {
25
- "timestamp": "2026-05-18T18:07:55.308Z",
51
+ "timestamp": "2026-05-26T15:16:38.741Z",
26
52
  "label": "scan",
27
- "total": 0,
53
+ "total": 12,
28
54
  "critical": 0,
29
- "high": 0,
30
- "medium": 0,
55
+ "high": 2,
56
+ "medium": 10,
31
57
  "low": 0,
32
58
  "kev": 0,
33
- "ids": []
59
+ "ids": [
60
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
61
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
62
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
63
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
64
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
65
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
66
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
67
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
68
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
69
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
70
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
71
+ "toctou-fs:type-stubs.js:48"
72
+ ]
34
73
  },
35
74
  {
36
- "timestamp": "2026-05-19T15:08:17.723Z",
75
+ "timestamp": "2026-05-26T15:17:43.709Z",
37
76
  "label": "scan",
38
- "total": 0,
77
+ "total": 12,
39
78
  "critical": 0,
40
- "high": 0,
41
- "medium": 0,
79
+ "high": 2,
80
+ "medium": 10,
42
81
  "low": 0,
43
82
  "kev": 0,
44
- "ids": []
83
+ "ids": [
84
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
85
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
86
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
87
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
88
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
89
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
90
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
91
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
92
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
93
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
94
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
95
+ "toctou-fs:type-stubs.js:48"
96
+ ]
45
97
  },
46
98
  {
47
- "timestamp": "2026-05-19T15:13:36.271Z",
99
+ "timestamp": "2026-05-26T15:18:33.893Z",
48
100
  "label": "scan",
49
- "total": 0,
101
+ "total": 12,
50
102
  "critical": 0,
51
- "high": 0,
52
- "medium": 0,
103
+ "high": 2,
104
+ "medium": 10,
53
105
  "low": 0,
54
106
  "kev": 0,
55
- "ids": []
107
+ "ids": [
108
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
109
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
110
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
111
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
112
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
113
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
114
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
115
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
116
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
117
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
118
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
119
+ "toctou-fs:type-stubs.js:48"
120
+ ]
56
121
  },
57
122
  {
58
- "timestamp": "2026-05-19T15:14:33.487Z",
123
+ "timestamp": "2026-05-26T15:19:20.755Z",
59
124
  "label": "scan",
60
- "total": 0,
125
+ "total": 12,
61
126
  "critical": 0,
62
- "high": 0,
63
- "medium": 0,
127
+ "high": 2,
128
+ "medium": 10,
64
129
  "low": 0,
65
130
  "kev": 0,
66
- "ids": []
131
+ "ids": [
132
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
133
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
134
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
135
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
136
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
137
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
138
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
139
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
140
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
141
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
142
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
143
+ "toctou-fs:type-stubs.js:48"
144
+ ]
67
145
  },
68
146
  {
69
- "timestamp": "2026-05-19T15:15:32.497Z",
147
+ "timestamp": "2026-05-26T15:20:24.887Z",
70
148
  "label": "scan",
71
- "total": 0,
149
+ "total": 12,
72
150
  "critical": 0,
73
- "high": 0,
74
- "medium": 0,
151
+ "high": 2,
152
+ "medium": 10,
75
153
  "low": 0,
76
154
  "kev": 0,
77
- "ids": []
155
+ "ids": [
156
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
157
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
158
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
159
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
160
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
161
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
162
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
163
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
164
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
165
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
166
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
167
+ "toctou-fs:type-stubs.js:48"
168
+ ]
78
169
  },
79
170
  {
80
- "timestamp": "2026-05-19T15:16:14.591Z",
171
+ "timestamp": "2026-05-26T15:21:33.800Z",
81
172
  "label": "scan",
82
- "total": 0,
173
+ "total": 12,
83
174
  "critical": 0,
84
- "high": 0,
85
- "medium": 0,
175
+ "high": 2,
176
+ "medium": 10,
86
177
  "low": 0,
87
178
  "kev": 0,
88
- "ids": []
179
+ "ids": [
180
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
181
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
182
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
183
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
184
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
185
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
186
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
187
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
188
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
189
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
190
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
191
+ "toctou-fs:type-stubs.js:48"
192
+ ]
89
193
  },
90
194
  {
91
- "timestamp": "2026-05-19T15:16:47.095Z",
195
+ "timestamp": "2026-05-26T15:22:47.634Z",
92
196
  "label": "scan",
93
- "total": 0,
197
+ "total": 12,
94
198
  "critical": 0,
95
- "high": 0,
96
- "medium": 0,
199
+ "high": 2,
200
+ "medium": 10,
97
201
  "low": 0,
98
202
  "kev": 0,
99
- "ids": []
203
+ "ids": [
204
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
205
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
206
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
207
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
208
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
209
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
210
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
211
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
212
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
213
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
214
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
215
+ "toctou-fs:type-stubs.js:48"
216
+ ]
100
217
  },
101
218
  {
102
- "timestamp": "2026-05-19T15:39:01.083Z",
219
+ "timestamp": "2026-05-26T15:24:02.219Z",
103
220
  "label": "scan",
104
- "total": 0,
221
+ "total": 12,
105
222
  "critical": 0,
106
- "high": 0,
107
- "medium": 0,
223
+ "high": 2,
224
+ "medium": 10,
108
225
  "low": 0,
109
226
  "kev": 0,
110
- "ids": []
227
+ "ids": [
228
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
229
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
230
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
231
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
232
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
233
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
234
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
235
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
236
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
237
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
238
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
239
+ "toctou-fs:type-stubs.js:48"
240
+ ]
111
241
  },
112
242
  {
113
- "timestamp": "2026-05-19T20:23:03.902Z",
243
+ "timestamp": "2026-05-26T15:41:55.708Z",
114
244
  "label": "scan",
115
- "total": 0,
245
+ "total": 13,
116
246
  "critical": 0,
117
- "high": 0,
118
- "medium": 0,
247
+ "high": 3,
248
+ "medium": 10,
119
249
  "low": 0,
120
250
  "kev": 0,
121
- "ids": []
251
+ "ids": [
252
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
253
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
254
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
255
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
256
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
257
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
258
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
259
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
260
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
261
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
262
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
263
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
264
+ "toctou-fs:type-stubs.js:48"
265
+ ]
122
266
  },
123
267
  {
124
- "timestamp": "2026-05-19T20:39:09.197Z",
268
+ "timestamp": "2026-05-26T15:42:49.277Z",
125
269
  "label": "scan",
126
- "total": 0,
270
+ "total": 13,
127
271
  "critical": 0,
128
- "high": 0,
129
- "medium": 0,
272
+ "high": 3,
273
+ "medium": 10,
130
274
  "low": 0,
131
275
  "kev": 0,
132
- "ids": []
276
+ "ids": [
277
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
278
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
279
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
280
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
281
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
282
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
283
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
284
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
285
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
286
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
287
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
288
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
289
+ "toctou-fs:type-stubs.js:48"
290
+ ]
133
291
  },
134
292
  {
135
- "timestamp": "2026-05-19T20:39:21.000Z",
293
+ "timestamp": "2026-05-26T15:45:04.682Z",
136
294
  "label": "scan",
137
- "total": 0,
295
+ "total": 13,
138
296
  "critical": 0,
139
- "high": 0,
140
- "medium": 0,
297
+ "high": 3,
298
+ "medium": 10,
141
299
  "low": 0,
142
300
  "kev": 0,
143
- "ids": []
301
+ "ids": [
302
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
303
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
304
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
305
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
306
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
307
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
308
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
309
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
310
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
311
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
312
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
313
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
314
+ "toctou-fs:type-stubs.js:48"
315
+ ]
144
316
  },
145
317
  {
146
- "timestamp": "2026-05-20T03:49:13.475Z",
318
+ "timestamp": "2026-05-26T15:47:22.194Z",
147
319
  "label": "scan",
148
- "total": 0,
320
+ "total": 13,
149
321
  "critical": 0,
150
- "high": 0,
151
- "medium": 0,
322
+ "high": 3,
323
+ "medium": 10,
152
324
  "low": 0,
153
325
  "kev": 0,
154
- "ids": []
326
+ "ids": [
327
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
328
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
329
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
330
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
331
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
332
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
333
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
334
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
335
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
336
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
337
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
338
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
339
+ "toctou-fs:type-stubs.js:48"
340
+ ]
341
+ },
342
+ {
343
+ "timestamp": "2026-05-26T15:48:28.441Z",
344
+ "label": "scan",
345
+ "total": 13,
346
+ "critical": 0,
347
+ "high": 3,
348
+ "medium": 10,
349
+ "low": 0,
350
+ "kev": 0,
351
+ "ids": [
352
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
353
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
354
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
355
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
356
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
357
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
358
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
359
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
360
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
361
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
362
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
363
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
364
+ "toctou-fs:type-stubs.js:48"
365
+ ]
366
+ },
367
+ {
368
+ "timestamp": "2026-05-26T16:08:34.949Z",
369
+ "label": "scan",
370
+ "total": 14,
371
+ "critical": 0,
372
+ "high": 4,
373
+ "medium": 10,
374
+ "low": 0,
375
+ "kev": 0,
376
+ "ids": [
377
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
378
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
379
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
380
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
381
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
382
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
383
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
384
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
385
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
386
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
387
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
388
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
389
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
390
+ "toctou-fs:type-stubs.js:48"
391
+ ]
155
392
  },
156
393
  {
157
- "timestamp": "2026-05-20T03:50:06.549Z",
394
+ "timestamp": "2026-05-26T16:09:53.480Z",
158
395
  "label": "scan",
159
- "total": 1,
396
+ "total": 15,
160
397
  "critical": 0,
161
- "high": 0,
162
- "medium": 1,
398
+ "high": 5,
399
+ "medium": 10,
163
400
  "low": 0,
164
401
  "kev": 0,
165
402
  "ids": [
166
- "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
403
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
404
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
405
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
406
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
407
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
408
+ "struct:parser-rb.js:174:Mass_Assignment_(req.body_Direct_to_Model)",
409
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
410
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
411
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
412
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
413
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
414
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
415
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
416
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
417
+ "toctou-fs:type-stubs.js:48"
167
418
  ]
168
419
  },
169
420
  {
170
- "timestamp": "2026-05-20T03:50:48.754Z",
421
+ "timestamp": "2026-05-26T16:10:39.310Z",
171
422
  "label": "scan",
172
- "total": 1,
423
+ "total": 15,
173
424
  "critical": 0,
174
- "high": 0,
175
- "medium": 1,
425
+ "high": 5,
426
+ "medium": 10,
176
427
  "low": 0,
177
428
  "kev": 0,
178
429
  "ids": [
179
- "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
430
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
431
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
432
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
433
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
434
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
435
+ "struct:parser-rb.js:174:Mass_Assignment_(req.body_Direct_to_Model)",
436
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
437
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
438
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
439
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
440
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
441
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
442
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
443
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
444
+ "toctou-fs:type-stubs.js:48"
180
445
  ]
181
446
  },
182
447
  {
183
- "timestamp": "2026-05-20T03:52:59.627Z",
448
+ "timestamp": "2026-05-26T16:13:11.630Z",
184
449
  "label": "scan",
185
- "total": 1,
450
+ "total": 15,
186
451
  "critical": 0,
187
- "high": 0,
188
- "medium": 1,
452
+ "high": 5,
453
+ "medium": 10,
189
454
  "low": 0,
190
455
  "kev": 0,
191
456
  "ids": [
192
- "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
457
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
458
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
459
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
460
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
461
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
462
+ "struct:parser-rb.js:174:Mass_Assignment_(req.body_Direct_to_Model)",
463
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
464
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
465
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
466
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
467
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
468
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
469
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
470
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
471
+ "toctou-fs:type-stubs.js:48"
193
472
  ]
194
473
  },
195
474
  {
196
- "timestamp": "2026-05-20T12:32:01.638Z",
475
+ "timestamp": "2026-05-26T16:14:08.124Z",
197
476
  "label": "scan",
198
- "total": 2,
477
+ "total": 15,
199
478
  "critical": 0,
200
- "high": 1,
201
- "medium": 1,
479
+ "high": 5,
480
+ "medium": 10,
202
481
  "low": 0,
203
482
  "kev": 0,
204
483
  "ids": [
205
484
  "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
206
- "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
485
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
486
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
487
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
488
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
489
+ "struct:parser-rb.js:174:Mass_Assignment_(req.body_Direct_to_Model)",
490
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
491
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
492
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
493
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
494
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
495
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
496
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
497
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
498
+ "toctou-fs:type-stubs.js:48"
207
499
  ]
208
500
  },
209
501
  {
210
- "timestamp": "2026-05-20T12:32:06.661Z",
502
+ "timestamp": "2026-05-26T16:14:55.243Z",
211
503
  "label": "scan",
212
- "total": 2,
504
+ "total": 15,
213
505
  "critical": 0,
214
- "high": 1,
215
- "medium": 1,
506
+ "high": 5,
507
+ "medium": 10,
216
508
  "low": 0,
217
509
  "kev": 0,
218
510
  "ids": [
219
511
  "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
220
- "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
512
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
513
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
514
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
515
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
516
+ "struct:parser-rb.js:174:Mass_Assignment_(req.body_Direct_to_Model)",
517
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
518
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
519
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
520
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
521
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
522
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
523
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
524
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
525
+ "toctou-fs:type-stubs.js:48"
221
526
  ]
222
527
  },
223
528
  {
224
- "timestamp": "2026-05-20T12:32:15.761Z",
529
+ "timestamp": "2026-05-26T16:19:39.354Z",
225
530
  "label": "scan",
226
- "total": 2,
531
+ "total": 15,
227
532
  "critical": 0,
228
- "high": 1,
229
- "medium": 1,
533
+ "high": 5,
534
+ "medium": 10,
230
535
  "low": 0,
231
536
  "kev": 0,
232
537
  "ids": [
233
538
  "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
234
- "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
539
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
540
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
541
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
542
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
543
+ "struct:parser-rb.js:180:Mass_Assignment_(req.body_Direct_to_Model)",
544
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
545
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
546
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
547
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
548
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
549
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
550
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
551
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
552
+ "toctou-fs:type-stubs.js:48"
235
553
  ]
236
554
  },
237
555
  {
238
- "timestamp": "2026-05-20T12:32:20.916Z",
556
+ "timestamp": "2026-05-26T16:20:41.502Z",
239
557
  "label": "scan",
240
- "total": 2,
558
+ "total": 15,
241
559
  "critical": 0,
242
- "high": 1,
243
- "medium": 1,
560
+ "high": 5,
561
+ "medium": 10,
244
562
  "low": 0,
245
563
  "kev": 0,
246
564
  "ids": [
247
565
  "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
248
- "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
566
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
567
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
568
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
569
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
570
+ "struct:parser-rb.js:173:Mass_Assignment_(req.body_Direct_to_Model)",
571
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
572
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
573
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
574
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
575
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
576
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
577
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
578
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
579
+ "toctou-fs:type-stubs.js:48"
249
580
  ]
250
581
  },
251
582
  {
252
- "timestamp": "2026-05-20T12:32:26.044Z",
583
+ "timestamp": "2026-05-27T01:35:55.434Z",
253
584
  "label": "scan",
254
- "total": 2,
585
+ "total": 15,
255
586
  "critical": 0,
256
- "high": 1,
257
- "medium": 1,
587
+ "high": 5,
588
+ "medium": 10,
258
589
  "low": 0,
259
590
  "kev": 0,
260
591
  "ids": [
261
592
  "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
262
- "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
593
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
594
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
595
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
596
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
597
+ "struct:parser-rb.js:173:Mass_Assignment_(req.body_Direct_to_Model)",
598
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
599
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
600
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
601
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
602
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
603
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
604
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
605
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
606
+ "toctou-fs:type-stubs.js:48"
263
607
  ]
264
608
  },
265
609
  {
266
- "timestamp": "2026-05-20T12:34:20.136Z",
610
+ "timestamp": "2026-05-27T01:45:34.880Z",
267
611
  "label": "scan",
268
- "total": 3,
612
+ "total": 15,
269
613
  "critical": 0,
270
- "high": 2,
271
- "medium": 1,
614
+ "high": 5,
615
+ "medium": 10,
272
616
  "low": 0,
273
617
  "kev": 0,
274
618
  "ids": [
275
619
  "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
620
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
276
621
  "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
277
- "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
622
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
623
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
624
+ "struct:parser-rb.js:173:Mass_Assignment_(req.body_Direct_to_Model)",
625
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
626
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
627
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
628
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
629
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
630
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
631
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
632
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
633
+ "toctou-fs:type-stubs.js:48"
278
634
  ]
279
635
  },
280
636
  {
281
- "timestamp": "2026-05-20T12:34:25.000Z",
637
+ "timestamp": "2026-05-27T01:52:34.256Z",
282
638
  "label": "scan",
283
- "total": 3,
639
+ "total": 15,
284
640
  "critical": 0,
285
- "high": 2,
286
- "medium": 1,
641
+ "high": 5,
642
+ "medium": 10,
287
643
  "low": 0,
288
644
  "kev": 0,
289
645
  "ids": [
290
646
  "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
647
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
291
648
  "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
292
- "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
649
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
650
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
651
+ "struct:parser-rb.js:173:Mass_Assignment_(req.body_Direct_to_Model)",
652
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
653
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
654
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
655
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
656
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
657
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
658
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
659
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
660
+ "toctou-fs:type-stubs.js:48"
293
661
  ]
294
662
  },
295
663
  {
296
- "timestamp": "2026-05-20T12:34:32.674Z",
664
+ "timestamp": "2026-05-27T01:58:26.255Z",
297
665
  "label": "scan",
298
- "total": 3,
666
+ "total": 15,
299
667
  "critical": 0,
300
- "high": 2,
301
- "medium": 1,
668
+ "high": 5,
669
+ "medium": 10,
302
670
  "low": 0,
303
671
  "kev": 0,
304
672
  "ids": [
305
673
  "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
674
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
306
675
  "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
307
- "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
676
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
677
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
678
+ "struct:parser-rb.js:201:Mass_Assignment_(req.body_Direct_to_Model)",
679
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
680
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
681
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
682
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
683
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
684
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
685
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
686
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
687
+ "toctou-fs:type-stubs.js:48"
308
688
  ]
309
689
  },
310
690
  {
311
- "timestamp": "2026-05-20T12:34:40.056Z",
691
+ "timestamp": "2026-05-27T02:04:45.598Z",
312
692
  "label": "scan",
313
- "total": 3,
693
+ "total": 15,
314
694
  "critical": 0,
315
- "high": 2,
316
- "medium": 1,
695
+ "high": 5,
696
+ "medium": 10,
317
697
  "low": 0,
318
698
  "kev": 0,
319
699
  "ids": [
320
700
  "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
701
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
321
702
  "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
322
- "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
703
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
704
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
705
+ "struct:parser-rb.js:201:Mass_Assignment_(req.body_Direct_to_Model)",
706
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
707
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
708
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
709
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
710
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
711
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
712
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
713
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
714
+ "toctou-fs:type-stubs.js:48"
323
715
  ]
324
716
  },
325
717
  {
326
- "timestamp": "2026-05-20T12:34:45.128Z",
718
+ "timestamp": "2026-05-27T02:18:40.757Z",
327
719
  "label": "scan",
328
- "total": 3,
720
+ "total": 15,
329
721
  "critical": 0,
330
- "high": 2,
331
- "medium": 1,
722
+ "high": 5,
723
+ "medium": 10,
332
724
  "low": 0,
333
725
  "kev": 0,
334
726
  "ids": [
335
727
  "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
728
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
336
729
  "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
337
- "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
730
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
731
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
732
+ "struct:parser-rb.js:201:Mass_Assignment_(req.body_Direct_to_Model)",
733
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
734
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
735
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
736
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
737
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
738
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
739
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
740
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
741
+ "toctou-fs:type-stubs.js:48"
338
742
  ]
339
743
  },
340
744
  {
341
- "timestamp": "2026-05-20T17:01:27.551Z",
745
+ "timestamp": "2026-05-27T02:22:42.198Z",
342
746
  "label": "scan",
343
- "total": 12,
747
+ "total": 15,
344
748
  "critical": 0,
345
- "high": 2,
749
+ "high": 5,
346
750
  "medium": 10,
347
751
  "low": 0,
348
752
  "kev": 0,
349
753
  "ids": [
350
754
  "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
755
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
351
756
  "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
757
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
352
758
  "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
759
+ "struct:parser-rb.js:201:Mass_Assignment_(req.body_Direct_to_Model)",
353
760
  "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
354
761
  "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
355
762
  "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",