@clear-capabilities/agentic-security-scanner 0.77.0 → 0.78.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (83) hide show
  1. package/bin/.agentic-security/findings.json +1907 -0
  2. package/bin/.agentic-security/last-scan.json +1907 -0
  3. package/bin/.agentic-security/last-scan.json.sig +1 -0
  4. package/bin/.agentic-security/scan-history.json +115 -0
  5. package/bin/.agentic-security/streak.json +20 -0
  6. package/bin/agentic-security.js +33 -2
  7. package/dist/178.index.js +1 -1
  8. package/dist/384.index.js +1 -1
  9. package/dist/637.index.js +1 -1
  10. package/dist/718.index.js +106 -0
  11. package/dist/824.index.js +126 -0
  12. package/dist/838.index.js +1 -1
  13. package/dist/agentic-security.mjs +32 -32
  14. package/dist/agentic-security.mjs.sha256 +1 -1
  15. package/package.json +3 -3
  16. package/src/.agentic-security/findings.json +82642 -0
  17. package/src/.agentic-security/last-scan.json +82642 -0
  18. package/src/.agentic-security/last-scan.json.sig +1 -0
  19. package/src/.agentic-security/scan-history.json +10054 -0
  20. package/src/.agentic-security/streak.json +21 -0
  21. package/src/dataflow/.agentic-security/findings.json +3515 -0
  22. package/src/dataflow/.agentic-security/last-scan.json +3515 -0
  23. package/src/dataflow/.agentic-security/last-scan.json.sig +1 -0
  24. package/src/dataflow/.agentic-security/scan-history.json +702 -0
  25. package/src/dataflow/.agentic-security/streak.json +22 -0
  26. package/src/dataflow/async-sequencing.js +16 -7
  27. package/src/dataflow/builtin-summaries.js +131 -0
  28. package/src/dataflow/catalog.js +107 -0
  29. package/src/dataflow/cross-repo.js +75 -1
  30. package/src/dataflow/engine.js +129 -0
  31. package/src/dataflow/implicit-flow.js +24 -6
  32. package/src/dataflow/stub-aware-filter.js +69 -11
  33. package/src/dataflow/summaries.js +28 -3
  34. package/src/engine-parallel.js +70 -0
  35. package/src/engine.js +165 -15
  36. package/src/ir/.agentic-security/findings.json +3777 -0
  37. package/src/ir/.agentic-security/last-scan.json +3777 -0
  38. package/src/ir/.agentic-security/last-scan.json.sig +1 -0
  39. package/src/ir/.agentic-security/scan-history.json +771 -0
  40. package/src/ir/.agentic-security/streak.json +21 -0
  41. package/src/ir/index.js +22 -1
  42. package/src/ir/parser-go.js +403 -0
  43. package/src/ir/parser-js.js +2 -0
  44. package/src/ir/parser-php.js +330 -0
  45. package/src/ir/parser-py.helper.py +137 -11
  46. package/src/ir/parser-rb.js +309 -0
  47. package/src/posture/.agentic-security/findings.json +51562 -0
  48. package/src/posture/.agentic-security/last-scan.json +51562 -0
  49. package/src/posture/.agentic-security/last-scan.json.sig +1 -0
  50. package/src/posture/.agentic-security/scan-history.json +650 -0
  51. package/src/posture/.agentic-security/streak.json +20 -0
  52. package/src/posture/calibration.js +14 -0
  53. package/src/posture/triage.js +13 -0
  54. package/src/report/.agentic-security/findings.json +80 -0
  55. package/src/report/.agentic-security/last-scan.json +80 -0
  56. package/src/report/.agentic-security/last-scan.json.sig +1 -0
  57. package/src/report/.agentic-security/scan-history.json +35 -0
  58. package/src/report/.agentic-security/streak.json +22 -0
  59. package/src/report/index.js +23 -2
  60. package/src/sast/.agentic-security/findings.json +5190 -0
  61. package/src/sast/.agentic-security/last-scan.json +5190 -0
  62. package/src/sast/.agentic-security/last-scan.json.sig +1 -0
  63. package/src/sast/.agentic-security/scan-history.json +408 -0
  64. package/src/sast/.agentic-security/streak.json +20 -0
  65. package/src/sast/cache-poisoning.js +77 -0
  66. package/src/sast/comparison-safety.js +73 -0
  67. package/src/sast/db-taint.js +54 -0
  68. package/src/sast/graphql.js +127 -0
  69. package/src/sast/llm-stored-prompt.js +57 -0
  70. package/src/sast/mutation-xss.js +43 -0
  71. package/src/sast/nosql-injection.js +5 -0
  72. package/src/sast/null-byte-injection.js +76 -0
  73. package/src/sast/redos-nfa.js +338 -0
  74. package/src/sast/sensitive-data-logging.js +73 -0
  75. package/src/sast/weak-password-hash.js +77 -0
  76. package/src/sast/weak-randomness.js +100 -0
  77. package/src/sca/.agentic-security/findings.json +1587 -0
  78. package/src/sca/.agentic-security/last-scan.json +1587 -0
  79. package/src/sca/.agentic-security/last-scan.json.sig +1 -0
  80. package/src/sca/.agentic-security/scan-history.json +36 -0
  81. package/src/sca/.agentic-security/streak.json +21 -0
  82. package/src/sca/llm-function-extract.js +107 -0
  83. package/src/sca/vendor-detect.js +91 -0
package/src/ir/.agentic-security/scan-history.json ADDED
@@ -0,0 +1,771 @@
1
+ [
2
+ {
3
+ "timestamp": "2026-05-26T15:14:23.916Z",
4
+ "label": "scan",
5
+ "total": 12,
6
+ "critical": 0,
7
+ "high": 2,
8
+ "medium": 10,
9
+ "low": 0,
10
+ "kev": 0,
11
+ "ids": [
12
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
13
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
14
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
15
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
16
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
17
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
18
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
19
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
20
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
21
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
22
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
23
+ "toctou-fs:type-stubs.js:48"
24
+ ]
25
+ },
26
+ {
27
+ "timestamp": "2026-05-26T15:15:39.575Z",
28
+ "label": "scan",
29
+ "total": 12,
30
+ "critical": 0,
31
+ "high": 2,
32
+ "medium": 10,
33
+ "low": 0,
34
+ "kev": 0,
35
+ "ids": [
36
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
37
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
38
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
39
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
40
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
41
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
42
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
43
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
44
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
45
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
46
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
47
+ "toctou-fs:type-stubs.js:48"
48
+ ]
49
+ },
50
+ {
51
+ "timestamp": "2026-05-26T15:16:38.741Z",
52
+ "label": "scan",
53
+ "total": 12,
54
+ "critical": 0,
55
+ "high": 2,
56
+ "medium": 10,
57
+ "low": 0,
58
+ "kev": 0,
59
+ "ids": [
60
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
61
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
62
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
63
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
64
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
65
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
66
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
67
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
68
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
69
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
70
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
71
+ "toctou-fs:type-stubs.js:48"
72
+ ]
73
+ },
74
+ {
75
+ "timestamp": "2026-05-26T15:17:43.709Z",
76
+ "label": "scan",
77
+ "total": 12,
78
+ "critical": 0,
79
+ "high": 2,
80
+ "medium": 10,
81
+ "low": 0,
82
+ "kev": 0,
83
+ "ids": [
84
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
85
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
86
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
87
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
88
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
89
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
90
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
91
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
92
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
93
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
94
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
95
+ "toctou-fs:type-stubs.js:48"
96
+ ]
97
+ },
98
+ {
99
+ "timestamp": "2026-05-26T15:18:33.893Z",
100
+ "label": "scan",
101
+ "total": 12,
102
+ "critical": 0,
103
+ "high": 2,
104
+ "medium": 10,
105
+ "low": 0,
106
+ "kev": 0,
107
+ "ids": [
108
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
109
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
110
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
111
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
112
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
113
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
114
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
115
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
116
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
117
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
118
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
119
+ "toctou-fs:type-stubs.js:48"
120
+ ]
121
+ },
122
+ {
123
+ "timestamp": "2026-05-26T15:19:20.755Z",
124
+ "label": "scan",
125
+ "total": 12,
126
+ "critical": 0,
127
+ "high": 2,
128
+ "medium": 10,
129
+ "low": 0,
130
+ "kev": 0,
131
+ "ids": [
132
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
133
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
134
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
135
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
136
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
137
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
138
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
139
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
140
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
141
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
142
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
143
+ "toctou-fs:type-stubs.js:48"
144
+ ]
145
+ },
146
+ {
147
+ "timestamp": "2026-05-26T15:20:24.887Z",
148
+ "label": "scan",
149
+ "total": 12,
150
+ "critical": 0,
151
+ "high": 2,
152
+ "medium": 10,
153
+ "low": 0,
154
+ "kev": 0,
155
+ "ids": [
156
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
157
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
158
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
159
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
160
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
161
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
162
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
163
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
164
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
165
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
166
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
167
+ "toctou-fs:type-stubs.js:48"
168
+ ]
169
+ },
170
+ {
171
+ "timestamp": "2026-05-26T15:21:33.800Z",
172
+ "label": "scan",
173
+ "total": 12,
174
+ "critical": 0,
175
+ "high": 2,
176
+ "medium": 10,
177
+ "low": 0,
178
+ "kev": 0,
179
+ "ids": [
180
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
181
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
182
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
183
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
184
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
185
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
186
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
187
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
188
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
189
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
190
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
191
+ "toctou-fs:type-stubs.js:48"
192
+ ]
193
+ },
194
+ {
195
+ "timestamp": "2026-05-26T15:22:47.634Z",
196
+ "label": "scan",
197
+ "total": 12,
198
+ "critical": 0,
199
+ "high": 2,
200
+ "medium": 10,
201
+ "low": 0,
202
+ "kev": 0,
203
+ "ids": [
204
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
205
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
206
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
207
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
208
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
209
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
210
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
211
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
212
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
213
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
214
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
215
+ "toctou-fs:type-stubs.js:48"
216
+ ]
217
+ },
218
+ {
219
+ "timestamp": "2026-05-26T15:24:02.219Z",
220
+ "label": "scan",
221
+ "total": 12,
222
+ "critical": 0,
223
+ "high": 2,
224
+ "medium": 10,
225
+ "low": 0,
226
+ "kev": 0,
227
+ "ids": [
228
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
229
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
230
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
231
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
232
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
233
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
234
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
235
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
236
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
237
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
238
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
239
+ "toctou-fs:type-stubs.js:48"
240
+ ]
241
+ },
242
+ {
243
+ "timestamp": "2026-05-26T15:41:55.708Z",
244
+ "label": "scan",
245
+ "total": 13,
246
+ "critical": 0,
247
+ "high": 3,
248
+ "medium": 10,
249
+ "low": 0,
250
+ "kev": 0,
251
+ "ids": [
252
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
253
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
254
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
255
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
256
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
257
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
258
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
259
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
260
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
261
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
262
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
263
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
264
+ "toctou-fs:type-stubs.js:48"
265
+ ]
266
+ },
267
+ {
268
+ "timestamp": "2026-05-26T15:42:49.277Z",
269
+ "label": "scan",
270
+ "total": 13,
271
+ "critical": 0,
272
+ "high": 3,
273
+ "medium": 10,
274
+ "low": 0,
275
+ "kev": 0,
276
+ "ids": [
277
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
278
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
279
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
280
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
281
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
282
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
283
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
284
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
285
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
286
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
287
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
288
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
289
+ "toctou-fs:type-stubs.js:48"
290
+ ]
291
+ },
292
+ {
293
+ "timestamp": "2026-05-26T15:45:04.682Z",
294
+ "label": "scan",
295
+ "total": 13,
296
+ "critical": 0,
297
+ "high": 3,
298
+ "medium": 10,
299
+ "low": 0,
300
+ "kev": 0,
301
+ "ids": [
302
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
303
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
304
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
305
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
306
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
307
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
308
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
309
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
310
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
311
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
312
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
313
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
314
+ "toctou-fs:type-stubs.js:48"
315
+ ]
316
+ },
317
+ {
318
+ "timestamp": "2026-05-26T15:47:22.194Z",
319
+ "label": "scan",
320
+ "total": 13,
321
+ "critical": 0,
322
+ "high": 3,
323
+ "medium": 10,
324
+ "low": 0,
325
+ "kev": 0,
326
+ "ids": [
327
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
328
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
329
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
330
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
331
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
332
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
333
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
334
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
335
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
336
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
337
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
338
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
339
+ "toctou-fs:type-stubs.js:48"
340
+ ]
341
+ },
342
+ {
343
+ "timestamp": "2026-05-26T15:48:28.441Z",
344
+ "label": "scan",
345
+ "total": 13,
346
+ "critical": 0,
347
+ "high": 3,
348
+ "medium": 10,
349
+ "low": 0,
350
+ "kev": 0,
351
+ "ids": [
352
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
353
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
354
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
355
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
356
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
357
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
358
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
359
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
360
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
361
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
362
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
363
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
364
+ "toctou-fs:type-stubs.js:48"
365
+ ]
366
+ },
367
+ {
368
+ "timestamp": "2026-05-26T16:08:34.949Z",
369
+ "label": "scan",
370
+ "total": 14,
371
+ "critical": 0,
372
+ "high": 4,
373
+ "medium": 10,
374
+ "low": 0,
375
+ "kev": 0,
376
+ "ids": [
377
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
378
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
379
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
380
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
381
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
382
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
383
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
384
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
385
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
386
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
387
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
388
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
389
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
390
+ "toctou-fs:type-stubs.js:48"
391
+ ]
392
+ },
393
+ {
394
+ "timestamp": "2026-05-26T16:09:53.480Z",
395
+ "label": "scan",
396
+ "total": 15,
397
+ "critical": 0,
398
+ "high": 5,
399
+ "medium": 10,
400
+ "low": 0,
401
+ "kev": 0,
402
+ "ids": [
403
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
404
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
405
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
406
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
407
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
408
+ "struct:parser-rb.js:174:Mass_Assignment_(req.body_Direct_to_Model)",
409
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
410
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
411
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
412
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
413
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
414
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
415
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
416
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
417
+ "toctou-fs:type-stubs.js:48"
418
+ ]
419
+ },
420
+ {
421
+ "timestamp": "2026-05-26T16:10:39.310Z",
422
+ "label": "scan",
423
+ "total": 15,
424
+ "critical": 0,
425
+ "high": 5,
426
+ "medium": 10,
427
+ "low": 0,
428
+ "kev": 0,
429
+ "ids": [
430
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
431
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
432
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
433
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
434
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
435
+ "struct:parser-rb.js:174:Mass_Assignment_(req.body_Direct_to_Model)",
436
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
437
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
438
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
439
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
440
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
441
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
442
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
443
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
444
+ "toctou-fs:type-stubs.js:48"
445
+ ]
446
+ },
447
+ {
448
+ "timestamp": "2026-05-26T16:13:11.630Z",
449
+ "label": "scan",
450
+ "total": 15,
451
+ "critical": 0,
452
+ "high": 5,
453
+ "medium": 10,
454
+ "low": 0,
455
+ "kev": 0,
456
+ "ids": [
457
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
458
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
459
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
460
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
461
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
462
+ "struct:parser-rb.js:174:Mass_Assignment_(req.body_Direct_to_Model)",
463
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
464
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
465
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
466
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
467
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
468
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
469
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
470
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
471
+ "toctou-fs:type-stubs.js:48"
472
+ ]
473
+ },
474
+ {
475
+ "timestamp": "2026-05-26T16:14:08.124Z",
476
+ "label": "scan",
477
+ "total": 15,
478
+ "critical": 0,
479
+ "high": 5,
480
+ "medium": 10,
481
+ "low": 0,
482
+ "kev": 0,
483
+ "ids": [
484
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
485
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
486
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
487
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
488
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
489
+ "struct:parser-rb.js:174:Mass_Assignment_(req.body_Direct_to_Model)",
490
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
491
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
492
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
493
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
494
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
495
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
496
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
497
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
498
+ "toctou-fs:type-stubs.js:48"
499
+ ]
500
+ },
501
+ {
502
+ "timestamp": "2026-05-26T16:14:55.243Z",
503
+ "label": "scan",
504
+ "total": 15,
505
+ "critical": 0,
506
+ "high": 5,
507
+ "medium": 10,
508
+ "low": 0,
509
+ "kev": 0,
510
+ "ids": [
511
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
512
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
513
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
514
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
515
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
516
+ "struct:parser-rb.js:174:Mass_Assignment_(req.body_Direct_to_Model)",
517
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
518
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
519
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
520
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
521
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
522
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
523
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
524
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
525
+ "toctou-fs:type-stubs.js:48"
526
+ ]
527
+ },
528
+ {
529
+ "timestamp": "2026-05-26T16:19:39.354Z",
530
+ "label": "scan",
531
+ "total": 15,
532
+ "critical": 0,
533
+ "high": 5,
534
+ "medium": 10,
535
+ "low": 0,
536
+ "kev": 0,
537
+ "ids": [
538
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
539
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
540
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
541
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
542
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
543
+ "struct:parser-rb.js:180:Mass_Assignment_(req.body_Direct_to_Model)",
544
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
545
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
546
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
547
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
548
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
549
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
550
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
551
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
552
+ "toctou-fs:type-stubs.js:48"
553
+ ]
554
+ },
555
+ {
556
+ "timestamp": "2026-05-26T16:20:41.502Z",
557
+ "label": "scan",
558
+ "total": 15,
559
+ "critical": 0,
560
+ "high": 5,
561
+ "medium": 10,
562
+ "low": 0,
563
+ "kev": 0,
564
+ "ids": [
565
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
566
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
567
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
568
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
569
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
570
+ "struct:parser-rb.js:173:Mass_Assignment_(req.body_Direct_to_Model)",
571
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
572
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
573
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
574
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
575
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
576
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
577
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
578
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
579
+ "toctou-fs:type-stubs.js:48"
580
+ ]
581
+ },
582
+ {
583
+ "timestamp": "2026-05-27T01:35:55.434Z",
584
+ "label": "scan",
585
+ "total": 15,
586
+ "critical": 0,
587
+ "high": 5,
588
+ "medium": 10,
589
+ "low": 0,
590
+ "kev": 0,
591
+ "ids": [
592
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
593
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
594
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
595
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
596
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
597
+ "struct:parser-rb.js:173:Mass_Assignment_(req.body_Direct_to_Model)",
598
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
599
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
600
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
601
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
602
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
603
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
604
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
605
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
606
+ "toctou-fs:type-stubs.js:48"
607
+ ]
608
+ },
609
+ {
610
+ "timestamp": "2026-05-27T01:45:34.880Z",
611
+ "label": "scan",
612
+ "total": 15,
613
+ "critical": 0,
614
+ "high": 5,
615
+ "medium": 10,
616
+ "low": 0,
617
+ "kev": 0,
618
+ "ids": [
619
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
620
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
621
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
622
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
623
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
624
+ "struct:parser-rb.js:173:Mass_Assignment_(req.body_Direct_to_Model)",
625
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
626
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
627
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
628
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
629
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
630
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
631
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
632
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
633
+ "toctou-fs:type-stubs.js:48"
634
+ ]
635
+ },
636
+ {
637
+ "timestamp": "2026-05-27T01:52:34.256Z",
638
+ "label": "scan",
639
+ "total": 15,
640
+ "critical": 0,
641
+ "high": 5,
642
+ "medium": 10,
643
+ "low": 0,
644
+ "kev": 0,
645
+ "ids": [
646
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
647
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
648
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
649
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
650
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
651
+ "struct:parser-rb.js:173:Mass_Assignment_(req.body_Direct_to_Model)",
652
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
653
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
654
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
655
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
656
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
657
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
658
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
659
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
660
+ "toctou-fs:type-stubs.js:48"
661
+ ]
662
+ },
663
+ {
664
+ "timestamp": "2026-05-27T01:58:26.255Z",
665
+ "label": "scan",
666
+ "total": 15,
667
+ "critical": 0,
668
+ "high": 5,
669
+ "medium": 10,
670
+ "low": 0,
671
+ "kev": 0,
672
+ "ids": [
673
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
674
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
675
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
676
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
677
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
678
+ "struct:parser-rb.js:201:Mass_Assignment_(req.body_Direct_to_Model)",
679
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
680
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
681
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
682
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
683
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
684
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
685
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
686
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
687
+ "toctou-fs:type-stubs.js:48"
688
+ ]
689
+ },
690
+ {
691
+ "timestamp": "2026-05-27T02:04:45.598Z",
692
+ "label": "scan",
693
+ "total": 15,
694
+ "critical": 0,
695
+ "high": 5,
696
+ "medium": 10,
697
+ "low": 0,
698
+ "kev": 0,
699
+ "ids": [
700
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
701
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
702
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
703
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
704
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
705
+ "struct:parser-rb.js:201:Mass_Assignment_(req.body_Direct_to_Model)",
706
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
707
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
708
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
709
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
710
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
711
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
712
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
713
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
714
+ "toctou-fs:type-stubs.js:48"
715
+ ]
716
+ },
717
+ {
718
+ "timestamp": "2026-05-27T02:18:40.757Z",
719
+ "label": "scan",
720
+ "total": 15,
721
+ "critical": 0,
722
+ "high": 5,
723
+ "medium": 10,
724
+ "low": 0,
725
+ "kev": 0,
726
+ "ids": [
727
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
728
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
729
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
730
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
731
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
732
+ "struct:parser-rb.js:201:Mass_Assignment_(req.body_Direct_to_Model)",
733
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
734
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
735
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
736
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
737
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
738
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
739
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
740
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
741
+ "toctou-fs:type-stubs.js:48"
742
+ ]
743
+ },
744
+ {
745
+ "timestamp": "2026-05-27T02:22:42.198Z",
746
+ "label": "scan",
747
+ "total": 15,
748
+ "critical": 0,
749
+ "high": 5,
750
+ "medium": 10,
751
+ "low": 0,
752
+ "kev": 0,
753
+ "ids": [
754
+ "struct:parser-cs.js:208:Mass_Assignment_(req.body_Direct_to_Model)",
755
+ "struct:parser-go.js:253:Mass_Assignment_(req.body_Direct_to_Model)",
756
+ "struct:parser-kt.js:207:Mass_Assignment_(req.body_Direct_to_Model)",
757
+ "struct:parser-php.js:209:Mass_Assignment_(req.body_Direct_to_Model)",
758
+ "struct:parser-py-cst.js:91:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
759
+ "struct:parser-rb.js:201:Mass_Assignment_(req.body_Direct_to_Model)",
760
+ "struct:type-stubs.js:190:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
761
+ "struct:type-stubs.js:198:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
762
+ "struct:type-stubs.js:216:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
763
+ "struct:type-stubs.js:245:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
764
+ "struct:type-stubs.js:48:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
765
+ "struct:type-stubs.js:57:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
766
+ "struct:type-stubs.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
767
+ "struct:type-stubs.js:79:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
768
+ "toctou-fs:type-stubs.js:48"
769
+ ]
770
+ }
771
+ ]