@clear-capabilities/agentic-security-scanner 0.78.0 → 0.80.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (126) hide show
  1. package/bin/.agentic-security/findings.json +16 -16
  2. package/bin/.agentic-security/last-scan.json +16 -16
  3. package/bin/.agentic-security/last-scan.json.sig +1 -1
  4. package/bin/.agentic-security/scan-history.json +51 -0
  5. package/bin/.agentic-security/streak.json +5 -5
  6. package/bin/agentic-security.js +22 -7
  7. package/dist/178.index.js +1 -1
  8. package/dist/333.index.js +283 -0
  9. package/dist/384.index.js +1 -1
  10. package/dist/476.index.js +5 -5
  11. package/dist/637.index.js +1 -1
  12. package/dist/700.index.js +138 -0
  13. package/dist/718.index.js +53 -0
  14. package/dist/838.index.js +1 -1
  15. package/dist/985.index.js +95 -1
  16. package/dist/agentic-security.mjs +83 -83
  17. package/dist/agentic-security.mjs.sha256 +1 -1
  18. package/package.json +6 -4
  19. package/src/.agentic-security/findings.json +29799 -7803
  20. package/src/.agentic-security/last-scan.json +29799 -7803
  21. package/src/.agentic-security/last-scan.json.sig +1 -1
  22. package/src/.agentic-security/scan-history.json +5119 -2611
  23. package/src/.agentic-security/streak.json +6 -6
  24. package/src/dataflow/.agentic-security/findings.json +2879 -308
  25. package/src/dataflow/.agentic-security/last-scan.json +2879 -308
  26. package/src/dataflow/.agentic-security/last-scan.json.sig +1 -1
  27. package/src/dataflow/.agentic-security/scan-history.json +68 -520
  28. package/src/dataflow/.agentic-security/streak.json +6 -7
  29. package/src/dataflow/cross-service-taint.js +201 -0
  30. package/src/dataflow/engine.js +52 -8
  31. package/src/dataflow/formal-verify.js +204 -0
  32. package/src/dataflow/ifds-precise.js +222 -0
  33. package/src/dataflow/k2-summary-cache.js +153 -0
  34. package/src/dataflow/lib-taint-summaries.js +198 -0
  35. package/src/dataflow/privacy-taint.js +205 -0
  36. package/src/dataflow/smt-feasibility.js +189 -0
  37. package/src/engine.js +890 -132
  38. package/src/integrations/index.js +2 -1
  39. package/src/ir/.agentic-security/findings.json +240 -6
  40. package/src/ir/.agentic-security/last-scan.json +240 -6
  41. package/src/ir/.agentic-security/last-scan.json.sig +1 -1
  42. package/src/ir/.agentic-security/scan-history.json +16 -594
  43. package/src/ir/.agentic-security/streak.json +8 -9
  44. package/src/ir/callgraph.js +27 -7
  45. package/src/ir/cpp-preprocessor.js +142 -0
  46. package/src/ir/csharp-ir.js +604 -0
  47. package/src/ir/universal-ir.js +403 -0
  48. package/src/llm-validator/index.js +7 -5
  49. package/src/mcp/.agentic-security/findings.json +8632 -0
  50. package/src/mcp/.agentic-security/last-scan.json +8632 -0
  51. package/src/mcp/.agentic-security/last-scan.json.sig +1 -0
  52. package/src/mcp/.agentic-security/scan-history.json +143 -0
  53. package/src/mcp/.agentic-security/streak.json +20 -0
  54. package/src/mcp/audit.js +5 -0
  55. package/src/mcp/tools.js +90 -1
  56. package/src/posture/.agentic-security/findings.json +16809 -4367
  57. package/src/posture/.agentic-security/last-scan.json +16809 -4367
  58. package/src/posture/.agentic-security/last-scan.json.sig +1 -1
  59. package/src/posture/.agentic-security/scan-history.json +6689 -177
  60. package/src/posture/.agentic-security/streak.json +8 -7
  61. package/src/posture/api-contract.js +193 -0
  62. package/src/posture/attack-taxonomy.js +227 -0
  63. package/src/posture/calibration-drift.js +2 -1
  64. package/src/posture/calibration.js +3 -2
  65. package/src/posture/compliance-policy.js +218 -0
  66. package/src/posture/composite-risk.js +122 -0
  67. package/src/posture/csharp-analysis.js +330 -0
  68. package/src/posture/exploit-bundle.js +210 -0
  69. package/src/posture/federated-learning.js +172 -0
  70. package/src/posture/fix-history.js +8 -2
  71. package/src/posture/license-attributions.js +94 -0
  72. package/src/posture/license-graph.js +238 -0
  73. package/src/posture/pqc-migration-plan.js +158 -0
  74. package/src/posture/profile.js +4 -5
  75. package/src/posture/reachability-filter.js +33 -2
  76. package/src/posture/realtime-cve-monitor.js +214 -0
  77. package/src/posture/rule-overrides.js +2 -3
  78. package/src/posture/rule-pack-signing.js +2 -3
  79. package/src/posture/rule-synthesis.js +5 -6
  80. package/src/posture/runtime-correlation.js +174 -0
  81. package/src/posture/sbom-diff.js +171 -0
  82. package/src/posture/sca-policy.js +235 -0
  83. package/src/posture/sca-upgrade.js +259 -0
  84. package/src/posture/security-trend.js +4 -7
  85. package/src/posture/state-dir.js +124 -0
  86. package/src/posture/streak.js +3 -0
  87. package/src/posture/suppressions.js +5 -8
  88. package/src/posture/threat-model-auto.js +268 -0
  89. package/src/posture/triage-learning.js +170 -0
  90. package/src/posture/triage.js +29 -6
  91. package/src/posture/validator-metrics.js +3 -6
  92. package/src/sast/.agentic-security/findings.json +996 -32
  93. package/src/sast/.agentic-security/last-scan.json +996 -32
  94. package/src/sast/.agentic-security/last-scan.json.sig +1 -1
  95. package/src/sast/.agentic-security/scan-history.json +565 -32
  96. package/src/sast/.agentic-security/streak.json +10 -8
  97. package/src/sast/_secret-entropy.js +145 -0
  98. package/src/sast/cloud-iam.js +312 -0
  99. package/src/sast/cpp.js +138 -4
  100. package/src/sast/crypto-protocol.js +388 -0
  101. package/src/sast/csharp-tokenizer.js +392 -0
  102. package/src/sast/csharp.js +924 -138
  103. package/src/sast/dapp-frontend.js +200 -0
  104. package/src/sast/db-taint.js +24 -0
  105. package/src/sast/k8s-admission.js +271 -0
  106. package/src/sast/llm-app.js +272 -0
  107. package/src/sast/ml-supply-chain.js +259 -0
  108. package/src/sast/mobile.js +224 -0
  109. package/src/sast/post-quantum-crypto.js +348 -0
  110. package/src/sast/rust.js +26 -0
  111. package/src/sast/web3-advanced.js +375 -0
  112. package/src/sca/.agentic-security/findings.json +6044 -171
  113. package/src/sca/.agentic-security/last-scan.json +6044 -171
  114. package/src/sca/.agentic-security/last-scan.json.sig +1 -1
  115. package/src/sca/.agentic-security/scan-history.json +83 -6
  116. package/src/sca/.agentic-security/streak.json +9 -9
  117. package/src/sca/CLAUDE.md +161 -0
  118. package/src/sca/binary-metadata.js +146 -0
  119. package/src/sca/py-package-functions.js +118 -0
  120. package/src/sca/sigstore-verify.js +215 -0
  121. package/src/sca/vendor-detect.js +53 -0
  122. package/src/report/.agentic-security/findings.json +0 -80
  123. package/src/report/.agentic-security/last-scan.json +0 -80
  124. package/src/report/.agentic-security/last-scan.json.sig +0 -1
  125. package/src/report/.agentic-security/scan-history.json +0 -35
  126. package/src/report/.agentic-security/streak.json +0 -22
package/src/dataflow/.agentic-security/scan-history.json CHANGED
@@ -1,431 +1,6 @@
1
1
  [
2
2
  {
3
- "timestamp": "2026-05-26T15:54:30.242Z",
4
- "label": "scan",
5
- "total": 13,
6
- "critical": 0,
7
- "high": 0,
8
- "medium": 13,
9
- "low": 0,
10
- "kev": 0,
11
- "ids": [
12
- "ssrf-meta-hardcoded:catalog.js:439",
13
- "ssrf-meta-hardcoded:exploit-prover.js:33",
14
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
15
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
16
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
17
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
18
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
19
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
20
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
21
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
22
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
23
- "toctou-fs:incremental.js:50",
24
- "toctou-fs:incremental.js:68"
25
- ]
26
- },
27
- {
28
- "timestamp": "2026-05-26T15:59:57.002Z",
29
- "label": "scan",
30
- "total": 13,
31
- "critical": 0,
32
- "high": 0,
33
- "medium": 13,
34
- "low": 0,
35
- "kev": 0,
36
- "ids": [
37
- "ssrf-meta-hardcoded:catalog.js:459",
38
- "ssrf-meta-hardcoded:exploit-prover.js:33",
39
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
40
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
41
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
42
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
43
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
44
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
45
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
46
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
47
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
48
- "toctou-fs:incremental.js:50",
49
- "toctou-fs:incremental.js:68"
50
- ]
51
- },
52
- {
53
- "timestamp": "2026-05-26T16:16:54.427Z",
54
- "label": "scan",
55
- "total": 13,
56
- "critical": 0,
57
- "high": 0,
58
- "medium": 13,
59
- "low": 0,
60
- "kev": 0,
61
- "ids": [
62
- "ssrf-meta-hardcoded:catalog.js:496",
63
- "ssrf-meta-hardcoded:exploit-prover.js:33",
64
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
65
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
66
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
67
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
68
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
69
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
70
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
71
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
72
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
73
- "toctou-fs:incremental.js:50",
74
- "toctou-fs:incremental.js:68"
75
- ]
76
- },
77
- {
78
- "timestamp": "2026-05-26T16:42:13.064Z",
79
- "label": "scan",
80
- "total": 13,
81
- "critical": 0,
82
- "high": 0,
83
- "medium": 13,
84
- "low": 0,
85
- "kev": 0,
86
- "ids": [
87
- "ssrf-meta-hardcoded:catalog.js:496",
88
- "ssrf-meta-hardcoded:exploit-prover.js:33",
89
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
90
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
91
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
92
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
93
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
94
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
95
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
96
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
97
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
98
- "toctou-fs:incremental.js:50",
99
- "toctou-fs:incremental.js:68"
100
- ]
101
- },
102
- {
103
- "timestamp": "2026-05-26T16:42:59.107Z",
104
- "label": "scan",
105
- "total": 13,
106
- "critical": 0,
107
- "high": 0,
108
- "medium": 13,
109
- "low": 0,
110
- "kev": 0,
111
- "ids": [
112
- "ssrf-meta-hardcoded:catalog.js:496",
113
- "ssrf-meta-hardcoded:exploit-prover.js:33",
114
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
115
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
116
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
117
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
118
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
119
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
120
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
121
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
122
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
123
- "toctou-fs:incremental.js:50",
124
- "toctou-fs:incremental.js:68"
125
- ]
126
- },
127
- {
128
- "timestamp": "2026-05-26T16:46:50.684Z",
129
- "label": "scan",
130
- "total": 13,
131
- "critical": 0,
132
- "high": 0,
133
- "medium": 13,
134
- "low": 0,
135
- "kev": 0,
136
- "ids": [
137
- "ssrf-meta-hardcoded:catalog.js:496",
138
- "ssrf-meta-hardcoded:exploit-prover.js:33",
139
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
140
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
141
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
142
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
143
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
144
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
145
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
146
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
147
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
148
- "toctou-fs:incremental.js:50",
149
- "toctou-fs:incremental.js:68"
150
- ]
151
- },
152
- {
153
- "timestamp": "2026-05-26T16:47:41.341Z",
154
- "label": "scan",
155
- "total": 13,
156
- "critical": 0,
157
- "high": 0,
158
- "medium": 13,
159
- "low": 0,
160
- "kev": 0,
161
- "ids": [
162
- "ssrf-meta-hardcoded:catalog.js:496",
163
- "ssrf-meta-hardcoded:exploit-prover.js:33",
164
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
165
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
166
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
167
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
168
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
169
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
170
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
171
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
172
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
173
- "toctou-fs:incremental.js:50",
174
- "toctou-fs:incremental.js:68"
175
- ]
176
- },
177
- {
178
- "timestamp": "2026-05-26T16:48:31.461Z",
179
- "label": "scan",
180
- "total": 13,
181
- "critical": 0,
182
- "high": 0,
183
- "medium": 13,
184
- "low": 0,
185
- "kev": 0,
186
- "ids": [
187
- "ssrf-meta-hardcoded:catalog.js:496",
188
- "ssrf-meta-hardcoded:exploit-prover.js:33",
189
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
190
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
191
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
192
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
193
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
194
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
195
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
196
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
197
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
198
- "toctou-fs:incremental.js:50",
199
- "toctou-fs:incremental.js:68"
200
- ]
201
- },
202
- {
203
- "timestamp": "2026-05-26T17:02:35.530Z",
204
- "label": "scan",
205
- "total": 13,
206
- "critical": 0,
207
- "high": 0,
208
- "medium": 13,
209
- "low": 0,
210
- "kev": 0,
211
- "ids": [
212
- "ssrf-meta-hardcoded:catalog.js:496",
213
- "ssrf-meta-hardcoded:exploit-prover.js:33",
214
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
215
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
216
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
217
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
218
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
219
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
220
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
221
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
222
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
223
- "toctou-fs:incremental.js:50",
224
- "toctou-fs:incremental.js:68"
225
- ]
226
- },
227
- {
228
- "timestamp": "2026-05-26T17:05:59.505Z",
229
- "label": "scan",
230
- "total": 13,
231
- "critical": 0,
232
- "high": 0,
233
- "medium": 13,
234
- "low": 0,
235
- "kev": 0,
236
- "ids": [
237
- "ssrf-meta-hardcoded:catalog.js:496",
238
- "ssrf-meta-hardcoded:exploit-prover.js:33",
239
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
240
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
241
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
242
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
243
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
244
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
245
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
246
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
247
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
248
- "toctou-fs:incremental.js:50",
249
- "toctou-fs:incremental.js:68"
250
- ]
251
- },
252
- {
253
- "timestamp": "2026-05-26T17:11:46.314Z",
254
- "label": "scan",
255
- "total": 13,
256
- "critical": 0,
257
- "high": 0,
258
- "medium": 13,
259
- "low": 0,
260
- "kev": 0,
261
- "ids": [
262
- "ssrf-meta-hardcoded:catalog.js:496",
263
- "ssrf-meta-hardcoded:exploit-prover.js:33",
264
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
265
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
266
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
267
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
268
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
269
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
270
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
271
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
272
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
273
- "toctou-fs:incremental.js:50",
274
- "toctou-fs:incremental.js:68"
275
- ]
276
- },
277
- {
278
- "timestamp": "2026-05-27T00:47:42.438Z",
279
- "label": "scan",
280
- "total": 13,
281
- "critical": 0,
282
- "high": 0,
283
- "medium": 13,
284
- "low": 0,
285
- "kev": 0,
286
- "ids": [
287
- "ssrf-meta-hardcoded:catalog.js:505",
288
- "ssrf-meta-hardcoded:exploit-prover.js:33",
289
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
290
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
291
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
292
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
293
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
294
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
295
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
296
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
297
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
298
- "toctou-fs:incremental.js:50",
299
- "toctou-fs:incremental.js:68"
300
- ]
301
- },
302
- {
303
- "timestamp": "2026-05-27T00:49:00.083Z",
304
- "label": "scan",
305
- "total": 13,
306
- "critical": 0,
307
- "high": 0,
308
- "medium": 13,
309
- "low": 0,
310
- "kev": 0,
311
- "ids": [
312
- "ssrf-meta-hardcoded:catalog.js:508",
313
- "ssrf-meta-hardcoded:exploit-prover.js:33",
314
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
315
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
316
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
317
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
318
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
319
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
320
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
321
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
322
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
323
- "toctou-fs:incremental.js:50",
324
- "toctou-fs:incremental.js:68"
325
- ]
326
- },
327
- {
328
- "timestamp": "2026-05-27T00:52:13.881Z",
329
- "label": "scan",
330
- "total": 13,
331
- "critical": 0,
332
- "high": 0,
333
- "medium": 13,
334
- "low": 0,
335
- "kev": 0,
336
- "ids": [
337
- "ssrf-meta-hardcoded:catalog.js:515",
338
- "ssrf-meta-hardcoded:exploit-prover.js:33",
339
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
340
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
341
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
342
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
343
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
344
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
345
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
346
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
347
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
348
- "toctou-fs:incremental.js:50",
349
- "toctou-fs:incremental.js:68"
350
- ]
351
- },
352
- {
353
- "timestamp": "2026-05-27T00:56:08.313Z",
354
- "label": "scan",
355
- "total": 13,
356
- "critical": 0,
357
- "high": 0,
358
- "medium": 13,
359
- "low": 0,
360
- "kev": 0,
361
- "ids": [
362
- "ssrf-meta-hardcoded:catalog.js:527",
363
- "ssrf-meta-hardcoded:exploit-prover.js:33",
364
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
365
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
366
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
367
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
368
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
369
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
370
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
371
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
372
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
373
- "toctou-fs:incremental.js:50",
374
- "toctou-fs:incremental.js:68"
375
- ]
376
- },
377
- {
378
- "timestamp": "2026-05-27T00:57:22.450Z",
379
- "label": "scan",
380
- "total": 13,
381
- "critical": 0,
382
- "high": 0,
383
- "medium": 13,
384
- "low": 0,
385
- "kev": 0,
386
- "ids": [
387
- "ssrf-meta-hardcoded:catalog.js:538",
388
- "ssrf-meta-hardcoded:exploit-prover.js:33",
389
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
390
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
391
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
392
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
393
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
394
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
395
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
396
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
397
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
398
- "toctou-fs:incremental.js:50",
399
- "toctou-fs:incremental.js:68"
400
- ]
401
- },
402
- {
403
- "timestamp": "2026-05-27T02:34:32.799Z",
404
- "label": "scan",
405
- "total": 13,
406
- "critical": 0,
407
- "high": 0,
408
- "medium": 13,
409
- "low": 0,
410
- "kev": 0,
411
- "ids": [
412
- "ssrf-meta-hardcoded:catalog.js:538",
413
- "ssrf-meta-hardcoded:exploit-prover.js:33",
414
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
415
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
416
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
417
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
418
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
419
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
420
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
421
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
422
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
423
- "toctou-fs:incremental.js:50",
424
- "toctou-fs:incremental.js:68"
425
- ]
426
- },
427
- {
428
- "timestamp": "2026-05-27T02:44:28.731Z",
3
+ "timestamp": "2026-05-28T21:51:05.438Z",
429
4
  "label": "scan",
430
5
  "total": 13,
431
6
  "critical": 0,
@@ -450,7 +25,7 @@
450
25
  ]
451
26
  },
452
27
  {
453
- "timestamp": "2026-05-27T02:46:28.817Z",
28
+ "timestamp": "2026-05-28T21:58:02.385Z",
454
29
  "label": "scan",
455
30
  "total": 13,
456
31
  "critical": 0,
@@ -475,17 +50,20 @@
475
50
  ]
476
51
  },
477
52
  {
478
- "timestamp": "2026-05-27T02:51:52.901Z",
53
+ "timestamp": "2026-05-29T06:25:27.255Z",
479
54
  "label": "scan",
480
- "total": 13,
55
+ "total": 17,
481
56
  "critical": 0,
482
57
  "high": 0,
483
- "medium": 13,
58
+ "medium": 17,
484
59
  "low": 0,
485
60
  "kev": 0,
486
61
  "ids": [
487
62
  "ssrf-meta-hardcoded:catalog.js:538",
488
63
  "ssrf-meta-hardcoded:exploit-prover.js:33",
64
+ "struct:ifds-precise.js:177:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
65
+ "struct:ifds-precise.js:179:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
66
+ "struct:ifds-precise.js:206:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
489
67
  "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
490
68
  "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
491
69
  "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
@@ -495,22 +73,26 @@
495
73
  "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
496
74
  "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
497
75
  "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
76
+ "toctou-fs:ifds-precise.js:177",
498
77
  "toctou-fs:incremental.js:50",
499
78
  "toctou-fs:incremental.js:68"
500
79
  ]
501
80
  },
502
81
  {
503
- "timestamp": "2026-05-27T03:01:05.846Z",
82
+ "timestamp": "2026-05-29T06:26:15.864Z",
504
83
  "label": "scan",
505
- "total": 13,
84
+ "total": 17,
506
85
  "critical": 0,
507
86
  "high": 0,
508
- "medium": 13,
87
+ "medium": 17,
509
88
  "low": 0,
510
89
  "kev": 0,
511
90
  "ids": [
512
91
  "ssrf-meta-hardcoded:catalog.js:538",
513
92
  "ssrf-meta-hardcoded:exploit-prover.js:33",
93
+ "struct:ifds-precise.js:177:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
94
+ "struct:ifds-precise.js:179:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
95
+ "struct:ifds-precise.js:206:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
514
96
  "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
515
97
  "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
516
98
  "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
@@ -520,22 +102,30 @@
520
102
  "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
521
103
  "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
522
104
  "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
105
+ "toctou-fs:ifds-precise.js:177",
523
106
  "toctou-fs:incremental.js:50",
524
107
  "toctou-fs:incremental.js:68"
525
108
  ]
526
109
  },
527
110
  {
528
- "timestamp": "2026-05-27T03:14:22.409Z",
111
+ "timestamp": "2026-05-29T06:26:55.369Z",
529
112
  "label": "scan",
530
- "total": 13,
113
+ "total": 23,
531
114
  "critical": 0,
532
115
  "high": 0,
533
- "medium": 13,
116
+ "medium": 23,
534
117
  "low": 0,
535
118
  "kev": 0,
536
119
  "ids": [
537
120
  "ssrf-meta-hardcoded:catalog.js:538",
538
121
  "ssrf-meta-hardcoded:exploit-prover.js:33",
122
+ "struct:cross-service-taint.js:53:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
123
+ "struct:cross-service-taint.js:55:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
124
+ "struct:cross-service-taint.js:97:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
125
+ "struct:cross-service-taint.js:98:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
126
+ "struct:ifds-precise.js:177:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
127
+ "struct:ifds-precise.js:179:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
128
+ "struct:ifds-precise.js:206:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
539
129
  "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
540
130
  "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
541
131
  "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
@@ -545,22 +135,32 @@
545
135
  "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
546
136
  "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
547
137
  "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
138
+ "toctou-fs:cross-service-taint.js:53",
139
+ "toctou-fs:cross-service-taint.js:97",
140
+ "toctou-fs:ifds-precise.js:177",
548
141
  "toctou-fs:incremental.js:50",
549
142
  "toctou-fs:incremental.js:68"
550
143
  ]
551
144
  },
552
145
  {
553
- "timestamp": "2026-05-27T09:06:49.555Z",
146
+ "timestamp": "2026-05-29T06:31:00.224Z",
554
147
  "label": "scan",
555
- "total": 13,
148
+ "total": 23,
556
149
  "critical": 0,
557
150
  "high": 0,
558
- "medium": 13,
151
+ "medium": 23,
559
152
  "low": 0,
560
153
  "kev": 0,
561
154
  "ids": [
562
155
  "ssrf-meta-hardcoded:catalog.js:538",
563
156
  "ssrf-meta-hardcoded:exploit-prover.js:33",
157
+ "struct:cross-service-taint.js:53:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
158
+ "struct:cross-service-taint.js:55:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
159
+ "struct:cross-service-taint.js:97:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
160
+ "struct:cross-service-taint.js:98:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
161
+ "struct:ifds-precise.js:177:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
162
+ "struct:ifds-precise.js:179:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
163
+ "struct:ifds-precise.js:206:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
564
164
  "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
565
165
  "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
566
166
  "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
@@ -570,22 +170,32 @@
570
170
  "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
571
171
  "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
572
172
  "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
173
+ "toctou-fs:cross-service-taint.js:53",
174
+ "toctou-fs:cross-service-taint.js:97",
175
+ "toctou-fs:ifds-precise.js:177",
573
176
  "toctou-fs:incremental.js:50",
574
177
  "toctou-fs:incremental.js:68"
575
178
  ]
576
179
  },
577
180
  {
578
- "timestamp": "2026-05-27T09:07:34.195Z",
181
+ "timestamp": "2026-05-29T06:32:47.791Z",
579
182
  "label": "scan",
580
- "total": 13,
183
+ "total": 23,
581
184
  "critical": 0,
582
185
  "high": 0,
583
- "medium": 13,
186
+ "medium": 23,
584
187
  "low": 0,
585
188
  "kev": 0,
586
189
  "ids": [
587
190
  "ssrf-meta-hardcoded:catalog.js:538",
588
191
  "ssrf-meta-hardcoded:exploit-prover.js:33",
192
+ "struct:cross-service-taint.js:53:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
193
+ "struct:cross-service-taint.js:55:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
194
+ "struct:cross-service-taint.js:97:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
195
+ "struct:cross-service-taint.js:98:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
196
+ "struct:ifds-precise.js:177:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
197
+ "struct:ifds-precise.js:179:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
198
+ "struct:ifds-precise.js:206:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
589
199
  "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
590
200
  "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
591
201
  "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
@@ -595,97 +205,32 @@
595
205
  "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
596
206
  "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
597
207
  "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
208
+ "toctou-fs:cross-service-taint.js:53",
209
+ "toctou-fs:cross-service-taint.js:97",
210
+ "toctou-fs:ifds-precise.js:177",
598
211
  "toctou-fs:incremental.js:50",
599
212
  "toctou-fs:incremental.js:68"
600
213
  ]
601
214
  },
602
215
  {
603
- "timestamp": "2026-05-27T09:27:55.033Z",
216
+ "timestamp": "2026-05-29T06:49:36.287Z",
604
217
  "label": "scan",
605
- "total": 13,
218
+ "total": 23,
606
219
  "critical": 0,
607
220
  "high": 0,
608
- "medium": 13,
609
- "low": 0,
610
- "kev": 0,
611
- "ids": [
612
- "ssrf-meta-hardcoded:catalog.js:538",
613
- "ssrf-meta-hardcoded:exploit-prover.js:33",
614
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
615
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
616
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
617
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
618
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
619
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
620
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
621
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
622
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
623
- "toctou-fs:incremental.js:50",
624
- "toctou-fs:incremental.js:68"
625
- ]
626
- },
627
- {
628
- "timestamp": "2026-05-27T09:28:46.801Z",
629
- "label": "scan",
630
- "total": 13,
631
- "critical": 0,
632
- "high": 0,
633
- "medium": 13,
634
- "low": 0,
635
- "kev": 0,
636
- "ids": [
637
- "ssrf-meta-hardcoded:catalog.js:538",
638
- "ssrf-meta-hardcoded:exploit-prover.js:33",
639
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
640
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
641
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
642
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
643
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
644
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
645
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
646
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
647
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
648
- "toctou-fs:incremental.js:50",
649
- "toctou-fs:incremental.js:68"
650
- ]
651
- },
652
- {
653
- "timestamp": "2026-05-27T09:29:26.721Z",
654
- "label": "scan",
655
- "total": 13,
656
- "critical": 0,
657
- "high": 0,
658
- "medium": 13,
659
- "low": 0,
660
- "kev": 0,
661
- "ids": [
662
- "ssrf-meta-hardcoded:catalog.js:538",
663
- "ssrf-meta-hardcoded:exploit-prover.js:33",
664
- "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
665
- "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
666
- "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
667
- "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
668
- "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
669
- "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
670
- "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
671
- "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
672
- "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
673
- "toctou-fs:incremental.js:50",
674
- "toctou-fs:incremental.js:68"
675
- ]
676
- },
677
- {
678
- "timestamp": "2026-05-27T09:30:02.365Z",
679
- "label": "scan",
680
- "total": 13,
681
- "critical": 0,
682
- "high": 0,
683
- "medium": 13,
221
+ "medium": 23,
684
222
  "low": 0,
685
223
  "kev": 0,
686
224
  "ids": [
687
225
  "ssrf-meta-hardcoded:catalog.js:538",
688
226
  "ssrf-meta-hardcoded:exploit-prover.js:33",
227
+ "struct:cross-service-taint.js:53:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
228
+ "struct:cross-service-taint.js:55:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
229
+ "struct:cross-service-taint.js:97:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
230
+ "struct:cross-service-taint.js:98:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
231
+ "struct:ifds-precise.js:177:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
232
+ "struct:ifds-precise.js:179:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
233
+ "struct:ifds-precise.js:206:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
689
234
  "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
690
235
  "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
691
236
  "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
@@ -695,6 +240,9 @@
695
240
  "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
696
241
  "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
697
242
  "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
243
+ "toctou-fs:cross-service-taint.js:53",
244
+ "toctou-fs:cross-service-taint.js:97",
245
+ "toctou-fs:ifds-precise.js:177",
698
246
  "toctou-fs:incremental.js:50",
699
247
  "toctou-fs:incremental.js:68"
700
248
  ]