@wakastellar/ui 4.0.0-dev.0 → 4.0.1

package/dist/components/waka-secret-card/index.es.js

@@ -0,0 +1,291 @@
+"use client";
+"use client";
+import { cn as e } from "../../utils/cn.es.js";
+import { Badge as t } from "../badge/index.es.js";
+import { Button as n } from "../button/index.es.js";
+import { Card as r, CardContent as i, CardHeader as a, CardTitle as o } from "../card/index.es.js";
+import * as s from "react";
+import { AlertTriangle as c, Calendar as l, CheckCircle2 as u, Clock as d, Copy as f, Eye as p, EyeOff as m, History as h, Key as g, RotateCcw as _, Shield as v, Trash2 as y, User as b } from "lucide-react";
+import { jsx as x, jsxs as S } from "react/jsx-runtime";
+//#region src/components/waka-secret-card/index.tsx
+var C = {
+	"api-key": {
+		icon: g,
+		label: "API Key",
+		color: "text-blue-500"
+	},
+	password: {
+		icon: v,
+		label: "Password",
+		color: "text-purple-500"
+	},
+	certificate: {
+		icon: v,
+		label: "Certificate",
+		color: "text-green-500"
+	},
+	token: {
+		icon: g,
+		label: "Token",
+		color: "text-orange-500"
+	},
+	other: {
+		icon: g,
+		label: "Secret",
+		color: "text-gray-500"
+	}
+};
+function w(e) {
+	return e.toLocaleDateString("fr-FR", {
+		day: "2-digit",
+		month: "short",
+		year: "numeric"
+	});
+}
+function T(e) {
+	let t = Date.now() - e.getTime(), n = Math.floor(t / 6e4), r = Math.floor(n / 60), i = Math.floor(r / 24);
+	return i > 30 ? w(e) : i > 0 ? `${i}d ago` : r > 0 ? `${r}h ago` : `${n}m ago`;
+}
+function E(e) {
+	if (!e) return !1;
+	let t = e.getTime() - Date.now();
+	return t > 0 && t < 10080 * 60 * 1e3;
+}
+function D(e) {
+	return e ? e.getTime() < Date.now() : !1;
+}
+function O(e) {
+	return !e.rotationPeriod || !e.rotatedAt ? !1 : Math.floor((Date.now() - e.rotatedAt.getTime()) / (1440 * 60 * 1e3)) >= e.rotationPeriod;
+}
+function k({ secret: g, onRotate: v, onDelete: k, onCopy: A, onView: j, isValueVisible: M = !1, showHistory: N = !1, compact: P = !1, className: F }) {
+	let [I, L] = s.useState(!1), R = C[g.type], z = R.icon, B = D(g.expiresAt), V = E(g.expiresAt), H = O(g), U = () => {
+		A?.(), L(!0), setTimeout(() => L(!1), 2e3);
+	};
+	return P ? /* @__PURE__ */ S("div", {
+		className: e("flex items-center gap-3 p-3 border rounded-lg hover:bg-muted/30 transition-colors", B && "border-red-500/50 bg-red-500/5", V && !B && "border-yellow-500/50 bg-yellow-500/5", H && "border-orange-500/50", F),
+		children: [
+			/* @__PURE__ */ x(z, { className: e("h-5 w-5 shrink-0", R.color) }),
+			/* @__PURE__ */ S("div", {
+				className: "flex-1 min-w-0",
+				children: [/* @__PURE__ */ x("div", {
+					className: "font-medium truncate",
+					children: g.name
+				}), /* @__PURE__ */ S("div", {
+					className: "text-xs text-muted-foreground flex items-center gap-2",
+					children: [/* @__PURE__ */ x("span", { children: R.label }), g.lastAccessedAt && /* @__PURE__ */ S("span", { children: ["Last used ", T(g.lastAccessedAt)] })]
+				})]
+			}),
+			B && /* @__PURE__ */ x(t, {
+				className: "bg-red-500 text-xs",
+				children: "Expired"
+			}),
+			V && !B && /* @__PURE__ */ x(t, {
+				className: "bg-yellow-500 text-xs",
+				children: "Expiring Soon"
+			}),
+			H && /* @__PURE__ */ S(t, {
+				variant: "outline",
+				className: "text-orange-500 text-xs",
+				children: [/* @__PURE__ */ x(_, { className: "h-3 w-3 mr-1" }), "Rotate"]
+			}),
+			/* @__PURE__ */ S("div", {
+				className: "flex items-center gap-1",
+				children: [
+					j && /* @__PURE__ */ x(n, {
+						variant: "ghost",
+						size: "sm",
+						className: "h-8 w-8 p-0",
+						onClick: j,
+						children: x(M ? m : p, { className: "h-4 w-4" })
+					}),
+					A && /* @__PURE__ */ x(n, {
+						variant: "ghost",
+						size: "sm",
+						className: "h-8 w-8 p-0",
+						onClick: U,
+						children: I ? /* @__PURE__ */ x(u, { className: "h-4 w-4 text-green-500" }) : /* @__PURE__ */ x(f, { className: "h-4 w-4" })
+					}),
+					v && /* @__PURE__ */ x(n, {
+						variant: "ghost",
+						size: "sm",
+						className: "h-8 w-8 p-0",
+						onClick: v,
+						children: /* @__PURE__ */ x(_, { className: "h-4 w-4" })
+					})
+				]
+			})
+		]
+	}) : /* @__PURE__ */ S(r, {
+		className: e(B && "border-red-500/50", V && !B && "border-yellow-500/50", F),
+		children: [/* @__PURE__ */ x(a, {
+			className: "pb-3",
+			children: /* @__PURE__ */ S("div", {
+				className: "flex items-start justify-between",
+				children: [/* @__PURE__ */ S("div", {
+					className: "flex items-center gap-3",
+					children: [/* @__PURE__ */ x("div", {
+						className: e("w-10 h-10 rounded-lg flex items-center justify-center", "bg-muted"),
+						children: /* @__PURE__ */ x(z, { className: e("h-5 w-5", R.color) })
+					}), /* @__PURE__ */ S("div", { children: [/* @__PURE__ */ x(o, {
+						className: "text-base",
+						children: g.name
+					}), /* @__PURE__ */ S("div", {
+						className: "flex items-center gap-2 mt-1",
+						children: [/* @__PURE__ */ x(t, {
+							variant: "outline",
+							className: "text-xs",
+							children: R.label
+						}), g.tags?.map((e) => /* @__PURE__ */ x(t, {
+							variant: "secondary",
+							className: "text-xs",
+							children: e
+						}, e))]
+					})] })]
+				}), /* @__PURE__ */ S("div", {
+					className: "flex items-center gap-1",
+					children: [
+						B && /* @__PURE__ */ S(t, {
+							className: "bg-red-500",
+							children: [/* @__PURE__ */ x(c, { className: "h-3 w-3 mr-1" }), "Expired"]
+						}),
+						V && !B && /* @__PURE__ */ S(t, {
+							className: "bg-yellow-500",
+							children: [
+								/* @__PURE__ */ x(d, { className: "h-3 w-3 mr-1" }),
+								"Expires ",
+								w(g.expiresAt)
+							]
+						}),
+						H && /* @__PURE__ */ S(t, {
+							variant: "outline",
+							className: "text-orange-500",
+							children: [/* @__PURE__ */ x(_, { className: "h-3 w-3 mr-1" }), "Needs Rotation"]
+						})
+					]
+				})]
+			})
+		}), /* @__PURE__ */ S(i, {
+			className: "space-y-4",
+			children: [
+				g.description && /* @__PURE__ */ x("p", {
+					className: "text-sm text-muted-foreground",
+					children: g.description
+				}),
+				g.value && /* @__PURE__ */ S("div", {
+					className: "flex items-center gap-2 p-2 bg-muted/50 rounded-lg font-mono text-sm",
+					children: [
+						/* @__PURE__ */ x("span", {
+							className: "flex-1 truncate",
+							children: M ? g.value : "•".repeat(24)
+						}),
+						j && /* @__PURE__ */ x(n, {
+							variant: "ghost",
+							size: "sm",
+							className: "h-7 w-7 p-0 shrink-0",
+							onClick: j,
+							children: x(M ? m : p, { className: "h-4 w-4" })
+						}),
+						A && /* @__PURE__ */ x(n, {
+							variant: "ghost",
+							size: "sm",
+							className: "h-7 w-7 p-0 shrink-0",
+							onClick: U,
+							children: I ? /* @__PURE__ */ x(u, { className: "h-4 w-4 text-green-500" }) : /* @__PURE__ */ x(f, { className: "h-4 w-4" })
+						})
+					]
+				}),
+				/* @__PURE__ */ S("div", {
+					className: "grid grid-cols-2 gap-4 text-sm",
+					children: [
+						/* @__PURE__ */ S("div", {
+							className: "flex items-center gap-2 text-muted-foreground",
+							children: [/* @__PURE__ */ x(l, { className: "h-4 w-4" }), /* @__PURE__ */ S("span", { children: ["Created ", w(g.createdAt)] })]
+						}),
+						/* @__PURE__ */ S("div", {
+							className: "flex items-center gap-2 text-muted-foreground",
+							children: [/* @__PURE__ */ x(d, { className: "h-4 w-4" }), /* @__PURE__ */ S("span", { children: ["Updated ", T(g.updatedAt)] })]
+						}),
+						g.rotatedAt && /* @__PURE__ */ S("div", {
+							className: "flex items-center gap-2 text-muted-foreground",
+							children: [/* @__PURE__ */ x(_, { className: "h-4 w-4" }), /* @__PURE__ */ S("span", { children: ["Rotated ", T(g.rotatedAt)] })]
+						}),
+						g.lastAccessedAt && /* @__PURE__ */ S("div", {
+							className: "flex items-center gap-2 text-muted-foreground",
+							children: [/* @__PURE__ */ x(b, { className: "h-4 w-4" }), /* @__PURE__ */ S("span", { children: [
+								"Used ",
+								T(g.lastAccessedAt),
+								g.lastAccessedBy && ` by ${g.lastAccessedBy}`
+							] })]
+						})
+					]
+				}),
+				N && g.accessHistory && g.accessHistory.length > 0 && /* @__PURE__ */ S("div", {
+					className: "border-t pt-4",
+					children: [/* @__PURE__ */ S("div", {
+						className: "flex items-center gap-2 mb-2 text-sm font-medium",
+						children: [/* @__PURE__ */ x(h, { className: "h-4 w-4" }), "Recent Access"]
+					}), /* @__PURE__ */ x("div", {
+						className: "space-y-1",
+						children: g.accessHistory.slice(0, 5).map((e, t) => /* @__PURE__ */ S("div", {
+							className: "flex items-center justify-between text-xs text-muted-foreground",
+							children: [/* @__PURE__ */ S("span", { children: [
+								e.user,
+								" - ",
+								e.action
+							] }), /* @__PURE__ */ x("span", { children: T(e.timestamp) })]
+						}, t))
+					})]
+				}),
+				/* @__PURE__ */ S("div", {
+					className: "flex items-center gap-2 pt-2 border-t",
+					children: [v && /* @__PURE__ */ S(n, {
+						variant: "outline",
+						size: "sm",
+						onClick: v,
+						children: [/* @__PURE__ */ x(_, { className: "h-4 w-4 mr-2" }), "Rotate"]
+					}), k && /* @__PURE__ */ S(n, {
+						variant: "outline",
+						size: "sm",
+						className: "text-destructive hover:text-destructive",
+						onClick: k,
+						children: [/* @__PURE__ */ x(y, { className: "h-4 w-4 mr-2" }), "Delete"]
+					})]
+				})
+			]
+		})]
+	});
+}
+var A = {
+	id: "1",
+	name: "Production API Key",
+	description: "Main API key for production services",
+	type: "api-key",
+	value: "sk_live_1234567890abcdefghijklmnopqrstuvwxyz",
+	createdAt: /* @__PURE__ */ new Date(Date.now() - 2160 * 36e5),
+	updatedAt: /* @__PURE__ */ new Date(Date.now() - 168 * 36e5),
+	rotatedAt: /* @__PURE__ */ new Date(Date.now() - 720 * 36e5),
+	rotationPeriod: 30,
+	expiresAt: new Date(Date.now() + 552 * 36e5),
+	lastAccessedAt: /* @__PURE__ */ new Date(Date.now() - 2 * 36e5),
+	lastAccessedBy: "api-gateway",
+	tags: ["production", "critical"],
+	accessHistory: [
+		{
+			user: "api-gateway",
+			action: "read",
+			timestamp: /* @__PURE__ */ new Date(Date.now() - 2 * 36e5)
+		},
+		{
+			user: "john.doe",
+			action: "rotate",
+			timestamp: /* @__PURE__ */ new Date(Date.now() - 720 * 36e5)
+		},
+		{
+			user: "api-gateway",
+			action: "read",
+			timestamp: /* @__PURE__ */ new Date(Date.now() - 24 * 36e5)
+		}
+	]
+};
+//#endregion
+export { k as WakaSecretCard, A as defaultSecret };

package/dist/components/waka-security-scan-result/index.cjs.js

@@ -0,0 +1 @@
+"use client";"use client";const e=require(`../../_virtual/_rolldown/runtime.cjs.js`),t=require(`../../utils/cn.cjs.js`),n=require(`../badge/index.cjs.js`),r=require(`../button/index.cjs.js`),i=require(`../input/index.cjs.js`),a=require(`../scroll-area/index.cjs.js`);let o=require(`react`);o=e.__toESM(o);let s=require(`lucide-react`),c=require(`react/jsx-runtime`);var l={critical:{icon:s.ShieldAlert,color:`text-red-600`,bgColor:`bg-red-500`,label:`Critical`,score:`9.0-10.0`},high:{icon:s.AlertCircle,color:`text-orange-500`,bgColor:`bg-orange-500`,label:`High`,score:`7.0-8.9`},medium:{icon:s.AlertTriangle,color:`text-yellow-500`,bgColor:`bg-yellow-500`,label:`Medium`,score:`4.0-6.9`},low:{icon:s.Info,color:`text-blue-500`,bgColor:`bg-blue-500`,label:`Low`,score:`0.1-3.9`},info:{icon:s.Info,color:`text-gray-500`,bgColor:`bg-gray-500`,label:`Info`,score:`0`}},u={sast:{icon:s.FileCode,label:`SAST`,description:`Static Application Security Testing`},dast:{icon:s.Link,label:`DAST`,description:`Dynamic Application Security Testing`},sca:{icon:s.Package,label:`SCA`,description:`Software Composition Analysis`},secret:{icon:s.Shield,label:`Secrets`,description:`Secret Detection`},container:{icon:s.Package,label:`Container`,description:`Container Image Scanning`}};function d({severity:e}){let r=l[e];return(0,c.jsx)(n.Badge,{className:t.cn(`text-white`,r.bgColor),children:r.label})}function f({vulnerability:e,isExpanded:i,onToggle:a,onViewCVE:o}){let f=l[e.severity],p=u[e.type],m=f.icon,h=p.icon;return(0,c.jsxs)(`div`,{className:t.cn(`border rounded-lg overflow-hidden`,e.severity===`critical`&&`border-red-500/50`,e.severity===`high`&&`border-orange-500/50`),children:[(0,c.jsxs)(`button`,{className:t.cn(`w-full flex items-start gap-3 p-4 text-left hover:bg-muted/50 transition-colors`,e.severity===`critical`&&`bg-red-500/5`,e.severity===`high`&&`bg-orange-500/5`),onClick:a,children:[i?(0,c.jsx)(s.ChevronDown,{className:`h-4 w-4 mt-1 text-muted-foreground shrink-0`}):(0,c.jsx)(s.ChevronRight,{className:`h-4 w-4 mt-1 text-muted-foreground shrink-0`}),(0,c.jsx)(m,{className:t.cn(`h-5 w-5 mt-0.5 shrink-0`,f.color)}),(0,c.jsxs)(`div`,{className:`flex-1 min-w-0`,children:[(0,c.jsxs)(`div`,{className:`flex items-center gap-2 flex-wrap`,children:[(0,c.jsx)(`span`,{className:`font-medium`,children:e.title}),(0,c.jsx)(d,{severity:e.severity}),(0,c.jsxs)(n.Badge,{variant:`outline`,className:`text-xs`,children:[(0,c.jsx)(h,{className:`h-3 w-3 mr-1`}),p.label]})]}),(0,c.jsx)(`p`,{className:`text-sm text-muted-foreground mt-1 line-clamp-2`,children:e.description}),(0,c.jsxs)(`div`,{className:`flex items-center gap-3 mt-2 text-xs text-muted-foreground`,children:[e.cveId&&(0,c.jsxs)(`span`,{role:`button`,tabIndex:0,className:`text-primary hover:underline flex items-center gap-1 cursor-pointer`,onClick:t=>{t.stopPropagation(),o?.(e.cveId)},onKeyDown:t=>{(t.key===`Enter`||t.key===` `)&&(t.preventDefault(),t.stopPropagation(),o?.(e.cveId))},children:[e.cveId,(0,c.jsx)(s.ExternalLink,{className:`h-3 w-3`})]}),e.cvssScore&&(0,c.jsxs)(`span`,{children:[`CVSS: `,e.cvssScore.toFixed(1)]}),e.package&&(0,c.jsxs)(`span`,{className:`flex items-center gap-1`,children:[(0,c.jsx)(s.Package,{className:`h-3 w-3`}),e.package,`@`,e.version]}),e.file&&(0,c.jsxs)(`span`,{className:`truncate max-w-[200px]`,children:[e.file,`:`,e.line]})]})]})]}),i&&(0,c.jsxs)(`div`,{className:`border-t bg-muted/20 p-4 space-y-4`,children:[(0,c.jsxs)(`div`,{className:`grid grid-cols-1 md:grid-cols-2 gap-4 text-sm`,children:[e.cveId&&(0,c.jsxs)(`div`,{children:[(0,c.jsx)(`span`,{className:`text-muted-foreground`,children:`CVE ID:`}),` `,(0,c.jsx)(`span`,{className:`font-mono`,children:e.cveId})]}),e.cweId&&(0,c.jsxs)(`div`,{children:[(0,c.jsx)(`span`,{className:`text-muted-foreground`,children:`CWE ID:`}),` `,(0,c.jsx)(`span`,{className:`font-mono`,children:e.cweId})]}),e.cvssScore&&(0,c.jsxs)(`div`,{children:[(0,c.jsx)(`span`,{className:`text-muted-foreground`,children:`CVSS Score:`}),` `,(0,c.jsx)(`span`,{className:`font-medium`,children:e.cvssScore.toFixed(1)})]}),e.package&&(0,c.jsxs)(`div`,{children:[(0,c.jsx)(`span`,{className:`text-muted-foreground`,children:`Package:`}),` `,(0,c.jsxs)(`span`,{className:`font-mono`,children:[e.package,`@`,e.version]})]}),e.fixedVersion&&(0,c.jsxs)(`div`,{children:[(0,c.jsx)(`span`,{className:`text-muted-foreground`,children:`Fixed in:`}),` `,(0,c.jsx)(`span`,{className:`font-mono text-green-500`,children:e.fixedVersion})]}),e.file&&(0,c.jsxs)(`div`,{children:[(0,c.jsx)(`span`,{className:`text-muted-foreground`,children:`Location:`}),` `,(0,c.jsxs)(`span`,{className:`font-mono`,children:[e.file,`:`,e.line]})]})]}),e.remediation&&(0,c.jsxs)(`div`,{children:[(0,c.jsx)(`div`,{className:`text-sm font-medium mb-1`,children:`Remediation`}),(0,c.jsx)(`p`,{className:`text-sm text-muted-foreground`,children:e.remediation})]}),e.url&&(0,c.jsxs)(r.Button,{variant:`outline`,size:`sm`,onClick:()=>window.open(e.url,`_blank`),children:[(0,c.jsx)(s.ExternalLink,{className:`h-4 w-4 mr-2`}),`Learn More`]})]})]})}function p({vulnerabilities:e,scanType:n=`all`,scannedAt:r,onVulnerabilityClick:u,onViewCVE:d,title:p=`Security Scan Results`,className:m}){let[h,g]=o.useState(``),[_,v]=o.useState(`all`),[y,b]=o.useState(new Set),x=e=>{b(t=>{let n=new Set(t);return n.has(e)?n.delete(e):n.add(e),n})},S=o.useMemo(()=>e.reduce((e,t)=>(e[t.severity]++,e.total++,e),{critical:0,high:0,medium:0,low:0,info:0,total:0}),[e]),C=o.useMemo(()=>e.filter(e=>{if(_!==`all`&&e.severity!==_)return!1;if(h){let t=h.toLowerCase();return e.title.toLowerCase().includes(t)||e.description.toLowerCase().includes(t)||e.cveId?.toLowerCase().includes(t)||e.package?.toLowerCase().includes(t)}return!0}),[e,_,h]),w=o.useMemo(()=>{let e={critical:40,high:20,medium:5,low:1,info:0},t=Object.entries(S).reduce((t,[n,r])=>n===`total`?t:t+(e[n]||0)*r,0);return Math.max(0,100-t)},[S]),T=w>=80?`text-green-500`:w>=50?`text-yellow-500`:`text-red-500`;return(0,c.jsxs)(`div`,{className:t.cn(`flex flex-col border rounded-lg bg-background`,m),children:[(0,c.jsxs)(`div`,{className:`flex items-center justify-between gap-4 p-3 border-b`,children:[(0,c.jsxs)(`div`,{className:`flex items-center gap-3`,children:[S.critical>0||S.high>0?(0,c.jsx)(s.ShieldAlert,{className:`h-5 w-5 text-red-500`}):(0,c.jsx)(s.ShieldCheck,{className:`h-5 w-5 text-green-500`}),(0,c.jsx)(`h3`,{className:`font-semibold`,children:p})]}),(0,c.jsx)(`div`,{className:`flex items-center gap-3`,children:(0,c.jsxs)(`div`,{className:`text-right`,children:[(0,c.jsx)(`div`,{className:t.cn(`text-2xl font-bold`,T),children:w}),(0,c.jsx)(`div`,{className:`text-xs text-muted-foreground`,children:`Security Score`})]})})]}),(0,c.jsx)(`div`,{className:`grid grid-cols-5 gap-2 p-3 border-b bg-muted/30`,children:[`critical`,`high`,`medium`,`low`,`info`].map(e=>{let n=l[e],r=S[e];return(0,c.jsxs)(`button`,{className:t.cn(`flex flex-col items-center p-2 rounded-lg transition-colors`,_===e?`bg-background ring-1 ring-primary`:`hover:bg-background/50`,r>0&&e===`critical`&&`bg-red-500/10`,r>0&&e===`high`&&`bg-orange-500/10`),onClick:()=>v(_===e?`all`:e),children:[(0,c.jsx)(`span`,{className:t.cn(`text-2xl font-bold`,n.color),children:r}),(0,c.jsx)(`span`,{className:`text-xs text-muted-foreground capitalize`,children:e})]},e)})}),(0,c.jsxs)(`div`,{className:`flex items-center gap-2 p-2 border-b`,children:[(0,c.jsxs)(`div`,{className:`relative flex-1 max-w-sm`,children:[(0,c.jsx)(s.Search,{className:`absolute left-2.5 top-1/2 -translate-y-1/2 h-4 w-4 text-muted-foreground`}),(0,c.jsx)(i.Input,{placeholder:`Search vulnerabilities...`,value:h,onChange:e=>g(e.target.value),className:`pl-8 h-8`})]}),r&&(0,c.jsxs)(`span`,{className:`text-xs text-muted-foreground flex items-center gap-1`,children:[(0,c.jsx)(s.Clock,{className:`h-3 w-3`}),`Scanned `,r.toLocaleString()]})]}),(0,c.jsx)(a.ScrollArea,{className:`flex-1 max-h-[500px]`,children:(0,c.jsx)(`div`,{className:`p-3 space-y-2`,children:C.length===0?(0,c.jsxs)(`div`,{className:`flex flex-col items-center justify-center h-32 text-muted-foreground`,children:[(0,c.jsx)(s.ShieldCheck,{className:`h-8 w-8 mb-2 text-green-500`}),(0,c.jsx)(`span`,{children:`No vulnerabilities found`})]}):C.map(e=>(0,c.jsx)(f,{vulnerability:e,isExpanded:y.has(e.id),onToggle:()=>x(e.id),onViewCVE:d},e.id))})}),(0,c.jsxs)(`div`,{className:`flex items-center justify-between px-3 py-2 border-t bg-muted/30 text-sm`,children:[(0,c.jsxs)(`span`,{className:`text-muted-foreground`,children:[C.length,` of `,e.length,` vulnerabilities`]}),S.critical>0&&(0,c.jsxs)(`span`,{className:`text-red-500 font-medium`,children:[S.critical,` critical issues require immediate attention`]})]})]})}var m=[{id:`1`,title:`SQL Injection in login endpoint`,description:`User input is directly concatenated into SQL query without proper sanitization, allowing attackers to execute arbitrary SQL commands.`,severity:`critical`,type:`sast`,cweId:`CWE-89`,cvssScore:9.8,file:`src/auth/login.ts`,line:45,remediation:`Use parameterized queries or prepared statements to prevent SQL injection attacks.`},{id:`2`,title:`Prototype Pollution in lodash`,description:`Versions of lodash prior to 4.17.21 are vulnerable to prototype pollution via the template function.`,severity:`high`,type:`sca`,cveId:`CVE-2021-23337`,cvssScore:7.2,package:`lodash`,version:`4.17.19`,fixedVersion:`4.17.21`,url:`https://nvd.nist.gov/vuln/detail/CVE-2021-23337`,remediation:`Upgrade lodash to version 4.17.21 or later.`},{id:`3`,title:`Hardcoded API Key`,description:`AWS API key found hardcoded in source code. This exposes the key to anyone with access to the repository.`,severity:`high`,type:`secret`,file:`config/aws.ts`,line:12,remediation:`Remove the hardcoded key and use environment variables or a secrets manager.`},{id:`4`,title:`Cross-Site Scripting (XSS)`,description:`User-provided content is rendered without proper escaping, allowing script injection.`,severity:`medium`,type:`dast`,cweId:`CWE-79`,cvssScore:6.1,url:`https://owasp.org/www-community/attacks/xss/`,remediation:`Sanitize and escape all user-provided content before rendering.`},{id:`5`,title:`Outdated base image`,description:`Container uses node:14 base image which has known vulnerabilities.`,severity:`low`,type:`container`,package:`node`,version:`14.0.0`,fixedVersion:`18.0.0`,remediation:`Update to a more recent Node.js LTS version.`}];exports.WakaSecurityScanResult=p,exports.defaultVulnerabilities=m;