@zerothreatai/vulnerability-registry 2.0.0 → 4.0.0

package/dist-cjs/categories/sensitive-paths.js

@@ -18,6 +18,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'AWS Credentials Exposed',
         description: 'AWS credentials file (.aws/credentials) is publicly accessible containing AWS Access Key ID and Secret Access Key, enabling complete access to AWS services including S3 buckets, EC2 instances, RDS databases, and all cloud resources associated with the compromised account.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -40,6 +41,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'SSH Private Key Exposed',
         description: 'SSH private key file (id_rsa, id_ed25519) is publicly accessible, allowing attackers to authenticate to any system where the corresponding public key is authorized, potentially including production servers, databases, and version control systems.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -61,6 +63,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'SSL/TLS Private Key Exposed',
         description: 'SSL/TLS private key file is publicly accessible, enabling attackers to decrypt all HTTPS traffic, perform man-in-the-middle attacks, and impersonate the server for phishing or credential theft operations against legitimate users.',
         severity: 'critical',
+        levelId: 1,
         category: 'cryptographic',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -82,6 +85,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Rails Master Key Exposed',
         description: 'Rails master.key file is publicly accessible, allowing decryption of all Rails encrypted credentials including database passwords, API keys, and session secrets, enabling complete application compromise and access to all encrypted secrets.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -103,6 +107,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Terraform State File Exposed',
         description: 'Terraform state file (tfstate) is publicly accessible containing complete infrastructure configuration, resource IDs, IP addresses, and potentially sensitive outputs including database passwords and API keys stored in plain text.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -124,6 +129,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Kubernetes Config Exposed',
         description: 'Kubernetes kubeconfig file is publicly accessible containing cluster credentials, certificates, and tokens that allow full administrative access to Kubernetes clusters including ability to deploy, modify, and delete all workloads.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -145,6 +151,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'HashiCorp Vault Secret Exposed',
         description: 'HashiCorp Vault secrets or root token exposed, providing access to the centralized secrets management system and all secrets stored within, potentially compromising hundreds of application credentials and encryption keys.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -169,6 +176,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Git Repository Exposed',
         description: 'Git repository metadata (.git/HEAD, .git/config) is publicly accessible, allowing attackers to download the complete repository including all source code, commit history, configuration files, and potentially credentials committed accidentally.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -190,6 +198,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Environment File Exposed',
         description: 'Environment configuration file (.env, .env.local, .env.production) is publicly accessible containing application secrets, database credentials, API keys, and other sensitive configuration that should never be exposed to end users.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -211,6 +220,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'WordPress Configuration File Exposed',
         description: 'WordPress wp-config.php file is accessible and readable, exposing database credentials, authentication keys, salts, table prefix, and debug settings that allow complete compromise of the WordPress installation and underlying database.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -232,6 +242,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Spring Boot Actuator Endpoints Exposed',
         description: 'Spring Boot Actuator management endpoints are publicly accessible without authentication, exposing application internals including environment variables, configuration properties, health status, thread dumps, and potentially enabling remote code execution through certain endpoints.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -254,6 +265,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Spring Boot Heapdump Exposed',
         description: 'Spring Boot Actuator heapdump endpoint is accessible allowing download of JVM heap memory containing sensitive runtime data including session tokens, passwords, encryption keys, personal data, and other secrets temporarily held in application memory.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -275,6 +287,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'PHP Info Page Exposed',
         description: 'PHP info page (phpinfo.php) is publicly accessible revealing complete server configuration including PHP version, loaded modules, environment variables, system paths, and potentially database connection strings that aid attackers in planning targeted attacks.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -296,6 +309,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Laravel Debug Mode Enabled',
         description: 'Laravel application is running with debug mode enabled in production, exposing detailed stack traces, database queries, environment variables, and potentially the APP_KEY which can be used to decrypt session data and forge authenticated sessions.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -317,6 +331,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'GraphQL Introspection Enabled',
         description: 'GraphQL API has introspection enabled in production, allowing attackers to query the complete schema including all types, queries, mutations, and fields, which reveals the entire API structure and aids in discovering sensitive operations and data access points.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -338,6 +353,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Database Backup File Exposed',
         description: 'Database backup or dump file (.sql, .dump, .bak) is publicly accessible containing complete database contents including user credentials, personal information, business data, and all other stored information enabling massive data breach.',
         severity: 'critical',
+        levelId: 1,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -362,6 +378,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Swagger/OpenAPI Documentation Exposed',
         description: 'API documentation (swagger.json, openapi.yaml) is publicly accessible revealing complete API structure including all endpoints, parameters, authentication methods, and data models which aids attackers in understanding and exploiting the API systematically.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -383,6 +400,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Prometheus Metrics Endpoint Exposed',
         description: 'Prometheus metrics endpoint (/metrics) is publicly accessible exposing application performance data, error rates, request patterns, resource usage, and potentially business metrics that reveal internal operations and aid in planning attacks.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -404,6 +422,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Admin Panel Publicly Accessible',
         description: 'Administrative interface is accessible from the public internet without IP restrictions, enabling brute force attacks against admin credentials and exposing sensitive management functionality that should be restricted to internal networks only.',
         severity: 'medium',
+        levelId: 3,
         category: 'access_control',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -425,6 +444,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'JavaScript Source Maps Exposed',
         description: 'JavaScript source map files (.js.map) are publicly accessible allowing attackers to view original unminified source code including comments, variable names, internal logic, and potentially security-sensitive implementation details.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -449,6 +469,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Un Protected Config JSON',
         description: 'The application exposes un protected config json in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -470,6 +491,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Web Server Configuration File Detected',
         description: 'The application exposes web server configuration file detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -491,6 +513,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Appsettings JSON Exposed',
         description: 'The application exposes appsettings json exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -512,6 +535,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Spring Config Exposed',
         description: 'The application exposes spring config exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -533,6 +557,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Npmrc Exposed',
         description: 'The application exposes npmrc exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -554,6 +579,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'TOML Project File Exposed',
         description: 'The application exposes toml project file exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -575,6 +601,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Rails Database YML Exposed',
         description: 'The application exposes rails database yml exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -596,6 +623,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Drupal Settings PHP Exposed',
         description: 'The application exposes drupal settings php exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -617,6 +645,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Magento Env PHP Exposed',
         description: 'The application exposes magento env php exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -638,6 +667,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Jolokia Exposed',
         description: 'The application exposes jolokia exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -659,6 +689,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'SVN Working Copy Database Exposed',
         description: 'The application exposes svn working copy database exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -680,6 +711,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Subversion Repository Detected',
         description: 'The application exposes subversion repository detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -701,6 +733,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Mercurial Repository Found',
         description: 'The application exposes mercurial repository found in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -722,6 +755,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Mercurial Hgrc Exposed',
         description: 'The application exposes mercurial hgrc exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -743,6 +777,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'CVS Root Exposed',
         description: 'The application exposes cvs root exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -764,6 +799,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'CVS Entries Exposed',
         description: 'The application exposes cvs entries exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -785,6 +821,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Bazaar Repo Exposed',
         description: 'The application exposes bazaar repo exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -806,6 +843,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Spring Boot Thread Dump Exposed',
         description: 'The application exposes spring boot thread dump exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -827,6 +865,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Redis Rdb Dump Detected',
         description: 'The application exposes redis rdb dump detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -848,6 +887,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Atlassian Bitbucket Pipelines Configuration Detected',
         description: 'The application exposes atlassian bitbucket pipelines configuration detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -869,6 +909,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'AZURE Pipelines Configuration Detected',
         description: 'The application exposes azure pipelines configuration detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -890,6 +931,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'AWS Code Build Buildspec Detected',
         description: 'The application exposes aws code build buildspec detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -911,6 +953,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Github Actions Workflow Detected',
         description: 'The application exposes github actions workflow detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -932,6 +975,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Docker Compose Configuration Detected',
         description: 'The application exposes docker compose configuration detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -953,6 +997,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Trace Axd',
         description: 'The application exposes trace axd in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -974,6 +1019,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Elmah Axd Exposed',
         description: 'The application exposes elmah axd exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -995,6 +1041,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Laravel Log Viewer Enabled',
         description: 'The application exposes laravel log viewer enabled in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1016,6 +1063,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Apache Htaccess File Detected',
         description: 'The application exposes apache htaccess file detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1037,6 +1085,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Apache Server Info Exposed',
         description: 'The application exposes apache server info exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1058,6 +1107,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Sqlite Database Detected',
         description: 'The application exposes sqlite database detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1079,6 +1129,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Package Dependencies Detected',
         description: 'The application exposes package dependencies detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1100,6 +1151,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'PHP Composer Dependencies Detected',
         description: 'The application exposes php composer dependencies detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1121,6 +1173,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Python Requirements Detected',
         description: 'The application exposes python requirements detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1142,6 +1195,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'AWS Config Exposed',
         description: 'The application exposes aws config exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1163,6 +1217,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'AZURE Credentials Exposed',
         description: 'The application exposes azure credentials exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1184,6 +1239,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Helm Values Exposed',
         description: 'The application exposes helm values exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1205,6 +1261,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'SSH Public Key Exposed',
         description: 'The application exposes ssh public key exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1226,6 +1283,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'SSL Certificate Exposed',
         description: 'The application exposes ssl certificate exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1247,6 +1305,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Graph Ql Endpoint Exposed',
         description: 'The application exposes graph ql endpoint exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1268,6 +1327,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Graphi Ql Exposed',
         description: 'The application exposes graphi ql exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1289,6 +1349,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Terraform Lock Exposed',
         description: 'The application exposes terraform lock exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1310,6 +1371,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Terraform Vars Exposed',
         description: 'The application exposes terraform vars exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1331,6 +1393,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Error Log Exposed',
         description: 'The application exposes error log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1352,6 +1415,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Access Log Exposed',
         description: 'The application exposes access log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1373,6 +1437,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Debug Log Exposed',
         description: 'The application exposes debug log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1394,6 +1459,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Application Log Exposed',
         description: 'The application exposes application log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1415,6 +1481,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Laravel Log Exposed',
         description: 'The application exposes laravel log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1436,6 +1503,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Word Press Debug Log Exposed',
         description: 'The application exposes word press debug log exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1457,6 +1525,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Adminer Exposed',
         description: 'The application exposes adminer exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1478,6 +1547,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'WSDL Exposed',
         description: 'The application exposes wsdl exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1499,6 +1569,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Debug Endpoint Exposed',
         description: 'The application exposes debug endpoint exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1520,6 +1591,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Go Debug Vars Exposed',
         description: 'The application exposes go debug vars exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1541,6 +1613,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Go Pprof Exposed',
         description: 'The application exposes go pprof exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1562,6 +1635,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Word Press XML Rpc Exposed',
         description: 'The application exposes word press xml rpc exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'medium',
+        levelId: 3,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1583,6 +1657,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Test Endpoint Exposed',
         description: 'The application exposes test endpoint exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1604,6 +1679,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Staging Endpoint Exposed',
         description: 'The application exposes staging endpoint exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1625,6 +1701,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Editor Backup File Detected',
         description: 'The application exposes editor backup file detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1646,6 +1723,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'VIM Swap File Detected',
         description: 'The application exposes vim swap file detected in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1667,6 +1745,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Directory Listing Enabled',
         description: 'The application exposes directory listing enabled in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1688,6 +1767,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'AZURE Storage Config Exposed',
         description: 'The application exposes azure storage config exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1709,6 +1789,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Mongo Rc Exposed',
         description: 'The application exposes mongo rc exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'high',
+        levelId: 2,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1730,6 +1811,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Awssam Template Exposed',
         description: 'The application exposes awssam template exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1751,6 +1833,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Serverless Config Exposed',
         description: 'The application exposes serverless config exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {
@@ -1772,6 +1855,7 @@ exports.SENSITIVE_PATH_VULNERABILITIES = {
         title: 'Cloud Formation Template Exposed',
         description: 'The application exposes cloud formation template exposed in a web-accessible location, which can reveal sensitive configuration, credentials, or operational details and enable attackers to further compromise the system or pivot to other assets.',
         severity: 'low',
+        levelId: 4,
         category: 'information_disclosure',
         scanner: 'sensitive-path-scout',
         cvss: {