@zerothreatai/vulnerability-registry 9.0.2 → 9.0.5

package/dist/categories/authentication.d.ts

@@ -3,6 +3,6 @@
  *
  * Definitions for JWT, Broken Access Control, and related issues
  */
-import type { VulnerabilityDefinition } from '../types.js';
-export declare const AUTH_VULNERABILITIES: Record<string, VulnerabilityDefinition>;
+import type { VulnerabilityDefinitionInput } from '../types.js';
+export declare const AUTH_VULNERABILITIES: Record<string, VulnerabilityDefinitionInput>;
 export default AUTH_VULNERABILITIES;

package/dist/categories/authentication.js

@@ -11,7 +11,7 @@ export const AUTH_VULNERABILITIES = {
     [VulnerabilityCode.JWT_NONE_ALGORITHM]: {
         id: 100,
         code: VulnerabilityCode.JWT_NONE_ALGORITHM,
-        title: 'JWT Vulnerability - None Algorithm Attack',
+        title: 'JWT None Algorithm Attack',
         description: 'Critical JWT vulnerability where the server accepts tokens with "alg": "none" in the header, allowing attackers to forge valid tokens without knowing the secret key by simply removing the signature and modifying claims to impersonate any user including administrators.',
         severity: 'critical',
         levelId: 1,
@@ -33,7 +33,7 @@ export const AUTH_VULNERABILITIES = {
     [VulnerabilityCode.JWT_WEAK_SECRET]: {
         id: 101,
         code: VulnerabilityCode.JWT_WEAK_SECRET,
-        title: 'JWT Vulnerability - Weak Secret Key',
+        title: 'JWT Weak Secret Key',
         description: 'JWT implementation using a weak or common secret key for HMAC signature verification that can be brute-forced or found in common secret dictionaries, allowing attackers to forge arbitrary valid tokens and bypass authentication to access any user account.',
         severity: 'high',
         levelId: 2,
@@ -55,7 +55,7 @@ export const AUTH_VULNERABILITIES = {
     [VulnerabilityCode.JWT_KEY_CONFUSION]: {
         id: 102,
         code: VulnerabilityCode.JWT_KEY_CONFUSION,
-        title: 'JWT Vulnerability - Algorithm Confusion Attack',
+        title: 'JWT Algorithm Confusion Attack',
         description: 'JWT key confusion vulnerability where the server public key can be used as an HMAC secret by switching the algorithm from RS256 to HS256, allowing attackers to forge valid tokens using the publicly available key to generate valid HMAC signatures.',
         severity: 'critical',
         levelId: 1,
@@ -80,7 +80,7 @@ export const AUTH_VULNERABILITIES = {
     [VulnerabilityCode.BAC_ANONYMOUS_ACCESS]: {
         id: 103,
         code: VulnerabilityCode.BAC_ANONYMOUS_ACCESS,
-        title: 'Broken Access Control - Anonymous Access',
+        title: 'Anonymous Access',
         description: 'Critical broken access control vulnerability where authenticated endpoints can be accessed without any authentication by simply removing auth headers or cookies, exposing sensitive functionality and data to unauthenticated attackers without any credential requirement.',
         severity: 'high',
         levelId: 2,
@@ -102,7 +102,7 @@ export const AUTH_VULNERABILITIES = {
     [VulnerabilityCode.BAC_IDOR]: {
         id: 104,
         code: VulnerabilityCode.BAC_IDOR,
-        title: 'Broken Access Control - Insecure Direct Object Reference',
+        title: 'Broken Access Insecure Direct Object Reference',
         description: 'IDOR vulnerability where users can access or modify resources belonging to other users by manipulating predictable identifiers like sequential IDs in URLs or request parameters, without proper authorization checks verifying resource ownership.',
         severity: 'high',
         levelId: 2,
@@ -124,7 +124,7 @@ export const AUTH_VULNERABILITIES = {
     [VulnerabilityCode.BAC_VERTICAL_PRIVILEGE]: {
         id: 105,
         code: VulnerabilityCode.BAC_VERTICAL_PRIVILEGE,
-        title: 'Broken Access Control - Vertical Privilege Escalation',
+        title: 'Broken Access Vertical Privilege Escalation',
         description: 'Vertical privilege escalation vulnerability allowing regular users to access or perform administrative functions by directly accessing admin endpoints or manipulating role/permission parameters, bypassing role-based access controls to gain elevated privileges.',
         severity: 'critical',
         levelId: 1,
@@ -149,7 +149,7 @@ export const AUTH_VULNERABILITIES = {
     [VulnerabilityCode.MASSASSIGN_ROLE_ESCALATION]: {
         id: 106,
         code: VulnerabilityCode.MASSASSIGN_ROLE_ESCALATION,
-        title: 'Mass Assignment - Role Escalation',
+        title: 'Mass Assignment Role Escalation',
         description: 'Mass assignment vulnerability allowing attackers to escalate privileges by including additional parameters like "role", "isAdmin", or "permissions" in requests that the application binds to user objects without proper allowlist filtering of settable fields.',
         severity: 'high',
         levelId: 2,
@@ -171,7 +171,7 @@ export const AUTH_VULNERABILITIES = {
     [VulnerabilityCode.MASSASSIGN_PROTOTYPE_POLLUTION]: {
         id: 107,
         code: VulnerabilityCode.MASSASSIGN_PROTOTYPE_POLLUTION,
-        title: 'Mass Assignment - Prototype Pollution',
+        title: 'Mass Assignment Prototype Pollution',
         description: 'JavaScript prototype pollution vulnerability through mass assignment where attackers inject __proto__ or constructor.prototype properties that modify the Object prototype globally, potentially leading to denial of service, security bypass, or remote code execution.',
         severity: 'high',
         levelId: 2,
@@ -193,7 +193,7 @@ export const AUTH_VULNERABILITIES = {
     [VulnerabilityCode.JWT_EXPIRED_TOKEN]: {
         id: 108,
         code: VulnerabilityCode.JWT_EXPIRED_TOKEN,
-        title: 'JWT Vulnerability - Expired Token Accepted',
+        title: 'JWT Expired Token Accepted',
         description: 'JWT implementation does not properly validate token expiration (exp claim), accepting expired tokens that should be rejected. This allows attackers with previously captured tokens to reuse them indefinitely, maintaining unauthorized access without credential updates.',
         severity: 'medium',
         levelId: 3,
@@ -215,7 +215,7 @@ export const AUTH_VULNERABILITIES = {
     [VulnerabilityCode.JWT_MISSING_CLAIMS]: {
         id: 109,
         code: VulnerabilityCode.JWT_MISSING_CLAIMS,
-        title: 'JWT Vulnerability - Missing Required Claims',
+        title: 'JWT Missing Required Claims',
         description: 'JWT tokens are missing critical security claims like exp (expiration), iat (issued at), nbf (not before), or iss (issuer), reducing the security guarantees of the token system and potentially allowing token reuse, replay attacks, or cross-tenant access.',
         severity: 'medium',
         levelId: 3,
@@ -237,7 +237,7 @@ export const AUTH_VULNERABILITIES = {
     [VulnerabilityCode.BAC_HORIZONTAL_PRIVILEGE]: {
         id: 110,
         code: VulnerabilityCode.BAC_HORIZONTAL_PRIVILEGE,
-        title: 'Broken Access Control - Horizontal Privilege Escalation',
+        title: 'Broken Access Horizontal Privilege Escalation',
         description: 'Horizontal privilege escalation vulnerability where authenticated users can access data or perform actions belonging to other users at the same privilege level by manipulating user identifiers, object references, or session parameters without ownership verification.',
         severity: 'high',
         levelId: 2,
@@ -259,7 +259,7 @@ export const AUTH_VULNERABILITIES = {
     [VulnerabilityCode.MASSASSIGN_HIDDEN_FIELD]: {
         id: 111,
         code: VulnerabilityCode.MASSASSIGN_HIDDEN_FIELD,
-        title: 'Mass Assignment - Hidden Field Manipulation',
+        title: 'Mass Assignment Hidden Field Manipulation',
         description: 'Mass assignment vulnerability where attackers can modify hidden form fields or server-side computed values like price, discount, userId, or timestamp by including them in request bodies, bypassing UI restrictions to manipulate business logic or data integrity.',
         severity: 'medium',
         levelId: 3,
@@ -281,7 +281,7 @@ export const AUTH_VULNERABILITIES = {
     [VulnerabilityCode.JWT_CLAIM_TAMPERING]: {
         id: 112,
         code: VulnerabilityCode.JWT_CLAIM_TAMPERING,
-        title: 'JWT - Claim Tampering',
+        title: 'JWT Claim Tampering',
         description: 'JWT claim tampering vulnerability where attackers can modify token claims such as roles, user IDs, or permissions and the server accepts the tampered token, enabling privilege escalation or unauthorized access.',
         severity: 'high',
         levelId: 2,
@@ -303,7 +303,7 @@ export const AUTH_VULNERABILITIES = {
     [VulnerabilityCode.JWT_KID_INJECTION]: {
         id: 113,
         code: VulnerabilityCode.JWT_KID_INJECTION,
-        title: 'JWT - KID Header Injection',
+        title: 'JWT KID Header Injection',
         description: 'JWT key identifier (kid) injection vulnerability where attackers manipulate the kid header to influence key selection or file paths, potentially bypassing signature verification or loading attacker-controlled keys.',
         severity: 'high',
         levelId: 2,
@@ -325,7 +325,7 @@ export const AUTH_VULNERABILITIES = {
     [VulnerabilityCode.JWT_JKU_INJECTION]: {
         id: 114,
         code: VulnerabilityCode.JWT_JKU_INJECTION,
-        title: 'JWT - JKU Header Injection',
+        title: 'JWT JKU Header Injection',
         description: 'JWT JKU (JWK Set URL) header injection vulnerability where attackers can control the URL used to fetch signing keys, allowing them to supply their own keys and forge valid tokens.',
         severity: 'high',
         levelId: 2,
@@ -347,7 +347,7 @@ export const AUTH_VULNERABILITIES = {
     [VulnerabilityCode.JWT_EMBEDDED_JWK]: {
         id: 115,
         code: VulnerabilityCode.JWT_EMBEDDED_JWK,
-        title: 'JWT - Embedded JWK Injection',
+        title: 'JWT Embedded JWK Injection',
         description: 'JWT embedded JWK vulnerability where attackers include their own JWK in the token header and the server accepts it as a trusted signing key, enabling forged tokens and authentication bypass.',
         severity: 'high',
         levelId: 2,
@@ -369,7 +369,7 @@ export const AUTH_VULNERABILITIES = {
     [VulnerabilityCode.JWT_X5C_INJECTION]: {
         id: 116,
         code: VulnerabilityCode.JWT_X5C_INJECTION,
-        title: 'JWT - X5C Header Injection',
+        title: 'JWT X5C Header Injection',
         description: 'JWT x5c header injection vulnerability where attackers provide an untrusted certificate chain, allowing them to influence key selection or bypass signature validation if certificate trust is not strictly enforced.',
         severity: 'high',
         levelId: 2,

package/dist/categories/configuration.d.ts

@@ -3,6 +3,6 @@
  *
  * Definitions for Security Headers, Directory Browsing, and related issues
  */
-import type { VulnerabilityDefinition } from '../types.js';
-export declare const CONFIG_VULNERABILITIES: Record<string, VulnerabilityDefinition>;
+import type { VulnerabilityDefinitionInput } from '../types.js';
+export declare const CONFIG_VULNERABILITIES: Record<string, VulnerabilityDefinitionInput>;
 export default CONFIG_VULNERABILITIES;

package/dist/categories/configuration.js

@@ -11,7 +11,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_MISSING_CSP]: {
         id: 200,
         code: VulnerabilityCode.HEADER_MISSING_CSP,
-        title: 'Missing Security Header - Content-Security-Policy',
+        title: 'Missing Security Header Content-Security-Policy',
         description: 'The application does not implement Content-Security-Policy header, leaving it vulnerable to cross-site scripting attacks that could be mitigated by restricting the sources from which scripts, styles, and other resources can be loaded into the page.',
         severity: 'medium',
         levelId: 3,
@@ -33,7 +33,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_MISSING_HSTS]: {
         id: 201,
         code: VulnerabilityCode.HEADER_MISSING_HSTS,
-        title: 'Missing Security Header - Strict-Transport-Security',
+        title: 'Missing Security Header Strict-Transport-Security',
         description: 'The application does not implement HSTS (HTTP Strict Transport Security) header, leaving users vulnerable to SSL stripping attacks and man-in-the-middle downgrades from HTTPS to HTTP connections on initial visits or after cookie expiration.',
         severity: 'medium',
         levelId: 3,
@@ -55,7 +55,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_HSTS_BAD_MAX_AGE]: {
         id: 202,
         code: VulnerabilityCode.HEADER_HSTS_BAD_MAX_AGE,
-        title: 'HSTS Misconfiguration - Invalid Max-Age',
+        title: 'HSTS Misconfiguration Invalid Max-Age',
         description: 'The Strict-Transport-Security header uses an invalid or malformed max-age value, preventing reliable HTTPS enforcement.',
         severity: 'medium',
         levelId: 3,
@@ -77,7 +77,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_HSTS_SHORT_MAX_AGE]: {
         id: 203,
         code: VulnerabilityCode.HEADER_HSTS_SHORT_MAX_AGE,
-        title: 'HSTS Misconfiguration - Max-Age Too Short',
+        title: 'HSTS Misconfiguration Short Max-Age',
         description: 'The Strict-Transport-Security header uses a short max-age value that weakens HTTPS enforcement and allows downgrade risk to return quickly.',
         severity: 'medium',
         levelId: 3,
@@ -99,7 +99,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_HSTS_NO_INCLUDESUBDOMAINS]: {
         id: 204,
         code: VulnerabilityCode.HEADER_HSTS_NO_INCLUDESUBDOMAINS,
-        title: 'HSTS Misconfiguration - Missing includeSubDomains',
+        title: 'HSTS Misconfiguration Missing includeSubDomains',
         description: 'The Strict-Transport-Security header is missing includeSubDomains, leaving subdomains unprotected from downgrade and stripping attacks.',
         severity: 'medium',
         levelId: 3,
@@ -143,7 +143,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_MISSING_XFRAME]: {
         id: 206,
         code: VulnerabilityCode.HEADER_MISSING_XFRAME,
-        title: 'Missing Security Header - X-Frame-Options',
+        title: 'Missing Security Header X-Frame-Options',
         description: 'The application does not set X-Frame-Options header, making it vulnerable to clickjacking attacks where malicious websites can embed the application in invisible iframes and trick users into performing unintended actions through deceptive UI overlays.',
         severity: 'medium',
         levelId: 3,
@@ -964,7 +964,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.CLICK_FRAMEABLE]: {
         id: 243,
         code: VulnerabilityCode.CLICK_FRAMEABLE,
-        title: 'Clickjacking - Page Frameable',
+        title: 'Clickjacking Page Frameable',
         description: 'The application pages can be embedded in iframes on malicious websites, enabling clickjacking attacks where attackers overlay transparent frames over deceptive UI elements to trick users into clicking hidden buttons or links that perform unintended actions.',
         severity: 'medium',
         levelId: 3,
@@ -989,7 +989,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.DESER_JAVA]: {
         id: 244,
         code: VulnerabilityCode.DESER_JAVA,
-        title: 'Insecure Deserialization - Java',
+        title: 'Insecure Deserialization Java',
         description: 'Critical Java deserialization vulnerability where untrusted serialized objects are processed, allowing attackers to achieve remote code execution through gadget chains in common libraries like Apache Commons Collections, Spring Framework, or other classpath dependencies.',
         severity: 'critical',
         levelId: 1,
@@ -1011,7 +1011,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.DESER_PHP]: {
         id: 245,
         code: VulnerabilityCode.DESER_PHP,
-        title: 'Insecure Deserialization - PHP',
+        title: 'Insecure Deserialization PHP',
         description: 'Critical PHP deserialization vulnerability where unserialize() processes attacker-controlled data, enabling object injection attacks through magic methods like __wakeup(), __destruct(), or __toString() in application or framework classes for remote code execution.',
         severity: 'critical',
         levelId: 1,
@@ -1033,7 +1033,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.DESER_PYTHON]: {
         id: 246,
         code: VulnerabilityCode.DESER_PYTHON,
-        title: 'Insecure Deserialization - Python',
+        title: 'Insecure Deserialization Python',
         description: 'Critical Python deserialization vulnerability through pickle/cPickle processing of untrusted data, enabling remote code execution via __reduce__ method exploitation. Python pickle is inherently unsafe and should never process untrusted input.',
         severity: 'critical',
         levelId: 1,
@@ -1055,7 +1055,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.DESER_DOTNET]: {
         id: 247,
         code: VulnerabilityCode.DESER_DOTNET,
-        title: 'Insecure Deserialization - .NET',
+        title: 'Insecure Deserialization .NET',
         description: 'Critical .NET deserialization vulnerability through BinaryFormatter, ObjectStateFormatter, LosFormatter, or other dangerous formatters processing untrusted data, enabling remote code execution through gadget chains in the .NET runtime or third-party libraries.',
         severity: 'critical',
         levelId: 1,
@@ -1077,7 +1077,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.DESER_RUBY]: {
         id: 248,
         code: VulnerabilityCode.DESER_RUBY,
-        title: 'Insecure Deserialization - Ruby',
+        title: 'Insecure Deserialization Ruby',
         description: 'Critical Ruby deserialization vulnerability through Marshal.load or YAML.load processing untrusted data, enabling remote code execution through Ruby object instantiation gadgets that execute arbitrary code during object reconstruction.',
         severity: 'critical',
         levelId: 1,
@@ -1099,7 +1099,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.DESER_NODE]: {
         id: 249,
         code: VulnerabilityCode.DESER_NODE,
-        title: 'Insecure Deserialization - Node.js',
+        title: 'Insecure Deserialization Node.js',
         description: 'Critical Node.js deserialization vulnerability through node-serialize, funcster, or similar libraries that execute JavaScript during deserialization, enabling remote code execution when attacker-controlled serialized data containing functions or IIFE is processed.',
         severity: 'critical',
         levelId: 1,
@@ -1121,7 +1121,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.CLICK_PARTIAL_PROTECTION]: {
         id: 250,
         code: VulnerabilityCode.CLICK_PARTIAL_PROTECTION,
-        title: 'Clickjacking - Partial Protection',
+        title: 'Clickjacking Partial Protection',
         description: 'Incomplete clickjacking protection where X-Frame-Options or frame-ancestors CSP is only applied on some pages, uses weak values like ALLOW-FROM with bypassable origins, or has inconsistent implementation allowing certain pages to be framed.',
         severity: 'low',
         levelId: 4,
@@ -1143,7 +1143,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_MISSING_XCONTENT_TYPE]: {
         id: 251,
         code: VulnerabilityCode.HEADER_MISSING_XCONTENT_TYPE,
-        title: 'Missing Security Header - X-Content-Type-Options',
+        title: 'Missing Security Header X-Content-Type-Options',
         description: 'The application does not set X-Content-Type-Options: nosniff header, allowing browsers to perform MIME-type sniffing that can lead to XSS attacks when user-uploaded content is served with incorrect Content-Type and browsers execute it as script.',
         severity: 'low',
         levelId: 4,
@@ -1165,7 +1165,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_XCONTENT_TYPE_INVALID]: {
         id: 252,
         code: VulnerabilityCode.HEADER_XCONTENT_TYPE_INVALID,
-        title: 'Invalid Security Header - X-Content-Type-Options',
+        title: 'Invalid Security Header X-Content-Type-Options',
         description: 'The X-Content-Type-Options header is present but misconfigured (not set to nosniff), which can allow MIME sniffing and reduce protection against content-type confusion.',
         severity: 'low',
         levelId: 4,
@@ -1187,7 +1187,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_MISSING_REFERRER_POLICY]: {
         id: 253,
         code: VulnerabilityCode.HEADER_MISSING_REFERRER_POLICY,
-        title: 'Missing Security Header - Referrer-Policy',
+        title: 'Missing Security Header Referrer-Policy',
         description: 'The application does not implement Referrer-Policy header, potentially leaking sensitive URL information including session tokens, user IDs, or query parameters to external sites when users click links or resources are loaded from third-party domains.',
         severity: 'low',
         levelId: 4,
@@ -1231,7 +1231,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_MISSING_PERMISSIONS_POLICY]: {
         id: 255,
         code: VulnerabilityCode.HEADER_MISSING_PERMISSIONS_POLICY,
-        title: 'Missing Security Header - Permissions-Policy',
+        title: 'Missing Security Header Permissions-Policy',
         description: 'The application does not implement Permissions-Policy (formerly Feature-Policy) header, allowing embedded frames or malicious scripts to access sensitive browser features like camera, microphone, geolocation, or payment APIs without explicit permission.',
         severity: 'info',
         levelId: 5,
@@ -1253,7 +1253,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_MISSING_XSS_PROTECTION]: {
         id: 256,
         code: VulnerabilityCode.HEADER_MISSING_XSS_PROTECTION,
-        title: 'Missing Security Header - X-XSS-Protection',
+        title: 'Missing Security Header X-XSS-Protection',
         description: 'The legacy X-XSS-Protection header is not set. While deprecated in modern browsers, it can provide defense-in-depth for older browsers that still honor this header for their built-in XSS auditor feature.',
         severity: 'info',
         levelId: 5,
@@ -1275,7 +1275,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_COEP_WITHOUT_COOP]: {
         id: 257,
         code: VulnerabilityCode.HEADER_COEP_WITHOUT_COOP,
-        title: 'Header Misconfiguration - COEP Without COOP',
+        title: 'Header Misconfiguration COEP Without COOP',
         description: 'Cross-Origin-Embedder-Policy (COEP) is set without Cross-Origin-Opener-Policy (COOP), which can create inconsistent cross-origin isolation behavior and indicate incomplete or misapplied security header strategy for isolation-sensitive applications.',
         severity: 'info',
         levelId: 5,
@@ -1297,7 +1297,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_CORP_UNUSUAL]: {
         id: 258,
         code: VulnerabilityCode.HEADER_CORP_UNUSUAL,
-        title: 'Header Misconfiguration - Unusual CORP Value',
+        title: 'Header Misconfiguration Unusual CORP Value',
         description: 'Cross-Origin-Resource-Policy (CORP) is set to a non-standard value, which may indicate a misconfiguration that provides no effective protection or creates unpredictable resource loading behavior across origins.',
         severity: 'info',
         levelId: 5,
@@ -1319,7 +1319,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_EXPECT_CT_PRESENT]: {
         id: 259,
         code: VulnerabilityCode.HEADER_EXPECT_CT_PRESENT,
-        title: 'Deprecated Header - Expect-CT Present',
+        title: 'Deprecated Header  Expect-CT Present',
         description: 'The Expect-CT header is present even though the feature is deprecated and no longer enforced by major browsers, adding unnecessary configuration surface without meaningful security benefit.',
         severity: 'info',
         levelId: 5,
@@ -1341,7 +1341,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_SERVER_HEADER_PRESENT]: {
         id: 260,
         code: VulnerabilityCode.HEADER_SERVER_HEADER_PRESENT,
-        title: 'Information Exposure - Server Header Present',
+        title: 'Information Exposure Server Header Present',
         description: 'The Server header reveals technology or version details that can assist attackers with fingerprinting and targeted exploitation, increasing the likelihood of tailored attacks against known software weaknesses.',
         severity: 'info',
         levelId: 5,
@@ -1363,7 +1363,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_X_POWERED_BY_PRESENT]: {
         id: 261,
         code: VulnerabilityCode.HEADER_X_POWERED_BY_PRESENT,
-        title: 'Information Exposure - X-Powered-By Present',
+        title: 'Information Exposure X-Powered-By Present',
         description: 'The X-Powered-By header discloses framework or runtime information that can be used to fingerprint the application stack and target known vulnerabilities in specific platforms or versions.',
         severity: 'info',
         levelId: 5,
@@ -1385,7 +1385,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_X_XSS_PROTECTION_ENABLED]: {
         id: 262,
         code: VulnerabilityCode.HEADER_X_XSS_PROTECTION_ENABLED,
-        title: 'Deprecated Header - X-XSS-Protection Enabled',
+        title: 'Deprecated Header X-XSS-Protection Enabled',
         description: 'The X-XSS-Protection header is enabled, which is deprecated and can introduce security risks or inconsistent behavior in legacy browsers due to the removed XSS auditor feature.',
         severity: 'low',
         levelId: 4,
@@ -1407,7 +1407,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.COOKIE_SAMESITE_NONE_WITHOUT_SECURE]: {
         id: 263,
         code: VulnerabilityCode.COOKIE_SAMESITE_NONE_WITHOUT_SECURE,
-        title: 'Cookie Misconfiguration - SameSite=None Without Secure',
+        title: 'Cookie Misconfiguration SameSite=None Without Secure',
         description: 'A cookie is configured with SameSite=None but lacks the Secure attribute, enabling cross-site transmission over unencrypted connections and undermining cookie integrity and confidentiality controls.',
         severity: 'medium',
         levelId: 3,
@@ -1429,7 +1429,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.COOKIE_SESSION_MISSING_SECURE]: {
         id: 264,
         code: VulnerabilityCode.COOKIE_SESSION_MISSING_SECURE,
-        title: 'Cookie Misconfiguration - Session Cookie Missing Secure',
+        title: 'Cookie Misconfiguration Session Cookie Missing Secure',
         description: 'Session or authentication cookies are missing the Secure attribute, allowing them to be transmitted over unencrypted connections and increasing the risk of session hijacking or credential theft.',
         severity: 'high',
         levelId: 2,
@@ -1451,7 +1451,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.COOKIE_MISSING_SECURE]: {
         id: 265,
         code: VulnerabilityCode.COOKIE_MISSING_SECURE,
-        title: 'Cookie Misconfiguration - Missing Secure Attribute',
+        title: 'Cookie Misconfiguration Missing Secure Attribute',
         description: 'Cookies are set without the Secure attribute, permitting transmission over plaintext HTTP and exposing cookie contents to network interception or manipulation.',
         severity: 'medium',
         levelId: 3,
@@ -1473,7 +1473,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.COOKIE_SESSION_MISSING_HTTPONLY]: {
         id: 266,
         code: VulnerabilityCode.COOKIE_SESSION_MISSING_HTTPONLY,
-        title: 'Cookie Misconfiguration - Session Cookie Missing HttpOnly',
+        title: 'Cookie Misconfiguration Session Cookie Missing HttpOnly',
         description: 'Session or authentication cookies are missing the HttpOnly attribute, allowing client-side scripts to access sensitive cookie values and increasing the impact of XSS attacks.',
         severity: 'high',
         levelId: 2,
@@ -1495,7 +1495,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.COOKIE_MISSING_HTTPONLY]: {
         id: 267,
         code: VulnerabilityCode.COOKIE_MISSING_HTTPONLY,
-        title: 'Cookie Misconfiguration - Missing HttpOnly Attribute',
+        title: 'Cookie Misconfiguration Missing HttpOnly Attribute',
         description: 'Cookies are missing the HttpOnly attribute, allowing JavaScript access to cookie values and increasing the potential impact of client-side script injection.',
         severity: 'medium',
         levelId: 3,
@@ -1517,7 +1517,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.COOKIE_MISSING_SAMESITE]: {
         id: 268,
         code: VulnerabilityCode.COOKIE_MISSING_SAMESITE,
-        title: 'Cookie Misconfiguration - Missing SameSite Attribute',
+        title: 'Cookie Misconfiguration Missing SameSite Attribute',
         description: 'Cookies do not specify SameSite, which can allow cross-site requests to include cookies by default and increase exposure to CSRF-style attacks or cross-site leakage.',
         severity: 'medium',
         levelId: 3,
@@ -1539,7 +1539,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.COOKIE_HOST_PREFIX_INVALID]: {
         id: 269,
         code: VulnerabilityCode.COOKIE_HOST_PREFIX_INVALID,
-        title: 'Cookie Misconfiguration - __Host- Prefix Violations',
+        title: 'Cookie Misconfiguration __Host- Prefix Violations',
         description: 'Cookies with the __Host- prefix do not meet required attributes (Secure, Path=/, no Domain), weakening the protections provided by host-only cookie semantics.',
         severity: 'medium',
         levelId: 3,
@@ -1561,7 +1561,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.COOKIE_SECURE_PREFIX_INVALID]: {
         id: 270,
         code: VulnerabilityCode.COOKIE_SECURE_PREFIX_INVALID,
-        title: 'Cookie Misconfiguration - __Secure- Prefix Violations',
+        title: 'Cookie Misconfiguration __Secure- Prefix Violations',
         description: 'Cookies with the __Secure- prefix are missing the Secure attribute, which defeats the prefix requirement and weakens transport security protections.',
         severity: 'medium',
         levelId: 3,
@@ -1583,7 +1583,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_DRIFT_CSP]: {
         id: 271,
         code: VulnerabilityCode.HEADER_DRIFT_CSP,
-        title: 'Header Drift - Content-Security-Policy Inconsistent',
+        title: 'Header Drift Content-Security-Policy Inconsistent',
         description: 'Content-Security-Policy is present on some paths but missing on others, creating uneven defenses and potentially exposing unprotected routes to script injection or content loading risks.',
         severity: 'low',
         levelId: 4,
@@ -1605,7 +1605,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_DRIFT_HSTS]: {
         id: 272,
         code: VulnerabilityCode.HEADER_DRIFT_HSTS,
-        title: 'Header Drift - Strict-Transport-Security Inconsistent',
+        title: 'Header Drift Strict-Transport-Security Inconsistent',
         description: 'Strict-Transport-Security is present on some paths but missing on others, reducing the effectiveness of HTTPS enforcement and creating mixed transport behavior across the site.',
         severity: 'low',
         levelId: 4,
@@ -1627,7 +1627,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_DRIFT_XCONTENT_TYPE]: {
         id: 273,
         code: VulnerabilityCode.HEADER_DRIFT_XCONTENT_TYPE,
-        title: 'Header Drift - X-Content-Type-Options Inconsistent',
+        title: 'Header Drift X-Content-Type-Options Inconsistent',
         description: 'X-Content-Type-Options is present on some paths but missing on others, allowing inconsistent MIME sniffing behavior that could expose unprotected routes to content-type confusion.',
         severity: 'low',
         levelId: 4,
@@ -1649,7 +1649,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_DRIFT_REFERRER_POLICY]: {
         id: 274,
         code: VulnerabilityCode.HEADER_DRIFT_REFERRER_POLICY,
-        title: 'Header Drift - Referrer-Policy Inconsistent',
+        title: 'Header Drift Referrer-Policy Inconsistent',
         description: 'Referrer-Policy is present on some paths but missing on others, leading to inconsistent referrer leakage controls and potential exposure of sensitive URL data.',
         severity: 'low',
         levelId: 4,
@@ -1671,7 +1671,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_DRIFT_XFRAME]: {
         id: 275,
         code: VulnerabilityCode.HEADER_DRIFT_XFRAME,
-        title: 'Header Drift - X-Frame-Options Inconsistent',
+        title: 'Header Drift X-Frame-Options Inconsistent',
         description: 'X-Frame-Options or equivalent framing controls are present on some paths but missing on others, creating uneven clickjacking protection across the site.',
         severity: 'low',
         levelId: 4,
@@ -1693,7 +1693,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_DRIFT_PERMISSIONS_POLICY]: {
         id: 276,
         code: VulnerabilityCode.HEADER_DRIFT_PERMISSIONS_POLICY,
-        title: 'Header Drift - Permissions-Policy Inconsistent',
+        title: 'Header Drift Permissions-Policy Inconsistent',
         description: 'Permissions-Policy is present on some paths but missing on others, leading to inconsistent controls over browser features such as geolocation, camera, or microphone.',
         severity: 'low',
         levelId: 4,
@@ -1715,7 +1715,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_DRIFT_COOP]: {
         id: 277,
         code: VulnerabilityCode.HEADER_DRIFT_COOP,
-        title: 'Header Drift - COOP Inconsistent',
+        title: 'Header Drift COOP Inconsistent',
         description: 'Cross-Origin-Opener-Policy is present on some paths but missing on others, which can lead to uneven cross-origin isolation guarantees and inconsistent window isolation behavior.',
         severity: 'low',
         levelId: 4,
@@ -1737,7 +1737,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_DRIFT_COEP]: {
         id: 278,
         code: VulnerabilityCode.HEADER_DRIFT_COEP,
-        title: 'Header Drift - COEP Inconsistent',
+        title: 'Header Drift COEP Inconsistent',
         description: 'Cross-Origin-Embedder-Policy is present on some paths but missing on others, resulting in inconsistent embedding restrictions and cross-origin isolation posture.',
         severity: 'low',
         levelId: 4,
@@ -1759,7 +1759,7 @@ export const CONFIG_VULNERABILITIES = {
     [VulnerabilityCode.HEADER_DRIFT_CORP]: {
         id: 279,
         code: VulnerabilityCode.HEADER_DRIFT_CORP,
-        title: 'Header Drift - CORP Inconsistent',
+        title: 'Header Drift CORP Inconsistent',
         description: 'Cross-Origin-Resource-Policy is present on some paths but missing on others, which can leave inconsistent controls on resource sharing and embedding across the application.',
         severity: 'low',
         levelId: 4,

package/dist/categories/injection.d.ts

@@ -3,6 +3,6 @@
  *
  * Definitions for SQL Injection, Command Injection, SSTI, XXE, LFI
  */
-import type { VulnerabilityDefinition } from '../types.js';
-export declare const INJECTION_VULNERABILITIES: Record<string, VulnerabilityDefinition>;
+import type { VulnerabilityDefinitionInput } from '../types.js';
+export declare const INJECTION_VULNERABILITIES: Record<string, VulnerabilityDefinitionInput>;
 export default INJECTION_VULNERABILITIES;