Repository navigation
12 new alerts including 7 high severity security vulnerabilities
New alerts in code changed by this pull request
Security Alerts:
- 7 high
- 5 medium
Alerts not introduced by this pull request might have been detected because the code changes were too large.
See annotations below for details.
Annotations
Check failure on line 23 in packages/channels/weixin/src/send.ts
Code scanning / CodeQL
Polynomial regular expression used on uncontrolled data High
Check failure on line 634 in packages/cli/src/serve/workspaceAgents.ts
Code scanning / CodeQL
Missing rate limiting High
Check failure on line 86 in packages/core/src/tools/web-fetch.ts
Code scanning / CodeQL
Incomplete URL substring sanitization High
Check failure on line 22 in packages/core/src/utils/openaiLogger.ts
Code scanning / CodeQL
Polynomial regular expression used on uncontrolled data High
Check failure on line 381 in packages/vscode-ide-companion/src/extension.ts
Code scanning / CodeQL
Incomplete string escaping or encoding High
Check failure on line 684 in packages/vscode-ide-companion/src/services/qwenAgentManager.ts
Code scanning / CodeQL
Insecure randomness High
Code scanning / CodeQL
Insecure randomness High
Check warning on line 499 in packages/cli/src/utils/standalone-update.ts
Code scanning / CodeQL
Shell command built from environment values Medium
Check warning on line 179 in packages/core/src/utils/editor.ts
Code scanning / CodeQL
Unsafe shell command constructed from library input Medium
Check warning on line 190 in packages/core/src/utils/editor.ts
Code scanning / CodeQL
Unsafe shell command constructed from library input Medium
Check warning on line 189 in packages/core/src/utils/shell-utils.ts
Code scanning / CodeQL
Unsafe shell command constructed from library input Medium
Check warning on line 192 in packages/core/src/utils/shell-utils.ts
Code scanning / CodeQL
Unsafe shell command constructed from library input Medium