Experimenting with extension signing

[abergs]

No description provided.

[github-actions]

Checkmarx One – Scan Summary & Details – 43b8ac0f-4451-4f9d-9129-bfa57e01122e

New Issues (44)

Checkmarx found the following issues in this Pull Request

Severity	Issue	Source File / Package	Checkmarx Insight
	CVE-2024-12692	Npm-electron-33.3.1	Vulnerable Package
	CVE-2024-12694	Npm-electron-33.3.1	Vulnerable Package
	CVE-2024-12695	Npm-electron-33.3.1	Vulnerable Package
	CVE-2024-11112	Npm-electron-33.3.1	Vulnerable Package
	CVE-2024-11113	Npm-electron-33.3.1	Vulnerable Package
	CVE-2024-11114	Npm-electron-33.3.1	Vulnerable Package
	CVE-2024-11115	Npm-electron-33.3.1	Vulnerable Package
	CVE-2024-11395	Npm-electron-33.3.1	Vulnerable Package
	CVE-2024-12053	Npm-electron-33.3.1	Vulnerable Package
	CVE-2024-12381	Npm-electron-33.3.1	Vulnerable Package
	CVE-2024-12382	Npm-electron-33.3.1	Vulnerable Package
	CVE-2024-12693	Npm-electron-33.3.1	Vulnerable Package
	CVE-2025-0291	Npm-electron-33.3.1	Vulnerable Package
	CVE-2025-0434	Npm-electron-33.3.1	Vulnerable Package
	CVE-2025-0436	Npm-electron-33.3.1	Vulnerable Package
	CVE-2025-0437	Npm-electron-33.3.1	Vulnerable Package
	CVE-2025-0438	Npm-electron-33.3.1	Vulnerable Package
	CVE-2025-0443	Npm-electron-33.3.1	Vulnerable Package
	CVE-2025-0447	Npm-electron-33.3.1	Vulnerable Package
	CVE-2024-11110	Npm-electron-33.3.1	Vulnerable Package
	CVE-2024-11111	Npm-electron-33.3.1	Vulnerable Package
	CVE-2024-11116	Npm-electron-33.3.1	Vulnerable Package
	CVE-2024-11117	Npm-electron-33.3.1	Vulnerable Package
	CVE-2025-0435	Npm-electron-33.3.1	Vulnerable Package
	CVE-2025-0439	Npm-electron-33.3.1	Vulnerable Package
	CVE-2025-0440	Npm-electron-33.3.1	Vulnerable Package
	CVE-2025-0441	Npm-electron-33.3.1	Vulnerable Package
	CVE-2025-0442	Npm-electron-33.3.1	Vulnerable Package
	CVE-2025-0446	Npm-electron-33.3.1	Vulnerable Package
	CVE-2025-0448	Npm-electron-33.3.1	Vulnerable Package
	Client_Privacy_Violation	/bitwarden_license/bit-web/src/app/tools/access-intelligence/org-at-risk-apps-dialog.component.html: 15	details Method at line 15 of /bitwarden_license/bit-web/src/app/tools/access-intelligence/org-at-risk-apps-dialog.component.html sends user information ou... Attack Vector
	Client_Privacy_Violation	/bitwarden_license/bit-web/src/app/tools/access-intelligence/org-at-risk-members-dialog.component.html: 15	details Method at line 15 of /bitwarden_license/bit-web/src/app/tools/access-intelligence/org-at-risk-members-dialog.component.html sends user information... Attack Vector
	Client_Privacy_Violation	/libs/angular/src/admin-console/components/collections.component.ts: 36	details Method at line 36 of /libs/angular/src/admin-console/components/collections.component.ts sends user information outside the application. This may ... Attack Vector
	Client_Privacy_Violation	/libs/angular/src/vault/components/add-edit.component.ts: 119	details Method at line 119 of /libs/angular/src/vault/components/add-edit.component.ts sends user information outside the application. This may constitute... Attack Vector
	Client_Privacy_Violation	/libs/angular/src/vault/components/add-edit.component.ts: 286	details Method load at line 286 of /libs/angular/src/vault/components/add-edit.component.ts sends user information outside the application. This may consti... Attack Vector
	Client_Privacy_Violation	/libs/angular/src/vault/components/add-edit.component.ts: 780	details Method loadAddEditCipherInfo at line 780 of /libs/angular/src/vault/components/add-edit.component.ts sends user information outside the application... Attack Vector
	Client_Privacy_Violation	/apps/browser/src/vault/popup/components/vault-v2/attachments/open-attachments/open-attachments.component.ts: 50	details Method OpenAttachmentsComponent at line 50 of /apps/browser/src/vault/popup/components/vault-v2/attachments/open-attachments/open-attachments.compo... Attack Vector
	Client_Privacy_Violation	/apps/browser/src/vault/popup/components/vault-v2/attachments/open-attachments/open-attachments.component.ts: 50	details Method at line 50 of /apps/browser/src/vault/popup/components/vault-v2/attachments/open-attachments/open-attachments.component.ts sends user infor... Attack Vector
	Client_Privacy_Violation	/libs/angular/src/vault/components/add-edit.component.ts: 70	details Method at line 70 of /libs/angular/src/vault/components/add-edit.component.ts sends user information outside the application. This may constitute ... Attack Vector
	Client_Privacy_Violation	/libs/angular/src/vault/components/add-edit.component.ts: 278	details Method load at line 278 of /libs/angular/src/vault/components/add-edit.component.ts sends user information outside the application. This may consti... Attack Vector
	Client_Privacy_Violation	/libs/angular/src/vault/components/add-edit.component.ts: 281	details Method load at line 281 of /libs/angular/src/vault/components/add-edit.component.ts sends user information outside the application. This may consti... Attack Vector
	Client_Privacy_Violation	/libs/angular/src/vault/components/add-edit.component.ts: 776	details Method loadAddEditCipherInfo at line 776 of /libs/angular/src/vault/components/add-edit.component.ts sends user information outside the application... Attack Vector
	Client_Hardcoded_Domain	/apps/web/src/app/billing/shared/payment/payment.component.ts: 75	details The JavaScript file imported in "https://js\.stripe\.com/v3/?advancedFraudSignals=false" in /apps/web/src/app/billing/shared/payment/payment.componen... Attack Vector
	Client_Hardcoded_Domain	/apps/web/src/app/billing/shared/payment/payment.component.ts: 75	details The JavaScript file imported in "https://js\.stripe\.com/v3/?advancedFraudSignals=false" in /apps/web/src/app/billing/shared/payment/payment.componen... Attack Vector

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 35.31%. Comparing base (44e18cf) to head (cb28741).
Report is 77 commits behind head on main.

✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #13012      +/-   ##
==========================================
+ Coverage   35.18%   35.31%   +0.12%     
==========================================
  Files        2991     2996       +5     
  Lines       90608    90952     +344     
  Branches    16950    16977      +27     
==========================================
+ Hits        31883    32121     +238     
- Misses      56263    56339      +76     
- Partials     2462     2492      +30     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.