orbisai0security

Results 85 issues of orbisai0security

Fix: Weak Random Number Generator Used Instead of Secure Alternative in cluster/cluster.go

2 comment

**Context and Purpose:** This PR automatically remediates a security vulnerability: - **Description:** Do not use `math/rand`. Use `crypto/rand` instead. - **Rule ID:** go.lang.security.audit.crypto.math_random.math-random-used - **Severity:** MEDIUM - **File:** cluster/cluster.go -...

[Security] Fix HIGH vulnerability: java.lang.security.audit.sqli.jdbc-sqli.jdbc-sqli

## Security Fix This PR addresses a **HIGH** severity vulnerability detected by semgrep. ### Security Impact Assessment | Aspect | Rating | Rationale | |--------|--------|-----------| | Impact | High |...

external

[Security] Fix HIGH vulnerability: go.lang.security.audit.dangerous-exec-command.dangerous-exec-command

## Security Fix This PR addresses a **HIGH** severity vulnerability detected by semgrep. ### Security Impact Assessment | Aspect | Rating | Rationale | |--------|--------|-----------| | Impact | Critical |...

kind/bug
area/runtime
size/M

[Security] Fix HIGH vulnerability: python.sqlalchemy.security.sqlalchemy-execute-raw-query.sqlalchemy-execute-raw-query

## Security Fix This PR addresses a **HIGH** severity vulnerability detected by semgrep. ### Security Impact Assessment | Aspect | Rating | Rationale | |--------|--------|-----------| | Impact | High |...

[Security] Fix HIGH vulnerability: python.lang.security.audit.eval-detected.eval-detected

1 comment

## Security Fix This PR addresses a **HIGH** severity vulnerability detected by our security scanner. ### Security Impact Assessment | Aspect | Rating | Rationale | |--------|--------|-----------| | Impact |...

[Security] Fix HIGH vulnerability: yaml.github-actions.security.run-shell-injection.run-shell-injection

## Security Fix This PR addresses a **HIGH** severity vulnerability detected by our security scanner. ### Security Impact Assessment | Aspect | Rating | Rationale | |--------|--------|-----------| | Impact |...

[Security] Fix MEDIUM vulnerability: dockerfile.security.missing-user-entrypoint.missing-user-entrypoint

1 comment

## Security Fix This PR addresses a **MEDIUM** severity vulnerability detected by our security scanner. ### Security Impact Assessment | Aspect | Rating | Rationale | |--------|--------|-----------| | Impact |...

kind/enhancement
status/1-needs-design-review
area/infrastructure
size/S

[Security] Fix HIGH vulnerability: python.lang.security.audit.eval-detected.eval-detected

1 comment

## Security Fix This PR addresses a **HIGH** severity vulnerability detected by our security scanner. ### Security Impact Assessment | Aspect | Rating | Rationale | |--------|--------|-----------| | Impact |...

[Security] Fix MEDIUM vulnerability: javascript.lang.security.audit.path-traversal.path-join-resolve-traversal.path-join-resolve-traversal

## Security Fix This PR addresses a **MEDIUM** severity vulnerability detected by our security scanner. ### Security Impact Assessment | Aspect | Rating | Rationale | |--------|--------|-----------| | Impact |...

[Security] Fix MEDIUM vulnerability: python.flask.security.xss.audit.direct-use-of-jinja2.direct-use-of-jinja2

1 comment

## Security Fix This PR addresses a **MEDIUM** severity vulnerability detected by our security scanner. ### Security Impact Assessment | Aspect | Rating | Rationale | |--------|--------|-----------| | Impact |...