Findings

26

Critical

31

High

36

Medium

12

Low
Severity Source Title CWE File Status Detected
Critical
AI Security

User input directly concatenated to LLM prompt

 CWE-77 chat_service.py:56
Open
 May 31
Critical
AI Security

pickle.load() used on untrusted model file

 CWE-502 model_loader.py:23
Open
 May 31
Critical
Secrets

AWS Access Key exposed in configuration file

 CWE-798 aws-config.json:8
Open
 May 30
Critical
Secrets

AWS Access Key exposed in configuration file

 CWE-798 aws-config.json:8
Open
 May 30
Critical
Secrets

AWS Access Key exposed in configuration file

 CWE-798 aws-config.json:8
Open
 May 30
Critical
Secrets

AWS Access Key exposed in configuration file

 CWE-798 aws-config.json:8
Open
 May 30
Critical
Secrets

AWS Access Key exposed in configuration file

 CWE-798 aws-config.json:8
Open
 May 30
Critical
Secrets

AWS Access Key exposed in configuration file

 CWE-798 aws-config.json:8
Open
 May 30
Critical
SAST

SQL Injection in user search query

 CWE-89 UserController.cs:47
Open
 May 27
Critical
SAST

Reflected XSS in error message display

 CWE-79 Error.cshtml:12
Open
 May 27
Critical
SAST

SQL Injection in user search query

 CWE-89 UserController.cs:47
Open
 May 27
Critical
SAST

Reflected XSS in error message display

 CWE-79 Error.cshtml:12
Open
 May 27
Critical
SAST

Reflected XSS in error message display

 CWE-79 Error.cshtml:12
Open
 May 27
Critical
SAST

SQL Injection in user search query

 CWE-89 UserController.cs:47
Open
 May 27
Critical
SAST

SQL Injection in user search query

 CWE-89 users.py:47
Open
 May 27
Critical
SAST

Reflected XSS in error message display

 CWE-79 Error.cshtml:12
Open
 May 27
Critical
SAST

SQL Injection in user search query

 CWE-89 UserController.cs:47
Open
 May 27
Critical
SAST

Reflected XSS in error message display

 CWE-79 Error.cshtml:12
Open
 May 27
Critical
SAST

SQL Injection in user search query

 CWE-89 UserController.cs:47
Open
 May 27
Critical
SAST

Reflected XSS in error message display

 CWE-79 Error.cshtml:12
Open
 May 27
Critical
SCA

CVE-2024-30105: .NET denial of service in System.Text.Json

 CWE-506 -
Open
 May 25
Critical
SCA

CVE-2024-30105: .NET denial of service in System.Text.Json

 CWE-506 -
Open
 May 25
Critical
SCA

CVE-2024-30105: .NET denial of service in System.Text.Json

 CWE-506 -
Open
 May 25
Critical
SCA

CVE-2024-3094: Critical backdoor in xz-utils 5.6.0

 CWE-506 -
Open
 May 25
Critical
SCA

CVE-2024-30105: .NET denial of service in System.Text.Json

 CWE-506 -
Open
 May 25
🛡️ Security AI