Do not merge: test PR #18
9 new alerts including 8 high severity security vulnerabilities
New alerts in code changed by this pull request
Security Alerts:
- 8 high
- 1 medium
See annotations below for details.
Annotations
Check failure on line 74 in packages/runtime-tools-dev-ui-webapp/server/server.js
Code scanning / CodeQL
Missing rate limiting High
, but is not rate-limited.
Check failure on line 84 in packages/runtime-tools-dev-ui-webapp/server/server.js
Code scanning / CodeQL
Missing rate limiting High
, but is not rate-limited.
Check failure on line 85 in packages/runtime-tools-dev-ui-webapp/server/server.js
Code scanning / CodeQL
Missing rate limiting High
, but is not rate-limited.
Check failure on line 439 in packages/runtime-tools-dev-ui-webapp/server/MockData/controllers.js
Code scanning / CodeQL
Reflected cross-site scripting High
.
Check failure on line 442 in packages/runtime-tools-dev-ui-webapp/server/MockData/controllers.js
Code scanning / CodeQL
Reflected cross-site scripting High
.
Check failure on line 347 in packages/runtime-tools-dev-ui-webapp/server/MockData/controllers.js
Code scanning / CodeQL
Uncontrolled data used in path expression High
.
Check failure on line 349 in packages/runtime-tools-dev-ui-webapp/server/MockData/controllers.js
Code scanning / CodeQL
Uncontrolled data used in path expression High
.
Check failure on line 351 in packages/runtime-tools-dev-ui-webapp/server/MockData/controllers.js
Code scanning / CodeQL
Uncontrolled data used in path expression High
.
Check warning on line 230 in packages/runtime-tools-dev-ui-webapp/server/MockData/controllers.js
Code scanning / CodeQL
Information exposure through a stack trace Medium
.