{ "SchemaVersion": 2, "Trivy": { "Version": "0.70.0" }, "ReportID": "019e79cb-af50-7d26-ab99-52cd801c0aeb", "CreatedAt": "2026-05-30T16:50:52.368862835Z", "ArtifactName": "/code", "ArtifactType": "filesystem", "Results": [ { "Target": "composer.lock", "Class": "lang-pkgs", "Type": "composer", "Packages": [ { "ID": "barryvdh/laravel-dompdf@v3.1.1", "Name": "barryvdh/laravel-dompdf", "Identifier": { "PURL": "pkg:composer/barryvdh/laravel-dompdf@v3.1.1", "UID": "5cfd8b4100072b98" }, "Version": "v3.1.1", "Licenses": [ "MIT" ], "Relationship": "direct", "DependsOn": [ "dompdf/dompdf@v3.1.0" ], "Locations": [ { "StartLine": 9, "EndLine": 85 } ], "AnalyzedBy": "composer" }, { "ID": "barryvdh/laravel-snappy@v1.0.4", "Name": "barryvdh/laravel-snappy", "Identifier": { "PURL": "pkg:composer/barryvdh/laravel-snappy@v1.0.4", "UID": "53ae093dea0f1f22" }, "Version": "v1.0.4", "Licenses": [ "MIT" ], "Relationship": "direct", "DependsOn": [ "knplabs/knp-snappy@v1.5.1" ], "Locations": [ { "StartLine": 86, "EndLine": 163 } ], "AnalyzedBy": "composer" }, { "ID": "doctrine/dbal@4.2.3", "Name": "doctrine/dbal", "Identifier": { "PURL": "pkg:composer/doctrine/dbal@4.2.3", "UID": "63c5754abcc12c74" }, "Version": "4.2.3", "Licenses": [ "MIT" ], "Relationship": "direct", "DependsOn": [ "doctrine/deprecations@1.1.5", "psr/cache@3.0.0", "psr/log@3.0.2" ], "Locations": [ { "StartLine": 528, "EndLine": 633 } ], "AnalyzedBy": "composer" }, { "ID": "google-gemini-php/laravel@2.0.1", "Name": "google-gemini-php/laravel", "Identifier": { "PURL": "pkg:composer/google-gemini-php/laravel@2.0.1", "UID": "592e1e5fc6d6419" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Relationship": "direct", "DependsOn": [ "google-gemini-php/client@2.3.0", "laravel/framework@v12.7.2" ], "Locations": [ { "StartLine": 1400, "EndLine": 1467 } ], "AnalyzedBy": "composer" }, { "ID": "google/cloud-language@v1.0.0", "Name": "google/cloud-language", "Identifier": { "PURL": "pkg:composer/google/cloud-language@v1.0.0", "UID": "95cb1641b458da26" }, "Version": "v1.0.0", "Licenses": [ "Apache-2.0" ], "Relationship": "direct", "DependsOn": [ "google/cloud-core@v1.62.3", "google/gax@v1.36.1" ], "Locations": [ { "StartLine": 1595, "EndLine": 1652 } ], "AnalyzedBy": "composer" }, { "ID": "google/cloud-vision@v2.0.2", "Name": "google/cloud-vision", "Identifier": { "PURL": "pkg:composer/google/cloud-vision@v2.0.2", "UID": "cefaed4b2bdfc87f" }, "Version": "v2.0.2", "Licenses": [ "Apache-2.0" ], "Relationship": "direct", "DependsOn": [ "google/cloud-core@v1.62.3", "google/gax@v1.36.1" ], "Locations": [ { "StartLine": 1653, "EndLine": 1710 } ], "AnalyzedBy": "composer" }, { "ID": "guzzlehttp/guzzle@7.9.3", "Name": "guzzlehttp/guzzle", "Identifier": { "PURL": "pkg:composer/guzzlehttp/guzzle@7.9.3", "UID": "40a51450b2c15bc2" }, "Version": "7.9.3", "Licenses": [ "MIT" ], "Relationship": "direct", "DependsOn": [ "guzzlehttp/promises@2.2.0", "guzzlehttp/psr7@2.7.1", "psr/http-client@1.0.3", "symfony/deprecation-contracts@v3.5.1" ], "Locations": [ { "StartLine": 2066, "EndLine": 2191 } ], "AnalyzedBy": "composer" }, { "ID": "laravel/framework@v12.7.2", "Name": "laravel/framework", "Identifier": { "PURL": "pkg:composer/laravel/framework@v12.7.2", "UID": "12bcc878b08627e5" }, "Version": "v12.7.2", "Licenses": [ "MIT" ], "Relationship": "direct", "DependsOn": [ "brick/math@0.12.3", "doctrine/inflector@2.0.10", "dragonmantank/cron-expression@v3.4.0", "egulias/email-validator@4.0.4", "fruitcake/php-cors@v1.3.0", "guzzlehttp/guzzle@7.9.3", "guzzlehttp/uri-template@v1.0.4", "laravel/prompts@v0.3.5", "laravel/serializable-closure@v2.0.4", "league/commonmark@2.7.0", "league/flysystem-local@3.29.0", "league/flysystem@3.29.1", "league/uri@7.5.1", "monolog/monolog@3.9.0", "nesbot/carbon@3.9.0", "nunomaduro/termwind@v2.3.0", "psr/container@2.0.2", "psr/log@3.0.2", "psr/simple-cache@3.0.0", "ramsey/uuid@4.7.6", "symfony/console@v7.2.5", "symfony/error-handler@v7.2.5", "symfony/finder@v7.2.2", "symfony/http-foundation@v7.2.5", "symfony/http-kernel@v7.2.5", "symfony/mailer@v7.2.3", "symfony/mime@v7.2.4", "symfony/polyfill-php83@v1.31.0", "symfony/process@v7.2.5", "symfony/routing@v7.2.3", "symfony/uid@v7.2.0", "symfony/var-dumper@v7.2.3", "tijsverkoyen/css-to-inline-styles@v2.3.0", "vlucas/phpdotenv@v5.6.1", "voku/portable-ascii@2.0.3" ], "Locations": [ { "StartLine": 2544, "EndLine": 2758 } ], "AnalyzedBy": "composer" }, { "ID": "laravel/socialite@v5.20.0", "Name": "laravel/socialite", "Identifier": { "PURL": "pkg:composer/laravel/socialite@v5.20.0", "UID": "a03944ace009019d" }, "Version": "v5.20.0", "Licenses": [ "MIT" ], "Relationship": "direct", "DependsOn": [ "firebase/php-jwt@v6.11.1", "guzzlehttp/guzzle@7.9.3", "league/oauth1-client@v1.11.0", "phpseclib/phpseclib@3.0.43" ], "Locations": [ { "StartLine": 2879, "EndLine": 2950 } ], "AnalyzedBy": "composer" }, { "ID": "laravel/tinker@v2.10.1", "Name": "laravel/tinker", "Identifier": { "PURL": "pkg:composer/laravel/tinker@v2.10.1", "UID": "74174f41b431e551" }, "Version": "v2.10.1", "Licenses": [ "MIT" ], "Relationship": "direct", "DependsOn": [ "psy/psysh@v0.12.8", "symfony/var-dumper@v7.2.3" ], "Locations": [ { "StartLine": 2951, "EndLine": 3016 } ], "AnalyzedBy": "composer" }, { "ID": "league/commonmark@2.7.0", "Name": "league/commonmark", "Identifier": { "PURL": "pkg:composer/league/commonmark@2.7.0", "UID": "ed072e489e8bc3bd" }, "Version": "2.7.0", "Licenses": [ "BSD-3-Clause" ], "Relationship": "direct", "DependsOn": [ "league/config@v1.2.0", "psr/event-dispatcher@1.0.0", "symfony/deprecation-contracts@v3.5.1", "symfony/polyfill-php80@v1.31.0" ], "Locations": [ { "StartLine": 3017, "EndLine": 3123 } ], "AnalyzedBy": "composer" }, { "ID": "maatwebsite/excel@3.1.64", "Name": "maatwebsite/excel", "Identifier": { "PURL": "pkg:composer/maatwebsite/excel@3.1.64", "UID": "eb281b810b5f9437" }, "Version": "3.1.64", "Licenses": [ "MIT" ], "Relationship": "direct", "DependsOn": [ "composer/semver@3.4.3", "phpoffice/phpspreadsheet@1.29.10", "psr/simple-cache@3.0.0" ], "Locations": [ { "StartLine": 3644, "EndLine": 3724 } ], "AnalyzedBy": "composer" }, { "ID": "minishlink/web-push@v10.0.1", "Name": "minishlink/web-push", "Identifier": { "PURL": "pkg:composer/minishlink/web-push@v10.0.1", "UID": "8df4414e88de5a33" }, "Version": "v10.0.1", "Licenses": [ "MIT" ], "Relationship": "direct", "DependsOn": [ "guzzlehttp/guzzle@7.9.3", "spomky-labs/base64url@v2.0.4", "web-token/jwt-library@4.1.6" ], "Locations": [ { "StartLine": 3977, "EndLine": 4043 } ], "AnalyzedBy": "composer" }, { "ID": "mpdf/mpdf@v8.2.5", "Name": "mpdf/mpdf", "Identifier": { "PURL": "pkg:composer/mpdf/mpdf@v8.2.5", "UID": "6bfafb326f91738e" }, "Version": "v8.2.5", "Licenses": [ "GPL-2.0-only" ], "Relationship": "direct", "DependsOn": [ "mpdf/psr-http-message-shim@v2.0.1", "mpdf/psr-log-aware-trait@v3.0.0", "myclabs/deep-copy@1.13.0", "paragonie/random_compat@v9.99.100", "psr/http-message@2.0", "psr/log@3.0.2", "setasign/fpdi@v2.6.3" ], "Locations": [ { "StartLine": 4147, "EndLine": 4227 } ], "AnalyzedBy": "composer" }, { "ID": "phenx/php-font-lib@0.5.2", "Name": "phenx/php-font-lib", "Identifier": { "PURL": "pkg:composer/phenx/php-font-lib@0.5.2", "UID": "cf4a37d3b75fc43c" }, "Version": "0.5.2", "Licenses": [ "LGPL-3.0-only" ], "Relationship": "direct", "Locations": [ { "StartLine": 4896, "EndLine": 4936 } ], "AnalyzedBy": "composer" }, { "ID": "phpoffice/phpword@1.3.0", "Name": "phpoffice/phpword", "Identifier": { "PURL": "pkg:composer/phpoffice/phpword@1.3.0", "UID": "55d0d3d30fe6f281" }, "Version": "1.3.0", "Licenses": [ "LGPL-3.0-only" ], "Relationship": "direct", "DependsOn": [ "phpoffice/math@0.2.0" ], "Locations": [ { "StartLine": 5174, "EndLine": 5282 } ], "AnalyzedBy": "composer" }, { "ID": "smalot/pdfparser@v2.12.0", "Name": "smalot/pdfparser", "Identifier": { "PURL": "pkg:composer/smalot/pdfparser@v2.12.0", "UID": "eecbf33e5be68c2b" }, "Version": "v2.12.0", "Licenses": [ "LGPL-3.0-only" ], "Relationship": "direct", "DependsOn": [ "symfony/polyfill-mbstring@v1.31.0" ], "Locations": [ { "StartLine": 6421, "EndLine": 6471 } ], "AnalyzedBy": "composer" }, { "ID": "spatie/browsershot@5.0.10", "Name": "spatie/browsershot", "Identifier": { "PURL": "pkg:composer/spatie/browsershot@5.0.10", "UID": "b93662d37f03426f" }, "Version": "5.0.10", "Licenses": [ "MIT" ], "Relationship": "direct", "DependsOn": [ "spatie/temporary-directory@2.3.0", "symfony/process@v7.2.5" ], "Locations": [ { "StartLine": 6472, "EndLine": 6539 } ], "AnalyzedBy": "composer" }, { "ID": "spatie/ssh@1.13.0", "Name": "spatie/ssh", "Identifier": { "PURL": "pkg:composer/spatie/ssh@1.13.0", "UID": "ad56c0879c2e391e" }, "Version": "1.13.0", "Licenses": [ "MIT" ], "Relationship": "direct", "DependsOn": [ "symfony/process@v7.2.5" ], "Locations": [ { "StartLine": 6540, "EndLine": 6598 } ], "AnalyzedBy": "composer" }, { "ID": "stichoza/google-translate-php@v5.3.1", "Name": "stichoza/google-translate-php", "Identifier": { "PURL": "pkg:composer/stichoza/google-translate-php@v5.3.1", "UID": "5b33707ab52aae3e" }, "Version": "v5.3.1", "Licenses": [ "MIT" ], "Relationship": "direct", "DependsOn": [ "guzzlehttp/guzzle@7.9.3" ], "Locations": [ { "StartLine": 6835, "EndLine": 6915 } ], "AnalyzedBy": "composer" }, { "ID": "brick/math@0.12.3", "Name": "brick/math", "Identifier": { "PURL": "pkg:composer/brick/math@0.12.3", "UID": "518867bd38bbb213" }, "Version": "0.12.3", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 164, "EndLine": 223 } ], "AnalyzedBy": "composer" }, { "ID": "carbonphp/carbon-doctrine-types@3.2.0", "Name": "carbonphp/carbon-doctrine-types", "Identifier": { "PURL": "pkg:composer/carbonphp/carbon-doctrine-types@3.2.0", "UID": "22997ce28e65be3c" }, "Version": "3.2.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 224, "EndLine": 292 } ], "AnalyzedBy": "composer" }, { "ID": "composer/pcre@3.3.2", "Name": "composer/pcre", "Identifier": { "PURL": "pkg:composer/composer/pcre@3.3.2", "UID": "edc35bf9a4a1dacf" }, "Version": "3.3.2", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 293, "EndLine": 371 } ], "AnalyzedBy": "composer" }, { "ID": "composer/semver@3.4.3", "Name": "composer/semver", "Identifier": { "PURL": "pkg:composer/composer/semver@3.4.3", "UID": "2167d787600e437d" }, "Version": "3.4.3", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 372, "EndLine": 452 } ], "AnalyzedBy": "composer" }, { "ID": "dflydev/dot-access-data@v3.0.3", "Name": "dflydev/dot-access-data", "Identifier": { "PURL": "pkg:composer/dflydev/dot-access-data@v3.0.3", "UID": "768a40e5061ceea5" }, "Version": "v3.0.3", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 453, "EndLine": 527 } ], "AnalyzedBy": "composer" }, { "ID": "doctrine/deprecations@1.1.5", "Name": "doctrine/deprecations", "Identifier": { "PURL": "pkg:composer/doctrine/deprecations@1.1.5", "UID": "63efe228277b1b06" }, "Version": "1.1.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 634, "EndLine": 681 } ], "AnalyzedBy": "composer" }, { "ID": "doctrine/inflector@2.0.10", "Name": "doctrine/inflector", "Identifier": { "PURL": "pkg:composer/doctrine/inflector@2.0.10", "UID": "6460ad52fbbe5824" }, "Version": "2.0.10", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 682, "EndLine": 772 } ], "AnalyzedBy": "composer" }, { "ID": "doctrine/lexer@3.0.1", "Name": "doctrine/lexer", "Identifier": { "PURL": "pkg:composer/doctrine/lexer@3.0.1", "UID": "e42ec3e5f797b89e" }, "Version": "3.0.1", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 773, "EndLine": 849 } ], "AnalyzedBy": "composer" }, { "ID": "dompdf/dompdf@v3.1.0", "Name": "dompdf/dompdf", "Identifier": { "PURL": "pkg:composer/dompdf/dompdf@v3.1.0", "UID": "97e4a1f1506461c8" }, "Version": "v3.1.0", "Licenses": [ "LGPL-2.1-only" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "dompdf/php-font-lib@1.0.1", "dompdf/php-svg-lib@1.0.0", "masterminds/html5@2.9.0" ], "Locations": [ { "StartLine": 850, "EndLine": 913 } ], "AnalyzedBy": "composer" }, { "ID": "dompdf/php-font-lib@1.0.1", "Name": "dompdf/php-font-lib", "Identifier": { "PURL": "pkg:composer/dompdf/php-font-lib@1.0.1", "UID": "333a7e86468d3e61" }, "Version": "1.0.1", "Licenses": [ "LGPL-2.1-or-later" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 914, "EndLine": 958 } ], "AnalyzedBy": "composer" }, { "ID": "dompdf/php-svg-lib@1.0.0", "Name": "dompdf/php-svg-lib", "Identifier": { "PURL": "pkg:composer/dompdf/php-svg-lib@1.0.0", "UID": "38a32cb08a1d515f" }, "Version": "1.0.0", "Licenses": [ "LGPL-3.0-or-later" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "sabberworm/php-css-parser@v8.8.0" ], "Locations": [ { "StartLine": 959, "EndLine": 1004 } ], "AnalyzedBy": "composer" }, { "ID": "dragonmantank/cron-expression@v3.4.0", "Name": "dragonmantank/cron-expression", "Identifier": { "PURL": "pkg:composer/dragonmantank/cron-expression@v3.4.0", "UID": "5cb61cef0db9a8ee" }, "Version": "v3.4.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "webmozart/assert@1.11.0" ], "Locations": [ { "StartLine": 1005, "EndLine": 1069 } ], "AnalyzedBy": "composer" }, { "ID": "egulias/email-validator@4.0.4", "Name": "egulias/email-validator", "Identifier": { "PURL": "pkg:composer/egulias/email-validator@4.0.4", "UID": "2f269dfbefac2ce4" }, "Version": "4.0.4", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "doctrine/lexer@3.0.1", "symfony/polyfill-intl-idn@v1.31.0" ], "Locations": [ { "StartLine": 1070, "EndLine": 1136 } ], "AnalyzedBy": "composer" }, { "ID": "ezyang/htmlpurifier@v4.18.0", "Name": "ezyang/htmlpurifier", "Identifier": { "PURL": "pkg:composer/ezyang/htmlpurifier@v4.18.0", "UID": "8a75bfd162babf40" }, "Version": "v4.18.0", "Licenses": [ "LGPL-2.1-or-later" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1137, "EndLine": 1197 } ], "AnalyzedBy": "composer" }, { "ID": "firebase/php-jwt@v6.11.1", "Name": "firebase/php-jwt", "Identifier": { "PURL": "pkg:composer/firebase/php-jwt@v6.11.1", "UID": "cbd6cdbca4ba2e2e" }, "Version": "v6.11.1", "Licenses": [ "BSD-3-Clause" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1198, "EndLine": 1260 } ], "AnalyzedBy": "composer" }, { "ID": "fruitcake/php-cors@v1.3.0", "Name": "fruitcake/php-cors", "Identifier": { "PURL": "pkg:composer/fruitcake/php-cors@v1.3.0", "UID": "c4622a27f11226f7" }, "Version": "v1.3.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "symfony/http-foundation@v7.2.5" ], "Locations": [ { "StartLine": 1261, "EndLine": 1331 } ], "AnalyzedBy": "composer" }, { "ID": "google-gemini-php/client@2.3.0", "Name": "google-gemini-php/client", "Identifier": { "PURL": "pkg:composer/google-gemini-php/client@2.3.0", "UID": "db76db3a267b5a22" }, "Version": "2.3.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "php-http/discovery@1.20.0" ], "Locations": [ { "StartLine": 1332, "EndLine": 1399 } ], "AnalyzedBy": "composer" }, { "ID": "google/auth@v1.47.0", "Name": "google/auth", "Identifier": { "PURL": "pkg:composer/google/auth@v1.47.0", "UID": "3ebb7e8d61a717af" }, "Version": "v1.47.0", "Licenses": [ "Apache-2.0" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "firebase/php-jwt@v6.11.1", "guzzlehttp/guzzle@7.9.3", "guzzlehttp/psr7@2.7.1", "psr/cache@3.0.0", "psr/http-message@2.0", "psr/log@3.0.2" ], "Locations": [ { "StartLine": 1468, "EndLine": 1528 } ], "AnalyzedBy": "composer" }, { "ID": "google/cloud-core@v1.62.3", "Name": "google/cloud-core", "Identifier": { "PURL": "pkg:composer/google/cloud-core@v1.62.3", "UID": "dd3d227af0151ee4" }, "Version": "v1.62.3", "Licenses": [ "Apache-2.0" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "google/auth@v1.47.0", "google/gax@v1.36.1", "guzzlehttp/guzzle@7.9.3", "guzzlehttp/promises@2.2.0", "guzzlehttp/psr7@2.7.1", "monolog/monolog@3.9.0", "psr/http-message@2.0", "rize/uri-template@0.4.0" ], "Locations": [ { "StartLine": 1529, "EndLine": 1594 } ], "AnalyzedBy": "composer" }, { "ID": "google/common-protos@4.12.1", "Name": "google/common-protos", "Identifier": { "PURL": "pkg:composer/google/common-protos@4.12.1", "UID": "595f1e43fc2b1dcc" }, "Version": "4.12.1", "Licenses": [ "Apache-2.0" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "google/protobuf@v4.31.1" ], "Locations": [ { "StartLine": 1711, "EndLine": 1769 } ], "AnalyzedBy": "composer" }, { "ID": "google/gax@v1.36.1", "Name": "google/gax", "Identifier": { "PURL": "pkg:composer/google/gax@v1.36.1", "UID": "7e6f19c67363c970" }, "Version": "v1.36.1", "Licenses": [ "BSD-3-Clause" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "google/auth@v1.47.0", "google/common-protos@4.12.1", "google/grpc-gcp@v0.4.1", "google/longrunning@0.4.7", "google/protobuf@v4.31.1", "grpc/grpc@1.57.0", "guzzlehttp/promises@2.2.0", "guzzlehttp/psr7@2.7.1", "ramsey/uuid@4.7.6" ], "Locations": [ { "StartLine": 1770, "EndLine": 1826 } ], "AnalyzedBy": "composer" }, { "ID": "google/grpc-gcp@v0.4.1", "Name": "google/grpc-gcp", "Identifier": { "PURL": "pkg:composer/google/grpc-gcp@v0.4.1", "UID": "ea23ae28149ca8d5" }, "Version": "v0.4.1", "Licenses": [ "Apache-2.0" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "google/auth@v1.47.0", "google/protobuf@v4.31.1", "grpc/grpc@1.57.0", "psr/cache@3.0.0" ], "Locations": [ { "StartLine": 1827, "EndLine": 1871 } ], "AnalyzedBy": "composer" }, { "ID": "google/longrunning@0.4.7", "Name": "google/longrunning", "Identifier": { "PURL": "pkg:composer/google/longrunning@0.4.7", "UID": "dfbe5198bad177ac" }, "Version": "0.4.7", "Licenses": [ "Apache-2.0" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1872, "EndLine": 1915 } ], "AnalyzedBy": "composer" }, { "ID": "google/protobuf@v4.31.1", "Name": "google/protobuf", "Identifier": { "PURL": "pkg:composer/google/protobuf@v4.31.1", "UID": "b3f91e2bdee8a233" }, "Version": "v4.31.1", "Licenses": [ "BSD-3-Clause" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1916, "EndLine": 1959 } ], "AnalyzedBy": "composer" }, { "ID": "graham-campbell/result-type@v1.1.3", "Name": "graham-campbell/result-type", "Identifier": { "PURL": "pkg:composer/graham-campbell/result-type@v1.1.3", "UID": "1d754bc69243b4d8" }, "Version": "v1.1.3", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "phpoption/phpoption@1.9.3" ], "Locations": [ { "StartLine": 1960, "EndLine": 2021 } ], "AnalyzedBy": "composer" }, { "ID": "grpc/grpc@1.57.0", "Name": "grpc/grpc", "Identifier": { "PURL": "pkg:composer/grpc/grpc@1.57.0", "UID": "60fad41c3f96fcee" }, "Version": "1.57.0", "Licenses": [ "Apache-2.0" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 2022, "EndLine": 2065 } ], "AnalyzedBy": "composer" }, { "ID": "guzzlehttp/promises@2.2.0", "Name": "guzzlehttp/promises", "Identifier": { "PURL": "pkg:composer/guzzlehttp/promises@2.2.0", "UID": "62f69b4cc185a35" }, "Version": "2.2.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 2192, "EndLine": 2274 } ], "AnalyzedBy": "composer" }, { "ID": "guzzlehttp/psr7@2.7.1", "Name": "guzzlehttp/psr7", "Identifier": { "PURL": "pkg:composer/guzzlehttp/psr7@2.7.1", "UID": "cde8365676712fdb" }, "Version": "2.7.1", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "psr/http-factory@1.1.0", "psr/http-message@2.0", "ralouphie/getallheaders@3.0.3" ], "Locations": [ { "StartLine": 2275, "EndLine": 2390 } ], "AnalyzedBy": "composer" }, { "ID": "guzzlehttp/uri-template@v1.0.4", "Name": "guzzlehttp/uri-template", "Identifier": { "PURL": "pkg:composer/guzzlehttp/uri-template@v1.0.4", "UID": "5da60ad30fc167c4" }, "Version": "v1.0.4", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "symfony/polyfill-php80@v1.31.0" ], "Locations": [ { "StartLine": 2391, "EndLine": 2476 } ], "AnalyzedBy": "composer" }, { "ID": "knplabs/knp-snappy@v1.5.1", "Name": "knplabs/knp-snappy", "Identifier": { "PURL": "pkg:composer/knplabs/knp-snappy@v1.5.1", "UID": "f9cfb6c00662ccd1" }, "Version": "v1.5.1", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "psr/log@3.0.2", "symfony/process@v7.2.5" ], "Locations": [ { "StartLine": 2477, "EndLine": 2543 } ], "AnalyzedBy": "composer" }, { "ID": "laravel/prompts@v0.3.5", "Name": "laravel/prompts", "Identifier": { "PURL": "pkg:composer/laravel/prompts@v0.3.5", "UID": "dd34cabba5be5ffe" }, "Version": "v0.3.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "symfony/console@v7.2.5" ], "Locations": [ { "StartLine": 2759, "EndLine": 2817 } ], "AnalyzedBy": "composer" }, { "ID": "laravel/serializable-closure@v2.0.4", "Name": "laravel/serializable-closure", "Identifier": { "PURL": "pkg:composer/laravel/serializable-closure@v2.0.4", "UID": "6c9f95a1a1ae2587" }, "Version": "v2.0.4", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 2818, "EndLine": 2878 } ], "AnalyzedBy": "composer" }, { "ID": "league/config@v1.2.0", "Name": "league/config", "Identifier": { "PURL": "pkg:composer/league/config@v1.2.0", "UID": "69d2e3ffceb50255" }, "Version": "v1.2.0", "Licenses": [ "BSD-3-Clause" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "dflydev/dot-access-data@v3.0.3", "nette/schema@v1.3.2" ], "Locations": [ { "StartLine": 3124, "EndLine": 3205 } ], "AnalyzedBy": "composer" }, { "ID": "league/flysystem@3.29.1", "Name": "league/flysystem", "Identifier": { "PURL": "pkg:composer/league/flysystem@3.29.1", "UID": "80bf8db758dde540" }, "Version": "3.29.1", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "league/flysystem-local@3.29.0", "league/mime-type-detection@1.16.0" ], "Locations": [ { "StartLine": 3206, "EndLine": 3288 } ], "AnalyzedBy": "composer" }, { "ID": "league/flysystem-local@3.29.0", "Name": "league/flysystem-local", "Identifier": { "PURL": "pkg:composer/league/flysystem-local@3.29.0", "UID": "da6c6d2816ef5562" }, "Version": "3.29.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "league/flysystem@3.29.1", "league/mime-type-detection@1.16.0" ], "Locations": [ { "StartLine": 3289, "EndLine": 3337 } ], "AnalyzedBy": "composer" }, { "ID": "league/mime-type-detection@1.16.0", "Name": "league/mime-type-detection", "Identifier": { "PURL": "pkg:composer/league/mime-type-detection@1.16.0", "UID": "855e7d0e45be050b" }, "Version": "1.16.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 3338, "EndLine": 3393 } ], "AnalyzedBy": "composer" }, { "ID": "league/oauth1-client@v1.11.0", "Name": "league/oauth1-client", "Identifier": { "PURL": "pkg:composer/league/oauth1-client@v1.11.0", "UID": "ed0423ed43055156" }, "Version": "v1.11.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "guzzlehttp/guzzle@7.9.3", "guzzlehttp/psr7@2.7.1" ], "Locations": [ { "StartLine": 3394, "EndLine": 3469 } ], "AnalyzedBy": "composer" }, { "ID": "league/uri@7.5.1", "Name": "league/uri", "Identifier": { "PURL": "pkg:composer/league/uri@7.5.1", "UID": "44c69ac2c28c5e1b" }, "Version": "7.5.1", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "league/uri-interfaces@7.5.0" ], "Locations": [ { "StartLine": 3470, "EndLine": 3559 } ], "AnalyzedBy": "composer" }, { "ID": "league/uri-interfaces@7.5.0", "Name": "league/uri-interfaces", "Identifier": { "PURL": "pkg:composer/league/uri-interfaces@7.5.0", "UID": "92295321c895a5f2" }, "Version": "7.5.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "psr/http-factory@1.1.0", "psr/http-message@2.0" ], "Locations": [ { "StartLine": 3560, "EndLine": 3643 } ], "AnalyzedBy": "composer" }, { "ID": "maennchen/zipstream-php@3.1.2", "Name": "maennchen/zipstream-php", "Identifier": { "PURL": "pkg:composer/maennchen/zipstream-php@3.1.2", "UID": "6f0b81642dd71c85" }, "Version": "3.1.2", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 3725, "EndLine": 3802 } ], "AnalyzedBy": "composer" }, { "ID": "markbaker/complex@3.0.2", "Name": "markbaker/complex", "Identifier": { "PURL": "pkg:composer/markbaker/complex@3.0.2", "UID": "9046d51591ddf653" }, "Version": "3.0.2", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 3803, "EndLine": 3853 } ], "AnalyzedBy": "composer" }, { "ID": "markbaker/matrix@3.0.1", "Name": "markbaker/matrix", "Identifier": { "PURL": "pkg:composer/markbaker/matrix@3.0.1", "UID": "1691d9fd7c9d4418" }, "Version": "3.0.1", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 3854, "EndLine": 3909 } ], "AnalyzedBy": "composer" }, { "ID": "masterminds/html5@2.9.0", "Name": "masterminds/html5", "Identifier": { "PURL": "pkg:composer/masterminds/html5@2.9.0", "UID": "3fc51367785cf82f" }, "Version": "2.9.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 3910, "EndLine": 3976 } ], "AnalyzedBy": "composer" }, { "ID": "monolog/monolog@3.9.0", "Name": "monolog/monolog", "Identifier": { "PURL": "pkg:composer/monolog/monolog@3.9.0", "UID": "96dc5d6da8ccf537" }, "Version": "3.9.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "psr/log@3.0.2" ], "Locations": [ { "StartLine": 4044, "EndLine": 4146 } ], "AnalyzedBy": "composer" }, { "ID": "mpdf/psr-http-message-shim@v2.0.1", "Name": "mpdf/psr-http-message-shim", "Identifier": { "PURL": "pkg:composer/mpdf/psr-http-message-shim@v2.0.1", "UID": "b1fa7fc07576d26d" }, "Version": "v2.0.1", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "psr/http-message@2.0" ], "Locations": [ { "StartLine": 4228, "EndLine": 4275 } ], "AnalyzedBy": "composer" }, { "ID": "mpdf/psr-log-aware-trait@v3.0.0", "Name": "mpdf/psr-log-aware-trait", "Identifier": { "PURL": "pkg:composer/mpdf/psr-log-aware-trait@v3.0.0", "UID": "1ef7aa76a72c50ff" }, "Version": "v3.0.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "psr/log@3.0.2" ], "Locations": [ { "StartLine": 4276, "EndLine": 4319 } ], "AnalyzedBy": "composer" }, { "ID": "myclabs/deep-copy@1.13.0", "Name": "myclabs/deep-copy", "Identifier": { "PURL": "pkg:composer/myclabs/deep-copy@1.13.0", "UID": "cbe8a8eec50360d4" }, "Version": "1.13.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 4320, "EndLine": 4379 } ], "AnalyzedBy": "composer" }, { "ID": "nesbot/carbon@3.9.0", "Name": "nesbot/carbon", "Identifier": { "PURL": "pkg:composer/nesbot/carbon@3.9.0", "UID": "c18979be9a2e527b" }, "Version": "3.9.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "carbonphp/carbon-doctrine-types@3.2.0", "psr/clock@1.0.0", "symfony/clock@v7.2.0", "symfony/polyfill-mbstring@v1.31.0", "symfony/translation@v7.2.4" ], "Locations": [ { "StartLine": 4380, "EndLine": 4485 } ], "AnalyzedBy": "composer" }, { "ID": "nette/schema@v1.3.2", "Name": "nette/schema", "Identifier": { "PURL": "pkg:composer/nette/schema@v1.3.2", "UID": "deb2bb600c261d11" }, "Version": "v1.3.2", "Licenses": [ "BSD-3-Clause", "GPL-2.0-only", "GPL-3.0-only" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "nette/utils@v4.0.6" ], "Locations": [ { "StartLine": 4486, "EndLine": 4547 } ], "AnalyzedBy": "composer" }, { "ID": "nette/utils@v4.0.6", "Name": "nette/utils", "Identifier": { "PURL": "pkg:composer/nette/utils@v4.0.6", "UID": "c3cc3725cce0e44e" }, "Version": "v4.0.6", "Licenses": [ "BSD-3-Clause", "GPL-2.0-only", "GPL-3.0-only" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 4548, "EndLine": 4633 } ], "AnalyzedBy": "composer" }, { "ID": "nikic/php-parser@v5.4.0", "Name": "nikic/php-parser", "Identifier": { "PURL": "pkg:composer/nikic/php-parser@v5.4.0", "UID": "63838807011257a1" }, "Version": "v5.4.0", "Licenses": [ "BSD-3-Clause" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 4634, "EndLine": 4691 } ], "AnalyzedBy": "composer" }, { "ID": "nunomaduro/termwind@v2.3.0", "Name": "nunomaduro/termwind", "Identifier": { "PURL": "pkg:composer/nunomaduro/termwind@v2.3.0", "UID": "577b7768acafcc5c" }, "Version": "v2.3.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "symfony/console@v7.2.5" ], "Locations": [ { "StartLine": 4692, "EndLine": 4778 } ], "AnalyzedBy": "composer" }, { "ID": "paragonie/constant_time_encoding@v3.0.0", "Name": "paragonie/constant_time_encoding", "Identifier": { "PURL": "pkg:composer/paragonie/constant_time_encoding@v3.0.0", "UID": "93e3bf92b05e14ea" }, "Version": "v3.0.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 4779, "EndLine": 4845 } ], "AnalyzedBy": "composer" }, { "ID": "paragonie/random_compat@v9.99.100", "Name": "paragonie/random_compat", "Identifier": { "PURL": "pkg:composer/paragonie/random_compat@v9.99.100", "UID": "fb82926b73e21596" }, "Version": "v9.99.100", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 4846, "EndLine": 4895 } ], "AnalyzedBy": "composer" }, { "ID": "php-http/discovery@1.20.0", "Name": "php-http/discovery", "Identifier": { "PURL": "pkg:composer/php-http/discovery@1.20.0", "UID": "4695d0884afd501a" }, "Version": "1.20.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 4937, "EndLine": 5015 } ], "AnalyzedBy": "composer" }, { "ID": "phpoffice/math@0.2.0", "Name": "phpoffice/math", "Identifier": { "PURL": "pkg:composer/phpoffice/math@0.2.0", "UID": "3bb10aa9f66cd1dc" }, "Version": "0.2.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 5016, "EndLine": 5067 } ], "AnalyzedBy": "composer" }, { "ID": "phpoffice/phpspreadsheet@1.29.10", "Name": "phpoffice/phpspreadsheet", "Identifier": { "PURL": "pkg:composer/phpoffice/phpspreadsheet@1.29.10", "UID": "7ddb59d1cab6f618" }, "Version": "1.29.10", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "composer/pcre@3.3.2", "ezyang/htmlpurifier@v4.18.0", "maennchen/zipstream-php@3.1.2", "markbaker/complex@3.0.2", "markbaker/matrix@3.0.1", "psr/http-client@1.0.3", "psr/http-factory@1.1.0", "psr/simple-cache@3.0.0" ], "Locations": [ { "StartLine": 5068, "EndLine": 5173 } ], "AnalyzedBy": "composer" }, { "ID": "phpoption/phpoption@1.9.3", "Name": "phpoption/phpoption", "Identifier": { "PURL": "pkg:composer/phpoption/phpoption@1.9.3", "UID": "44dab3525a993dbe" }, "Version": "1.9.3", "Licenses": [ "Apache-2.0" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 5283, "EndLine": 5357 } ], "AnalyzedBy": "composer" }, { "ID": "phpseclib/phpseclib@3.0.43", "Name": "phpseclib/phpseclib", "Identifier": { "PURL": "pkg:composer/phpseclib/phpseclib@3.0.43", "UID": "70c3f3c996d06bb" }, "Version": "3.0.43", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "paragonie/constant_time_encoding@v3.0.0", "paragonie/random_compat@v9.99.100" ], "Locations": [ { "StartLine": 5358, "EndLine": 5467 } ], "AnalyzedBy": "composer" }, { "ID": "psr/cache@3.0.0", "Name": "psr/cache", "Identifier": { "PURL": "pkg:composer/psr/cache@3.0.0", "UID": "2722d6416bdc9ed1" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 5468, "EndLine": 5516 } ], "AnalyzedBy": "composer" }, { "ID": "psr/clock@1.0.0", "Name": "psr/clock", "Identifier": { "PURL": "pkg:composer/psr/clock@1.0.0", "UID": "6c200e228284522f" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 5517, "EndLine": 5564 } ], "AnalyzedBy": "composer" }, { "ID": "psr/container@2.0.2", "Name": "psr/container", "Identifier": { "PURL": "pkg:composer/psr/container@2.0.2", "UID": "5ce0e080f30a17f4" }, "Version": "2.0.2", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 5565, "EndLine": 5617 } ], "AnalyzedBy": "composer" }, { "ID": "psr/event-dispatcher@1.0.0", "Name": "psr/event-dispatcher", "Identifier": { "PURL": "pkg:composer/psr/event-dispatcher@1.0.0", "UID": "84e295b8f99658f6" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 5618, "EndLine": 5667 } ], "AnalyzedBy": "composer" }, { "ID": "psr/http-client@1.0.3", "Name": "psr/http-client", "Identifier": { "PURL": "pkg:composer/psr/http-client@1.0.3", "UID": "6c7907af6e856746" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "psr/http-message@2.0" ], "Locations": [ { "StartLine": 5668, "EndLine": 5719 } ], "AnalyzedBy": "composer" }, { "ID": "psr/http-factory@1.1.0", "Name": "psr/http-factory", "Identifier": { "PURL": "pkg:composer/psr/http-factory@1.1.0", "UID": "6ccb889e31b4f552" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "psr/http-message@2.0" ], "Locations": [ { "StartLine": 5720, "EndLine": 5774 } ], "AnalyzedBy": "composer" }, { "ID": "psr/http-message@2.0", "Name": "psr/http-message", "Identifier": { "PURL": "pkg:composer/psr/http-message@2.0", "UID": "235077fca3051c22" }, "Version": "2.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 5775, "EndLine": 5827 } ], "AnalyzedBy": "composer" }, { "ID": "psr/log@3.0.2", "Name": "psr/log", "Identifier": { "PURL": "pkg:composer/psr/log@3.0.2", "UID": "19a724898883598b" }, "Version": "3.0.2", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 5828, "EndLine": 5877 } ], "AnalyzedBy": "composer" }, { "ID": "psr/simple-cache@3.0.0", "Name": "psr/simple-cache", "Identifier": { "PURL": "pkg:composer/psr/simple-cache@3.0.0", "UID": "c2f0b0cf3283cc4b" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 5878, "EndLine": 5928 } ], "AnalyzedBy": "composer" }, { "ID": "psy/psysh@v0.12.8", "Name": "psy/psysh", "Identifier": { "PURL": "pkg:composer/psy/psysh@v0.12.8", "UID": "982cdcee18166479" }, "Version": "v0.12.8", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "nikic/php-parser@v5.4.0", "symfony/console@v7.2.5", "symfony/var-dumper@v7.2.3" ], "Locations": [ { "StartLine": 5929, "EndLine": 6007 } ], "AnalyzedBy": "composer" }, { "ID": "ralouphie/getallheaders@3.0.3", "Name": "ralouphie/getallheaders", "Identifier": { "PURL": "pkg:composer/ralouphie/getallheaders@3.0.3", "UID": "c1a13e1dc016f600" }, "Version": "3.0.3", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 6008, "EndLine": 6051 } ], "AnalyzedBy": "composer" }, { "ID": "ramsey/collection@2.1.1", "Name": "ramsey/collection", "Identifier": { "PURL": "pkg:composer/ramsey/collection@2.1.1", "UID": "8910bbb7b7ac3830" }, "Version": "2.1.1", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 6052, "EndLine": 6127 } ], "AnalyzedBy": "composer" }, { "ID": "ramsey/uuid@4.7.6", "Name": "ramsey/uuid", "Identifier": { "PURL": "pkg:composer/ramsey/uuid@4.7.6", "UID": "348379a2003c12f6" }, "Version": "4.7.6", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "brick/math@0.12.3", "ramsey/collection@2.1.1" ], "Locations": [ { "StartLine": 6128, "EndLine": 6219 } ], "AnalyzedBy": "composer" }, { "ID": "rize/uri-template@0.4.0", "Name": "rize/uri-template", "Identifier": { "PURL": "pkg:composer/rize/uri-template@0.4.0", "UID": "694a97afca173980" }, "Version": "0.4.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 6220, "EndLine": 6283 } ], "AnalyzedBy": "composer" }, { "ID": "sabberworm/php-css-parser@v8.8.0", "Name": "sabberworm/php-css-parser", "Identifier": { "PURL": "pkg:composer/sabberworm/php-css-parser@v8.8.0", "UID": "c46424064523f429" }, "Version": "v8.8.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 6284, "EndLine": 6348 } ], "AnalyzedBy": "composer" }, { "ID": "setasign/fpdi@v2.6.3", "Name": "setasign/fpdi", "Identifier": { "PURL": "pkg:composer/setasign/fpdi@v2.6.3", "UID": "8768fb62c8417ea6" }, "Version": "v2.6.3", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 6349, "EndLine": 6420 } ], "AnalyzedBy": "composer" }, { "ID": "spatie/temporary-directory@2.3.0", "Name": "spatie/temporary-directory", "Identifier": { "PURL": "pkg:composer/spatie/temporary-directory@2.3.0", "UID": "5350b48c9c987224" }, "Version": "2.3.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 6599, "EndLine": 6659 } ], "AnalyzedBy": "composer" }, { "ID": "spomky-labs/base64url@v2.0.4", "Name": "spomky-labs/base64url", "Identifier": { "PURL": "pkg:composer/spomky-labs/base64url@v2.0.4", "UID": "2cb2f2b0c6b711d7" }, "Version": "v2.0.4", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 6660, "EndLine": 6724 } ], "AnalyzedBy": "composer" }, { "ID": "spomky-labs/pki-framework@1.4.2", "Name": "spomky-labs/pki-framework", "Identifier": { "PURL": "pkg:composer/spomky-labs/pki-framework@1.4.2", "UID": "46f8ab4aad66a24e" }, "Version": "1.4.2", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "brick/math@0.12.3", "psr/clock@1.0.0" ], "Locations": [ { "StartLine": 6725, "EndLine": 6834 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/clock@v7.2.0", "Name": "symfony/clock", "Identifier": { "PURL": "pkg:composer/symfony/clock@v7.2.0", "UID": "b5c646482b547c3" }, "Version": "v7.2.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "psr/clock@1.0.0", "symfony/polyfill-php83@v1.31.0" ], "Locations": [ { "StartLine": 6916, "EndLine": 6989 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/console@v7.2.5", "Name": "symfony/console", "Identifier": { "PURL": "pkg:composer/symfony/console@v7.2.5", "UID": "70f3b2a9b61d7002" }, "Version": "v7.2.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "symfony/polyfill-mbstring@v1.31.0", "symfony/service-contracts@v3.5.1", "symfony/string@v7.2.0" ], "Locations": [ { "StartLine": 6990, "EndLine": 7082 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/css-selector@v7.2.0", "Name": "symfony/css-selector", "Identifier": { "PURL": "pkg:composer/symfony/css-selector@v7.2.0", "UID": "4bc35ff363c4e71d" }, "Version": "v7.2.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 7083, "EndLine": 7147 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/deprecation-contracts@v3.5.1", "Name": "symfony/deprecation-contracts", "Identifier": { "PURL": "pkg:composer/symfony/deprecation-contracts@v3.5.1", "UID": "2ea6b7d13889b914" }, "Version": "v3.5.1", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 7148, "EndLine": 7214 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/error-handler@v7.2.5", "Name": "symfony/error-handler", "Identifier": { "PURL": "pkg:composer/symfony/error-handler@v7.2.5", "UID": "5dafa237d56dc880" }, "Version": "v7.2.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "psr/log@3.0.2", "symfony/var-dumper@v7.2.3" ], "Locations": [ { "StartLine": 7215, "EndLine": 7289 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/event-dispatcher@v7.2.0", "Name": "symfony/event-dispatcher", "Identifier": { "PURL": "pkg:composer/symfony/event-dispatcher@v7.2.0", "UID": "dc03299208fa76cc" }, "Version": "v7.2.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "symfony/event-dispatcher-contracts@v3.5.1" ], "Locations": [ { "StartLine": 7290, "EndLine": 7369 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/event-dispatcher-contracts@v3.5.1", "Name": "symfony/event-dispatcher-contracts", "Identifier": { "PURL": "pkg:composer/symfony/event-dispatcher-contracts@v3.5.1", "UID": "f4960a449e134548" }, "Version": "v3.5.1", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "psr/event-dispatcher@1.0.0" ], "Locations": [ { "StartLine": 7370, "EndLine": 7445 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/finder@v7.2.2", "Name": "symfony/finder", "Identifier": { "PURL": "pkg:composer/symfony/finder@v7.2.2", "UID": "5c0079330d82cc32" }, "Version": "v7.2.2", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 7446, "EndLine": 7509 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/http-foundation@v7.2.5", "Name": "symfony/http-foundation", "Identifier": { "PURL": "pkg:composer/symfony/http-foundation@v7.2.5", "UID": "d6287fc557259aa7" }, "Version": "v7.2.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "symfony/deprecation-contracts@v3.5.1", "symfony/polyfill-mbstring@v1.31.0", "symfony/polyfill-php83@v1.31.0" ], "Locations": [ { "StartLine": 7510, "EndLine": 7587 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/http-kernel@v7.2.5", "Name": "symfony/http-kernel", "Identifier": { "PURL": "pkg:composer/symfony/http-kernel@v7.2.5", "UID": "845e32c33e7aa31d" }, "Version": "v7.2.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "psr/log@3.0.2", "symfony/deprecation-contracts@v3.5.1", "symfony/error-handler@v7.2.5", "symfony/event-dispatcher@v7.2.0", "symfony/http-foundation@v7.2.5", "symfony/polyfill-ctype@v1.31.0" ], "Locations": [ { "StartLine": 7588, "EndLine": 7701 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/mailer@v7.2.3", "Name": "symfony/mailer", "Identifier": { "PURL": "pkg:composer/symfony/mailer@v7.2.3", "UID": "cdcbfa9120a1052c" }, "Version": "v7.2.3", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "egulias/email-validator@4.0.4", "psr/event-dispatcher@1.0.0", "psr/log@3.0.2", "symfony/event-dispatcher@v7.2.0", "symfony/mime@v7.2.4", "symfony/service-contracts@v3.5.1" ], "Locations": [ { "StartLine": 7702, "EndLine": 7781 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/mime@v7.2.4", "Name": "symfony/mime", "Identifier": { "PURL": "pkg:composer/symfony/mime@v7.2.4", "UID": "65c51594d0474a6b" }, "Version": "v7.2.4", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "symfony/polyfill-intl-idn@v1.31.0", "symfony/polyfill-mbstring@v1.31.0" ], "Locations": [ { "StartLine": 7782, "EndLine": 7865 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/polyfill-ctype@v1.31.0", "Name": "symfony/polyfill-ctype", "Identifier": { "PURL": "pkg:composer/symfony/polyfill-ctype@v1.31.0", "UID": "2f5971dfb69fb0f1" }, "Version": "v1.31.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 7866, "EndLine": 7944 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/polyfill-intl-grapheme@v1.31.0", "Name": "symfony/polyfill-intl-grapheme", "Identifier": { "PURL": "pkg:composer/symfony/polyfill-intl-grapheme@v1.31.0", "UID": "f5dc47c7a8dd6757" }, "Version": "v1.31.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 7945, "EndLine": 8022 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/polyfill-intl-idn@v1.31.0", "Name": "symfony/polyfill-intl-idn", "Identifier": { "PURL": "pkg:composer/symfony/polyfill-intl-idn@v1.31.0", "UID": "2a229fbb9ab90f5a" }, "Version": "v1.31.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "symfony/polyfill-intl-normalizer@v1.31.0" ], "Locations": [ { "StartLine": 8023, "EndLine": 8105 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/polyfill-intl-normalizer@v1.31.0", "Name": "symfony/polyfill-intl-normalizer", "Identifier": { "PURL": "pkg:composer/symfony/polyfill-intl-normalizer@v1.31.0", "UID": "eb31bd67001ac5f3" }, "Version": "v1.31.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 8106, "EndLine": 8186 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/polyfill-mbstring@v1.31.0", "Name": "symfony/polyfill-mbstring", "Identifier": { "PURL": "pkg:composer/symfony/polyfill-mbstring@v1.31.0", "UID": "29510b428fbf6ca9" }, "Version": "v1.31.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 8187, "EndLine": 8266 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/polyfill-php80@v1.31.0", "Name": "symfony/polyfill-php80", "Identifier": { "PURL": "pkg:composer/symfony/polyfill-php80@v1.31.0", "UID": "e3b9d903b798cef6" }, "Version": "v1.31.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 8267, "EndLine": 8346 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/polyfill-php83@v1.31.0", "Name": "symfony/polyfill-php83", "Identifier": { "PURL": "pkg:composer/symfony/polyfill-php83@v1.31.0", "UID": "a76aeabb3d23dfaf" }, "Version": "v1.31.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 8347, "EndLine": 8422 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/polyfill-uuid@v1.31.0", "Name": "symfony/polyfill-uuid", "Identifier": { "PURL": "pkg:composer/symfony/polyfill-uuid@v1.31.0", "UID": "bc57805d87c11568" }, "Version": "v1.31.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 8423, "EndLine": 8501 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/process@v7.2.5", "Name": "symfony/process", "Identifier": { "PURL": "pkg:composer/symfony/process@v7.2.5", "UID": "f37ca7ecf00174fe" }, "Version": "v7.2.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 8502, "EndLine": 8562 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/routing@v7.2.3", "Name": "symfony/routing", "Identifier": { "PURL": "pkg:composer/symfony/routing@v7.2.3", "UID": "55418a915353e19f" }, "Version": "v7.2.3", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "symfony/deprecation-contracts@v3.5.1" ], "Locations": [ { "StartLine": 8563, "EndLine": 8643 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/service-contracts@v3.5.1", "Name": "symfony/service-contracts", "Identifier": { "PURL": "pkg:composer/symfony/service-contracts@v3.5.1", "UID": "bf43b8870fd07d92" }, "Version": "v3.5.1", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "psr/container@2.0.2", "symfony/deprecation-contracts@v3.5.1" ], "Locations": [ { "StartLine": 8644, "EndLine": 8726 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/string@v7.2.0", "Name": "symfony/string", "Identifier": { "PURL": "pkg:composer/symfony/string@v7.2.0", "UID": "d694676cd587cc47" }, "Version": "v7.2.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "symfony/polyfill-ctype@v1.31.0", "symfony/polyfill-intl-grapheme@v1.31.0", "symfony/polyfill-intl-normalizer@v1.31.0", "symfony/polyfill-mbstring@v1.31.0" ], "Locations": [ { "StartLine": 8727, "EndLine": 8813 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/translation@v7.2.4", "Name": "symfony/translation", "Identifier": { "PURL": "pkg:composer/symfony/translation@v7.2.4", "UID": "dad1ca2556abdff1" }, "Version": "v7.2.4", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "symfony/deprecation-contracts@v3.5.1", "symfony/polyfill-mbstring@v1.31.0", "symfony/translation-contracts@v3.5.1" ], "Locations": [ { "StartLine": 8814, "EndLine": 8908 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/translation-contracts@v3.5.1", "Name": "symfony/translation-contracts", "Identifier": { "PURL": "pkg:composer/symfony/translation-contracts@v3.5.1", "UID": "c761ca5a12e1fca8" }, "Version": "v3.5.1", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 8909, "EndLine": 8986 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/uid@v7.2.0", "Name": "symfony/uid", "Identifier": { "PURL": "pkg:composer/symfony/uid@v7.2.0", "UID": "e755faf8797bdb0f" }, "Version": "v7.2.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "symfony/polyfill-uuid@v1.31.0" ], "Locations": [ { "StartLine": 8987, "EndLine": 9060 } ], "AnalyzedBy": "composer" }, { "ID": "symfony/var-dumper@v7.2.3", "Name": "symfony/var-dumper", "Identifier": { "PURL": "pkg:composer/symfony/var-dumper@v7.2.3", "UID": "11298f3406f431c5" }, "Version": "v7.2.3", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "symfony/polyfill-mbstring@v1.31.0" ], "Locations": [ { "StartLine": 9061, "EndLine": 9143 } ], "AnalyzedBy": "composer" }, { "ID": "tijsverkoyen/css-to-inline-styles@v2.3.0", "Name": "tijsverkoyen/css-to-inline-styles", "Identifier": { "PURL": "pkg:composer/tijsverkoyen/css-to-inline-styles@v2.3.0", "UID": "77c7dbcd127c7779" }, "Version": "v2.3.0", "Licenses": [ "BSD-3-Clause" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "symfony/css-selector@v7.2.0" ], "Locations": [ { "StartLine": 9144, "EndLine": 9198 } ], "AnalyzedBy": "composer" }, { "ID": "vlucas/phpdotenv@v5.6.1", "Name": "vlucas/phpdotenv", "Identifier": { "PURL": "pkg:composer/vlucas/phpdotenv@v5.6.1", "UID": "94f3b97243d463df" }, "Version": "v5.6.1", "Licenses": [ "BSD-3-Clause" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "graham-campbell/result-type@v1.1.3", "phpoption/phpoption@1.9.3", "symfony/polyfill-ctype@v1.31.0", "symfony/polyfill-mbstring@v1.31.0", "symfony/polyfill-php80@v1.31.0" ], "Locations": [ { "StartLine": 9199, "EndLine": 9282 } ], "AnalyzedBy": "composer" }, { "ID": "voku/portable-ascii@2.0.3", "Name": "voku/portable-ascii", "Identifier": { "PURL": "pkg:composer/voku/portable-ascii@2.0.3", "UID": "69ce1c40977d4cfe" }, "Version": "2.0.3", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 9283, "EndLine": 9356 } ], "AnalyzedBy": "composer" }, { "ID": "web-token/jwt-library@4.1.6", "Name": "web-token/jwt-library", "Identifier": { "PURL": "pkg:composer/web-token/jwt-library@4.1.6", "UID": "e3b82897c5810491" }, "Version": "4.1.6", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "brick/math@0.12.3", "psr/clock@1.0.0", "spomky-labs/pki-framework@1.4.2" ], "Locations": [ { "StartLine": 9357, "EndLine": 9445 } ], "AnalyzedBy": "composer" }, { "ID": "webmozart/assert@1.11.0", "Name": "webmozart/assert", "Identifier": { "PURL": "pkg:composer/webmozart/assert@1.11.0", "UID": "6c2d0cb8efcb8454" }, "Version": "1.11.0", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 9446, "EndLine": 9503 } ], "AnalyzedBy": "composer" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2025-45769", "VendorIDs": [ "GHSA-2x45-7fc3-mxwq" ], "PkgID": "firebase/php-jwt@v6.11.1", "PkgName": "firebase/php-jwt", "PkgIdentifier": { "PURL": "pkg:composer/firebase/php-jwt@v6.11.1", "UID": "cbd6cdbca4ba2e2e" }, "InstalledVersion": "v6.11.1", "FixedVersion": "7.0.0", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-45769", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:d323496e0e0e218d67d7097e97348193df4eb672016d327eab7e594d9daf42ac", "Title": "php-jwt contains weak encryption", "Description": "php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not meant to recommend an outcome for this CVE Record.", "Severity": "LOW", "CweIDs": [ "CWE-326" ], "VendorSeverity": { "ghsa": 1 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U", "V3Score": 6.5, "V40Score": 2.7 } }, "References": [ "https://gist.github.com/ZupeiNie/83756316c4c24fe97a50176a92608db3", "https://github.com/advisories/GHSA-2x45-7fc3-mxwq", "https://github.com/firebase", "https://github.com/firebase/php-jwt", "https://github.com/firebase/php-jwt/commit/6b80341bf57838ea2d011487917337901cd71576", "https://github.com/firebase/php-jwt/issues/611", "https://github.com/firebase/php-jwt/issues/618", "https://github.com/firebase/php-jwt/issues/620", "https://github.com/firebase/php-jwt/pull/613", "https://github.com/firebase/php-jwt/releases/tag/v7.0.0", "https://github.com/github/advisory-database/pull/6954", "https://nvd.nist.gov/vuln/detail/CVE-2025-45769" ], "PublishedDate": "2025-07-31T20:15:33.15Z", "LastModifiedDate": "2026-02-18T22:16:24.073Z" }, { "VulnerabilityID": "CVE-2026-6409", "VendorIDs": [ "GHSA-p2gh-cfq4-4wjc" ], "PkgID": "google/protobuf@v4.31.1", "PkgName": "google/protobuf", "PkgIdentifier": { "PURL": "pkg:composer/google/protobuf@v4.31.1", "UID": "b3f91e2bdee8a233" }, "InstalledVersion": "v4.31.1", "FixedVersion": "4.33.6", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-6409", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:0f4ccf31ae7777449863176ba71f99137a260582aee82ee16fd2523ed1e7b1a8", "Title": "A Denial of Service (DoS) vulnerability exists in the Protobuf PHP lib ...", "Description": "A Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input. Maliciously structured messages—specifically those containing negative varints or deep recursion—can be used to crash the application, impacting service availability.", "Severity": "HIGH", "CweIDs": [ "CWE-20" ], "VendorSeverity": { "azure": 3, "ghsa": 3, "photon": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 } }, "References": [ "https://github.com/protocolbuffers/protobuf", "https://github.com/protocolbuffers/protobuf/commit/60e93d2d104f2af9cd345b1c6f3891d91430244a", "https://github.com/protocolbuffers/protobuf/commit/c8e9b27d95c6ab2d0668b5889e7dac2c477b7038", "https://github.com/protocolbuffers/protobuf/issues/24159", "https://github.com/protocolbuffers/protobuf/issues/25067", "https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-p2gh-cfq4-4wjc", "https://nvd.nist.gov/vuln/detail/CVE-2026-6409", "https://www.cve.org/CVERecord?id=CVE-2026-6409" ], "PublishedDate": "2026-04-16T15:17:41.91Z", "LastModifiedDate": "2026-04-17T15:17:00.957Z" }, { "VulnerabilityID": "CVE-2026-46643", "VendorIDs": [ "GHSA-vpr4-p6fq-85jc" ], "PkgID": "knplabs/knp-snappy@v1.5.1", "PkgName": "knplabs/knp-snappy", "PkgIdentifier": { "PURL": "pkg:composer/knplabs/knp-snappy@v1.5.1", "UID": "f9cfb6c00662ccd1" }, "InstalledVersion": "v1.5.1", "FixedVersion": "1.7.1", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-46643", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:1b621bdeac956ff9338ea1cea2e4272a51911adcf7e7305af8548ae17c18f9ff", "Title": "Snappy: Binary path is never shell-escaped due to an inverted is_executable check", "Description": "### Impact\n\nOn POSIX, escapeshellarg(‘/usr/bin/wkhtmltopdf’) returns the literal string ‘/usr/bin/wkhtmltopdf’ with the single-quote characters included. is_executable() then looks for a file whose actual name contains those quote characters, which essentially never exists. The safe branch is dead code and $command always falls through to the raw, unescaped value.\n\nThe rest of the arguments (options, input, output) are escaped correctly, so injection has to land in the binary string itself. That happens whenever the binary path is sourced from configuration that is user-influenced, derived from environment variables that ultimately come from request data, or concatenated with any user-controlled fragment.\n\n#### Proof of concept:\n\n```php\n $pdf = new Knp\\Snappy\\Pdf(‘wkhtmltopdf; touch /tmp/snappy_rce’);\n $pdf-\u003egenerate(‘https://example.com’, ‘/tmp/out.pdf’);\n // /tmp/snappy_rce is created.\n```\n\n**Impact:** command execution as the PHP process when the binary path is attacker-influenced. Even in deployments where the binary is hard-coded, this is a defensive-in-depth regression: downstream packages reasonably assume Snappy shell-escapes the binary because the code looks like it does.\n\n### Patches\n\nThe version 1.7.1 will resolve this security advisory.\n\n### Workarounds\n\nBefore calling the constructor, ensure `\\is_executable($path)` is truthy.\n\n```php\n// Bad example\n$pdf = new Knp\\Snappy\\Pdf('/path/to/binary');\n```\n\n```php\n// Better example\n$pathToBinary = '/path/to/binary';\n\nif (!\\is_executable($pathToBinary)) {\n throw new \\RuntimeException();\n}\n\n$pdf = new Knp\\Snappy\\Pdf('/path/to/binary');\n```", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.5 } }, "References": [ "https://github.com/KnpLabs/snappy", "https://github.com/KnpLabs/snappy/security/advisories/GHSA-vpr4-p6fq-85jc" ] }, { "VulnerabilityID": "CVE-2026-46683", "VendorIDs": [ "GHSA-c5fp-p67m-gq56" ], "PkgID": "knplabs/knp-snappy@v1.5.1", "PkgName": "knplabs/knp-snappy", "PkgIdentifier": { "PURL": "pkg:composer/knplabs/knp-snappy@v1.5.1", "UID": "f9cfb6c00662ccd1" }, "InstalledVersion": "v1.5.1", "FixedVersion": "1.7.0", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-46683", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:9f7b9ab1e0f2348bef78e146601e7560446af3b9da38b6667e721632613d2702", "Title": "Snappy : SSRF and local file read via the xsl-style-sheet option", "Description": "### Impact\n\nIt impacts applications where:\n- the PHP daemon run with root permissions ;\n- the application is either running outside a container or has sensitive file access ;\n\nIt could happens with this kind of workflows:\n\n```php\n$stylesheet = $_GET['stylesheet']; // = ‘file:///etc/passwd’\n$pdf = new Knp\\Snappy\\Pdf(‘/usr/local/bin/wkhtmltopdf’);\n $pdf-\u003egenerate(‘page.html’, ‘out.pdf’, [\n ‘xsl-style-sheet’ =\u003e $stylesheet\n ]);\n```\n\n### Patches\n\nA list a schema with `http` and `https` by default is used to validate the remote path by default.\n\n### Workarounds\n\nDevelopers should ensure usage cannot allow (in any case) a user to pass a free input directly to the Snappy library.\n\n```php\n// Bad example\n$pdf = new Knp\\Snappy\\Pdf(‘/usr/local/bin/wkhtmltopdf’);\n $pdf-\u003egenerate(‘page.html’, ‘out.pdf’, [\n ‘xsl-style-sheet’ =\u003e $_GET['input'],\n ]);\n```\n\nInstead developers can list available available stylesheets and pick the right one with the user input.\n\n```php\n// Better\n$allowedStylesheets = [\n 'invoice' =\u003e '/app/xsl/invoice.xsl',\n 'report' =\u003e '/app/xsl/report.xsl',\n];\n\n$key = $_GET['stylesheet'] ?? '';\n\nif (!array_key_exists($key, $allowedStylesheets)) {\n throw new \\RuntimeException('Unknown stylesheet.');\n}\n\n$pdf = new Knp\\Snappy\\Pdf('/usr/local/bin/wkhtmltopdf');\n$pdf-\u003egenerate('page.html', 'out.pdf', [\n 'xsl-style-sheet' =\u003e $allowedStylesheets[$key],\n]);\n```\n\n### References\n\nRead more about SSRF at [owasp.org/www-community/attacks/Server_Side_Request_Forgery](https://owasp.org/www-community/attacks/Server_Side_Request_Forgery)", "Severity": "MEDIUM", "VendorSeverity": { "ghsa": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N", "V40Score": 6.9 } }, "References": [ "https://github.com/KnpLabs/snappy", "https://github.com/KnpLabs/snappy/security/advisories/GHSA-c5fp-p67m-gq56" ] }, { "VulnerabilityID": "CVE-2026-30838", "VendorIDs": [ "GHSA-4v6x-c7xx-hw9f" ], "PkgID": "league/commonmark@2.7.0", "PkgName": "league/commonmark", "PkgIdentifier": { "PURL": "pkg:composer/league/commonmark@2.7.0", "UID": "ed072e489e8bc3bd" }, "InstalledVersion": "2.7.0", "FixedVersion": "2.8.1", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-30838", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:2fb08bd3f414b2e477be8284ffd64e71e7d4e0fea605a256563a460b5e495e82", "Title": "league/commonmark is a PHP Markdown parser. Prior to version 2.8.1, th ...", "Description": "league/commonmark is a PHP Markdown parser. Prior to version 2.8.1, the DisallowedRawHtml extension can be bypassed by inserting a newline, tab, or other ASCII whitespace character between a disallowed HTML tag name and the closing \u003e. For example, \u003cscript\\n\u003e would pass through unfiltered and be rendered as a valid HTML tag by browsers. This is a cross-site scripting (XSS) vector for any application that relies on this extension to sanitize untrusted user input. All applications using the DisallowedRawHtml extension to process untrusted markdown are affected. Applications that use a dedicated HTML sanitizer (such as HTML Purifier) on the rendered output are not affected. This issue has been patched in version 2.8.1.", "Severity": "MEDIUM", "CweIDs": [ "CWE-79" ], "VendorSeverity": { "ghsa": 2, "nvd": 2, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N", "V40Score": 5.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "V3Score": 6.1 } }, "References": [ "https://commonmark.thephpleague.com/extensions/disallowed-raw-html", "https://github.com/thephpleague/commonmark", "https://github.com/thephpleague/commonmark/security/advisories/GHSA-4v6x-c7xx-hw9f", "https://nvd.nist.gov/vuln/detail/CVE-2026-30838", "https://ubuntu.com/security/notices/USN-8194-1", "https://www.cve.org/CVERecord?id=CVE-2026-30838" ], "PublishedDate": "2026-03-07T16:15:56.25Z", "LastModifiedDate": "2026-03-11T20:24:06.543Z" }, { "VulnerabilityID": "CVE-2026-33347", "VendorIDs": [ "GHSA-hh8v-hgvp-g3f5" ], "PkgID": "league/commonmark@2.7.0", "PkgName": "league/commonmark", "PkgIdentifier": { "PURL": "pkg:composer/league/commonmark@2.7.0", "UID": "ed072e489e8bc3bd" }, "InstalledVersion": "2.7.0", "FixedVersion": "2.8.2", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33347", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:30720e4575d073a04c0dc68ee80af4a4c0b83ddff0dd1366f5f3fb86521c5b00", "Title": "league/commonmark is a PHP Markdown parser. From version 2.3.0 to befo ...", "Description": "league/commonmark is a PHP Markdown parser. From version 2.3.0 to before version 2.8.2, the DomainFilteringAdapter in the Embed extension is vulnerable to an allowlist bypass due to a missing hostname boundary assertion in the domain-matching regex. An attacker-controlled domain like youtube.com.evil passes the allowlist check when youtube.com is an allowed domain. This issue has been patched in version 2.8.2.", "Severity": "MEDIUM", "CweIDs": [ "CWE-79", "CWE-185", "CWE-918" ], "VendorSeverity": { "ghsa": 2, "nvd": 2, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N", "V40Score": 6.3 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "V3Score": 6.1 } }, "References": [ "https://github.com/thephpleague/commonmark", "https://github.com/thephpleague/commonmark/commit/59fb075d2101740c337c7216e3f32b36c204218b", "https://github.com/thephpleague/commonmark/releases/tag/2.8.2", "https://github.com/thephpleague/commonmark/security/advisories/GHSA-hh8v-hgvp-g3f5", "https://nvd.nist.gov/vuln/detail/CVE-2026-33347", "https://ubuntu.com/security/notices/USN-8194-1", "https://www.cve.org/CVERecord?id=CVE-2026-33347" ], "PublishedDate": "2026-03-24T20:16:29.24Z", "LastModifiedDate": "2026-04-08T19:01:50.727Z" }, { "VulnerabilityID": "CVE-2025-48882", "VendorIDs": [ "GHSA-42hm-pq2f-3r7m" ], "PkgID": "phpoffice/math@0.2.0", "PkgName": "phpoffice/math", "PkgIdentifier": { "PURL": "pkg:composer/phpoffice/math@0.2.0", "UID": "3bb10aa9f66cd1dc" }, "InstalledVersion": "0.2.0", "FixedVersion": "0.3.0", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-48882", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:d90b61fd6878ef646baaf6efa606804b25572bec10a61f56da42a3f209171294", "Title": "PHPOffice Math allows XXE when processing an XML file in the MathML format ", "Description": "PHPOffice Math is a library that provides a set of classes to manipulate different formula file formats. Prior to version 0.3.0, loading XML data using the standard `libxml` extension and the `LIBXML_DTDLOAD` flag without additional filtration, leads to XXE. Version 0.3.0 fixes the vulnerability.", "Severity": "HIGH", "CweIDs": [ "CWE-611" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 8.7 } }, "References": [ "https://github.com/PHPOffice/Math", "https://github.com/PHPOffice/Math/commit/fc31c8f57a7a81f962cbf389fd89f4d9d06fc99a", "https://github.com/PHPOffice/Math/security/advisories/GHSA-42hm-pq2f-3r7m", "https://nvd.nist.gov/vuln/detail/CVE-2025-48882" ], "PublishedDate": "2025-05-30T20:15:43.527Z", "LastModifiedDate": "2026-04-15T00:35:42.02Z" }, { "VulnerabilityID": "CVE-2026-34084", "VendorIDs": [ "GHSA-q4q6-r8wh-5cgh" ], "PkgID": "phpoffice/phpspreadsheet@1.29.10", "PkgName": "phpoffice/phpspreadsheet", "PkgIdentifier": { "PURL": "pkg:composer/phpoffice/phpspreadsheet@1.29.10", "UID": "7ddb59d1cab6f618" }, "InstalledVersion": "1.29.10", "FixedVersion": "5.6.0, 3.10.4, 2.4.4, 2.1.15, 1.30.3", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-34084", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:cdf74a8f2abc9caf685453ca8ccca5dea378085ff4cfe93f24551961d16b91eb", "Title": "PhpSpreadsheet has SSRF/RCE in IOFactory::load when $filename is user controlled", "Description": "PhpSpreadsheet is a library for reading and writing spreadsheet files. In versions 1.30.2 and earlier, 2.0.0 through 2.1.14, 2.2.0 through 2.4.3, 3.3.0 through 3.10.3, and 4.0.0 through 5.5.0, when the filename argument to IOFactory::load() is user-controlled, an attacker can supply a PHP stream wrapper path (such as phar://, ftp://, or ssh2.sftp://) that passes the is_file() check in File::assertFile(). The phar:// wrapper triggers deserialization of the PHAR metadata, which can lead to remote code execution if a suitable gadget chain is available in the application. The ftp:// and ssh2.sftp:// wrappers can be used for server-side request forgery. This issue has been fixed in versions 1.30.3, 2.1.15, 2.4.4, 3.10.4, and 5.6.0.", "Severity": "CRITICAL", "CweIDs": [ "CWE-502", "CWE-918" ], "VendorSeverity": { "ghsa": 4, "nvd": 4 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 } }, "References": [ "https://github.com/PHPOffice/PhpSpreadsheet", "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-q4q6-r8wh-5cgh", "https://nvd.nist.gov/vuln/detail/CVE-2026-34084", "https://www.php.net/manual/en/wrappers.php" ], "PublishedDate": "2026-05-05T20:16:37.007Z", "LastModifiedDate": "2026-05-08T17:10:03.243Z" }, { "VulnerabilityID": "CVE-2025-54370", "PkgID": "phpoffice/phpspreadsheet@1.29.10", "PkgName": "phpoffice/phpspreadsheet", "PkgIdentifier": { "PURL": "pkg:composer/phpoffice/phpspreadsheet@1.29.10", "UID": "7ddb59d1cab6f618" }, "InstalledVersion": "1.29.10", "FixedVersion": "1.30.0, 2.1.0, 2.1.12, 2.3.0, 2.4.0, 3.10.0, 5.0.0", "Status": "fixed", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-54370", "DataSource": { "ID": "php-security-advisories", "Name": "PHP Security Advisories Database", "URL": "https://github.com/FriendsOfPHP/security-advisories" }, "Fingerprint": "sha256:9ca055b744e90e95f62c0a878a427417afd38bce2eba7c59bca1396a8c0e89d5", "Title": "PhpSpreadsheet vulnerable to SSRF when reading and displaying a processed HTML document in the browser", "Description": "PhpOffice/PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to versions 1.30.0, 2.1.12, 2.4.0, 3.10.0, and 5.0.0, SSRF can occur when a processed HTML document is read and displayed in the browser. The vulnerability lies in the setPath method of the PhpOffice\\PhpSpreadsheet\\Worksheet\\Drawing class, where a crafted string from the user is passed to the HTML reader. This issue has been patched in versions 1.30.0, 2.1.12, 2.4.0, 3.10.0, and 5.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-918" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 8.7 } }, "References": [ "https://github.com/FriendsOfPHP/security-advisories/blob/master/phpoffice/phpspreadsheet/CVE-2025-54370.yaml", "https://github.com/PHPOffice/PhpSpreadsheet", "https://github.com/PHPOffice/PhpSpreadsheet/commit/334a67797ace574d1d37c0992ffe283b7415471a", "https://github.com/PHPOffice/PhpSpreadsheet/commit/4050f14521d70634c3320b170236574a6106eb39", "https://github.com/PHPOffice/PhpSpreadsheet/commit/81a0de2261f698404587a6421a5c6eb263c40b31", "https://github.com/PHPOffice/PhpSpreadsheet/commit/ac4befd2f7ccc21a59daef606a02a3d1828ade09", "https://github.com/PHPOffice/PhpSpreadsheet/commit/c2cd0e64392438e4c6af082796eb65c1d629a266", "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-rx7m-68vc-ppxh", "https://nvd.nist.gov/vuln/detail/CVE-2025-54370" ], "PublishedDate": "2025-08-25T14:15:33.117Z", "LastModifiedDate": "2026-04-15T00:35:42.02Z" }, { "VulnerabilityID": "CVE-2026-40863", "VendorIDs": [ "GHSA-84wq-86v6-x5j6" ], "PkgID": "phpoffice/phpspreadsheet@1.29.10", "PkgName": "phpoffice/phpspreadsheet", "PkgIdentifier": { "PURL": "pkg:composer/phpoffice/phpspreadsheet@1.29.10", "UID": "7ddb59d1cab6f618" }, "InstalledVersion": "1.29.10", "FixedVersion": "5.7.0, 3.10.5, 2.4.5, 2.1.16, 1.30.4", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-40863", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:e1fb0852d8d0d19c268e16fb5d1f9de27967f74d13be549f4b5da494d6100c57", "Title": "PhpSpreadsheet has CPU Denial of Service via Unbounded Row Index in SpreadsheetML XML Reader", "Description": "PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.4, 2.1.16, 2.4.5, 3.10.5, and 5.7.0, the SpreadsheetML XML reader (Reader\\Xml) does not validate the ss:Index row attribute against the maximum allowed row count (AddressRange::MAX_ROW = 1,048,576). An attacker can craft a SpreadsheetML XML file with ss:Index=\"999999999\" on a \u003cRow\u003e element, which inflates the internal cachedHighestRow to ~1 billion. Any subsequent call to getRowIterator() without an explicit end row will attempt to iterate ~1 billion rows, causing CPU exhaustion and denial of service. This vulnerability is fixed in 1.30.4, 2.1.16, 2.4.5, 3.10.5, and 5.7.0.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://github.com/PHPOffice/PhpSpreadsheet", "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-84wq-86v6-x5j6", "https://nvd.nist.gov/vuln/detail/CVE-2026-40863" ], "PublishedDate": "2026-05-12T22:16:33.783Z", "LastModifiedDate": "2026-05-13T18:01:19.827Z" }, { "VulnerabilityID": "CVE-2026-40902", "VendorIDs": [ "GHSA-7c6m-4442-2x6m" ], "PkgID": "phpoffice/phpspreadsheet@1.29.10", "PkgName": "phpoffice/phpspreadsheet", "PkgIdentifier": { "PURL": "pkg:composer/phpoffice/phpspreadsheet@1.29.10", "UID": "7ddb59d1cab6f618" }, "InstalledVersion": "1.29.10", "FixedVersion": "5.7.0, 3.10.5, 2.4.5, 2.1.16, 1.30.4", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-40902", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:9d5d863f5812b392363e059d81a75199d9e0fbcd410a0a14e83dd93c7e11c048", "Title": "PhpSpreadsheet has CPU Denial of Service via Unbounded Row Number in XLSX Row Dimensions", "Description": "PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.4, 2.1.16, 2.4.5, 3.10.5, and 5.7.0, the XLSX reader's ColumnAndRowAttributes::readRowAttributes() method reads row numbers from XML attributes without validating them against the spreadsheet maximum row limit (AddressRange::MAX_ROW = 1,048,576). An attacker can craft a minimal XLSX file (~1.6KB) containing a \u003crow r=\"999999999\"/\u003e element that inflates cachedHighestRow to 999,999,999, causing any subsequent row iteration to attempt ~1 billion loop cycles and exhaust CPU resources. This vulnerability is fixed in 1.30.4, 2.1.16, 2.4.5, 3.10.5, and 5.7.0.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://github.com/PHPOffice/PhpSpreadsheet", "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-7c6m-4442-2x6m", "https://nvd.nist.gov/vuln/detail/CVE-2026-40902" ], "PublishedDate": "2026-05-12T22:16:33.923Z", "LastModifiedDate": "2026-05-14T14:50:17.35Z" }, { "VulnerabilityID": "CVE-2026-35453", "VendorIDs": [ "GHSA-6wpp-88cp-7q68" ], "PkgID": "phpoffice/phpspreadsheet@1.29.10", "PkgName": "phpoffice/phpspreadsheet", "PkgIdentifier": { "PURL": "pkg:composer/phpoffice/phpspreadsheet@1.29.10", "UID": "7ddb59d1cab6f618" }, "InstalledVersion": "1.29.10", "FixedVersion": "5.7.0, 3.10.5, 2.4.5, 2.1.16, 1.30.4", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-35453", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:dce9e818fa4c8c14ac32ffe756f6935c4659f35ac1955b384eeacbb43f52b890", "Title": "PhpSpreadsheet has XSS via NumberFormat @ Text Substitution in HTML Writer", "Description": "PhpSpreadsheet is a library for reading and writing spreadsheet files. In versions 1.30.3 and earlier, 2.0.0 through 2.1.15, 2.2.0 through 2.4.4, 3.3.0 through 3.10.4, and 4.0.0 through 5.6.0, the HTML Writer skips htmlspecialchars() output escaping when a cell uses a custom number format containing the @ text placeholder with additional literal text (e.g., @ \"items\"). The escaping is only applied when the formatted output strictly equals the original cell value. When the format code contains @ with quoted literal text, the formatter substitutes the raw cell value into the format string and returns early without invoking the escaping callback. An attacker who can control cell content in a spreadsheet processed by the HTML Writer can inject arbitrary HTML and JavaScript into the generated output. This issue has been fixed in versions 1.30.4, 2.1.16, 2.4.5, 3.10.5, and 5.7.0.", "Severity": "MEDIUM", "CweIDs": [ "CWE-79" ], "VendorSeverity": { "ghsa": 2, "nvd": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N", "V40Score": 5.3 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "V3Score": 5.4 } }, "References": [ "https://github.com/PHPOffice/PhpSpreadsheet", "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-6wpp-88cp-7q68", "https://nvd.nist.gov/vuln/detail/CVE-2026-35453" ], "PublishedDate": "2026-05-05T20:16:38.367Z", "LastModifiedDate": "2026-05-08T17:08:50.897Z" }, { "VulnerabilityID": "CVE-2026-40296", "VendorIDs": [ "GHSA-hrmw-qprp-wgmc" ], "PkgID": "phpoffice/phpspreadsheet@1.29.10", "PkgName": "phpoffice/phpspreadsheet", "PkgIdentifier": { "PURL": "pkg:composer/phpoffice/phpspreadsheet@1.29.10", "UID": "7ddb59d1cab6f618" }, "InstalledVersion": "1.29.10", "FixedVersion": "5.7.0, 3.10.5, 2.4.5, 2.1.16, 1.30.4", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-40296", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:867d8716c8677d201e809cbd77482c221f6d86548d32b49945a36f81e9651da9", "Title": "PhpSpreadsheet has XSS via number format code with @ text placeholder bypasses htmlspecialchars in HTML writer", "Description": "PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The HTML writer skips htmlspecialchars escaping when a cell's formatted value differs from the original value. When a cell has a custom number format containing the text placeholder @ along with any additional literal characters (for example \". @\", \"@ \", or \"x@\"), the formatter replaces @ with the cell value and adds the extra characters, causing the formatted value to differ from the original and bypassing HTML escaping entirely. An attacker who can control the cell value and number format of an uploaded spreadsheet that is later converted to HTML and displayed to other users can achieve stored cross-site scripting. This issue is fixed in versions 5.7.0, 3.10.5, 2.4.5, 2.1.16, and 1.30.4.", "Severity": "MEDIUM", "CweIDs": [ "CWE-79" ], "VendorSeverity": { "ghsa": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "V3Score": 5.4 } }, "References": [ "https://github.com/PHPOffice/PhpSpreadsheet", "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-hrmw-qprp-wgmc", "https://nvd.nist.gov/vuln/detail/CVE-2026-40296" ], "PublishedDate": "2026-05-06T22:16:25.51Z", "LastModifiedDate": "2026-05-11T14:42:03.367Z" }, { "VulnerabilityID": "CVE-2026-32935", "VendorIDs": [ "GHSA-94g3-g5v7-q4jg" ], "PkgID": "phpseclib/phpseclib@3.0.43", "PkgName": "phpseclib/phpseclib", "PkgIdentifier": { "PURL": "pkg:composer/phpseclib/phpseclib@3.0.43", "UID": "70c3f3c996d06bb" }, "InstalledVersion": "3.0.43", "FixedVersion": "3.0.50, 2.0.52, 1.0.27", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-32935", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:da500828bdad1453ed3d5d960b0b4abdc84c2b730a6c0563f1f43d69895ecbf8", "Title": "phpseclib is a PHP secure communications library. Projects using versi ...", "Description": "phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.", "Severity": "HIGH", "CweIDs": [ "CWE-208" ], "VendorSeverity": { "ghsa": 3, "nvd": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 5.9 } }, "References": [ "https://github.com/phpseclib/phpseclib", "https://github.com/phpseclib/phpseclib/commit/ccc21aef71eb170e9bf819b167e67d1fd9e6e788", "https://github.com/phpseclib/phpseclib/security/advisories/GHSA-94g3-g5v7-q4jg", "https://nvd.nist.gov/vuln/detail/CVE-2026-32935" ], "PublishedDate": "2026-03-20T03:16:00.763Z", "LastModifiedDate": "2026-05-08T16:16:10.33Z" }, { "VulnerabilityID": "CVE-2026-44167", "VendorIDs": [ "GHSA-3qpq-r242-jqj7" ], "PkgID": "phpseclib/phpseclib@3.0.43", "PkgName": "phpseclib/phpseclib", "PkgIdentifier": { "PURL": "pkg:composer/phpseclib/phpseclib@3.0.43", "UID": "70c3f3c996d06bb" }, "InstalledVersion": "3.0.43", "FixedVersion": "1.0.29, 2.0.54, 3.0.52", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44167", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:2d608abf53a434a171f0737cea42d628456250ee9487cd047da4cfd1dadf233a", "Title": "phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0 ...", "Description": "phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0.54, and 3.0.52, anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc). This is a bypass of CVE-2024-27355. This vulnerability is fixed in 1.0.29, 2.0.54, and 3.0.52.", "Severity": "HIGH", "CweIDs": [ "CWE-400" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://github.com/phpseclib/phpseclib", "https://github.com/phpseclib/phpseclib/commit/d53d2021bcb9f6a04d5d44ec99e6bbef219a71bc", "https://github.com/phpseclib/phpseclib/security/advisories/GHSA-3qpq-r242-jqj7", "https://nvd.nist.gov/vuln/detail/CVE-2026-44167" ], "PublishedDate": "2026-05-12T18:17:29.273Z", "LastModifiedDate": "2026-05-13T18:24:31.31Z" }, { "VulnerabilityID": "CVE-2026-40194", "VendorIDs": [ "GHSA-r854-jrxh-36qx" ], "PkgID": "phpseclib/phpseclib@3.0.43", "PkgName": "phpseclib/phpseclib", "PkgIdentifier": { "PURL": "pkg:composer/phpseclib/phpseclib@3.0.43", "UID": "70c3f3c996d06bb" }, "InstalledVersion": "3.0.43", "FixedVersion": "1.0.28, 2.0.53, 3.0.51", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-40194", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:eea740fcecd4fba2ef2c5f83bf624b56f36fac6f884eb3d4320ee3d1406caf30", "Title": "phpseclib is a PHP secure communications library. Starting in 0.1.1 an ...", "Description": "phpseclib is a PHP secure communications library. Starting in 0.1.1 and prior to 3.0.51, 2.0.53, and 1.0.28, phpseclib\\Net\\SSH2::get_binary_packet() uses PHP's != operator to compare a received SSH packet HMAC against the locally computed HMAC. != on equal-length binary strings in PHP uses memcmp(), which short-circuits on the first differing byte. This is a real variable-time comparison (CWE-208), proven by scaling benchmarks. This vulnerability is fixed in 3.0.51, 2.0.53, and 1.0.28.", "Severity": "LOW", "CweIDs": [ "CWE-208" ], "VendorSeverity": { "ghsa": 1 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "V3Score": 3.7 } }, "References": [ "https://github.com/phpseclib/phpseclib", "https://github.com/phpseclib/phpseclib/commit/ffe48b6b1b1af6963327f0a5330e3aa004a194ac", "https://github.com/phpseclib/phpseclib/releases/tag/1.0.28", "https://github.com/phpseclib/phpseclib/releases/tag/2.0.53", "https://github.com/phpseclib/phpseclib/releases/tag/3.0.51", "https://github.com/phpseclib/phpseclib/security/advisories/GHSA-r854-jrxh-36qx", "https://nvd.nist.gov/vuln/detail/CVE-2026-40194" ], "PublishedDate": "2026-04-10T21:16:27.583Z", "LastModifiedDate": "2026-05-08T16:16:10.647Z" }, { "VulnerabilityID": "CVE-2026-25129", "VendorIDs": [ "GHSA-4486-gxhx-5mg7" ], "PkgID": "psy/psysh@v0.12.8", "PkgName": "psy/psysh", "PkgIdentifier": { "PURL": "pkg:composer/psy/psysh@v0.12.8", "UID": "982cdcee18166479" }, "InstalledVersion": "v0.12.8", "FixedVersion": "0.12.19, 0.11.23", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-25129", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:e4119002362ed448a6d98c409281689c82ba847cf51d971e384852dce136dee2", "Title": "PsySH has Local Privilege Escalation via CWD .psysh.php auto-load", "Description": "PsySH is a runtime developer console, interactive debugger, and REPL for PHP. Prior to versions 0.11.23 and 0.12.19, PsySH automatically loads and executes a `.psysh.php` file from the Current Working Directory (CWD) on startup. If an attacker can write to a directory that a victim later uses as their CWD when launching PsySH, the attacker can trigger arbitrary code execution in the victim's context. When the victim runs PsySH with elevated privileges (e.g., root), this results in local privilege escalation. This is a CWD configuration poisoning issue leading to arbitrary code execution in the victim user’s context. If a privileged user (e.g., root, a CI runner, or an ops/debug account) launches PsySH with CWD set to an attacker-writable directory containing a malicious `.psysh.php`, the attacker can execute commands with that privileged user’s permissions, resulting in local privilege escalation. Downstream consumers that embed PsySH inherit this risk. For example, Laravel Tinker (`php artisan tinker`) uses PsySH. If a privileged user runs Tinker while their shell is in an attacker-writable directory, the `.psysh.php` auto-load behavior can be abused in the same way to execute attacker-controlled code under the victim’s privileges. Versions 0.11.23 and 0.12.19 patch the issue.", "Severity": "MEDIUM", "CweIDs": [ "CWE-427" ], "VendorSeverity": { "ghsa": 2, "nvd": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "V3Score": 6.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.3 } }, "References": [ "https://github.com/bobthecow/psysh", "https://github.com/bobthecow/psysh/releases/tag/v0.11.23", "https://github.com/bobthecow/psysh/releases/tag/v0.12.19", "https://github.com/bobthecow/psysh/security/advisories/GHSA-4486-gxhx-5mg7", "https://nvd.nist.gov/vuln/detail/CVE-2026-25129" ], "PublishedDate": "2026-01-30T21:15:58.26Z", "LastModifiedDate": "2026-02-27T20:36:55.68Z" }, { "VulnerabilityID": "CVE-2025-54869", "VendorIDs": [ "GHSA-jxhh-4648-vpp3" ], "PkgID": "setasign/fpdi@v2.6.3", "PkgName": "setasign/fpdi", "PkgIdentifier": { "PURL": "pkg:composer/setasign/fpdi@v2.6.3", "UID": "8768fb62c8417ea6" }, "InstalledVersion": "v2.6.3", "FixedVersion": "2.6.4", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-54869", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:1f1284de73d40fbe4c9ef18499e607beabe48abc673ad57691f23ac8c7e7deaf", "Title": "FPDI is a collection of PHP classes that facilitate reading pages from ...", "Description": "FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. In versions 2.6.2 and below, any application that uses FPDI to process user-supplied PDF files is at risk, causing a Denial of Service (DoS) vulnerability. An attacker can upload a small, malicious PDF file that will cause the server-side script to crash due to memory exhaustion. Repeated attacks can lead to sustained service unavailability. This issue is fixed in version 2.6.3.", "Severity": "MEDIUM", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "ghsa": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 6 } }, "References": [ "https://github.com/Setasign/FPDI", "https://github.com/Setasign/FPDI/commit/ba671ba9221cffd32c2dda87316c19f522a1c5f0", "https://github.com/Setasign/FPDI/security/advisories/GHSA-jxhh-4648-vpp3", "https://nvd.nist.gov/vuln/detail/CVE-2025-54869" ], "PublishedDate": "2025-08-06T00:15:31.197Z", "LastModifiedDate": "2026-04-15T00:35:42.02Z" }, { "VulnerabilityID": "CVE-2026-45802", "VendorIDs": [ "GHSA-2mgw-7q6p-8grg" ], "PkgID": "setasign/fpdi@v2.6.3", "PkgName": "setasign/fpdi", "PkgIdentifier": { "PURL": "pkg:composer/setasign/fpdi@v2.6.3", "UID": "8768fb62c8417ea6" }, "InstalledVersion": "v2.6.3", "FixedVersion": "2.6.7", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-45802", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Composer", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Acomposer" }, "Fingerprint": "sha256:764ab139d093edee0b8a17e5fb71ea82b97f8d5663a17a8aac936beaabdb3dea", "Title": "FPDI: Memory Exhaustion and Endless Loop in FPDI leads to Denial of Service", "Description": "### Impact\nThis is a significant Denial of Service (DoS) vulnerability. Any application that uses FPDI to process user-supplied PDF files is at risk. An attacker can upload a small, malicious PDF file that will cause the server-side script to crash due to memory exhaustion or a script time-out. Repeated attacks can lead to sustained service unavailability.\n\n### Patches\nFixed as of version 2.6.7\n\n### Workarounds\nNo.\n\n### References\nNo.", "Severity": "MEDIUM", "VendorSeverity": { "ghsa": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 6 } }, "References": [ "https://github.com/Setasign/FPDI", "https://github.com/Setasign/FPDI/security/advisories/GHSA-2mgw-7q6p-8grg" ] }, { "VulnerabilityID": "CVE-2025-64500", "PkgID": "symfony/http-foundation@v7.2.5", "PkgName": "symfony/http-foundation", "PkgIdentifier": { "PURL": "pkg:composer/symfony/http-foundation@v7.2.5", "UID": "d6287fc557259aa7" }, "InstalledVersion": "v7.2.5", "FixedVersion": "5.4.0, 6.1.0, 6.4.29, 7.3.7, 3.0.0, 5.1.0, 5.2.0, 5.4.50, 6.2.0, 7.1.0, 4.0.0, 6.3.0, 6.4.0, 5.3.0, 7.2.0, 7.3.0, 5.0.0", "Status": "fixed", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-64500", "DataSource": { "ID": "php-security-advisories", "Name": "PHP Security Advisories Database", "URL": "https://github.com/FriendsOfPHP/security-advisories" }, "Fingerprint": "sha256:5bc376807abb68cdcf606bc04b37a5816af66c2569da3ca78fdae607987b68d4", "Title": "Symfony is a PHP framework for web and console applications and a set ...", "Description": "Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and 7.3.7, the `Request` class improperly interprets some `PATH_INFO` in a way that leads to representing some URLs with a path that doesn't start with a `/`. This can allow bypassing some access control rules that are built with this `/`-prefix assumption. Starting in versions 5.4.50, 6.4.29, and 7.3.7, the `Request` class now ensures that URL paths always start with a `/`.", "Severity": "HIGH", "CweIDs": [ "CWE-647" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "V3Score": 7.3 } }, "References": [ "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2025-64500.yaml", "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2025-64500.yaml", "https://github.com/symfony/symfony", "https://github.com/symfony/symfony/commit/9962b91b12bb791322fa73836b350836b6db7cac", "https://github.com/symfony/symfony/security/advisories/GHSA-3rg7-wf37-54rm", "https://nvd.nist.gov/vuln/detail/CVE-2025-64500", "https://symfony.com/blog/cve-2025-64500-incorrect-parsing-of-path-info-can-lead-to-limited-authorization-bypass" ], "PublishedDate": "2025-11-12T22:15:50.127Z", "LastModifiedDate": "2026-01-12T17:49:20.307Z" }, { "VulnerabilityID": "CVE-2026-48736", "PkgID": "symfony/http-foundation@v7.2.5", "PkgName": "symfony/http-foundation", "PkgIdentifier": { "PURL": "pkg:composer/symfony/http-foundation@v7.2.5", "UID": "d6287fc557259aa7" }, "InstalledVersion": "v7.2.5", "FixedVersion": "6.4.41, 7.1.0, 7.2.0, 7.3.0, 7.4.0, 7.4.13, 8.0.13", "Status": "fixed", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48736", "DataSource": { "ID": "php-security-advisories", "Name": "PHP Security Advisories Database", "URL": "https://github.com/FriendsOfPHP/security-advisories" }, "Fingerprint": "sha256:4d07346f4ec6feb4defd496bdc65cb2c457e5b0e3053386727e4c7b1688ea9a5", "Title": "CVE-2026-48736: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient", "Severity": "UNKNOWN", "References": [ "https://symfony.com/cve-2026-48736" ] }, { "VulnerabilityID": "CVE-2026-45068", "PkgID": "symfony/mailer@v7.2.3", "PkgName": "symfony/mailer", "PkgIdentifier": { "PURL": "pkg:composer/symfony/mailer@v7.2.3", "UID": "cdcbfa9120a1052c" }, "InstalledVersion": "v7.2.3", "FixedVersion": "6.2.0, 6.4.40, 7.1.0, 7.2.0, 7.4.0, 7.4.12, 5.0.0, 6.3.0, 7.3.0, 5.4.0, 6.4.0, 4.0.0, 5.1.0, 5.3.0, 5.4.52, 6.1.0, 8.0.12, 3.0.0, 5.2.0", "Status": "fixed", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-45068", "DataSource": { "ID": "php-security-advisories", "Name": "PHP Security Advisories Database", "URL": "https://github.com/FriendsOfPHP/security-advisories" }, "Fingerprint": "sha256:cb6ef0db8e747fda4318b7d7d5114c9c602c2bc861921035d9a66c64ba7994cd", "Title": "CVE-2026-45068: Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address", "Description": "### Description\n\nSymfony Mailer selects a transport via the `MAILER_DSN` environment variable / configuration (e.g. `smtp://...`, `sendmail://...`, `native://default`). `SendmailTransport` invokes the local `sendmail` binary and supports two modes: `-bs` (speak SMTP over stdin: the default) and `-t` (read the message on stdin, pass recipients as command-line arguments).\n\nIn `-t` mode, recipient addresses are appended to the sendmail command line **without a `--` end-of-options separator**. A recipient address beginning with `-` (which `Symfony\\Component\\Mime\\Address` accepts as valid) is therefore interpreted by sendmail as a command-line option rather than an address.\n\n### Resolution\n\nThe `SendmailTransport` transport now ensure `--` is set before the list of recipients.\n\nThe patch for this issue is available [here](https://github.com/symfony/symfony/commit/c45144862dc289d03952f41f6078174089a3afc6) for branch 5.4.\n\n### Credits\n\nSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix.", "Severity": "MEDIUM", "VendorSeverity": { "ghsa": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U", "V40Score": 6.2 } }, "References": [ "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/mailer/CVE-2026-45068.yaml", "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-45068.yaml", "https://github.com/symfony/symfony", "https://github.com/symfony/symfony/commit/c45144862dc289d03952f41f6078174089a3afc6", "https://github.com/symfony/symfony/security/advisories/GHSA-xx3c-qf5g-hc39", "https://symfony.com/cve-2026-45068" ] }, { "VulnerabilityID": "CVE-2026-45067", "PkgID": "symfony/mime@v7.2.4", "PkgName": "symfony/mime", "PkgIdentifier": { "PURL": "pkg:composer/symfony/mime@v7.2.4", "UID": "65c51594d0474a6b" }, "InstalledVersion": "v7.2.4", "FixedVersion": "3.0.0, 5.1.0, 5.2.0, 6.4.0, 6.4.40, 4.0.0, 5.3.0, 5.4.0, 6.1.0, 7.2.0, 7.4.0, 5.4.52, 7.3.0, 7.4.12, 8.0.12, 5.0.0, 6.2.0, 6.3.0, 7.1.0", "Status": "fixed", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-45067", "DataSource": { "ID": "php-security-advisories", "Name": "PHP Security Advisories Database", "URL": "https://github.com/FriendsOfPHP/security-advisories" }, "Fingerprint": "sha256:6a82cef8f4441e50a139f3968f9ef1507e0c7d599360757daa4f69c22e483d43", "Title": "CVE-2026-45067: Email Header / SMTP Command Injection via CRLF in Symfony\\Component\\Mime\\Address", "Description": "### Description\n\n`Symfony\\Component\\Mime\\Address` is the value-object every Symfony Mailer address (to/cc/bcc/from/reply-to) flows through; its constructor is documented as validating the address and throwing on invalid input, so developers treat it as a security boundary.\n\nThe constructor accepts email addresses whose local-part (the part before `@`) is an RFC-5322 *quoted string* containing raw `\\r\\n` bytes, e.g. `\"x\\r\\nBcc: attacker@evil\"@example.com`. The stored address is later emitted verbatim into (1) the rendered message headers and (2) `SmtpTransport`'s `MAIL FROM:\u003c...\u003e` / `RCPT TO:\u003c...\u003e` protocol lines, turning the embedded CRLF into a new mail header and/or a new SMTP command.\n\n### Resolution\n\nThe `Address` constructor now rejects addresses containing line breaks.\n\nThe patch for this issue is available [here](https://github.com/symfony/symfony/commit/dc2dbd29211eb4ddc451373fa1374fb926e94604) for branch 5.4.\n\n### Credits\n\nWe would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix.", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "V40Score": 7.1 } }, "References": [ "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/mime/CVE-2026-45067.yaml", "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-45067.yaml", "https://github.com/symfony/symfony", "https://github.com/symfony/symfony/commit/dc2dbd29211eb4ddc451373fa1374fb926e94604", "https://github.com/symfony/symfony/security/advisories/GHSA-qpmx-3rfj-7rhv", "https://symfony.com/cve-2026-45067" ] }, { "VulnerabilityID": "CVE-2026-45070", "PkgID": "symfony/mime@v7.2.4", "PkgName": "symfony/mime", "PkgIdentifier": { "PURL": "pkg:composer/symfony/mime@v7.2.4", "UID": "65c51594d0474a6b" }, "InstalledVersion": "v7.2.4", "FixedVersion": "5.4.52, 6.3.0, 4.0.0, 6.2.0, 7.1.0, 7.2.0, 7.3.0, 8.0.12, 3.0.0, 5.2.0, 6.1.0, 6.4.0, 6.4.40, 7.4.0, 7.4.12, 5.0.0, 5.1.0, 5.3.0, 5.4.0", "Status": "fixed", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-45070", "DataSource": { "ID": "php-security-advisories", "Name": "PHP Security Advisories Database", "URL": "https://github.com/FriendsOfPHP/security-advisories" }, "Fingerprint": "sha256:08fb3ba0532f4108e850fb90c8e5ebc9ff99077af3c1de67671ff4e5a735133f", "Title": "CVE-2026-45070: Email Header Injection via Non-Token Characters in Mime Parameter Names", "Description": "### Description\n\n`Symfony\\Component\\Mime\\Header\\ParameterizedHeader` (and the related parameter handling reachable from `Symfony\\Component\\Mime\\Header\\Headers`) is responsible for serializing structured headers such as `Content-Type` and `Content-Disposition`, which carry `key=value` parameters (e.g. `Content-Disposition: attachment; filename=\"x\"`).\n\nRFC 2045 / RFC 5322 require parameter *names* to be `tokens`: a restricted ASCII subset that excludes whitespace, CR/LF, and the `tspecials` set. Symfony's parameter handling validates and properly encodes parameter *values*, but does not validate parameter *names*: the supplied name is emitted verbatim into the serialized header.\n\nA caller that derives a parameter name from untrusted input, e.g. an application that lets a user influence a `Content-Disposition` parameter name, can include `\\r\\n` or other non-token bytes inside the name, terminating the current header and injecting additional headers in the rendered message. This is the classic CRLF / header-injection primitive applied to the parameter-name slot.\n\n### Resolution\n\n`ParameterizedHeader` now rejects parameter names that contain bytes outside the RFC `token` character class.\n\nThe patch for this issue is available [here](https://github.com/symfony/symfony/commit/e62ea217f8b4ca8ae922ad0f949e0c4dc1f9b613) for branch 5.4.\n\n### Credits\n\nSymfony would like to thank Fabian Fleischer for reporting the issue and Alexandre Daubois for fixing it.", "Severity": "MEDIUM", "VendorSeverity": { "ghsa": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U", "V40Score": 4.9 } }, "References": [ "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/mime/CVE-2026-45070.yaml", "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-45070.yaml", "https://github.com/symfony/symfony", "https://github.com/symfony/symfony/security/advisories/GHSA-vqc8-7275-q272", "https://symfony.com/cve-2026-45070" ] }, { "VulnerabilityID": "CVE-2026-46644", "PkgID": "symfony/polyfill-intl-idn@v1.31.0", "PkgName": "symfony/polyfill-intl-idn", "PkgIdentifier": { "PURL": "pkg:composer/symfony/polyfill-intl-idn@v1.31.0", "UID": "2a229fbb9ab90f5a" }, "InstalledVersion": "v1.31.0", "FixedVersion": "1.38.1", "Status": "fixed", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-46644", "DataSource": { "ID": "php-security-advisories", "Name": "PHP Security Advisories Database", "URL": "https://github.com/FriendsOfPHP/security-advisories" }, "Fingerprint": "sha256:4b74b56074280d1480019be8b098d1091b907053b79c5eba3418ec1bb1b90f7e", "Title": "[insecure equivalence in symfony/polyfill-intl-idn for ASCII-only xn-- labels]", "Description": "### Description\n\n`symfony/polyfill-intl-idn` provides a userland implementation of `idn_to_utf8()` and `idn_to_ascii()` for runtimes that lack the `intl` extension. Its `Idn::process()` method decodes labels prefixed with `xn--` using Punycode but never enforces the validity criterion added in UTS #46 revision 33 Section 4 step 4.1.2: after a successful Punycode decode, the result must contain at least one non-ASCII code point.\n\nAs a consequence, `xn--` labels whose Punycode payload is empty (`xn--`) or decodes to a string made of only ASCII code points (e.g. `xn--kc1zs4-`) are accepted by the polyfill while PHP's native `ext-intl` rejects them with `IDNA_ERROR_INVALID_ACE_LABEL`. Originally unequal domain names are therefore regarded as equal, which can lead to blacklist bypassing, inconsistent URL parsing and server-side request forgery (similar to CVE-2024-12224).\n\nExample with `IDNA_USE_STD3_RULES | IDNA_CHECK_BIDI | IDNA_CHECK_CONTEXTJ | IDNA_NONTRANSITIONAL_TO_ASCII`:\n\n| Input | Polyfill output | Native `ext-intl` output |\n| --- | --- | --- |\n| `poc.xn--kc1zs4-.com` | `poc.kc1zs4.com` | `false` (`errors=1024`) |\n| `poc.kc1zs4.xn--` | `poc.kc1zs4.` | `false` (`errors=1024`) |\n\nApplications using the polyfill to canonicalise or compare hostnames inherit the inconsistency.\n\n### Resolution\n\n`Idn::process()` now records `IDNA_ERROR_INVALID_ACE_LABEL` when a Punycode payload decodes to an empty string or to a string containing only ASCII code points, matching the native `ext-intl` behaviour and UTS #46 revision 33.\n\nThe patch for this issue is available [here](https://github.com/symfony/polyfill/commit/1be936e2491ccebe152bd736dfc91eb1422c8bec) for branch 1.x.\n\n### Credits\n\nSymfony would like to thank Nazy Mad for reporting the issue and Nicolas Grekas for providing the fix.", "Severity": "LOW", "VendorSeverity": { "ghsa": 1 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:U", "V40Score": 2.7 } }, "References": [ "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/polyfill-intl-idn/CVE-2026-46644.yaml", "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/polyfill/CVE-2026-46644.yaml", "https://github.com/symfony/polyfill", "https://github.com/symfony/polyfill/commit/1be936e2491ccebe152bd736dfc91eb1422c8bec", "https://github.com/symfony/polyfill/security/advisories/GHSA-2xf4-cg6j-vhgq", "https://symfony.com/cve-2026-46644" ] }, { "VulnerabilityID": "CVE-2026-45065", "PkgID": "symfony/routing@v7.2.3", "PkgName": "symfony/routing", "PkgIdentifier": { "PURL": "pkg:composer/symfony/routing@v7.2.3", "UID": "55418a915353e19f" }, "InstalledVersion": "v7.2.3", "FixedVersion": "6.2.0, 6.4.0, 7.2.0, 7.4.12, 3.0.0, 4.0.0, 5.0.0, 5.1.0, 5.4.0, 5.4.52, 7.1.0, 7.3.0, 5.2.0, 6.1.0, 6.4.40, 8.0.12, 5.3.0, 6.3.0, 7.4.0", "Status": "fixed", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-45065", "DataSource": { "ID": "php-security-advisories", "Name": "PHP Security Advisories Database", "URL": "https://github.com/FriendsOfPHP/security-advisories" }, "Fingerprint": "sha256:7de63609d884ecf94a94c44744c2ba45582b26857a9a61ac3def683c5f5836f2", "Title": "CVE-2026-45065: UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection", "Description": "### Description\n\nSymfony routes can declare a requirements regex per path parameter, e.g. a route `/{_locale}/blog` with `requirements: { _locale: 'en|fr|de' }`. The Twig `path()` / `url()` helpers (backed by `UrlGenerator`) validate supplied parameter values against that regex before building the URL.\n\nUrlGenerator constructs the validation pattern as `'#^'.$req.'$#'`, where `$req` is the raw requirement string. For a requirement expressed as an alternation, e.g. `_locale: 'ar|bg|...|vi|...|zh_CN'` (very common), `^` and `$` anchor only the first and last alternatives, so any middle alternative matches as an unanchored substring. A value like `/evil.com` satisfies the requirement (because it contains `vi`), and the generated path becomes `//evil.com/...`: a protocol-relative URL the browser navigates off-site.\n\n### Resolution\n\nThe `UrlGenerator` class now wraps the requirement in a non-capturing group so the `^` and `$` anchors apply to the whole alternation.\n\nThe patch for this issue is available [here](https://github.com/symfony/symfony/commit/bcf487c22f3240ba994124e0e0fe8616f3cfc47a) for branch 5.4.\n\n### Credits\n\nSymfony would like to thank Claude Mythos Preview (via Project Glasswing) for reporting the issue and providing the fix.", "Severity": "MEDIUM", "VendorSeverity": { "ghsa": 2 }, "References": [ "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/routing/CVE-2026-45065.yaml", "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-45065.yaml", "https://github.com/symfony/symfony", "https://github.com/symfony/symfony/commit/bcf487c22f3240ba994124e0e0fe8616f3cfc47a", "https://github.com/symfony/symfony/security/advisories/GHSA-72xp-p242-47p9", "https://symfony.com/cve-2026-45065" ] }, { "VulnerabilityID": "CVE-2026-48784", "PkgID": "symfony/routing@v7.2.3", "PkgName": "symfony/routing", "PkgIdentifier": { "PURL": "pkg:composer/symfony/routing@v7.2.3", "UID": "55418a915353e19f" }, "InstalledVersion": "v7.2.3", "FixedVersion": "5.4.53, 7.4.13, 3.0.0, 7.4.0, 4.0.0, 6.2.0, 6.3.0, 6.4.0, 7.1.0, 7.2.0, 8.0.13, 5.0.0, 5.1.0, 5.2.0, 5.3.0, 5.4.0, 6.1.0, 6.4.41, 7.3.0", "Status": "fixed", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48784", "DataSource": { "ID": "php-security-advisories", "Name": "PHP Security Advisories Database", "URL": "https://github.com/FriendsOfPHP/security-advisories" }, "Fingerprint": "sha256:0128c3cdd387acec8f80ec86f459ab8ce1955af260040649a9a55587c1b90f6e", "Title": "CVE-2026-48784: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization", "Severity": "UNKNOWN", "References": [ "https://symfony.com/cve-2026-48784" ] } ] }, { "Target": "package-lock.json", "Class": "lang-pkgs", "Type": "npm", "Packages": [ { "ID": "chart.js@4.4.9", "Name": "chart.js", "Identifier": { "PURL": "pkg:npm/chart.js@4.4.9", "UID": "5ad47f779632a0ab" }, "Version": "4.4.9", "Licenses": [ "MIT" ], "Relationship": "direct", "DependsOn": [ "@kurkle/color@0.3.4" ], "Locations": [ { "StartLine": 1538, "EndLine": 1548 } ], "AnalyzedBy": "npm" }, { "ID": "@kurkle/color@0.3.4", "Name": "@kurkle/color", "Identifier": { "PURL": "pkg:npm/%40kurkle/color@0.3.4", "UID": "47e28e48066bb94e" }, "Version": "0.3.4", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 524, "EndLine": 528 } ], "AnalyzedBy": "npm" } ] }, { "Target": "vendor/laravel/framework/src/Illuminate/Foundation/resources/exceptions/renderer/package-lock.json", "Class": "lang-pkgs", "Type": "npm", "Packages": [ { "ID": "alpinejs@3.13.10", "Name": "alpinejs", "Identifier": { "PURL": "pkg:npm/alpinejs@3.13.10", "UID": "4d0df12252086375" }, "Version": "3.13.10", "Relationship": "direct", "DependsOn": [ "@vue/reactivity@3.1.5" ], "Locations": [ { "StartLine": 748, "EndLine": 755 } ], "AnalyzedBy": "npm" }, { "ID": "autoprefixer@10.4.19", "Name": "autoprefixer", "Identifier": { "PURL": "pkg:npm/autoprefixer@10.4.19", "UID": "c12bd8880d7bfb62" }, "Version": "10.4.19", "Relationship": "direct", "DependsOn": [ "browserslist@4.23.0", "caniuse-lite@1.0.30001614", "fraction.js@4.3.7", "normalize-range@0.1.2", "picocolors@1.1.1", "postcss-value-parser@4.2.0", "postcss@8.5.1" ], "Locations": [ { "StartLine": 800, "EndLine": 835 } ], "AnalyzedBy": "npm" }, { "ID": "highlight.js@11.9.0", "Name": "highlight.js", "Identifier": { "PURL": "pkg:npm/highlight.js@11.9.0", "UID": "fca43c129165b98" }, "Version": "11.9.0", "Relationship": "direct", "Locations": [ { "StartLine": 1230, "EndLine": 1237 } ], "AnalyzedBy": "npm" }, { "ID": "postcss@8.5.1", "Name": "postcss", "Identifier": { "PURL": "pkg:npm/postcss@8.5.1", "UID": "bd0880f69fb5be58" }, "Version": "8.5.1", "Licenses": [ "MIT" ], "Relationship": "direct", "DependsOn": [ "nanoid@3.3.8", "picocolors@1.1.1", "source-map-js@1.2.1" ], "Locations": [ { "StartLine": 1521, "EndLine": 1548 } ], "AnalyzedBy": "npm" }, { "ID": "tailwindcss@3.4.3", "Name": "tailwindcss", "Identifier": { "PURL": "pkg:npm/tailwindcss@3.4.3", "UID": "8a3bcc991ceb62d" }, "Version": "3.4.3", "Relationship": "direct", "DependsOn": [ "@alloc/quick-lru@5.2.0", "arg@5.0.2", "chokidar@3.6.0", "didyoumean@1.2.2", "dlv@1.1.3", "fast-glob@3.3.2", "glob-parent@6.0.2", "is-glob@4.0.3", "jiti@1.21.0", "lilconfig@2.1.0", "micromatch@4.0.8", "normalize-path@3.0.0", "object-hash@3.0.0", "picocolors@1.1.1", "postcss-import@15.1.0", "postcss-js@4.0.1", "postcss-load-config@4.0.2", "postcss-nested@6.0.1", "postcss-selector-parser@6.0.16", "postcss@8.5.1", "resolve@1.22.8", "sucrase@3.35.0" ], "Locations": [ { "StartLine": 1962, "EndLine": 1997 } ], "AnalyzedBy": "npm" }, { "ID": "tippy.js@6.3.7", "Name": "tippy.js", "Identifier": { "PURL": "pkg:npm/tippy.js@6.3.7", "UID": "c4248df9902f27dd" }, "Version": "6.3.7", "Relationship": "direct", "DependsOn": [ "@popperjs/core@2.11.8" ], "Locations": [ { "StartLine": 2043, "EndLine": 2050 } ], "AnalyzedBy": "npm" }, { "ID": "vite@5.4.12", "Name": "vite", "Identifier": { "PURL": "pkg:npm/vite@5.4.12", "UID": "66fcbab335e7723a" }, "Version": "5.4.12", "Licenses": [ "MIT" ], "Relationship": "direct", "DependsOn": [ "@types/node@20.12.7", "esbuild@0.21.5", "fsevents@2.3.3", "postcss@8.5.1", "rollup@4.22.4", "terser@5.31.0" ], "Locations": [ { "StartLine": 2108, "EndLine": 2166 } ], "AnalyzedBy": "npm" }, { "ID": "vite-require@0.2.3", "Name": "vite-require", "Identifier": { "PURL": "pkg:npm/vite-require@0.2.3", "UID": "25e9be2aa5827c82" }, "Version": "0.2.3", "Relationship": "direct", "DependsOn": [ "fast-glob@3.3.2", "vite-plugin-dynamic-import@1.5.0" ], "Locations": [ { "StartLine": 2178, "EndLine": 2186 } ], "AnalyzedBy": "npm" }, { "ID": "@alloc/quick-lru@5.2.0", "Name": "@alloc/quick-lru", "Identifier": { "PURL": "pkg:npm/%40alloc/quick-lru@5.2.0", "UID": "9bf565dbe29803b" }, "Version": "5.2.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 18, "EndLine": 28 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/aix-ppc64@0.21.5", "Name": "@esbuild/aix-ppc64", "Identifier": { "PURL": "pkg:npm/%40esbuild/aix-ppc64@0.21.5", "UID": "e3ead5d1c3dbb54b" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 29, "EndLine": 44 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/android-arm@0.21.5", "Name": "@esbuild/android-arm", "Identifier": { "PURL": "pkg:npm/%40esbuild/android-arm@0.21.5", "UID": "fb7e3f225cfecde2" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 45, "EndLine": 60 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/android-arm64@0.21.5", "Name": "@esbuild/android-arm64", "Identifier": { "PURL": "pkg:npm/%40esbuild/android-arm64@0.21.5", "UID": "3a35889b1293490e" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 61, "EndLine": 76 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/android-x64@0.21.5", "Name": "@esbuild/android-x64", "Identifier": { "PURL": "pkg:npm/%40esbuild/android-x64@0.21.5", "UID": "fd91907a9673e162" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 77, "EndLine": 92 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/darwin-arm64@0.21.5", "Name": "@esbuild/darwin-arm64", "Identifier": { "PURL": "pkg:npm/%40esbuild/darwin-arm64@0.21.5", "UID": "e1fda05dd1339fd9" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 93, "EndLine": 108 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/darwin-x64@0.21.5", "Name": "@esbuild/darwin-x64", "Identifier": { "PURL": "pkg:npm/%40esbuild/darwin-x64@0.21.5", "UID": "b49f95da1a50c446" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 109, "EndLine": 124 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/freebsd-arm64@0.21.5", "Name": "@esbuild/freebsd-arm64", "Identifier": { "PURL": "pkg:npm/%40esbuild/freebsd-arm64@0.21.5", "UID": "85b8ee9187ab247c" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 125, "EndLine": 140 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/freebsd-x64@0.21.5", "Name": "@esbuild/freebsd-x64", "Identifier": { "PURL": "pkg:npm/%40esbuild/freebsd-x64@0.21.5", "UID": "b912c56f638b6c1e" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 141, "EndLine": 156 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/linux-arm@0.21.5", "Name": "@esbuild/linux-arm", "Identifier": { "PURL": "pkg:npm/%40esbuild/linux-arm@0.21.5", "UID": "1e0526ba5dcaa2f0" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 157, "EndLine": 172 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/linux-arm64@0.21.5", "Name": "@esbuild/linux-arm64", "Identifier": { "PURL": "pkg:npm/%40esbuild/linux-arm64@0.21.5", "UID": "bb0a849b5790c06a" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 173, "EndLine": 188 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/linux-ia32@0.21.5", "Name": "@esbuild/linux-ia32", "Identifier": { "PURL": "pkg:npm/%40esbuild/linux-ia32@0.21.5", "UID": "14b534627e37ef58" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 189, "EndLine": 204 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/linux-loong64@0.21.5", "Name": "@esbuild/linux-loong64", "Identifier": { "PURL": "pkg:npm/%40esbuild/linux-loong64@0.21.5", "UID": "fe4c61a95d06dfec" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 205, "EndLine": 220 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/linux-mips64el@0.21.5", "Name": "@esbuild/linux-mips64el", "Identifier": { "PURL": "pkg:npm/%40esbuild/linux-mips64el@0.21.5", "UID": "d8a3aba4283d5c4c" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 221, "EndLine": 236 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/linux-ppc64@0.21.5", "Name": "@esbuild/linux-ppc64", "Identifier": { "PURL": "pkg:npm/%40esbuild/linux-ppc64@0.21.5", "UID": "e6719296aa0c5608" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 237, "EndLine": 252 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/linux-riscv64@0.21.5", "Name": "@esbuild/linux-riscv64", "Identifier": { "PURL": "pkg:npm/%40esbuild/linux-riscv64@0.21.5", "UID": "578941b140b309ed" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 253, "EndLine": 268 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/linux-s390x@0.21.5", "Name": "@esbuild/linux-s390x", "Identifier": { "PURL": "pkg:npm/%40esbuild/linux-s390x@0.21.5", "UID": "dfef74e0a9296b46" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 269, "EndLine": 284 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/linux-x64@0.21.5", "Name": "@esbuild/linux-x64", "Identifier": { "PURL": "pkg:npm/%40esbuild/linux-x64@0.21.5", "UID": "7c714df7566cd38a" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 285, "EndLine": 300 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/netbsd-x64@0.21.5", "Name": "@esbuild/netbsd-x64", "Identifier": { "PURL": "pkg:npm/%40esbuild/netbsd-x64@0.21.5", "UID": "3fa1e9e4cc4a3e48" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 301, "EndLine": 316 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/openbsd-x64@0.21.5", "Name": "@esbuild/openbsd-x64", "Identifier": { "PURL": "pkg:npm/%40esbuild/openbsd-x64@0.21.5", "UID": "dadf8007f5af569c" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 317, "EndLine": 332 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/sunos-x64@0.21.5", "Name": "@esbuild/sunos-x64", "Identifier": { "PURL": "pkg:npm/%40esbuild/sunos-x64@0.21.5", "UID": "c1851647ca0b161d" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 333, "EndLine": 348 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/win32-arm64@0.21.5", "Name": "@esbuild/win32-arm64", "Identifier": { "PURL": "pkg:npm/%40esbuild/win32-arm64@0.21.5", "UID": "9749a1f32488ebc9" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 349, "EndLine": 364 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/win32-ia32@0.21.5", "Name": "@esbuild/win32-ia32", "Identifier": { "PURL": "pkg:npm/%40esbuild/win32-ia32@0.21.5", "UID": "d4cd576e4fc4875c" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 365, "EndLine": 380 } ], "AnalyzedBy": "npm" }, { "ID": "@esbuild/win32-x64@0.21.5", "Name": "@esbuild/win32-x64", "Identifier": { "PURL": "pkg:npm/%40esbuild/win32-x64@0.21.5", "UID": "bc7e6a20eec491bc" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 381, "EndLine": 396 } ], "AnalyzedBy": "npm" }, { "ID": "@isaacs/cliui@8.0.2", "Name": "@isaacs/cliui", "Identifier": { "PURL": "pkg:npm/%40isaacs/cliui@8.0.2", "UID": "a15fdaefcd0560b6" }, "Version": "8.0.2", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "string-width-cjs@4.2.3", "string-width@5.1.2", "strip-ansi-cjs@6.0.1", "strip-ansi@7.1.0", "wrap-ansi-cjs@7.0.0", "wrap-ansi@8.1.0" ], "Locations": [ { "StartLine": 397, "EndLine": 412 } ], "AnalyzedBy": "npm" }, { "ID": "@jridgewell/gen-mapping@0.3.5", "Name": "@jridgewell/gen-mapping", "Identifier": { "PURL": "pkg:npm/%40jridgewell/gen-mapping@0.3.5", "UID": "6299e3ebf672ea9a" }, "Version": "0.3.5", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "@jridgewell/set-array@1.2.1", "@jridgewell/sourcemap-codec@1.4.15", "@jridgewell/trace-mapping@0.3.25" ], "Locations": [ { "StartLine": 413, "EndLine": 425 } ], "AnalyzedBy": "npm" }, { "ID": "@jridgewell/resolve-uri@3.1.2", "Name": "@jridgewell/resolve-uri", "Identifier": { "PURL": "pkg:npm/%40jridgewell/resolve-uri@3.1.2", "UID": "f9b618d943576f9e" }, "Version": "3.1.2", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 426, "EndLine": 433 } ], "AnalyzedBy": "npm" }, { "ID": "@jridgewell/set-array@1.2.1", "Name": "@jridgewell/set-array", "Identifier": { "PURL": "pkg:npm/%40jridgewell/set-array@1.2.1", "UID": "f9f515d2aaf5cfa" }, "Version": "1.2.1", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 434, "EndLine": 441 } ], "AnalyzedBy": "npm" }, { "ID": "@jridgewell/source-map@0.3.6", "Name": "@jridgewell/source-map", "Identifier": { "PURL": "pkg:npm/%40jridgewell/source-map@0.3.6", "UID": "868ba4e25c6566fe" }, "Version": "0.3.6", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "@jridgewell/gen-mapping@0.3.5", "@jridgewell/trace-mapping@0.3.25" ], "Locations": [ { "StartLine": 442, "EndLine": 452 } ], "AnalyzedBy": "npm" }, { "ID": "@jridgewell/sourcemap-codec@1.4.15", "Name": "@jridgewell/sourcemap-codec", "Identifier": { "PURL": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.15", "UID": "96a622a947d6218f" }, "Version": "1.4.15", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 453, "EndLine": 457 } ], "AnalyzedBy": "npm" }, { "ID": "@jridgewell/trace-mapping@0.3.25", "Name": "@jridgewell/trace-mapping", "Identifier": { "PURL": "pkg:npm/%40jridgewell/trace-mapping@0.3.25", "UID": "20726dab6a49e881" }, "Version": "0.3.25", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "@jridgewell/resolve-uri@3.1.2", "@jridgewell/sourcemap-codec@1.4.15" ], "Locations": [ { "StartLine": 458, "EndLine": 466 } ], "AnalyzedBy": "npm" }, { "ID": "@nodelib/fs.scandir@2.1.5", "Name": "@nodelib/fs.scandir", "Identifier": { "PURL": "pkg:npm/%40nodelib/fs.scandir@2.1.5", "UID": "14fdff4821220415" }, "Version": "2.1.5", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "@nodelib/fs.stat@2.0.5", "run-parallel@1.2.0" ], "Locations": [ { "StartLine": 467, "EndLine": 478 } ], "AnalyzedBy": "npm" }, { "ID": "@nodelib/fs.stat@2.0.5", "Name": "@nodelib/fs.stat", "Identifier": { "PURL": "pkg:npm/%40nodelib/fs.stat@2.0.5", "UID": "1999d5e802c55532" }, "Version": "2.0.5", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 479, "EndLine": 486 } ], "AnalyzedBy": "npm" }, { "ID": "@nodelib/fs.walk@1.2.8", "Name": "@nodelib/fs.walk", "Identifier": { "PURL": "pkg:npm/%40nodelib/fs.walk@1.2.8", "UID": "2b5bfdbdc2a59150" }, "Version": "1.2.8", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "@nodelib/fs.scandir@2.1.5", "fastq@1.17.1" ], "Locations": [ { "StartLine": 487, "EndLine": 498 } ], "AnalyzedBy": "npm" }, { "ID": "@pkgjs/parseargs@0.11.0", "Name": "@pkgjs/parseargs", "Identifier": { "PURL": "pkg:npm/%40pkgjs/parseargs@0.11.0", "UID": "a771f83cc74c729f" }, "Version": "0.11.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 499, "EndLine": 507 } ], "AnalyzedBy": "npm" }, { "ID": "@popperjs/core@2.11.8", "Name": "@popperjs/core", "Identifier": { "PURL": "pkg:npm/%40popperjs/core@2.11.8", "UID": "e11edb680c772027" }, "Version": "2.11.8", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 508, "EndLine": 516 } ], "AnalyzedBy": "npm" }, { "ID": "@rollup/rollup-android-arm-eabi@4.22.4", "Name": "@rollup/rollup-android-arm-eabi", "Identifier": { "PURL": "pkg:npm/%40rollup/rollup-android-arm-eabi@4.22.4", "UID": "13f536fd729c8051" }, "Version": "4.22.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 517, "EndLine": 528 } ], "AnalyzedBy": "npm" }, { "ID": "@rollup/rollup-android-arm64@4.22.4", "Name": "@rollup/rollup-android-arm64", "Identifier": { "PURL": "pkg:npm/%40rollup/rollup-android-arm64@4.22.4", "UID": "b092fb5c9112fda2" }, "Version": "4.22.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 529, "EndLine": 540 } ], "AnalyzedBy": "npm" }, { "ID": "@rollup/rollup-darwin-arm64@4.22.4", "Name": "@rollup/rollup-darwin-arm64", "Identifier": { "PURL": "pkg:npm/%40rollup/rollup-darwin-arm64@4.22.4", "UID": "4485b57521bfd262" }, "Version": "4.22.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 541, "EndLine": 552 } ], "AnalyzedBy": "npm" }, { "ID": "@rollup/rollup-darwin-x64@4.22.4", "Name": "@rollup/rollup-darwin-x64", "Identifier": { "PURL": "pkg:npm/%40rollup/rollup-darwin-x64@4.22.4", "UID": "66e470eb394c0224" }, "Version": "4.22.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 553, "EndLine": 564 } ], "AnalyzedBy": "npm" }, { "ID": "@rollup/rollup-linux-arm-gnueabihf@4.22.4", "Name": "@rollup/rollup-linux-arm-gnueabihf", "Identifier": { "PURL": "pkg:npm/%40rollup/rollup-linux-arm-gnueabihf@4.22.4", "UID": "9c6d292337e4e75a" }, "Version": "4.22.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 565, "EndLine": 576 } ], "AnalyzedBy": "npm" }, { "ID": "@rollup/rollup-linux-arm-musleabihf@4.22.4", "Name": "@rollup/rollup-linux-arm-musleabihf", "Identifier": { "PURL": "pkg:npm/%40rollup/rollup-linux-arm-musleabihf@4.22.4", "UID": "de8f5835645db0ed" }, "Version": "4.22.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 577, "EndLine": 588 } ], "AnalyzedBy": "npm" }, { "ID": "@rollup/rollup-linux-arm64-gnu@4.22.4", "Name": "@rollup/rollup-linux-arm64-gnu", "Identifier": { "PURL": "pkg:npm/%40rollup/rollup-linux-arm64-gnu@4.22.4", "UID": "5d1bc76546b3aff2" }, "Version": "4.22.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 589, "EndLine": 600 } ], "AnalyzedBy": "npm" }, { "ID": "@rollup/rollup-linux-arm64-musl@4.22.4", "Name": "@rollup/rollup-linux-arm64-musl", "Identifier": { "PURL": "pkg:npm/%40rollup/rollup-linux-arm64-musl@4.22.4", "UID": "6f16192e469c2527" }, "Version": "4.22.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 601, "EndLine": 612 } ], "AnalyzedBy": "npm" }, { "ID": "@rollup/rollup-linux-powerpc64le-gnu@4.22.4", "Name": "@rollup/rollup-linux-powerpc64le-gnu", "Identifier": { "PURL": "pkg:npm/%40rollup/rollup-linux-powerpc64le-gnu@4.22.4", "UID": "d2a50841eb1b70a7" }, "Version": "4.22.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 613, "EndLine": 624 } ], "AnalyzedBy": "npm" }, { "ID": "@rollup/rollup-linux-riscv64-gnu@4.22.4", "Name": "@rollup/rollup-linux-riscv64-gnu", "Identifier": { "PURL": "pkg:npm/%40rollup/rollup-linux-riscv64-gnu@4.22.4", "UID": "8c3b27736ec0fd8a" }, "Version": "4.22.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 625, "EndLine": 636 } ], "AnalyzedBy": "npm" }, { "ID": "@rollup/rollup-linux-s390x-gnu@4.22.4", "Name": "@rollup/rollup-linux-s390x-gnu", "Identifier": { "PURL": "pkg:npm/%40rollup/rollup-linux-s390x-gnu@4.22.4", "UID": "7e64173a4dd3c0db" }, "Version": "4.22.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 637, "EndLine": 648 } ], "AnalyzedBy": "npm" }, { "ID": "@rollup/rollup-linux-x64-gnu@4.22.4", "Name": "@rollup/rollup-linux-x64-gnu", "Identifier": { "PURL": "pkg:npm/%40rollup/rollup-linux-x64-gnu@4.22.4", "UID": "abcb2d0ad2e5a5a2" }, "Version": "4.22.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 649, "EndLine": 660 } ], "AnalyzedBy": "npm" }, { "ID": "@rollup/rollup-linux-x64-musl@4.22.4", "Name": "@rollup/rollup-linux-x64-musl", "Identifier": { "PURL": "pkg:npm/%40rollup/rollup-linux-x64-musl@4.22.4", "UID": "137687eeccfabb5e" }, "Version": "4.22.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 661, "EndLine": 672 } ], "AnalyzedBy": "npm" }, { "ID": "@rollup/rollup-win32-arm64-msvc@4.22.4", "Name": "@rollup/rollup-win32-arm64-msvc", "Identifier": { "PURL": "pkg:npm/%40rollup/rollup-win32-arm64-msvc@4.22.4", "UID": "1babd1ac6b5b0fa7" }, "Version": "4.22.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 673, "EndLine": 684 } ], "AnalyzedBy": "npm" }, { "ID": "@rollup/rollup-win32-ia32-msvc@4.22.4", "Name": "@rollup/rollup-win32-ia32-msvc", "Identifier": { "PURL": "pkg:npm/%40rollup/rollup-win32-ia32-msvc@4.22.4", "UID": "b6ea62df6c657e8b" }, "Version": "4.22.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 685, "EndLine": 696 } ], "AnalyzedBy": "npm" }, { "ID": "@rollup/rollup-win32-x64-msvc@4.22.4", "Name": "@rollup/rollup-win32-x64-msvc", "Identifier": { "PURL": "pkg:npm/%40rollup/rollup-win32-x64-msvc@4.22.4", "UID": "ad6d09671b8d0609" }, "Version": "4.22.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 697, "EndLine": 708 } ], "AnalyzedBy": "npm" }, { "ID": "@types/estree@1.0.5", "Name": "@types/estree", "Identifier": { "PURL": "pkg:npm/%40types/estree@1.0.5", "UID": "3777dd2fcfcb06a6" }, "Version": "1.0.5", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 709, "EndLine": 713 } ], "AnalyzedBy": "npm" }, { "ID": "@types/node@20.12.7", "Name": "@types/node", "Identifier": { "PURL": "pkg:npm/%40types/node@20.12.7", "UID": "434326f7fca572dc" }, "Version": "20.12.7", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "undici-types@5.26.5" ], "Locations": [ { "StartLine": 714, "EndLine": 723 } ], "AnalyzedBy": "npm" }, { "ID": "@vue/reactivity@3.1.5", "Name": "@vue/reactivity", "Identifier": { "PURL": "pkg:npm/%40vue/reactivity@3.1.5", "UID": "3e3985bffddcdc7d" }, "Version": "3.1.5", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "@vue/shared@3.1.5" ], "Locations": [ { "StartLine": 724, "EndLine": 731 } ], "AnalyzedBy": "npm" }, { "ID": "@vue/shared@3.1.5", "Name": "@vue/shared", "Identifier": { "PURL": "pkg:npm/%40vue/shared@3.1.5", "UID": "15094f148514a661" }, "Version": "3.1.5", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 732, "EndLine": 736 } ], "AnalyzedBy": "npm" }, { "ID": "acorn@8.11.3", "Name": "acorn", "Identifier": { "PURL": "pkg:npm/acorn@8.11.3", "UID": "e701accf9023af9a" }, "Version": "8.11.3", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 737, "EndLine": 747 } ], "AnalyzedBy": "npm" }, { "ID": "ansi-regex@5.0.1", "Name": "ansi-regex", "Identifier": { "PURL": "pkg:npm/ansi-regex@5.0.1", "UID": "f09ae93c4d9a99f1" }, "Version": "5.0.1", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1872, "EndLine": 1879 }, { "StartLine": 1922, "EndLine": 1929 }, { "StartLine": 2234, "EndLine": 2241 } ], "AnalyzedBy": "npm" }, { "ID": "ansi-regex@6.0.1", "Name": "ansi-regex", "Identifier": { "PURL": "pkg:npm/ansi-regex@6.0.1", "UID": "3ec013312a41a8b7" }, "Version": "6.0.1", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 756, "EndLine": 766 } ], "AnalyzedBy": "npm" }, { "ID": "ansi-styles@4.3.0", "Name": "ansi-styles", "Identifier": { "PURL": "pkg:npm/ansi-styles@4.3.0", "UID": "c822a70dd8dbfdfc" }, "Version": "4.3.0", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "color-convert@2.0.1" ], "Locations": [ { "StartLine": 2242, "EndLine": 2255 } ], "AnalyzedBy": "npm" }, { "ID": "ansi-styles@6.2.1", "Name": "ansi-styles", "Identifier": { "PURL": "pkg:npm/ansi-styles@6.2.1", "UID": "37fb3825d18bfb91" }, "Version": "6.2.1", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 767, "EndLine": 777 } ], "AnalyzedBy": "npm" }, { "ID": "any-promise@1.3.0", "Name": "any-promise", "Identifier": { "PURL": "pkg:npm/any-promise@1.3.0", "UID": "d1a45b2cbf5f005e" }, "Version": "1.3.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 778, "EndLine": 782 } ], "AnalyzedBy": "npm" }, { "ID": "anymatch@3.1.3", "Name": "anymatch", "Identifier": { "PURL": "pkg:npm/anymatch@3.1.3", "UID": "be2d69b3fb31901f" }, "Version": "3.1.3", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "normalize-path@3.0.0", "picomatch@2.3.1" ], "Locations": [ { "StartLine": 783, "EndLine": 794 } ], "AnalyzedBy": "npm" }, { "ID": "arg@5.0.2", "Name": "arg", "Identifier": { "PURL": "pkg:npm/arg@5.0.2", "UID": "542514f1298faabe" }, "Version": "5.0.2", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 795, "EndLine": 799 } ], "AnalyzedBy": "npm" }, { "ID": "balanced-match@1.0.2", "Name": "balanced-match", "Identifier": { "PURL": "pkg:npm/balanced-match@1.0.2", "UID": "7560ba646ea62987" }, "Version": "1.0.2", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 836, "EndLine": 840 } ], "AnalyzedBy": "npm" }, { "ID": "binary-extensions@2.3.0", "Name": "binary-extensions", "Identifier": { "PURL": "pkg:npm/binary-extensions@2.3.0", "UID": "3d11db65751266dc" }, "Version": "2.3.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 841, "EndLine": 851 } ], "AnalyzedBy": "npm" }, { "ID": "brace-expansion@2.0.1", "Name": "brace-expansion", "Identifier": { "PURL": "pkg:npm/brace-expansion@2.0.1", "UID": "3d1701f93b6091bf" }, "Version": "2.0.1", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "balanced-match@1.0.2" ], "Locations": [ { "StartLine": 852, "EndLine": 859 } ], "AnalyzedBy": "npm" }, { "ID": "braces@3.0.3", "Name": "braces", "Identifier": { "PURL": "pkg:npm/braces@3.0.3", "UID": "24db5a3e25d909dc" }, "Version": "3.0.3", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "fill-range@7.1.1" ], "Locations": [ { "StartLine": 860, "EndLine": 870 } ], "AnalyzedBy": "npm" }, { "ID": "browserslist@4.23.0", "Name": "browserslist", "Identifier": { "PURL": "pkg:npm/browserslist@4.23.0", "UID": "c3b21d993bcd3258" }, "Version": "4.23.0", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "caniuse-lite@1.0.30001614", "electron-to-chromium@1.4.750", "node-releases@2.0.14", "update-browserslist-db@1.0.13" ], "Locations": [ { "StartLine": 871, "EndLine": 901 } ], "AnalyzedBy": "npm" }, { "ID": "buffer-from@1.1.2", "Name": "buffer-from", "Identifier": { "PURL": "pkg:npm/buffer-from@1.1.2", "UID": "7b172feb93fdc03c" }, "Version": "1.1.2", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 902, "EndLine": 908 } ], "AnalyzedBy": "npm" }, { "ID": "camelcase-css@2.0.1", "Name": "camelcase-css", "Identifier": { "PURL": "pkg:npm/camelcase-css@2.0.1", "UID": "bf87ba244edd82b0" }, "Version": "2.0.1", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 909, "EndLine": 916 } ], "AnalyzedBy": "npm" }, { "ID": "caniuse-lite@1.0.30001614", "Name": "caniuse-lite", "Identifier": { "PURL": "pkg:npm/caniuse-lite@1.0.30001614", "UID": "4b697192fb7be9ba" }, "Version": "1.0.30001614", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 917, "EndLine": 935 } ], "AnalyzedBy": "npm" }, { "ID": "chokidar@3.6.0", "Name": "chokidar", "Identifier": { "PURL": "pkg:npm/chokidar@3.6.0", "UID": "3ad38c633b890241" }, "Version": "3.6.0", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "anymatch@3.1.3", "braces@3.0.3", "fsevents@2.3.3", "glob-parent@5.1.2", "is-binary-path@2.1.0", "is-glob@4.0.3", "normalize-path@3.0.0", "readdirp@3.6.0" ], "Locations": [ { "StartLine": 936, "EndLine": 958 } ], "AnalyzedBy": "npm" }, { "ID": "color-convert@2.0.1", "Name": "color-convert", "Identifier": { "PURL": "pkg:npm/color-convert@2.0.1", "UID": "8ff5b9132e87ad5c" }, "Version": "2.0.1", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "color-name@1.1.4" ], "Locations": [ { "StartLine": 970, "EndLine": 980 } ], "AnalyzedBy": "npm" }, { "ID": "color-name@1.1.4", "Name": "color-name", "Identifier": { "PURL": "pkg:npm/color-name@1.1.4", "UID": "177645d12a4af71" }, "Version": "1.1.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 981, "EndLine": 985 } ], "AnalyzedBy": "npm" }, { "ID": "commander@2.20.3", "Name": "commander", "Identifier": { "PURL": "pkg:npm/commander@2.20.3", "UID": "5fb951209a553fa5" }, "Version": "2.20.3", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 2017, "EndLine": 2023 } ], "AnalyzedBy": "npm" }, { "ID": "commander@4.1.1", "Name": "commander", "Identifier": { "PURL": "pkg:npm/commander@4.1.1", "UID": "a478553167040213" }, "Version": "4.1.1", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 986, "EndLine": 993 } ], "AnalyzedBy": "npm" }, { "ID": "cross-spawn@7.0.6", "Name": "cross-spawn", "Identifier": { "PURL": "pkg:npm/cross-spawn@7.0.6", "UID": "bb0ac19658f30e77" }, "Version": "7.0.6", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "path-key@3.1.1", "shebang-command@2.0.0", "which@2.0.2" ], "Locations": [ { "StartLine": 994, "EndLine": 1006 } ], "AnalyzedBy": "npm" }, { "ID": "cssesc@3.0.0", "Name": "cssesc", "Identifier": { "PURL": "pkg:npm/cssesc@3.0.0", "UID": "4d0a208393c9e209" }, "Version": "3.0.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1007, "EndLine": 1017 } ], "AnalyzedBy": "npm" }, { "ID": "didyoumean@1.2.2", "Name": "didyoumean", "Identifier": { "PURL": "pkg:npm/didyoumean@1.2.2", "UID": "59cbfc3001f20b9c" }, "Version": "1.2.2", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1018, "EndLine": 1022 } ], "AnalyzedBy": "npm" }, { "ID": "dlv@1.1.3", "Name": "dlv", "Identifier": { "PURL": "pkg:npm/dlv@1.1.3", "UID": "dbf6aab39def4c33" }, "Version": "1.1.3", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1023, "EndLine": 1027 } ], "AnalyzedBy": "npm" }, { "ID": "eastasianwidth@0.2.0", "Name": "eastasianwidth", "Identifier": { "PURL": "pkg:npm/eastasianwidth@0.2.0", "UID": "3e30c814048ca07e" }, "Version": "0.2.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1028, "EndLine": 1032 } ], "AnalyzedBy": "npm" }, { "ID": "electron-to-chromium@1.4.750", "Name": "electron-to-chromium", "Identifier": { "PURL": "pkg:npm/electron-to-chromium@1.4.750", "UID": "8f1dbc99e4bbe2d9" }, "Version": "1.4.750", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1033, "EndLine": 1037 } ], "AnalyzedBy": "npm" }, { "ID": "emoji-regex@8.0.0", "Name": "emoji-regex", "Identifier": { "PURL": "pkg:npm/emoji-regex@8.0.0", "UID": "fa9e923902f1137c" }, "Version": "8.0.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1880, "EndLine": 1884 }, { "StartLine": 2256, "EndLine": 2260 } ], "AnalyzedBy": "npm" }, { "ID": "emoji-regex@9.2.2", "Name": "emoji-regex", "Identifier": { "PURL": "pkg:npm/emoji-regex@9.2.2", "UID": "43744d2daaf01bfb" }, "Version": "9.2.2", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1038, "EndLine": 1042 } ], "AnalyzedBy": "npm" }, { "ID": "es-module-lexer@1.5.2", "Name": "es-module-lexer", "Identifier": { "PURL": "pkg:npm/es-module-lexer@1.5.2", "UID": "de6b7bf6ca95166b" }, "Version": "1.5.2", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1043, "EndLine": 1047 } ], "AnalyzedBy": "npm" }, { "ID": "esbuild@0.21.5", "Name": "esbuild", "Identifier": { "PURL": "pkg:npm/esbuild@0.21.5", "UID": "50e7f2270d302b0f" }, "Version": "0.21.5", "Licenses": [ "MIT" ], "Indirect": true, "Relationship": "indirect", "DependsOn": [ "@esbuild/aix-ppc64@0.21.5", "@esbuild/android-arm64@0.21.5", "@esbuild/android-arm@0.21.5", "@esbuild/android-x64@0.21.5", "@esbuild/darwin-arm64@0.21.5", "@esbuild/darwin-x64@0.21.5", "@esbuild/freebsd-arm64@0.21.5", "@esbuild/freebsd-x64@0.21.5", "@esbuild/linux-arm64@0.21.5", "@esbuild/linux-arm@0.21.5", "@esbuild/linux-ia32@0.21.5", "@esbuild/linux-loong64@0.21.5", "@esbuild/linux-mips64el@0.21.5", "@esbuild/linux-ppc64@0.21.5", "@esbuild/linux-riscv64@0.21.5", "@esbuild/linux-s390x@0.21.5", "@esbuild/linux-x64@0.21.5", "@esbuild/netbsd-x64@0.21.5", "@esbuild/openbsd-x64@0.21.5", "@esbuild/sunos-x64@0.21.5", "@esbuild/win32-arm64@0.21.5", "@esbuild/win32-ia32@0.21.5", "@esbuild/win32-x64@0.21.5" ], "Locations": [ { "StartLine": 1048, "EndLine": 1085 } ], "AnalyzedBy": "npm" }, { "ID": "escalade@3.1.2", "Name": "escalade", "Identifier": { "PURL": "pkg:npm/escalade@3.1.2", "UID": "5a81e32dd8da962d" }, "Version": "3.1.2", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1086, "EndLine": 1093 } ], "AnalyzedBy": "npm" }, { "ID": "fast-glob@3.3.2", "Name": "fast-glob", "Identifier": { "PURL": "pkg:npm/fast-glob@3.3.2", "UID": "2508966bd65c217a" }, "Version": "3.3.2", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "@nodelib/fs.stat@2.0.5", "@nodelib/fs.walk@1.2.8", "glob-parent@5.1.2", "merge2@1.4.1", "micromatch@4.0.8" ], "Locations": [ { "StartLine": 1094, "EndLine": 1108 } ], "AnalyzedBy": "npm" }, { "ID": "fastq@1.17.1", "Name": "fastq", "Identifier": { "PURL": "pkg:npm/fastq@1.17.1", "UID": "ceb2493a68468f86" }, "Version": "1.17.1", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "reusify@1.0.4" ], "Locations": [ { "StartLine": 1120, "EndLine": 1127 } ], "AnalyzedBy": "npm" }, { "ID": "fill-range@7.1.1", "Name": "fill-range", "Identifier": { "PURL": "pkg:npm/fill-range@7.1.1", "UID": "28fe38c8c511027" }, "Version": "7.1.1", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "to-regex-range@5.0.1" ], "Locations": [ { "StartLine": 1128, "EndLine": 1138 } ], "AnalyzedBy": "npm" }, { "ID": "foreground-child@3.1.1", "Name": "foreground-child", "Identifier": { "PURL": "pkg:npm/foreground-child@3.1.1", "UID": "7832335971155649" }, "Version": "3.1.1", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "cross-spawn@7.0.6", "signal-exit@4.1.0" ], "Locations": [ { "StartLine": 1139, "EndLine": 1153 } ], "AnalyzedBy": "npm" }, { "ID": "fraction.js@4.3.7", "Name": "fraction.js", "Identifier": { "PURL": "pkg:npm/fraction.js@4.3.7", "UID": "4b2748715df0b8c" }, "Version": "4.3.7", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1154, "EndLine": 1165 } ], "AnalyzedBy": "npm" }, { "ID": "fsevents@2.3.3", "Name": "fsevents", "Identifier": { "PURL": "pkg:npm/fsevents@2.3.3", "UID": "40a00bd300edbbfb" }, "Version": "2.3.3", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1166, "EndLine": 1178 } ], "AnalyzedBy": "npm" }, { "ID": "function-bind@1.1.2", "Name": "function-bind", "Identifier": { "PURL": "pkg:npm/function-bind@1.1.2", "UID": "16cc8847725e8b7a" }, "Version": "1.1.2", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1179, "EndLine": 1186 } ], "AnalyzedBy": "npm" }, { "ID": "glob@10.3.12", "Name": "glob", "Identifier": { "PURL": "pkg:npm/glob@10.3.12", "UID": "bfcf89e1166642ac" }, "Version": "10.3.12", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "foreground-child@3.1.1", "jackspeak@2.3.6", "minimatch@9.0.4", "minipass@7.0.4", "path-scurry@1.10.2" ], "Locations": [ { "StartLine": 1187, "EndLine": 1207 } ], "AnalyzedBy": "npm" }, { "ID": "glob-parent@5.1.2", "Name": "glob-parent", "Identifier": { "PURL": "pkg:npm/glob-parent@5.1.2", "UID": "c86091dbf0055f91" }, "Version": "5.1.2", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "is-glob@4.0.3" ], "Locations": [ { "StartLine": 959, "EndLine": 969 }, { "StartLine": 1109, "EndLine": 1119 } ], "AnalyzedBy": "npm" }, { "ID": "glob-parent@6.0.2", "Name": "glob-parent", "Identifier": { "PURL": "pkg:npm/glob-parent@6.0.2", "UID": "8cb9ef80ede4ee6e" }, "Version": "6.0.2", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "is-glob@4.0.3" ], "Locations": [ { "StartLine": 1208, "EndLine": 1218 } ], "AnalyzedBy": "npm" }, { "ID": "hasown@2.0.2", "Name": "hasown", "Identifier": { "PURL": "pkg:npm/hasown@2.0.2", "UID": "886f53c129561de8" }, "Version": "2.0.2", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "function-bind@1.1.2" ], "Locations": [ { "StartLine": 1219, "EndLine": 1229 } ], "AnalyzedBy": "npm" }, { "ID": "is-binary-path@2.1.0", "Name": "is-binary-path", "Identifier": { "PURL": "pkg:npm/is-binary-path@2.1.0", "UID": "8bc41ce005dcdcb8" }, "Version": "2.1.0", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "binary-extensions@2.3.0" ], "Locations": [ { "StartLine": 1238, "EndLine": 1248 } ], "AnalyzedBy": "npm" }, { "ID": "is-core-module@2.13.1", "Name": "is-core-module", "Identifier": { "PURL": "pkg:npm/is-core-module@2.13.1", "UID": "d8289743fa32d476" }, "Version": "2.13.1", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "hasown@2.0.2" ], "Locations": [ { "StartLine": 1249, "EndLine": 1259 } ], "AnalyzedBy": "npm" }, { "ID": "is-extglob@2.1.1", "Name": "is-extglob", "Identifier": { "PURL": "pkg:npm/is-extglob@2.1.1", "UID": "a307dbc8bdfc71b1" }, "Version": "2.1.1", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1260, "EndLine": 1267 } ], "AnalyzedBy": "npm" }, { "ID": "is-fullwidth-code-point@3.0.0", "Name": "is-fullwidth-code-point", "Identifier": { "PURL": "pkg:npm/is-fullwidth-code-point@3.0.0", "UID": "f7a1d22ce00607bf" }, "Version": "3.0.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1268, "EndLine": 1275 } ], "AnalyzedBy": "npm" }, { "ID": "is-glob@4.0.3", "Name": "is-glob", "Identifier": { "PURL": "pkg:npm/is-glob@4.0.3", "UID": "fef31027e8a12b57" }, "Version": "4.0.3", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "is-extglob@2.1.1" ], "Locations": [ { "StartLine": 1276, "EndLine": 1286 } ], "AnalyzedBy": "npm" }, { "ID": "is-number@7.0.0", "Name": "is-number", "Identifier": { "PURL": "pkg:npm/is-number@7.0.0", "UID": "70cc2c83163320ca" }, "Version": "7.0.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1287, "EndLine": 1294 } ], "AnalyzedBy": "npm" }, { "ID": "isexe@2.0.0", "Name": "isexe", "Identifier": { "PURL": "pkg:npm/isexe@2.0.0", "UID": "53725e745703d17c" }, "Version": "2.0.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1295, "EndLine": 1299 } ], "AnalyzedBy": "npm" }, { "ID": "jackspeak@2.3.6", "Name": "jackspeak", "Identifier": { "PURL": "pkg:npm/jackspeak@2.3.6", "UID": "aa7775003291799c" }, "Version": "2.3.6", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "@isaacs/cliui@8.0.2", "@pkgjs/parseargs@0.11.0" ], "Locations": [ { "StartLine": 1300, "EndLine": 1316 } ], "AnalyzedBy": "npm" }, { "ID": "jiti@1.21.0", "Name": "jiti", "Identifier": { "PURL": "pkg:npm/jiti@1.21.0", "UID": "87f734954e12ac54" }, "Version": "1.21.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1317, "EndLine": 1324 } ], "AnalyzedBy": "npm" }, { "ID": "lilconfig@2.1.0", "Name": "lilconfig", "Identifier": { "PURL": "pkg:npm/lilconfig@2.1.0", "UID": "fadd845d28d1d346" }, "Version": "2.1.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1325, "EndLine": 1332 } ], "AnalyzedBy": "npm" }, { "ID": "lilconfig@3.1.1", "Name": "lilconfig", "Identifier": { "PURL": "pkg:npm/lilconfig@3.1.1", "UID": "317466b1ba670ef4" }, "Version": "3.1.1", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1617, "EndLine": 1627 } ], "AnalyzedBy": "npm" }, { "ID": "lines-and-columns@1.2.4", "Name": "lines-and-columns", "Identifier": { "PURL": "pkg:npm/lines-and-columns@1.2.4", "UID": "61d47008728c4d80" }, "Version": "1.2.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1333, "EndLine": 1337 } ], "AnalyzedBy": "npm" }, { "ID": "lru-cache@10.2.2", "Name": "lru-cache", "Identifier": { "PURL": "pkg:npm/lru-cache@10.2.2", "UID": "7c6ad0299f2d0cce" }, "Version": "10.2.2", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1338, "EndLine": 1345 } ], "AnalyzedBy": "npm" }, { "ID": "magic-string@0.30.10", "Name": "magic-string", "Identifier": { "PURL": "pkg:npm/magic-string@0.30.10", "UID": "36ab87203a24b68e" }, "Version": "0.30.10", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "@jridgewell/sourcemap-codec@1.4.15" ], "Locations": [ { "StartLine": 1346, "EndLine": 1353 } ], "AnalyzedBy": "npm" }, { "ID": "merge2@1.4.1", "Name": "merge2", "Identifier": { "PURL": "pkg:npm/merge2@1.4.1", "UID": "e47596c5f5624c63" }, "Version": "1.4.1", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1354, "EndLine": 1361 } ], "AnalyzedBy": "npm" }, { "ID": "micromatch@4.0.8", "Name": "micromatch", "Identifier": { "PURL": "pkg:npm/micromatch@4.0.8", "UID": "3a963377a210378" }, "Version": "4.0.8", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "braces@3.0.3", "picomatch@2.3.1" ], "Locations": [ { "StartLine": 1362, "EndLine": 1373 } ], "AnalyzedBy": "npm" }, { "ID": "minimatch@9.0.4", "Name": "minimatch", "Identifier": { "PURL": "pkg:npm/minimatch@9.0.4", "UID": "1517f7b6cad269ca" }, "Version": "9.0.4", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "brace-expansion@2.0.1" ], "Locations": [ { "StartLine": 1374, "EndLine": 1387 } ], "AnalyzedBy": "npm" }, { "ID": "minipass@7.0.4", "Name": "minipass", "Identifier": { "PURL": "pkg:npm/minipass@7.0.4", "UID": "c9520fcab0060578" }, "Version": "7.0.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1388, "EndLine": 1395 } ], "AnalyzedBy": "npm" }, { "ID": "mz@2.7.0", "Name": "mz", "Identifier": { "PURL": "pkg:npm/mz@2.7.0", "UID": "7921053fbfe21b89" }, "Version": "2.7.0", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "any-promise@1.3.0", "object-assign@4.1.1", "thenify-all@1.6.0" ], "Locations": [ { "StartLine": 1396, "EndLine": 1405 } ], "AnalyzedBy": "npm" }, { "ID": "nanoid@3.3.8", "Name": "nanoid", "Identifier": { "PURL": "pkg:npm/nanoid@3.3.8", "UID": "6ae65ad178ee5397" }, "Version": "3.3.8", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1406, "EndLine": 1422 } ], "AnalyzedBy": "npm" }, { "ID": "node-releases@2.0.14", "Name": "node-releases", "Identifier": { "PURL": "pkg:npm/node-releases@2.0.14", "UID": "f083619df3a41969" }, "Version": "2.0.14", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1423, "EndLine": 1427 } ], "AnalyzedBy": "npm" }, { "ID": "normalize-path@3.0.0", "Name": "normalize-path", "Identifier": { "PURL": "pkg:npm/normalize-path@3.0.0", "UID": "7ca1320653c88a9f" }, "Version": "3.0.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1428, "EndLine": 1435 } ], "AnalyzedBy": "npm" }, { "ID": "normalize-range@0.1.2", "Name": "normalize-range", "Identifier": { "PURL": "pkg:npm/normalize-range@0.1.2", "UID": "fd885a715872e39d" }, "Version": "0.1.2", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1436, "EndLine": 1443 } ], "AnalyzedBy": "npm" }, { "ID": "object-assign@4.1.1", "Name": "object-assign", "Identifier": { "PURL": "pkg:npm/object-assign@4.1.1", "UID": "70f4eddc718cc4f9" }, "Version": "4.1.1", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1444, "EndLine": 1451 } ], "AnalyzedBy": "npm" }, { "ID": "object-hash@3.0.0", "Name": "object-hash", "Identifier": { "PURL": "pkg:npm/object-hash@3.0.0", "UID": "3ebbf5337777482d" }, "Version": "3.0.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1452, "EndLine": 1459 } ], "AnalyzedBy": "npm" }, { "ID": "path-key@3.1.1", "Name": "path-key", "Identifier": { "PURL": "pkg:npm/path-key@3.1.1", "UID": "9be4c149e35bcba5" }, "Version": "3.1.1", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1460, "EndLine": 1467 } ], "AnalyzedBy": "npm" }, { "ID": "path-parse@1.0.7", "Name": "path-parse", "Identifier": { "PURL": "pkg:npm/path-parse@1.0.7", "UID": "a02364ee6901fc6d" }, "Version": "1.0.7", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1468, "EndLine": 1472 } ], "AnalyzedBy": "npm" }, { "ID": "path-scurry@1.10.2", "Name": "path-scurry", "Identifier": { "PURL": "pkg:npm/path-scurry@1.10.2", "UID": "4c8b55f13f3777a6" }, "Version": "1.10.2", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "lru-cache@10.2.2", "minipass@7.0.4" ], "Locations": [ { "StartLine": 1473, "EndLine": 1487 } ], "AnalyzedBy": "npm" }, { "ID": "picocolors@1.1.1", "Name": "picocolors", "Identifier": { "PURL": "pkg:npm/picocolors@1.1.1", "UID": "4259785bee524fc6" }, "Version": "1.1.1", "Licenses": [ "ISC" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1488, "EndLine": 1493 } ], "AnalyzedBy": "npm" }, { "ID": "picomatch@2.3.1", "Name": "picomatch", "Identifier": { "PURL": "pkg:npm/picomatch@2.3.1", "UID": "698e902d7addbaf1" }, "Version": "2.3.1", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1494, "EndLine": 1504 } ], "AnalyzedBy": "npm" }, { "ID": "pify@2.3.0", "Name": "pify", "Identifier": { "PURL": "pkg:npm/pify@2.3.0", "UID": "1410a7e33354cd34" }, "Version": "2.3.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1505, "EndLine": 1512 } ], "AnalyzedBy": "npm" }, { "ID": "pirates@4.0.6", "Name": "pirates", "Identifier": { "PURL": "pkg:npm/pirates@4.0.6", "UID": "1aaa58fb2a01d774" }, "Version": "4.0.6", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1513, "EndLine": 1520 } ], "AnalyzedBy": "npm" }, { "ID": "postcss-import@15.1.0", "Name": "postcss-import", "Identifier": { "PURL": "pkg:npm/postcss-import@15.1.0", "UID": "231ec373f689fe9c" }, "Version": "15.1.0", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "postcss-value-parser@4.2.0", "postcss@8.5.1", "read-cache@1.0.0", "resolve@1.22.8" ], "Locations": [ { "StartLine": 1549, "EndLine": 1564 } ], "AnalyzedBy": "npm" }, { "ID": "postcss-js@4.0.1", "Name": "postcss-js", "Identifier": { "PURL": "pkg:npm/postcss-js@4.0.1", "UID": "5e891f6bf1b4da07" }, "Version": "4.0.1", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "camelcase-css@2.0.1", "postcss@8.5.1" ], "Locations": [ { "StartLine": 1565, "EndLine": 1582 } ], "AnalyzedBy": "npm" }, { "ID": "postcss-load-config@4.0.2", "Name": "postcss-load-config", "Identifier": { "PURL": "pkg:npm/postcss-load-config@4.0.2", "UID": "8776af98a9c09e3f" }, "Version": "4.0.2", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "lilconfig@3.1.1", "postcss@8.5.1", "yaml@2.4.2" ], "Locations": [ { "StartLine": 1583, "EndLine": 1616 } ], "AnalyzedBy": "npm" }, { "ID": "postcss-nested@6.0.1", "Name": "postcss-nested", "Identifier": { "PURL": "pkg:npm/postcss-nested@6.0.1", "UID": "94a169c456164d64" }, "Version": "6.0.1", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "postcss-selector-parser@6.0.16", "postcss@8.5.1" ], "Locations": [ { "StartLine": 1628, "EndLine": 1645 } ], "AnalyzedBy": "npm" }, { "ID": "postcss-selector-parser@6.0.16", "Name": "postcss-selector-parser", "Identifier": { "PURL": "pkg:npm/postcss-selector-parser@6.0.16", "UID": "9ca03bb29379c6f1" }, "Version": "6.0.16", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "cssesc@3.0.0", "util-deprecate@1.0.2" ], "Locations": [ { "StartLine": 1646, "EndLine": 1657 } ], "AnalyzedBy": "npm" }, { "ID": "postcss-value-parser@4.2.0", "Name": "postcss-value-parser", "Identifier": { "PURL": "pkg:npm/postcss-value-parser@4.2.0", "UID": "637c2f3682fbdfb2" }, "Version": "4.2.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1658, "EndLine": 1662 } ], "AnalyzedBy": "npm" }, { "ID": "queue-microtask@1.2.3", "Name": "queue-microtask", "Identifier": { "PURL": "pkg:npm/queue-microtask@1.2.3", "UID": "18a6869f6275b1a6" }, "Version": "1.2.3", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1663, "EndLine": 1681 } ], "AnalyzedBy": "npm" }, { "ID": "read-cache@1.0.0", "Name": "read-cache", "Identifier": { "PURL": "pkg:npm/read-cache@1.0.0", "UID": "185f1398f8cc73db" }, "Version": "1.0.0", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "pify@2.3.0" ], "Locations": [ { "StartLine": 1682, "EndLine": 1689 } ], "AnalyzedBy": "npm" }, { "ID": "readdirp@3.6.0", "Name": "readdirp", "Identifier": { "PURL": "pkg:npm/readdirp@3.6.0", "UID": "f4fcca4bb547a58a" }, "Version": "3.6.0", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "picomatch@2.3.1" ], "Locations": [ { "StartLine": 1690, "EndLine": 1700 } ], "AnalyzedBy": "npm" }, { "ID": "resolve@1.22.8", "Name": "resolve", "Identifier": { "PURL": "pkg:npm/resolve@1.22.8", "UID": "8a70ffdd2694c336" }, "Version": "1.22.8", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "is-core-module@2.13.1", "path-parse@1.0.7", "supports-preserve-symlinks-flag@1.0.0" ], "Locations": [ { "StartLine": 1701, "EndLine": 1716 } ], "AnalyzedBy": "npm" }, { "ID": "reusify@1.0.4", "Name": "reusify", "Identifier": { "PURL": "pkg:npm/reusify@1.0.4", "UID": "d0afea63770f539b" }, "Version": "1.0.4", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1717, "EndLine": 1725 } ], "AnalyzedBy": "npm" }, { "ID": "rollup@4.22.4", "Name": "rollup", "Identifier": { "PURL": "pkg:npm/rollup@4.22.4", "UID": "469b121aa969bacd" }, "Version": "4.22.4", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "@rollup/rollup-android-arm-eabi@4.22.4", "@rollup/rollup-android-arm64@4.22.4", "@rollup/rollup-darwin-arm64@4.22.4", "@rollup/rollup-darwin-x64@4.22.4", "@rollup/rollup-linux-arm-gnueabihf@4.22.4", "@rollup/rollup-linux-arm-musleabihf@4.22.4", "@rollup/rollup-linux-arm64-gnu@4.22.4", "@rollup/rollup-linux-arm64-musl@4.22.4", "@rollup/rollup-linux-powerpc64le-gnu@4.22.4", "@rollup/rollup-linux-riscv64-gnu@4.22.4", "@rollup/rollup-linux-s390x-gnu@4.22.4", "@rollup/rollup-linux-x64-gnu@4.22.4", "@rollup/rollup-linux-x64-musl@4.22.4", "@rollup/rollup-win32-arm64-msvc@4.22.4", "@rollup/rollup-win32-ia32-msvc@4.22.4", "@rollup/rollup-win32-x64-msvc@4.22.4", "@types/estree@1.0.5", "fsevents@2.3.3" ], "Locations": [ { "StartLine": 1726, "EndLine": 1759 } ], "AnalyzedBy": "npm" }, { "ID": "run-parallel@1.2.0", "Name": "run-parallel", "Identifier": { "PURL": "pkg:npm/run-parallel@1.2.0", "UID": "9376df00e4d75c1a" }, "Version": "1.2.0", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "queue-microtask@1.2.3" ], "Locations": [ { "StartLine": 1760, "EndLine": 1781 } ], "AnalyzedBy": "npm" }, { "ID": "shebang-command@2.0.0", "Name": "shebang-command", "Identifier": { "PURL": "pkg:npm/shebang-command@2.0.0", "UID": "93d776595e0c3b19" }, "Version": "2.0.0", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "shebang-regex@3.0.0" ], "Locations": [ { "StartLine": 1782, "EndLine": 1792 } ], "AnalyzedBy": "npm" }, { "ID": "shebang-regex@3.0.0", "Name": "shebang-regex", "Identifier": { "PURL": "pkg:npm/shebang-regex@3.0.0", "UID": "5a59dd0e48553d81" }, "Version": "3.0.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1793, "EndLine": 1800 } ], "AnalyzedBy": "npm" }, { "ID": "signal-exit@4.1.0", "Name": "signal-exit", "Identifier": { "PURL": "pkg:npm/signal-exit@4.1.0", "UID": "326f0f357ae0fa49" }, "Version": "4.1.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1801, "EndLine": 1811 } ], "AnalyzedBy": "npm" }, { "ID": "source-map@0.6.1", "Name": "source-map", "Identifier": { "PURL": "pkg:npm/source-map@0.6.1", "UID": "e604e5848572d5dc" }, "Version": "0.6.1", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1812, "EndLine": 1821 } ], "AnalyzedBy": "npm" }, { "ID": "source-map-js@1.2.1", "Name": "source-map-js", "Identifier": { "PURL": "pkg:npm/source-map-js@1.2.1", "UID": "634d1b83cacd6270" }, "Version": "1.2.1", "Licenses": [ "BSD-3-Clause" ], "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1822, "EndLine": 1830 } ], "AnalyzedBy": "npm" }, { "ID": "source-map-support@0.5.21", "Name": "source-map-support", "Identifier": { "PURL": "pkg:npm/source-map-support@0.5.21", "UID": "3fa925e422782937" }, "Version": "0.5.21", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "buffer-from@1.1.2", "source-map@0.6.1" ], "Locations": [ { "StartLine": 1831, "EndLine": 1841 } ], "AnalyzedBy": "npm" }, { "ID": "string-width@4.2.3", "Name": "string-width", "Identifier": { "PURL": "pkg:npm/string-width@4.2.3", "UID": "9590ec455c964af" }, "Version": "4.2.3", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "emoji-regex@8.0.0", "is-fullwidth-code-point@3.0.0", "strip-ansi@6.0.1" ], "Locations": [ { "StartLine": 1858, "EndLine": 1871 }, { "StartLine": 2261, "EndLine": 2273 } ], "AnalyzedBy": "npm" }, { "ID": "string-width@5.1.2", "Name": "string-width", "Identifier": { "PURL": "pkg:npm/string-width@5.1.2", "UID": "d85e0c68f0badf34" }, "Version": "5.1.2", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "eastasianwidth@0.2.0", "emoji-regex@9.2.2", "strip-ansi@7.1.0" ], "Locations": [ { "StartLine": 1842, "EndLine": 1857 } ], "AnalyzedBy": "npm" }, { "ID": "strip-ansi@6.0.1", "Name": "strip-ansi", "Identifier": { "PURL": "pkg:npm/strip-ansi@6.0.1", "UID": "31af04fe467559e0" }, "Version": "6.0.1", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "ansi-regex@5.0.1" ], "Locations": [ { "StartLine": 1885, "EndLine": 1895 }, { "StartLine": 1910, "EndLine": 1921 }, { "StartLine": 2274, "EndLine": 2284 } ], "AnalyzedBy": "npm" }, { "ID": "strip-ansi@7.1.0", "Name": "strip-ansi", "Identifier": { "PURL": "pkg:npm/strip-ansi@7.1.0", "UID": "d5e0950dc7369d7" }, "Version": "7.1.0", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "ansi-regex@6.0.1" ], "Locations": [ { "StartLine": 1896, "EndLine": 1909 } ], "AnalyzedBy": "npm" }, { "ID": "sucrase@3.35.0", "Name": "sucrase", "Identifier": { "PURL": "pkg:npm/sucrase@3.35.0", "UID": "adbad28ea024c1ab" }, "Version": "3.35.0", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "@jridgewell/gen-mapping@0.3.5", "commander@4.1.1", "glob@10.3.12", "lines-and-columns@1.2.4", "mz@2.7.0", "pirates@4.0.6", "ts-interface-checker@0.1.13" ], "Locations": [ { "StartLine": 1930, "EndLine": 1950 } ], "AnalyzedBy": "npm" }, { "ID": "supports-preserve-symlinks-flag@1.0.0", "Name": "supports-preserve-symlinks-flag", "Identifier": { "PURL": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "UID": "691e4da08d81edec" }, "Version": "1.0.0", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 1951, "EndLine": 1961 } ], "AnalyzedBy": "npm" }, { "ID": "terser@5.31.0", "Name": "terser", "Identifier": { "PURL": "pkg:npm/terser@5.31.0", "UID": "1314f65dc2e29fb0" }, "Version": "5.31.0", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "@jridgewell/source-map@0.3.6", "acorn@8.11.3", "commander@2.20.3", "source-map-support@0.5.21" ], "Locations": [ { "StartLine": 1998, "EndLine": 2016 } ], "AnalyzedBy": "npm" }, { "ID": "thenify@3.3.1", "Name": "thenify", "Identifier": { "PURL": "pkg:npm/thenify@3.3.1", "UID": "fda193fa7e1fbc53" }, "Version": "3.3.1", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "any-promise@1.3.0" ], "Locations": [ { "StartLine": 2024, "EndLine": 2031 } ], "AnalyzedBy": "npm" }, { "ID": "thenify-all@1.6.0", "Name": "thenify-all", "Identifier": { "PURL": "pkg:npm/thenify-all@1.6.0", "UID": "6698167cb9e0634d" }, "Version": "1.6.0", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "thenify@3.3.1" ], "Locations": [ { "StartLine": 2032, "EndLine": 2042 } ], "AnalyzedBy": "npm" }, { "ID": "to-regex-range@5.0.1", "Name": "to-regex-range", "Identifier": { "PURL": "pkg:npm/to-regex-range@5.0.1", "UID": "a210291673e4f041" }, "Version": "5.0.1", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "is-number@7.0.0" ], "Locations": [ { "StartLine": 2051, "EndLine": 2061 } ], "AnalyzedBy": "npm" }, { "ID": "ts-interface-checker@0.1.13", "Name": "ts-interface-checker", "Identifier": { "PURL": "pkg:npm/ts-interface-checker@0.1.13", "UID": "69f1e4aef36589f9" }, "Version": "0.1.13", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 2062, "EndLine": 2066 } ], "AnalyzedBy": "npm" }, { "ID": "undici-types@5.26.5", "Name": "undici-types", "Identifier": { "PURL": "pkg:npm/undici-types@5.26.5", "UID": "e5b6558f62b07d6a" }, "Version": "5.26.5", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 2067, "EndLine": 2073 } ], "AnalyzedBy": "npm" }, { "ID": "update-browserslist-db@1.0.13", "Name": "update-browserslist-db", "Identifier": { "PURL": "pkg:npm/update-browserslist-db@1.0.13", "UID": "29014781133c8404" }, "Version": "1.0.13", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "browserslist@4.23.0", "escalade@3.1.2", "picocolors@1.1.1" ], "Locations": [ { "StartLine": 2074, "EndLine": 2102 } ], "AnalyzedBy": "npm" }, { "ID": "util-deprecate@1.0.2", "Name": "util-deprecate", "Identifier": { "PURL": "pkg:npm/util-deprecate@1.0.2", "UID": "22b6bdabc431fbca" }, "Version": "1.0.2", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 2103, "EndLine": 2107 } ], "AnalyzedBy": "npm" }, { "ID": "vite-plugin-dynamic-import@1.5.0", "Name": "vite-plugin-dynamic-import", "Identifier": { "PURL": "pkg:npm/vite-plugin-dynamic-import@1.5.0", "UID": "b7eaf8737d59fb85" }, "Version": "1.5.0", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "acorn@8.11.3", "es-module-lexer@1.5.2", "fast-glob@3.3.2", "magic-string@0.30.10" ], "Locations": [ { "StartLine": 2167, "EndLine": 2177 } ], "AnalyzedBy": "npm" }, { "ID": "which@2.0.2", "Name": "which", "Identifier": { "PURL": "pkg:npm/which@2.0.2", "UID": "62328fab951c6e73" }, "Version": "2.0.2", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "isexe@2.0.0" ], "Locations": [ { "StartLine": 2187, "EndLine": 2200 } ], "AnalyzedBy": "npm" }, { "ID": "wrap-ansi@7.0.0", "Name": "wrap-ansi", "Identifier": { "PURL": "pkg:npm/wrap-ansi@7.0.0", "UID": "6665d9290db0045" }, "Version": "7.0.0", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "ansi-styles@4.3.0", "string-width@4.2.3", "strip-ansi@6.0.1" ], "Locations": [ { "StartLine": 2217, "EndLine": 2233 } ], "AnalyzedBy": "npm" }, { "ID": "wrap-ansi@8.1.0", "Name": "wrap-ansi", "Identifier": { "PURL": "pkg:npm/wrap-ansi@8.1.0", "UID": "c13d64be0938ab67" }, "Version": "8.1.0", "Indirect": true, "Relationship": "indirect", "DependsOn": [ "ansi-styles@6.2.1", "string-width@5.1.2", "strip-ansi@7.1.0" ], "Locations": [ { "StartLine": 2201, "EndLine": 2216 } ], "AnalyzedBy": "npm" }, { "ID": "yaml@2.4.2", "Name": "yaml", "Identifier": { "PURL": "pkg:npm/yaml@2.4.2", "UID": "deafdbbd7622e35e" }, "Version": "2.4.2", "Indirect": true, "Relationship": "indirect", "Locations": [ { "StartLine": 2285, "EndLine": 2295 } ], "AnalyzedBy": "npm" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2026-33750", "VendorIDs": [ "GHSA-f886-m6hf-6m8v" ], "PkgID": "brace-expansion@2.0.1", "PkgName": "brace-expansion", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@2.0.1", "UID": "3d1701f93b6091bf" }, "InstalledVersion": "2.0.1", "FixedVersion": "5.0.5, 3.0.2, 2.0.3, 1.1.13", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33750", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:c153edf2f26dfd53050d37e318c869296d50ad48a27e81e2ddc40d614dbea732", "Title": "brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern", "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13, a brace pattern with a zero step value (e.g., `{1..2..0}`) causes the sequence generation loop to run indefinitely, making the process hang for seconds and allocate heaps of memory. Versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13 fix the issue. As a workaround, sanitize strings passed to `expand()` to ensure a step value of `0` is not used.", "Severity": "MEDIUM", "CweIDs": [ "CWE-400" ], "VendorSeverity": { "ghsa": 2, "nvd": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-33750", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L107-L113", "https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L184", "https://github.com/juliangruber/brace-expansion/commit/311ac0d54994158c0a384e286a7d6cbb17ee8ed5", "https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2", "https://github.com/juliangruber/brace-expansion/commit/b9cacd9e55e7a1fa588fe4b7bb1159d52f1d902a", "https://github.com/juliangruber/brace-expansion/issues/98", "https://github.com/juliangruber/brace-expansion/pull/95", "https://github.com/juliangruber/brace-expansion/pull/96", "https://github.com/juliangruber/brace-expansion/pull/97", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-f886-m6hf-6m8v", "https://nvd.nist.gov/vuln/detail/CVE-2026-33750", "https://www.cve.org/CVERecord?id=CVE-2026-33750" ], "PublishedDate": "2026-03-27T15:16:57.297Z", "LastModifiedDate": "2026-04-22T14:23:19.11Z" }, { "VulnerabilityID": "CVE-2025-5889", "VendorIDs": [ "GHSA-v6h2-p8h4-qcjw" ], "PkgID": "brace-expansion@2.0.1", "PkgName": "brace-expansion", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@2.0.1", "UID": "3d1701f93b6091bf" }, "InstalledVersion": "2.0.1", "FixedVersion": "2.0.2, 1.1.12, 3.0.1, 4.0.1", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-5889", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:1385283eb2ff882cc3cb808e01e14d682e26aac85f84ecc00a90224c2486bd8e", "Title": "brace-expansion: juliangruber brace-expansion index.js expand redos", "Description": "A vulnerability was found in juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0. It has been rated as problematic. Affected by this issue is the function expand of the file index.js. The manipulation leads to inefficient regular expression complexity. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.1.12, 2.0.2, 3.0.1 and 4.0.1 is able to address this issue. The name of the patch is a5b98a4f30d7813266b221435e1eaaf25a1b0ac5. It is recommended to upgrade the affected component.", "Severity": "LOW", "CweIDs": [ "CWE-400", "CWE-1333" ], "VendorSeverity": { "amazon": 3, "cbl-mariner": 1, "ghsa": 1, "redhat": 1 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "V3Score": 3.1, "V40Score": 1.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "V3Score": 3.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-5889", "https://gist.github.com/mmmsssttt404/37a40ce7d6e5ca604858fe30814d9466", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/0b6a9781e18e9d2769bb2931f4856d1360243ed2", "https://github.com/juliangruber/brace-expansion/commit/15f9b3c75ebf5988198241fecaebdc45eff28a9f", "https://github.com/juliangruber/brace-expansion/commit/36603d5f3599a37af9e85eda30acd7d28599c36e", "https://github.com/juliangruber/brace-expansion/commit/c3c73c8b088defc70851843be88ccc3af08e7217", "https://github.com/juliangruber/brace-expansion/pull/65/commits/a5b98a4f30d7813266b221435e1eaaf25a1b0ac5", "https://github.com/juliangruber/brace-expansion/releases/tag/v4.0.1", "https://nvd.nist.gov/vuln/detail/CVE-2025-5889", "https://vuldb.com/?ctiid.311660", "https://vuldb.com/?id.311660", "https://vuldb.com/?submit.585717", "https://www.cve.org/CVERecord?id=CVE-2025-5889" ], "PublishedDate": "2025-06-09T19:15:25.46Z", "LastModifiedDate": "2026-04-29T01:00:01.613Z" }, { "VulnerabilityID": "GHSA-67mh-4wv8-2f99", "PkgID": "esbuild@0.21.5", "PkgName": "esbuild", "PkgIdentifier": { "PURL": "pkg:npm/esbuild@0.21.5", "UID": "50e7f2270d302b0f" }, "InstalledVersion": "0.21.5", "FixedVersion": "0.25.0", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-67mh-4wv8-2f99", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:07bc5a283ff7fddf62c3affec08a15f91449e1631b57fab219d1e955dc6ec09e", "Title": "esbuild enables any website to send any requests to the development server and read the response", "Description": "### Summary\n\nesbuild allows any websites to send any request to the development server and read the response due to default CORS settings.\n\n### Details\n\nesbuild sets `Access-Control-Allow-Origin: *` header to all requests, including the SSE connection, which allows any websites to send any request to the development server and read the response.\n\nhttps://github.com/evanw/esbuild/blob/df815ac27b84f8b34374c9182a93c94718f8a630/pkg/api/serve_other.go#L121\nhttps://github.com/evanw/esbuild/blob/df815ac27b84f8b34374c9182a93c94718f8a630/pkg/api/serve_other.go#L363\n\n**Attack scenario**:\n\n1. The attacker serves a malicious web page (`http://malicious.example.com`).\n1. The user accesses the malicious web page.\n1. The attacker sends a `fetch('http://127.0.0.1:8000/main.js')` request by JS in that malicious web page. This request is normally blocked by same-origin policy, but that's not the case for the reasons above.\n1. The attacker gets the content of `http://127.0.0.1:8000/main.js`.\n\nIn this scenario, I assumed that the attacker knows the URL of the bundle output file name. But the attacker can also get that information by\n\n- Fetching `/index.html`: normally you have a script tag here\n- Fetching `/assets`: it's common to have a `assets` directory when you have JS files and CSS files in a different directory and the directory listing feature tells the attacker the list of files\n- Connecting `/esbuild` SSE endpoint: the SSE endpoint sends the URL path of the changed files when the file is changed (`new EventSource('/esbuild').addEventListener('change', e =\u003e console.log(e.type, e.data))`)\n- Fetching URLs in the known file: once the attacker knows one file, the attacker can know the URLs imported from that file\n\nThe scenario above fetches the compiled content, but if the victim has the source map option enabled, the attacker can also get the non-compiled content by fetching the source map file.\n\n### PoC\n\n1. Download [reproduction.zip](https://github.com/user-attachments/files/18561484/reproduction.zip)\n2. Extract it and move to that directory\n1. Run `npm i`\n1. Run `npm run watch`\n1. Run `fetch('http://127.0.0.1:8000/app.js').then(r =\u003e r.text()).then(content =\u003e console.log(content))` in a different website's dev tools.\n\n![image](https://github.com/user-attachments/assets/08fc2e4d-e1ec-44ca-b0ea-78a73c3c40e9)\n\n### Impact\n\nUsers using the serve feature may get the source code stolen by malicious websites.", "Severity": "MEDIUM", "VendorSeverity": { "ghsa": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "V3Score": 5.3 } }, "References": [ "https://github.com/evanw/esbuild", "https://github.com/evanw/esbuild/commit/de85afd65edec9ebc44a11e245fd9e9a2e99760d", "https://github.com/evanw/esbuild/security/advisories/GHSA-67mh-4wv8-2f99" ], "PublishedDate": "2025-02-10T17:48:07Z", "LastModifiedDate": "2025-02-10T17:48:08Z" }, { "VulnerabilityID": "CVE-2025-64756", "VendorIDs": [ "GHSA-5j98-mcp5-4vw2" ], "PkgID": "glob@10.3.12", "PkgName": "glob", "PkgIdentifier": { "PURL": "pkg:npm/glob@10.3.12", "UID": "bfcf89e1166642ac" }, "InstalledVersion": "10.3.12", "FixedVersion": "11.1.0, 10.5.0", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-64756", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:7f9f42ef5a34b4d12ef0427a92d6288f8d3ab410f8eafd122fef2e32d98adcf2", "Title": "glob: glob: Command Injection Vulnerability via Malicious Filenames", "Description": "Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c \u003ccommand\u003e \u003cpatterns\u003e are used, matched filenames are passed to a shell with shell: true, enabling shell metacharacters in filenames to trigger command injection and achieve arbitrary code execution under the user or CI account privileges. This issue has been patched in versions 10.5.0 and 11.1.0.", "Severity": "HIGH", "CweIDs": [ "CWE-78" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-64756", "https://github.com/isaacs/node-glob", "https://github.com/isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f", "https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146", "https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2", "https://nvd.nist.gov/vuln/detail/CVE-2025-64756", "https://www.cve.org/CVERecord?id=CVE-2025-64756" ], "PublishedDate": "2025-11-17T18:15:58.27Z", "LastModifiedDate": "2025-12-02T19:34:43.27Z" }, { "VulnerabilityID": "CVE-2026-26996", "VendorIDs": [ "GHSA-3ppc-4f35-3m26" ], "PkgID": "minimatch@9.0.4", "PkgName": "minimatch", "PkgIdentifier": { "PURL": "pkg:npm/minimatch@9.0.4", "UID": "1517f7b6cad269ca" }, "InstalledVersion": "9.0.4", "FixedVersion": "10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-26996", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:6286ec85b4502403f110085fba9032dc84b69c35b58fc938dd7b0cbae9f85061", "Title": "minimatch: minimatch: Denial of Service via specially crafted glob patterns", "Description": "minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains many consecutive * wildcards followed by a literal character that doesn't appear in the test string. Each * compiles to a separate [^/]*? regex group, and when the match fails, V8's regex engine backtracks exponentially across all possible splits. The time complexity is O(4^N) where N is the number of * characters. With N=15, a single minimatch() call takes ~2 seconds. With N=34, it hangs effectively forever. Any application that passes user-controlled strings to minimatch() as the pattern argument is vulnerable to DoS. This issue has been fixed in version 10.2.1.", "Severity": "HIGH", "CweIDs": [ "CWE-1333" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 2, "rocky": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:8339", "https://access.redhat.com/security/cve/CVE-2026-26996", "https://bugzilla.redhat.com/2441268", "https://bugzilla.redhat.com/2442922", "https://bugzilla.redhat.com/2448754", "https://bugzilla.redhat.com/2453151", "https://bugzilla.redhat.com/show_bug.cgi?id=2441268", "https://bugzilla.redhat.com/show_bug.cgi?id=2442922", "https://bugzilla.redhat.com/show_bug.cgi?id=2448754", "https://bugzilla.redhat.com/show_bug.cgi?id=2453151", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21710", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27135", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27904", "https://errata.almalinux.org/8/ALSA-2026-8339.html", "https://errata.rockylinux.org/RLSA-2026:7896", "https://github.com/isaacs/minimatch", "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5", "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26", "https://linux.oracle.com/cve/CVE-2026-26996.html", "https://linux.oracle.com/errata/ELSA-2026-8339.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-26996", "https://www.cve.org/CVERecord?id=CVE-2026-26996" ], "PublishedDate": "2026-02-20T03:16:01.62Z", "LastModifiedDate": "2026-03-06T21:32:10.65Z" }, { "VulnerabilityID": "CVE-2026-27903", "VendorIDs": [ "GHSA-7r86-cg39-jmmj" ], "PkgID": "minimatch@9.0.4", "PkgName": "minimatch", "PkgIdentifier": { "PURL": "pkg:npm/minimatch@9.0.4", "UID": "1517f7b6cad269ca" }, "InstalledVersion": "9.0.4", "FixedVersion": "10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27903", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:b4c479f65826819637d70a3d3dee79e6ffec42a60ea5a89ab339f091cf5c01b1", "Title": "minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns", "Description": "minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3, `matchOne()` performs unbounded recursive backtracking when a glob pattern contains multiple non-adjacent `**` (GLOBSTAR) segments and the input path does not match. The time complexity is O(C(n, k)) -- binomial -- where `n` is the number of path segments and `k` is the number of globstars. With k=11 and n=30, a call to the default `minimatch()` API stalls for roughly 5 seconds. With k=13, it exceeds 15 seconds. No memoization or call budget exists to bound this behavior. Any application where an attacker can influence the glob pattern passed to `minimatch()` is vulnerable. The realistic attack surface includes build tools and task runners that accept user-supplied glob arguments (ESLint, Webpack, Rollup config), multi-tenant systems where one tenant configures glob-based rules that run in a shared process, admin or developer interfaces that accept ignore-rule or filter configuration as globs, and CI/CD pipelines that evaluate user-submitted config files containing glob patterns. An attacker who can place a crafted pattern into any of these paths can stall the Node.js event loop for tens of seconds per invocation. The pattern is 56 bytes for a 5-second stall and does not require authentication in contexts where pattern input is part of the feature. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3 fix the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-27903", "https://github.com/isaacs/minimatch", "https://github.com/isaacs/minimatch/commit/0bf499aa45f5059b56809cc3b75ff3eafeb8d748", "https://github.com/isaacs/minimatch/security/advisories/GHSA-7r86-cg39-jmmj", "https://nvd.nist.gov/vuln/detail/CVE-2026-27903", "https://www.cve.org/CVERecord?id=CVE-2026-27903" ], "PublishedDate": "2026-02-26T02:16:21.353Z", "LastModifiedDate": "2026-02-27T17:21:22.37Z" }, { "VulnerabilityID": "CVE-2026-27904", "VendorIDs": [ "GHSA-23c5-xmqv-rm74" ], "PkgID": "minimatch@9.0.4", "PkgName": "minimatch", "PkgIdentifier": { "PURL": "pkg:npm/minimatch@9.0.4", "UID": "1517f7b6cad269ca" }, "InstalledVersion": "9.0.4", "FixedVersion": "10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27904", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:de8fb86f4639d333c2df06296abd27628a0b68314333a90c1d8bf177eb8d7390", "Title": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions", "Description": "minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs produce regexps with nested unbounded quantifiers (e.g. `(?:(?:a|b)*)*`), which exhibit catastrophic backtracking in V8. With a 12-byte pattern `*(*(*(a|b)))` and an 18-byte non-matching input, `minimatch()` stalls for over 7 seconds. Adding a single nesting level or a few input characters pushes this to minutes. This is the most severe finding: it is triggered by the default `minimatch()` API with no special options, and the minimum viable pattern is only 12 bytes. The same issue affects `+()` extglobs equally. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4 fix the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-1333" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 2, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:8339", "https://access.redhat.com/security/cve/CVE-2026-27904", "https://bugzilla.redhat.com/2441268", "https://bugzilla.redhat.com/2442922", "https://bugzilla.redhat.com/2448754", "https://bugzilla.redhat.com/2453151", "https://bugzilla.redhat.com/show_bug.cgi?id=2441268", "https://bugzilla.redhat.com/show_bug.cgi?id=2442922", "https://bugzilla.redhat.com/show_bug.cgi?id=2448754", "https://bugzilla.redhat.com/show_bug.cgi?id=2453151", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21710", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27135", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27904", "https://errata.almalinux.org/8/ALSA-2026-8339.html", "https://errata.rockylinux.org/RLSA-2026:7896", "https://github.com/isaacs/minimatch", "https://github.com/isaacs/minimatch/commit/11d0df6165d15a955462316b26d52e5efae06fce", "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74", "https://linux.oracle.com/cve/CVE-2026-27904.html", "https://linux.oracle.com/errata/ELSA-2026-8339.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-27904", "https://www.cve.org/CVERecord?id=CVE-2026-27904" ], "PublishedDate": "2026-02-26T02:16:21.76Z", "LastModifiedDate": "2026-02-27T17:16:23.773Z" }, { "VulnerabilityID": "CVE-2026-33671", "VendorIDs": [ "GHSA-c2c7-rcm5-vvqj" ], "PkgID": "picomatch@2.3.1", "PkgName": "picomatch", "PkgIdentifier": { "PURL": "pkg:npm/picomatch@2.3.1", "UID": "698e902d7addbaf1" }, "InstalledVersion": "2.3.1", "FixedVersion": "4.0.4, 3.0.2, 2.3.2", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33671", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:e2ea960cee2680683ac1fedd05e2656422c005c0f2d311239726ab5a3ee4128e", "Title": "picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns", "Description": "Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) when processing crafted extglob patterns. Certain patterns using extglob quantifiers such as `+()` and `*()`, especially when combined with overlapping alternatives or nested extglobs, are compiled into regular expressions that can exhibit catastrophic backtracking on non-matching input. Applications are impacted when they allow untrusted users to supply glob patterns that are passed to `picomatch` for compilation or matching. In those cases, an attacker can cause excessive CPU consumption and block the Node.js event loop, resulting in a denial of service. Applications that only use trusted, developer-controlled glob patterns are much less likely to be exposed in a security-relevant way. This issue is fixed in picomatch 4.0.4, 3.0.2 and 2.3.2. Users should upgrade to one of these versions or later, depending on their supported release line. If upgrading is not immediately possible, avoid passing untrusted glob patterns to `picomatch`. Possible mitigations include disabling extglob support for untrusted patterns by using `noextglob: true`, rejecting or sanitizing patterns containing nested extglobs or extglob quantifiers such as `+()` and `*()`, enforcing strict allowlists for accepted pattern syntax, running matching in an isolated worker or separate process with time and resource limits, and applying application-level request throttling and input validation for any endpoint that accepts glob patterns.", "Severity": "HIGH", "CweIDs": [ "CWE-1333" ], "VendorSeverity": { "azure": 3, "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-33671", "https://github.com/micromatch/picomatch", "https://github.com/micromatch/picomatch/commit/5eceecd27543b8e056b9307d69e105ea03618a7d", "https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj", "https://nvd.nist.gov/vuln/detail/CVE-2026-33671", "https://www.cve.org/CVERecord?id=CVE-2026-33671" ], "PublishedDate": "2026-03-26T22:16:30.21Z", "LastModifiedDate": "2026-04-01T13:45:11.687Z" }, { "VulnerabilityID": "CVE-2026-33672", "VendorIDs": [ "GHSA-3v7f-55p6-f55p" ], "PkgID": "picomatch@2.3.1", "PkgName": "picomatch", "PkgIdentifier": { "PURL": "pkg:npm/picomatch@2.3.1", "UID": "698e902d7addbaf1" }, "InstalledVersion": "2.3.1", "FixedVersion": "4.0.4, 3.0.2, 2.3.2", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33672", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:de77261767c6cdb75a8c5d33e792611062fea6934ceba5329273514ccdb42b8e", "Title": "picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions", "Description": "Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the `POSIX_REGEX_SOURCE` object. Because the object inherits from `Object.prototype`, specially crafted POSIX bracket expressions (e.g., `[[:constructor:]]`) can reference inherited method names. These methods are implicitly converted to strings and injected into the generated regular expression. This leads to incorrect glob matching behavior (integrity impact), where patterns may match unintended filenames. The issue does not enable remote code execution, but it can cause security-relevant logic errors in applications that rely on glob matching for filtering, validation, or access control. All users of affected `picomatch` versions that process untrusted or user-controlled glob patterns are potentially impacted. This issue is fixed in picomatch 4.0.4, 3.0.2 and 2.3.2. Users should upgrade to one of these versions or later, depending on their supported release line. If upgrading is not immediately possible, avoid passing untrusted glob patterns to picomatch. Possible mitigations include sanitizing or rejecting untrusted glob patterns, especially those containing POSIX character classes like `[[:...:]]`; avoiding the use of POSIX bracket expressions if user input is involved; and manually patching the library by modifying `POSIX_REGEX_SOURCE` to use a null prototype.", "Severity": "MEDIUM", "CweIDs": [ "CWE-1321" ], "VendorSeverity": { "azure": 2, "ghsa": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "V3Score": 5.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-33672", "https://github.com/micromatch/picomatch", "https://github.com/micromatch/picomatch/commit/4516eb521f13a46b2fe1a1d2c9ef6b20ddc0e903", "https://github.com/micromatch/picomatch/security/advisories/GHSA-3v7f-55p6-f55p", "https://nvd.nist.gov/vuln/detail/CVE-2026-33672", "https://www.cve.org/CVERecord?id=CVE-2026-33672" ], "PublishedDate": "2026-03-26T22:16:30.387Z", "LastModifiedDate": "2026-04-01T13:44:53.397Z" }, { "VulnerabilityID": "CVE-2026-41305", "VendorIDs": [ "GHSA-qx2v-qp2m-jg93" ], "PkgID": "postcss@8.5.1", "PkgName": "postcss", "PkgIdentifier": { "PURL": "pkg:npm/postcss@8.5.1", "UID": "bd0880f69fb5be58" }, "InstalledVersion": "8.5.1", "FixedVersion": "8.5.10", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-41305", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:20f631fd46567c3c1de245815f78e541274e76b5e3d72ca177f64fb1449ebc9d", "Title": "postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags", "Description": "PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Versions prior to 8.5.10 do not escape `\u003c/style\u003e` sequences when stringifying CSS ASTs. When user-submitted CSS is parsed and re-stringified for embedding in HTML `\u003cstyle\u003e` tags, `\u003c/style\u003e` in CSS values breaks out of the style context, enabling XSS. Version 8.5.10 fixes the issue.", "Severity": "MEDIUM", "CweIDs": [ "CWE-79" ], "VendorSeverity": { "ghsa": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "V3Score": 6.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "V3Score": 6.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-41305", "https://github.com/postcss/postcss", "https://github.com/postcss/postcss/releases/tag/8.5.10", "https://github.com/postcss/postcss/security/advisories/GHSA-qx2v-qp2m-jg93", "https://nvd.nist.gov/vuln/detail/CVE-2026-41305", "https://www.cve.org/CVERecord?id=CVE-2026-41305" ], "PublishedDate": "2026-04-24T03:16:11.547Z", "LastModifiedDate": "2026-04-24T17:16:21.5Z" }, { "VulnerabilityID": "CVE-2026-27606", "VendorIDs": [ "GHSA-mw96-cpmx-2vgc" ], "PkgID": "rollup@4.22.4", "PkgName": "rollup", "PkgIdentifier": { "PURL": "pkg:npm/rollup@4.22.4", "UID": "469b121aa969bacd" }, "InstalledVersion": "4.22.4", "FixedVersion": "2.80.0, 3.30.0, 4.59.0", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27606", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:52eef60c5fbcc4bc258ab1d3c52471a36d118b5446830abe36abc2fd449efaa1", "Title": "rollup: Rollup: Remote Code Execution via Path Traversal Vulnerability", "Description": "Rollup is a module bundler for JavaScript. Versions prior to 2.80.0, 3.30.0, and 4.59.0 of the Rollup module bundler (specifically v4.x and present in current source) is vulnerable to an Arbitrary File Write via Path Traversal. Insecure file name sanitization in the core engine allows an attacker to control output filenames (e.g., via CLI named inputs, manual chunk aliases, or malicious plugins) and use traversal sequences (`../`) to overwrite files anywhere on the host filesystem that the build process has permissions for. This can lead to persistent Remote Code Execution (RCE) by overwriting critical system or user configuration files. Versions 2.80.0, 3.30.0, and 4.59.0 contain a patch for the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "ghsa": 3, "nvd": 4, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P", "V40Score": 8.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-27606", "https://github.com/rollup/rollup", "https://github.com/rollup/rollup/commit/c60770d7aaf750e512c1b2774989ea4596e660b2", "https://github.com/rollup/rollup/commit/c8cf1f9c48c516285758c1e11f08a54f304fd44e", "https://github.com/rollup/rollup/commit/d6dee5e99bb82aac0bee1df4ab9efbde455452c3", "https://github.com/rollup/rollup/releases/tag/v2.80.0", "https://github.com/rollup/rollup/releases/tag/v3.30.0", "https://github.com/rollup/rollup/releases/tag/v4.59.0", "https://github.com/rollup/rollup/security/advisories/GHSA-mw96-cpmx-2vgc", "https://nvd.nist.gov/vuln/detail/CVE-2026-27606", "https://www.cve.org/CVERecord?id=CVE-2026-27606" ], "PublishedDate": "2026-02-25T03:16:04.603Z", "LastModifiedDate": "2026-02-25T16:05:11.063Z" }, { "VulnerabilityID": "CVE-2025-30208", "VendorIDs": [ "GHSA-x574-m823-4x7w" ], "PkgID": "vite@5.4.12", "PkgName": "vite", "PkgIdentifier": { "PURL": "pkg:npm/vite@5.4.12", "UID": "66fcbab335e7723a" }, "InstalledVersion": "5.4.12", "FixedVersion": "6.2.3, 6.1.2, 6.0.12, 5.4.15, 4.5.10", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-30208", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:9279d2a1e108be03940ee385b536aee542f715cb8af0ce7dc119207700fbc98e", "Title": "vite: Vite bypasses server.fs.deny when using `?raw??`", "Description": "Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. `@fs` denies access to files outside of Vite serving allow list. Adding `?raw??` or `?import\u0026raw??` to the URL bypasses this limitation and returns the file content if it exists. This bypass exists because trailing separators such as `?` are removed in several places, but are not accounted for in query string regexes. The contents of arbitrary files can be returned to the browser. Only apps explicitly exposing the Vite dev server to the network (using `--host` or `server.host` config option) are affected. Versions 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10 fix the issue.", "Severity": "MEDIUM", "CweIDs": [ "CWE-200", "CWE-284" ], "VendorSeverity": { "ghsa": 2, "nvd": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "V3Score": 5.3 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-30208", "https://github.com/vitejs/vite", "https://github.com/vitejs/vite/commit/315695e9d97cc6cfa7e6d9e0229fb50cdae3d9f4", "https://github.com/vitejs/vite/commit/80381c38d6f068b12e6e928cd3c616bd1d64803c", "https://github.com/vitejs/vite/commit/807d7f06d33ab49c48a2a3501da3eea1906c0d41", "https://github.com/vitejs/vite/commit/92ca12dc79118bf66f2b32ff81ed09e0d0bd07ca", "https://github.com/vitejs/vite/commit/f234b5744d8b74c95535a7b82cc88ed2144263c1", "https://github.com/vitejs/vite/security/advisories/GHSA-x574-m823-4x7w", "https://nvd.nist.gov/vuln/detail/CVE-2025-30208", "https://www.cve.org/CVERecord?id=CVE-2025-30208" ], "PublishedDate": "2025-03-24T17:15:21.82Z", "LastModifiedDate": "2025-09-23T14:39:29.023Z" }, { "VulnerabilityID": "CVE-2025-31125", "VendorIDs": [ "GHSA-4r4m-qw57-chr8" ], "PkgID": "vite@5.4.12", "PkgName": "vite", "PkgIdentifier": { "PURL": "pkg:npm/vite@5.4.12", "UID": "66fcbab335e7723a" }, "InstalledVersion": "5.4.12", "FixedVersion": "6.2.4, 6.1.3, 6.0.13, 5.4.16, 4.5.11", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-31125", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:aee2802522e6fdb49dc4c6ed521b6568315676c08925a13e3739a80ea4afbeca", "Title": "vite: Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query", "Description": "Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline\u0026import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected. This vulnerability is fixed in 6.2.4, 6.1.3, 6.0.13, 5.4.16, and 4.5.11.", "Severity": "MEDIUM", "CweIDs": [ "CWE-200", "CWE-284" ], "VendorSeverity": { "ghsa": 2, "nvd": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "V3Score": 5.3 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-31125", "https://github.com/vitejs/vite", "https://github.com/vitejs/vite/commit/59673137c45ac2bcfad1170d954347c1a17ab949", "https://github.com/vitejs/vite/security/advisories/GHSA-4r4m-qw57-chr8", "https://nvd.nist.gov/vuln/detail/CVE-2025-31125", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31125", "https://www.cve.org/CVERecord?id=CVE-2025-31125" ], "PublishedDate": "2025-03-31T17:15:43.163Z", "LastModifiedDate": "2026-01-23T18:39:55.027Z" }, { "VulnerabilityID": "CVE-2025-31486", "VendorIDs": [ "GHSA-xcj6-pq6g-qj4x" ], "PkgID": "vite@5.4.12", "PkgName": "vite", "PkgIdentifier": { "PURL": "pkg:npm/vite@5.4.12", "UID": "66fcbab335e7723a" }, "InstalledVersion": "5.4.12", "FixedVersion": "6.2.5, 6.1.4, 6.0.14, 5.4.17, 4.5.12", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-31486", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:b0a49fecca86a1c08bb6147fdbe2765c655fe147a0149c475172d8ef4a659b96", "Title": "vite: Vite allows server.fs.deny to be bypassed with .svg or relative paths", "Description": "Vite is a frontend tooling framework for javascript. The contents of arbitrary files can be returned to the browser. By adding ?.svg with ?.wasm?init or with sec-fetch-dest: script header, the server.fs.deny restriction was able to bypass. This bypass is only possible if the file is smaller than build.assetsInlineLimit (default: 4kB) and when using Vite 6.0+. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected. This vulnerability is fixed in 4.5.12, 5.4.17, 6.0.14, 6.1.4, and 6.2.5.", "Severity": "MEDIUM", "CweIDs": [ "CWE-200", "CWE-284" ], "VendorSeverity": { "ghsa": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "V3Score": 5.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-31486", "https://github.com/vitejs/vite", "https://github.com/vitejs/vite/blob/037f801075ec35bb6e52145d659f71a23813c48f/packages/vite/src/node/plugins/asset.ts#L285-L290", "https://github.com/vitejs/vite/commit/62d7e81ee189d65899bb65f3263ddbd85247b647", "https://github.com/vitejs/vite/security/advisories/GHSA-xcj6-pq6g-qj4x", "https://nvd.nist.gov/vuln/detail/CVE-2025-31486", "https://www.cve.org/CVERecord?id=CVE-2025-31486" ], "PublishedDate": "2025-04-03T19:15:39.89Z", "LastModifiedDate": "2026-04-15T00:35:42.02Z" }, { "VulnerabilityID": "CVE-2025-32395", "VendorIDs": [ "GHSA-356w-63v5-8wf4" ], "PkgID": "vite@5.4.12", "PkgName": "vite", "PkgIdentifier": { "PURL": "pkg:npm/vite@5.4.12", "UID": "66fcbab335e7723a" }, "InstalledVersion": "5.4.12", "FixedVersion": "6.2.6, 6.1.5, 6.0.15, 5.4.18, 4.5.13", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-32395", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:9bfbcbd86d5c3daecf014c8ecfc75616b7bb2c58b92f4c15c66bd51ca84a95a8", "Title": "vite: Vite has an `server.fs.deny` bypass with an invalid `request-target`", "Description": "Vite is a frontend tooling framework for javascript. Prior to 6.2.6, 6.1.5, 6.0.15, 5.4.18, and 4.5.13, the contents of arbitrary files can be returned to the browser if the dev server is running on Node or Bun. HTTP 1.1 spec (RFC 9112) does not allow # in request-target. Although an attacker can send such a request. For those requests with an invalid request-line (it includes request-target), the spec recommends to reject them with 400 or 301. The same can be said for HTTP 2. On Node and Bun, those requests are not rejected internally and is passed to the user land. For those requests, the value of http.IncomingMessage.url contains #. Vite assumed req.url won't contain # when checking server.fs.deny, allowing those kinds of requests to bypass the check. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) and running the Vite dev server on runtimes that are not Deno (e.g. Node, Bun) are affected. This vulnerability is fixed in 6.2.6, 6.1.5, 6.0.15, 5.4.18, and 4.5.13.", "Severity": "MEDIUM", "CweIDs": [ "CWE-200" ], "VendorSeverity": { "ghsa": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 6 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-32395", "https://github.com/vitejs/vite", "https://github.com/vitejs/vite/commit/175a83909f02d3b554452a7bd02b9f340cdfef70", "https://github.com/vitejs/vite/security/advisories/GHSA-356w-63v5-8wf4", "https://nvd.nist.gov/vuln/detail/CVE-2025-32395", "https://www.cve.org/CVERecord?id=CVE-2025-32395" ], "PublishedDate": "2025-04-10T14:15:29.463Z", "LastModifiedDate": "2026-04-15T00:35:42.02Z" }, { "VulnerabilityID": "CVE-2025-46565", "VendorIDs": [ "GHSA-859w-5945-r5v3" ], "PkgID": "vite@5.4.12", "PkgName": "vite", "PkgIdentifier": { "PURL": "pkg:npm/vite@5.4.12", "UID": "66fcbab335e7723a" }, "InstalledVersion": "5.4.12", "FixedVersion": "6.3.4, 6.2.7, 6.1.6, 5.4.19, 4.5.14", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-46565", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:d878e5b8a4c1b459232ff64ff3f980055c68cae08043230cfa2cbb5f090183da", "Title": "vite: Path Traversal in Vite Dev Server Allows Access to Restricted Files", "Description": "Vite is a frontend tooling framework for javascript. Prior to versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14, the contents of files in the project root that are denied by a file matching pattern can be returned to the browser. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected. Only files that are under project root and are denied by a file matching pattern can be bypassed. `server.fs.deny` can contain patterns matching against files (by default it includes .env, .env.*, *.{crt,pem} as such patterns). These patterns were able to bypass for files under `root` by using a combination of slash and dot (/.). This issue has been patched in versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14.", "Severity": "MEDIUM", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "ghsa": 2, "nvd": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 6 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "V3Score": 5.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-46565", "https://github.com/vitejs/vite", "https://github.com/vitejs/vite/commit/c22c43de612eebb6c182dd67850c24e4fab8cacb", "https://github.com/vitejs/vite/security/advisories/GHSA-859w-5945-r5v3", "https://nvd.nist.gov/vuln/detail/CVE-2025-46565", "https://www.cve.org/CVERecord?id=CVE-2025-46565" ], "PublishedDate": "2025-05-01T18:15:57.797Z", "LastModifiedDate": "2025-10-02T15:40:34.403Z" }, { "VulnerabilityID": "CVE-2025-62522", "VendorIDs": [ "GHSA-93m4-6634-74q7" ], "PkgID": "vite@5.4.12", "PkgName": "vite", "PkgIdentifier": { "PURL": "pkg:npm/vite@5.4.12", "UID": "66fcbab335e7723a" }, "InstalledVersion": "5.4.12", "FixedVersion": "7.1.11, 7.0.8, 6.4.1, 5.4.21", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-62522", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:51f2117481b5ff39ab398c927fed5945069c163b65e087f49c3c2f814dfd8825", "Title": "vite: vite allows server.fs.deny bypass via backslash on Windows", "Description": "Vite is a frontend tooling framework for JavaScript. In versions from 2.9.18 to before 3.0.0, 3.2.9 to before 4.0.0, 4.5.3 to before 5.0.0, 5.2.6 to before 5.4.21, 6.0.0 to before 6.4.1, 7.0.0 to before 7.0.8, and 7.1.0 to before 7.1.11, files denied by server.fs.deny were sent if the URL ended with \\ when the dev server is running on Windows. Only apps explicitly exposing the Vite dev server to the network and running the dev server on Windows were affected. This issue has been patched in versions 5.4.21, 6.4.1, 7.0.8, and 7.1.11.", "Severity": "MEDIUM", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "ghsa": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 6 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-62522", "https://github.com/vitejs/vite", "https://github.com/vitejs/vite/commit/f479cc57c425ed41ceb434fecebd63931b1ed4ed", "https://github.com/vitejs/vite/security/advisories/GHSA-93m4-6634-74q7", "https://nvd.nist.gov/vuln/detail/CVE-2025-62522", "https://www.cve.org/CVERecord?id=CVE-2025-62522" ], "PublishedDate": "2025-10-20T20:15:37.427Z", "LastModifiedDate": "2026-04-15T00:35:42.02Z" }, { "VulnerabilityID": "CVE-2026-39365", "VendorIDs": [ "GHSA-4w7w-66w2-5vf9" ], "PkgID": "vite@5.4.12", "PkgName": "vite", "PkgIdentifier": { "PURL": "pkg:npm/vite@5.4.12", "UID": "66fcbab335e7723a" }, "InstalledVersion": "5.4.12", "FixedVersion": "8.0.5, 7.3.2, 6.4.2", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-39365", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:6610c7995da0e8be3182fb295da0126910fdfd2c0cb82b6df64c6c5fe2570f49", "Title": "vite: Vite: Information disclosure via path traversal in dev server's .map request handling", "Description": "Vite is a frontend tooling framework for JavaScript. From 6.0.0 to before 6.4.2, 7.3.2, and 8.0.5, the dev server’s handling of .map requests for optimized dependencies resolves file paths and calls readFile without restricting ../ segments in the URL. As a result, it is possible to bypass the server.fs.strict allow list and retrieve .map files located outside the project root, provided they can be parsed as valid source map JSON. This vulnerability is fixed in 6.4.2, 7.3.2, and 8.0.5.", "Severity": "MEDIUM", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "ghsa": 2, "nvd": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 6.3 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "V3Score": 5.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-39365", "https://github.com/vitejs/vite", "https://github.com/vitejs/vite/commit/79f002f2286c03c88c7b74c511c7f9fc6dc46694", "https://github.com/vitejs/vite/pull/22161", "https://github.com/vitejs/vite/releases/tag/v6.4.2", "https://github.com/vitejs/vite/releases/tag/v7.3.2", "https://github.com/vitejs/vite/releases/tag/v8.0.5", "https://github.com/vitejs/vite/security/advisories/GHSA-4w7w-66w2-5vf9", "https://nvd.nist.gov/vuln/detail/CVE-2026-39365", "https://www.cve.org/CVERecord?id=CVE-2026-39365" ], "PublishedDate": "2026-04-07T20:16:30.35Z", "LastModifiedDate": "2026-04-30T18:34:09.23Z" }, { "VulnerabilityID": "CVE-2025-58751", "VendorIDs": [ "GHSA-g4jq-h2w9-997c" ], "PkgID": "vite@5.4.12", "PkgName": "vite", "PkgIdentifier": { "PURL": "pkg:npm/vite@5.4.12", "UID": "66fcbab335e7723a" }, "InstalledVersion": "5.4.12", "FixedVersion": "7.1.5, 7.0.7, 6.3.6, 5.4.20", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-58751", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:22dc66f431ff1c0061f9d56b4d08718d349d4beb163850fb88a319c23a761efc", "Title": "vitejs/vite: lukeed/sirv: Vite middleware may serve files starting with the same name with the public directory", "Description": "Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, files starting with the same name with the public directory were served bypassing the `server.fs` settings. Only apps that explicitly expose the Vite dev server to the network (using --host or `server.host` config option), use the public directory feature (enabled by default), and have a symlink in the public directory are affected. Versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20 fix the issue.", "Severity": "LOW", "CweIDs": [ "CWE-22", "CWE-200", "CWE-284" ], "VendorSeverity": { "ghsa": 1, "nvd": 2, "redhat": 1 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 2.3 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "V3Score": 5.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "V3Score": 3.7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-58751", "https://github.com/lukeed/sirv/commit/f0113f3f8266328d804ee808f763a3c11f8997eb", "https://github.com/vitejs/vite", "https://github.com/vitejs/vite/commit/09f2b52e8d5907f26602653caf41b3a56692600d", "https://github.com/vitejs/vite/commit/4f1c35bcbb5830290c694aa14b6789e07450f069", "https://github.com/vitejs/vite/commit/63e2a5d232218f3f8d852056751e609a5367aaec", "https://github.com/vitejs/vite/commit/e11d24008b97d4ca731ecc1a3b95260a6d12e7e0", "https://github.com/vitejs/vite/security/advisories/GHSA-g4jq-h2w9-997c", "https://nvd.nist.gov/vuln/detail/CVE-2025-58751", "https://www.cve.org/CVERecord?id=CVE-2025-58751" ], "PublishedDate": "2025-09-08T23:15:36.17Z", "LastModifiedDate": "2025-09-17T16:21:36.24Z" }, { "VulnerabilityID": "CVE-2025-58752", "VendorIDs": [ "GHSA-jqfw-vq24-v9c3" ], "PkgID": "vite@5.4.12", "PkgName": "vite", "PkgIdentifier": { "PURL": "pkg:npm/vite@5.4.12", "UID": "66fcbab335e7723a" }, "InstalledVersion": "5.4.12", "FixedVersion": "7.1.5, 7.0.7, 6.3.6, 5.4.20", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-58752", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:64e03593d39b9e29b8c21308551d652b9644c601f7733c3ae670de9348b7ea20", "Title": "vite: Vite's `server.fs` settings were not applied to HTML files", "Description": "Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, any HTML files on the machine were served regardless of the `server.fs` settings. Only apps that explicitly expose the Vite dev server to the network (using --host or server.host config option) and use `appType: 'spa'` (default) or `appType: 'mpa'` are affected. This vulnerability also affects the preview server. The preview server allowed HTML files not under the output directory to be served. Versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20 fix the issue.", "Severity": "LOW", "CweIDs": [ "CWE-23", "CWE-200", "CWE-284" ], "VendorSeverity": { "ghsa": 1, "nvd": 2, "redhat": 1 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 2.3 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "V3Score": 5.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "V3Score": 3.7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-58752", "https://github.com/vitejs/vite", "https://github.com/vitejs/vite/blob/v7.1.5/packages/vite/CHANGELOG.md", "https://github.com/vitejs/vite/commit/0ab19ea9fcb66f544328f442cf6e70f7c0528d5f", "https://github.com/vitejs/vite/commit/14015d794f69accba68798bd0e15135bc51c9c1e", "https://github.com/vitejs/vite/commit/482000f57f56fe6ff2e905305100cfe03043ddea", "https://github.com/vitejs/vite/commit/6f01ff4fe072bcfcd4e2a84811772b818cd51fe6", "https://github.com/vitejs/vite/security/advisories/GHSA-jqfw-vq24-v9c3", "https://nvd.nist.gov/vuln/detail/CVE-2025-58752", "https://www.cve.org/CVERecord?id=CVE-2025-58752" ], "PublishedDate": "2025-09-08T23:15:36.35Z", "LastModifiedDate": "2025-09-17T16:12:20.913Z" }, { "VulnerabilityID": "CVE-2026-33532", "VendorIDs": [ "GHSA-48c2-rrv3-qjmp" ], "PkgID": "yaml@2.4.2", "PkgName": "yaml", "PkgIdentifier": { "PURL": "pkg:npm/yaml@2.4.2", "UID": "deafdbbd7622e35e" }, "InstalledVersion": "2.4.2", "FixedVersion": "2.8.3, 1.10.3", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33532", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:28dff9b84d2ad53d0865a8219ef571a91f3d853baa31860f5cacce2c52e3f84e", "Title": "yaml: yaml: Denial of Service via deeply nested YAML document parsing", "Description": "`yaml` is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of `yaml` on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a depth bound. An attacker who can supply YAML for parsing can trigger a `RangeError: Maximum call stack size exceeded` with a small payload (~2–10 KB). The `RangeError` is not a `YAMLParseError`, so applications that only catch YAML-specific errors will encounter an unexpected exception type. Depending on the host application's exception handling, this can fail requests or terminate the Node.js process. Flow sequences allow deep nesting with minimal bytes (2 bytes per level: one `[` and one `]`). On the default Node.js stack, approximately 1,000–5,000 levels of nesting (2–10 KB input) exhaust the call stack. The exact threshold is environment-dependent (Node.js version, stack size, call stack depth at invocation). Note: the library's `Parser` (CST phase) uses a stack-based iterative approach and is not affected. Only the compose/resolve phase uses actual call-stack recursion. All three public parsing APIs are affected: `YAML.parse()`, `YAML.parseDocument()`, and `YAML.parseAllDocuments()`. Versions 1.10.3 and 2.8.3 contain a patch.", "Severity": "MEDIUM", "CweIDs": [ "CWE-674" ], "VendorSeverity": { "ghsa": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "V3Score": 4.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-33532", "https://github.com/eemeli/yaml", "https://github.com/eemeli/yaml/commit/1e84ebbea7ec35011a4c61bbb820a529ee4f359b", "https://github.com/eemeli/yaml/releases/tag/v1.10.3", "https://github.com/eemeli/yaml/releases/tag/v2.8.3", "https://github.com/eemeli/yaml/security/advisories/GHSA-48c2-rrv3-qjmp", "https://nvd.nist.gov/vuln/detail/CVE-2026-33532", "https://www.cve.org/CVERecord?id=CVE-2026-33532" ], "PublishedDate": "2026-03-26T20:16:15.543Z", "LastModifiedDate": "2026-04-02T18:11:37.49Z" } ] }, { "Target": "vendor/mockery/mockery/docs/requirements.txt", "Class": "lang-pkgs", "Type": "pip", "Packages": [ { "Name": "Babel", "Identifier": { "PURL": "pkg:pypi/babel@2.14.0", "UID": "98f0e32c56bfece2" }, "Version": "2.14.0", "Locations": [ { "StartLine": 2, "EndLine": 2 } ], "AnalyzedBy": "pip" }, { "Name": "Jinja2", "Identifier": { "PURL": "pkg:pypi/jinja2@3.1.4", "UID": "5996224f9408fd01" }, "Version": "3.1.4", "Locations": [ { "StartLine": 8, "EndLine": 8 } ], "AnalyzedBy": "pip" }, { "Name": "MarkupSafe", "Identifier": { "PURL": "pkg:pypi/markupsafe@2.1.5", "UID": "54d8c997c84cd5b" }, "Version": "2.1.5", "Locations": [ { "StartLine": 9, "EndLine": 9 } ], "AnalyzedBy": "pip" }, { "Name": "Pygments", "Identifier": { "PURL": "pkg:pypi/pygments@2.17.2", "UID": "89586ee7a6e89bbd" }, "Version": "2.17.2", "Locations": [ { "StartLine": 11, "EndLine": 11 } ], "AnalyzedBy": "pip" }, { "Name": "Sphinx", "Identifier": { "PURL": "pkg:pypi/sphinx@7.3.7", "UID": "690069bf81aee99d" }, "Version": "7.3.7", "Locations": [ { "StartLine": 15, "EndLine": 15 } ], "AnalyzedBy": "pip" }, { "Name": "alabaster", "Identifier": { "PURL": "pkg:pypi/alabaster@0.7.16", "UID": "466b71cf3f4d7458" }, "Version": "0.7.16", "Locations": [ { "StartLine": 1, "EndLine": 1 } ], "AnalyzedBy": "pip" }, { "Name": "certifi", "Identifier": { "PURL": "pkg:pypi/certifi@2024.2.2", "UID": "d0fd5d8bc94eaa6" }, "Version": "2024.2.2", "Locations": [ { "StartLine": 3, "EndLine": 3 } ], "AnalyzedBy": "pip" }, { "Name": "charset-normalizer", "Identifier": { "PURL": "pkg:pypi/charset-normalizer@3.3.2", "UID": "42d31490cf5d659f" }, "Version": "3.3.2", "Locations": [ { "StartLine": 4, "EndLine": 4 } ], "AnalyzedBy": "pip" }, { "Name": "docutils", "Identifier": { "PURL": "pkg:pypi/docutils@0.20.1", "UID": "a2ae611973fb6124" }, "Version": "0.20.1", "Locations": [ { "StartLine": 5, "EndLine": 5 } ], "AnalyzedBy": "pip" }, { "Name": "idna", "Identifier": { "PURL": "pkg:pypi/idna@3.7", "UID": "ea4f389a3cee003a" }, "Version": "3.7", "Locations": [ { "StartLine": 6, "EndLine": 6 } ], "AnalyzedBy": "pip" }, { "Name": "imagesize", "Identifier": { "PURL": "pkg:pypi/imagesize@1.4.1", "UID": "94ac7a2af7522ae8" }, "Version": "1.4.1", "Locations": [ { "StartLine": 7, "EndLine": 7 } ], "AnalyzedBy": "pip" }, { "Name": "packaging", "Identifier": { "PURL": "pkg:pypi/packaging@24.0", "UID": "52543495620da51" }, "Version": "24.0", "Locations": [ { "StartLine": 10, "EndLine": 10 } ], "AnalyzedBy": "pip" }, { "Name": "requests", "Identifier": { "PURL": "pkg:pypi/requests@2.31.0", "UID": "47a87e7d2a72bc89" }, "Version": "2.31.0", "Locations": [ { "StartLine": 12, "EndLine": 12 } ], "AnalyzedBy": "pip" }, { "Name": "setuptools", "Identifier": { "PURL": "pkg:pypi/setuptools@69.2.0", "UID": "1b5827c64ba6b813" }, "Version": "69.2.0", "Locations": [ { "StartLine": 13, "EndLine": 13 } ], "AnalyzedBy": "pip" }, { "Name": "snowballstemmer", "Identifier": { "PURL": "pkg:pypi/snowballstemmer@2.2.0", "UID": "fdde13725ef402a8" }, "Version": "2.2.0", "Locations": [ { "StartLine": 14, "EndLine": 14 } ], "AnalyzedBy": "pip" }, { "Name": "sphinx-rtd-theme", "Identifier": { "PURL": "pkg:pypi/sphinx-rtd-theme@2.0.0", "UID": "482ce95c4906bf23" }, "Version": "2.0.0", "Locations": [ { "StartLine": 16, "EndLine": 16 } ], "AnalyzedBy": "pip" }, { "Name": "sphinxcontrib-applehelp", "Identifier": { "PURL": "pkg:pypi/sphinxcontrib-applehelp@1.0.8", "UID": "782e7fe3455f5e8a" }, "Version": "1.0.8", "Locations": [ { "StartLine": 17, "EndLine": 17 } ], "AnalyzedBy": "pip" }, { "Name": "sphinxcontrib-devhelp", "Identifier": { "PURL": "pkg:pypi/sphinxcontrib-devhelp@1.0.6", "UID": "5ea68d8e9ce2172a" }, "Version": "1.0.6", "Locations": [ { "StartLine": 18, "EndLine": 18 } ], "AnalyzedBy": "pip" }, { "Name": "sphinxcontrib-htmlhelp", "Identifier": { "PURL": "pkg:pypi/sphinxcontrib-htmlhelp@2.0.5", "UID": "bc8cf3ee7411d392" }, "Version": "2.0.5", "Locations": [ { "StartLine": 19, "EndLine": 19 } ], "AnalyzedBy": "pip" }, { "Name": "sphinxcontrib-jquery", "Identifier": { "PURL": "pkg:pypi/sphinxcontrib-jquery@4.1", "UID": "5fc9a4c057865314" }, "Version": "4.1", "Locations": [ { "StartLine": 20, "EndLine": 20 } ], "AnalyzedBy": "pip" }, { "Name": "sphinxcontrib-jsmath", "Identifier": { "PURL": "pkg:pypi/sphinxcontrib-jsmath@1.0.1", "UID": "af7097917e5c3390" }, "Version": "1.0.1", "Locations": [ { "StartLine": 21, "EndLine": 21 } ], "AnalyzedBy": "pip" }, { "Name": "sphinxcontrib-qthelp", "Identifier": { "PURL": "pkg:pypi/sphinxcontrib-qthelp@1.0.7", "UID": "fac5dcc8c6f1826f" }, "Version": "1.0.7", "Locations": [ { "StartLine": 22, "EndLine": 22 } ], "AnalyzedBy": "pip" }, { "Name": "sphinxcontrib-serializinghtml", "Identifier": { "PURL": "pkg:pypi/sphinxcontrib-serializinghtml@1.1.10", "UID": "fc709df7d946c97e" }, "Version": "1.1.10", "Locations": [ { "StartLine": 23, "EndLine": 23 } ], "AnalyzedBy": "pip" }, { "Name": "urllib3", "Identifier": { "PURL": "pkg:pypi/urllib3@2.2.1", "UID": "e354d3669279162c" }, "Version": "2.2.1", "Locations": [ { "StartLine": 24, "EndLine": 24 } ], "AnalyzedBy": "pip" }, { "Name": "wheel", "Identifier": { "PURL": "pkg:pypi/wheel@0.43.0", "UID": "1e880f31f9c4d8db" }, "Version": "0.43.0", "Locations": [ { "StartLine": 25, "EndLine": 25 } ], "AnalyzedBy": "pip" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2024-56201", "VendorIDs": [ "GHSA-gmj6-6f8f-6699" ], "PkgName": "Jinja2", "PkgIdentifier": { "PURL": "pkg:pypi/jinja2@3.1.4", "UID": "5996224f9408fd01" }, "InstalledVersion": "3.1.4", "FixedVersion": "3.1.5", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-56201", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:1ac1a651d93808c33af1f859f6719dfcfa3b5f278627f7cc443239134c9aba37", "Title": "jinja2: Jinja has a sandbox breakout through malicious filenames", "Description": "Jinja is an extensible templating engine. In versions on the 3.x branch prior to 3.1.5, a bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of if Jinja's sandbox is used. To exploit the vulnerability, an attacker needs to control both the filename and the contents of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates where the template author can also choose the template filename. This vulnerability is fixed in 3.1.5.", "Severity": "MEDIUM", "CweIDs": [ "CWE-150" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "cbl-mariner": 2, "ghsa": 2, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 5.4 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.3 } }, "References": [ "https://access.redhat.com/errata/RHSA-2025:0308", "https://access.redhat.com/security/cve/CVE-2024-56201", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56201", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56326", "https://errata.almalinux.org/9/ALSA-2025-0308.html", "https://errata.rockylinux.org/RLSA-2025:0308", "https://github.com/pallets/jinja", "https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f", "https://github.com/pallets/jinja/issues/1792", "https://github.com/pallets/jinja/releases/tag/3.1.5", "https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699", "https://linux.oracle.com/cve/CVE-2024-56201.html", "https://linux.oracle.com/errata/ELSA-2025-0308.html", "https://nvd.nist.gov/vuln/detail/CVE-2024-56201", "https://ubuntu.com/security/notices/USN-7244-1", "https://ubuntu.com/security/notices/USN-7343-1", "https://www.cve.org/CVERecord?id=CVE-2024-56201" ], "PublishedDate": "2024-12-23T16:15:07.41Z", "LastModifiedDate": "2025-09-22T17:45:28.71Z" }, { "VulnerabilityID": "CVE-2024-56326", "VendorIDs": [ "GHSA-q2x7-8rv6-6q7h" ], "PkgName": "Jinja2", "PkgIdentifier": { "PURL": "pkg:pypi/jinja2@3.1.4", "UID": "5996224f9408fd01" }, "InstalledVersion": "3.1.4", "FixedVersion": "3.1.5", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-56326", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:0d3d68ed7807d090a07bdbe22b16f8e64209b3a5cbc390412b1c3499f03e2a09", "Title": "jinja2: Jinja has a sandbox breakout through indirect reference to format method", "Description": "Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to str.format and ensures they don't escape the sandbox. However, it's possible to store a reference to a malicious string's format method, then pass that to a filter that calls it. No such filters are built-in to Jinja, but could be present through custom filters in an application. After the fix, such indirect calls are also handled by the sandbox. This vulnerability is fixed in 3.1.5.", "Severity": "MEDIUM", "CweIDs": [ "CWE-693", "CWE-1336" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "cbl-mariner": 2, "ghsa": 2, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 5.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H", "V3Score": 6.3 } }, "References": [ "https://access.redhat.com/errata/RHSA-2025:0711", "https://access.redhat.com/security/cve/CVE-2024-56326", "https://bugzilla.redhat.com/2333856", "https://bugzilla.redhat.com/show_bug.cgi?id=2333856", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56326", "https://errata.almalinux.org/8/ALSA-2025-0711.html", "https://errata.rockylinux.org/RLSA-2025:0667", "https://github.com/pallets/jinja", "https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4", "https://github.com/pallets/jinja/releases/tag/3.1.5", "https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h", "https://linux.oracle.com/cve/CVE-2024-56326.html", "https://linux.oracle.com/errata/ELSA-2025-1250.html", "https://lists.debian.org/debian-lts-announce/2025/04/msg00022.html", "https://nvd.nist.gov/vuln/detail/CVE-2024-56326", "https://ubuntu.com/security/notices/USN-7244-1", "https://ubuntu.com/security/notices/USN-7343-1", "https://www.cve.org/CVERecord?id=CVE-2024-56326" ], "PublishedDate": "2024-12-23T16:15:07.59Z", "LastModifiedDate": "2025-11-03T20:16:51.257Z" }, { "VulnerabilityID": "CVE-2025-27516", "VendorIDs": [ "GHSA-cpwx-vrp4-4pq7" ], "PkgName": "Jinja2", "PkgIdentifier": { "PURL": "pkg:pypi/jinja2@3.1.4", "UID": "5996224f9408fd01" }, "InstalledVersion": "3.1.4", "FixedVersion": "3.1.6", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-27516", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:657692a9cdadac8ab3b804f1241df02788b0018ba9ef96cb3be3e16be1f61ea3", "Title": "jinja2: Jinja sandbox breakout through attr filter selecting format method", "Description": "Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to str.format and ensures they don't escape the sandbox. However, it's possible to use the |attr filter to get a reference to a string's plain format method, bypassing the sandbox. After the fix, the |attr filter no longer bypasses the environment's attribute lookup. This vulnerability is fixed in 3.1.6.", "Severity": "MEDIUM", "CweIDs": [ "CWE-1336" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "cbl-mariner": 2, "ghsa": 2, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 5.4 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.3 } }, "References": [ "https://access.redhat.com/errata/RHSA-2025:3388", "https://access.redhat.com/security/cve/CVE-2025-27516", "https://bugzilla.redhat.com/2350190", "https://bugzilla.redhat.com/show_bug.cgi?id=2350190", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27516", "https://errata.almalinux.org/8/ALSA-2025-3388.html", "https://errata.rockylinux.org/RLSA-2025:3406", "https://github.com/pallets/jinja", "https://github.com/pallets/jinja/commit/90457bbf33b8662926ae65cdde4c4c32e756e403", "https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7", "https://linux.oracle.com/cve/CVE-2025-27516.html", "https://linux.oracle.com/errata/ELSA-2025-7476.html", "https://lists.debian.org/debian-lts-announce/2025/04/msg00022.html", "https://lists.debian.org/debian-lts-announce/2025/04/msg00045.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-27516", "https://ubuntu.com/security/notices/USN-7343-1", "https://www.cve.org/CVERecord?id=CVE-2025-27516" ], "PublishedDate": "2025-03-05T21:15:20.073Z", "LastModifiedDate": "2025-11-03T20:18:02.203Z" }, { "VulnerabilityID": "CVE-2026-4539", "VendorIDs": [ "GHSA-5239-wwwm-4pmq" ], "PkgName": "Pygments", "PkgIdentifier": { "PURL": "pkg:pypi/pygments@2.17.2", "UID": "89586ee7a6e89bbd" }, "InstalledVersion": "2.17.2", "FixedVersion": "2.20.0", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-4539", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:7d6a53195a0ef375329caafc1d262c99362db4401dc8e6283647ba66c1969421", "Title": "pygments: Pygments: Denial of Service via inefficient regular expression processing in AdlLexer", "Description": "A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.", "Severity": "LOW", "CweIDs": [ "CWE-400", "CWE-1333" ], "VendorSeverity": { "ghsa": 1, "photon": 1, "redhat": 1 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "V3Score": 3.3, "V40Score": 1.9 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "V3Score": 3.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-4539", "https://github.com/pygments/pygments", "https://github.com/pygments/pygments/", "https://github.com/pygments/pygments/commit/24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc", "https://github.com/pygments/pygments/issues/3058", "https://github.com/pygments/pygments/pull/3064", "https://github.com/pygments/pygments/releases/tag/2.20.0", "https://nvd.nist.gov/vuln/detail/CVE-2026-4539", "https://vuldb.com/?ctiid.352327", "https://vuldb.com/?id.352327", "https://vuldb.com/?submit.774685", "https://www.cve.org/CVERecord?id=CVE-2026-4539" ], "PublishedDate": "2026-03-22T06:16:20.913Z", "LastModifiedDate": "2026-04-29T01:00:01.613Z" }, { "VulnerabilityID": "CVE-2024-39689", "VendorIDs": [ "GHSA-248v-346w-9cwc" ], "PkgName": "certifi", "PkgIdentifier": { "PURL": "pkg:pypi/certifi@2024.2.2", "UID": "d0fd5d8bc94eaa6" }, "InstalledVersion": "2024.2.2", "FixedVersion": "2024.7.4", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-39689", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:84f3b5d2665fc374af0fc38163daf86d337fdfba876ce82a539191d5e4d02aa9", "Title": "python-certifi: Remove root certificates from `GLOBALTRUST` from the root store", "Description": "Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store. `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified \"long-running and unresolved compliance issues.\"", "Severity": "LOW", "CweIDs": [ "CWE-345" ], "VendorSeverity": { "amazon": 1, "ghsa": 1, "nvd": 3, "photon": 3, "redhat": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "V3Score": 3.7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2024-39689", "https://github.com/certifi/python-certifi", "https://github.com/certifi/python-certifi/commit/bd8153872e9c6fc98f4023df9c2deaffea2fa463", "https://github.com/certifi/python-certifi/security/advisories/GHSA-248v-346w-9cwc", "https://github.com/pypa/advisory-database/tree/main/vulns/certifi/PYSEC-2024-230.yaml", "https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/XpknYMPO8dI", "https://nvd.nist.gov/vuln/detail/CVE-2024-39689", "https://security.netapp.com/advisory/ntap-20241206-0001", "https://security.netapp.com/advisory/ntap-20241206-0001/", "https://www.cve.org/CVERecord?id=CVE-2024-39689" ], "PublishedDate": "2024-07-05T19:15:10.247Z", "LastModifiedDate": "2025-02-15T00:15:13.183Z" }, { "VulnerabilityID": "CVE-2026-45409", "VendorIDs": [ "GHSA-65pc-fj4g-8rjx" ], "PkgName": "idna", "PkgIdentifier": { "PURL": "pkg:pypi/idna@3.7", "UID": "ea4f389a3cee003a" }, "InstalledVersion": "3.7", "FixedVersion": "3.15", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-45409", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:0ab8d4f627dad359641bfaabe62ce0174058f6681481ab3e0267489a93665e90", "Title": "Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix", "Description": "This is the same issue as CVE-2024-3651, however the original remediation in 2024 was not a complete fix. Payloads such as `\"\\u0660\" * N` or `\"\\u30fb\" * N + \"\\u6f22\"` utilize the `valid_contexto` function prior to length rejection, and for high values of `N` will take a long time to process.\n\n### Impact\nA specially crafted argument to the `idna.encode()` function could consume significant resources. This may lead to a denial-of-service.\n\n### Patches\nStarting in version 3.14, the function rejects long inputs as soon as practicable prior to any further processing to minimize resource consumption. In version 3.15, this approach was extended to lesser used alternate functions (i.e. per-label conversions and codec support).\n\n### Workarounds\nDomain names cannot exceed 253 characters in length, if this length limit is enforced prior to passing the domain to the `idna.encode()` function it should no longer consume significant resources. This is triggered by arbitrarily large inputs that would not occur in normal usage, but may be passed to the library assuming there is no preliminary input validation by the higher-level application.", "Severity": "MEDIUM", "VendorSeverity": { "ghsa": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "V40Score": 6.9 } }, "References": [ "https://github.com/kjd/idna", "https://github.com/kjd/idna/security/advisories/GHSA-65pc-fj4g-8rjx" ] }, { "VulnerabilityID": "CVE-2024-35195", "VendorIDs": [ "GHSA-9wx4-h78v-vm56" ], "PkgName": "requests", "PkgIdentifier": { "PURL": "pkg:pypi/requests@2.31.0", "UID": "47a87e7d2a72bc89" }, "InstalledVersion": "2.31.0", "FixedVersion": "2.32.0", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-35195", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:9ff9a8be7dee5c7406631b0faa0d30e6fa0b9634af402559aba023bd2fb88a4a", "Title": "requests: subsequent requests to the same host ignore cert verification", "Description": "Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0.", "Severity": "MEDIUM", "CweIDs": [ "CWE-670" ], "VendorSeverity": { "alma": 2, "amazon": 2, "azure": 2, "cbl-mariner": 2, "ghsa": 2, "oracle-oval": 2, "photon": 2, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N", "V3Score": 5.6 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N", "V3Score": 5.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2025:0012", "https://access.redhat.com/security/cve/CVE-2024-35195", "https://bugzilla.redhat.com/2282114", "https://bugzilla.redhat.com/show_bug.cgi?id=2282114", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35195", "https://errata.almalinux.org/8/ALSA-2025-0012.html", "https://errata.rockylinux.org/RLSA-2025:7049", "https://github.com/psf/requests", "https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac", "https://github.com/psf/requests/pull/6655", "https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56", "https://linux.oracle.com/cve/CVE-2024-35195.html", "https://linux.oracle.com/errata/ELSA-2025-7049.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ/", "https://nvd.nist.gov/vuln/detail/CVE-2024-35195", "https://ubuntu.com/security/notices/USN-8344-1", "https://www.cve.org/CVERecord?id=CVE-2024-35195" ], "PublishedDate": "2024-05-20T21:15:09.99Z", "LastModifiedDate": "2026-04-15T00:35:42.02Z" }, { "VulnerabilityID": "CVE-2024-47081", "VendorIDs": [ "GHSA-9hjg-9r4m-mvj7" ], "PkgName": "requests", "PkgIdentifier": { "PURL": "pkg:pypi/requests@2.31.0", "UID": "47a87e7d2a72bc89" }, "InstalledVersion": "2.31.0", "FixedVersion": "2.32.4", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-47081", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:41345e410ddcd9ab0d7743c42a570ccc752dc627829bb6b22c158a9cba75f0fe", "Title": "requests: Requests vulnerable to .netrc credentials leak via malicious URLs", "Description": "Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.", "Severity": "MEDIUM", "CweIDs": [ "CWE-522" ], "VendorSeverity": { "alma": 2, "amazon": 2, "azure": 2, "cbl-mariner": 2, "ghsa": 2, "oracle-oval": 2, "photon": 2, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "V3Score": 5.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "V3Score": 5.3 } }, "References": [ "http://seclists.org/fulldisclosure/2025/Jun/2", "http://www.openwall.com/lists/oss-security/2025/06/03/11", "http://www.openwall.com/lists/oss-security/2025/06/03/9", "http://www.openwall.com/lists/oss-security/2025/06/04/1", "http://www.openwall.com/lists/oss-security/2025/06/04/6", "https://access.redhat.com/errata/RHSA-2025:14999", "https://access.redhat.com/security/cve/CVE-2024-47081", "https://bugzilla.redhat.com/2371272", "https://bugzilla.redhat.com/show_bug.cgi?id=2371272", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47081", "https://errata.almalinux.org/8/ALSA-2025-14999.html", "https://errata.rockylinux.org/RLSA-2025:12519", "https://github.com/psf/requests", "https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef", "https://github.com/psf/requests/pull/6965", "https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7", "https://linux.oracle.com/cve/CVE-2024-47081.html", "https://linux.oracle.com/errata/ELSA-2025-14999.html", "https://nvd.nist.gov/vuln/detail/CVE-2024-47081", "https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env", "https://seclists.org/fulldisclosure/2025/Jun/2", "https://ubuntu.com/security/notices/USN-7568-1", "https://ubuntu.com/security/notices/USN-7762-1", "https://www.cve.org/CVERecord?id=CVE-2024-47081", "https://www.openwall.com/lists/oss-security/2025/06/03/9" ], "PublishedDate": "2025-06-09T18:15:24.983Z", "LastModifiedDate": "2026-04-15T00:35:42.02Z" }, { "VulnerabilityID": "CVE-2026-25645", "VendorIDs": [ "GHSA-gc5v-m9x4-r6x2" ], "PkgName": "requests", "PkgIdentifier": { "PURL": "pkg:pypi/requests@2.31.0", "UID": "47a87e7d2a72bc89" }, "InstalledVersion": "2.31.0", "FixedVersion": "2.33.0", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-25645", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:fffc853c982d325ecbfd93c68afeef5dcddf9736344a34bbd7eecc774b394d9b", "Title": "requests: Requests: Security bypass due to predictable temporary file creation", "Description": "Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is reused without validation. A local attacker with write access to the temp directory could pre-create a malicious file that would be loaded in place of the legitimate one. Standard usage of the Requests library is not affected by this vulnerability. Only applications that call `extract_zipped_paths()` directly are impacted. Starting in version 2.33.0, the library extracts files to a non-deterministic location. If developers are unable to upgrade, they can set `TMPDIR` in their environment to a directory with restricted write access.", "Severity": "MEDIUM", "CweIDs": [ "CWE-377" ], "VendorSeverity": { "azure": 2, "ghsa": 2, "nvd": 2, "photon": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N", "V3Score": 4.4 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "V3Score": 5.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", "V3Score": 4.7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-25645", "https://github.com/psf/requests", "https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7", "https://github.com/psf/requests/releases/tag/v2.33.0", "https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2", "https://nvd.nist.gov/vuln/detail/CVE-2026-25645", "https://www.cve.org/CVERecord?id=CVE-2026-25645" ], "PublishedDate": "2026-03-25T17:16:52.97Z", "LastModifiedDate": "2026-03-30T14:23:16.127Z" }, { "VulnerabilityID": "CVE-2024-6345", "VendorIDs": [ "GHSA-cx63-2mw6-8hw5" ], "PkgName": "setuptools", "PkgIdentifier": { "PURL": "pkg:pypi/setuptools@69.2.0", "UID": "1b5827c64ba6b813" }, "InstalledVersion": "69.2.0", "FixedVersion": "70.0.0", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-6345", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:f3eac0a907e0a464e73416b5919ff6e2f40359727662f8c27916b41813776f6e", "Title": "pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools", "Description": "A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.", "Severity": "HIGH", "CweIDs": [ "CWE-94" ], "VendorSeverity": { "alma": 2, "amazon": 3, "azure": 3, "bitnami": 3, "cbl-mariner": 3, "ghsa": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2024:6311", "https://access.redhat.com/security/cve/CVE-2024-6345", "https://bugzilla.redhat.com/2292788", "https://bugzilla.redhat.com/2297771", "https://bugzilla.redhat.com/show_bug.cgi?id=2297771", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6345", "https://errata.almalinux.org/8/ALSA-2024-6311.html", "https://errata.rockylinux.org/RLSA-2024:6726", "https://github.com/advisories/GHSA-cx63-2mw6-8hw5", "https://github.com/pypa/setuptools", "https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0", "https://github.com/pypa/setuptools/pull/4332", "https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5", "https://linux.oracle.com/cve/CVE-2024-6345.html", "https://linux.oracle.com/errata/ELSA-2024-6726.html", "https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html", "https://nvd.nist.gov/vuln/detail/CVE-2024-6345", "https://ubuntu.com/security/notices/USN-7002-1", "https://www.cve.org/CVERecord?id=CVE-2024-6345" ], "PublishedDate": "2024-07-15T01:15:01.73Z", "LastModifiedDate": "2026-04-15T00:35:42.02Z" }, { "VulnerabilityID": "CVE-2025-47273", "VendorIDs": [ "GHSA-5rjg-fvgr-3xxf" ], "PkgName": "setuptools", "PkgIdentifier": { "PURL": "pkg:pypi/setuptools@69.2.0", "UID": "1b5827c64ba6b813" }, "InstalledVersion": "69.2.0", "FixedVersion": "78.1.1", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-47273", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:51fd64929e4f83d89176a5a97aa11905625f4b7e85b53e7ac5c664eba594c6a8", "Title": "setuptools: Path Traversal Vulnerability in setuptools PackageIndex", "Description": "setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to remote code execution depending on the context. Version 78.1.1 fixes the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "alma": 2, "amazon": 3, "azure": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P", "V40Score": 7.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P", "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2025:14900", "https://access.redhat.com/security/cve/CVE-2025-47273", "https://bugzilla.redhat.com/2366982", "https://bugzilla.redhat.com/2384043", "https://bugzilla.redhat.com/show_bug.cgi?id=2366982", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47273", "https://errata.almalinux.org/8/ALSA-2025-14900.html", "https://errata.rockylinux.org/RLSA-2025:10407", "https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml", "https://github.com/pypa/setuptools", "https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88", "https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b", "https://github.com/pypa/setuptools/issues/4946", "https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf", "https://linux.oracle.com/cve/CVE-2025-47273.html", "https://linux.oracle.com/errata/ELSA-2025-9940.html", "https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-47273", "https://ubuntu.com/security/notices/USN-7544-1", "https://ubuntu.com/security/notices/USN-8010-1", "https://www.cve.org/CVERecord?id=CVE-2025-47273" ], "PublishedDate": "2025-05-17T16:15:19.11Z", "LastModifiedDate": "2025-06-12T16:29:01.66Z" }, { "VulnerabilityID": "CVE-2025-66418", "VendorIDs": [ "GHSA-gm62-xv2j-4w53" ], "PkgName": "urllib3", "PkgIdentifier": { "PURL": "pkg:pypi/urllib3@2.2.1", "UID": "e354d3669279162c" }, "InstalledVersion": "2.2.1", "FixedVersion": "2.6.0", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-66418", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:3c69962f17c0e668acb2ac5d6a0bc54a33cb8ba55724be268c7ab32190d2e85e", "Title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion", "Description": "urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. This vulnerability is fixed in 2.6.0.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "cbl-mariner": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H", "V40Score": 8.9 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:1254", "https://access.redhat.com/security/cve/CVE-2025-66418", "https://bugzilla.redhat.com/2419455", "https://bugzilla.redhat.com/2419467", "https://bugzilla.redhat.com/2427726", "https://bugzilla.redhat.com/show_bug.cgi?id=2419455", "https://bugzilla.redhat.com/show_bug.cgi?id=2419467", "https://bugzilla.redhat.com/show_bug.cgi?id=2427726", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66418", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66471", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21441", "https://errata.almalinux.org/8/ALSA-2026-1254.html", "https://errata.rockylinux.org/RLSA-2026:1087", "https://github.com/urllib3/urllib3", "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8", "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53", "https://linux.oracle.com/cve/CVE-2025-66418.html", "https://linux.oracle.com/errata/ELSA-2026-1254.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-66418", "https://ubuntu.com/security/notices/USN-7927-1", "https://ubuntu.com/security/notices/USN-8010-1", "https://ubuntu.com/security/notices/USN-8344-1", "https://www.cve.org/CVERecord?id=CVE-2025-66418", "https://www.openwall.com/lists/oss-security/2025/12/05/4" ], "PublishedDate": "2025-12-05T16:15:51.053Z", "LastModifiedDate": "2025-12-10T16:08:32.193Z" }, { "VulnerabilityID": "CVE-2025-66471", "VendorIDs": [ "GHSA-2xpw-w6gg-jr37" ], "PkgName": "urllib3", "PkgIdentifier": { "PURL": "pkg:pypi/urllib3@2.2.1", "UID": "e354d3669279162c" }, "InstalledVersion": "2.2.1", "FixedVersion": "2.6.0", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-66471", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:55c30f718054eefbf47a591141ee29ce07240e41ee041efb71866ab9d1bf65c9", "Title": "urllib3: urllib3 Streaming API improperly handles highly compressed data", "Description": "urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data.", "Severity": "HIGH", "CweIDs": [ "CWE-409" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "cbl-mariner": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H", "V40Score": 8.9 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:1254", "https://access.redhat.com/security/cve/CVE-2025-66471", "https://bugzilla.redhat.com/2419455", "https://bugzilla.redhat.com/2419467", "https://bugzilla.redhat.com/2427726", "https://bugzilla.redhat.com/show_bug.cgi?id=2419455", "https://bugzilla.redhat.com/show_bug.cgi?id=2419467", "https://bugzilla.redhat.com/show_bug.cgi?id=2427726", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66418", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66471", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21441", "https://errata.almalinux.org/8/ALSA-2026-1254.html", "https://errata.rockylinux.org/RLSA-2026:1087", "https://github.com/urllib3/urllib3", "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7", "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37", "https://linux.oracle.com/cve/CVE-2025-66471.html", "https://linux.oracle.com/errata/ELSA-2026-1254.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-66471", "https://ubuntu.com/security/notices/USN-7927-1", "https://ubuntu.com/security/notices/USN-7927-2", "https://ubuntu.com/security/notices/USN-7927-3", "https://ubuntu.com/security/notices/USN-8344-1", "https://ubuntu.com/security/notices/USN-8344-2", "https://www.cve.org/CVERecord?id=CVE-2025-66471", "https://www.openwall.com/lists/oss-security/2025/12/05/4" ], "PublishedDate": "2025-12-05T17:16:04.4Z", "LastModifiedDate": "2025-12-10T16:10:33.5Z" }, { "VulnerabilityID": "CVE-2026-21441", "VendorIDs": [ "GHSA-38jv-5279-wg99" ], "PkgName": "urllib3", "PkgIdentifier": { "PURL": "pkg:pypi/urllib3@2.2.1", "UID": "e354d3669279162c" }, "InstalledVersion": "2.2.1", "FixedVersion": "2.6.3", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-21441", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:4c63132b297b67c284c9070189a91f25a851b60eff3bb2a1a5dc2591b8da8ee7", "Title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)", "Description": "urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.", "Severity": "HIGH", "CweIDs": [ "CWE-409" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "cbl-mariner": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H", "V3Score": 7.5, "V40Score": 8.9 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:1254", "https://access.redhat.com/security/cve/CVE-2026-21441", "https://bugzilla.redhat.com/2419455", "https://bugzilla.redhat.com/2419467", "https://bugzilla.redhat.com/2427726", "https://bugzilla.redhat.com/show_bug.cgi?id=2419455", "https://bugzilla.redhat.com/show_bug.cgi?id=2419467", "https://bugzilla.redhat.com/show_bug.cgi?id=2427726", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66418", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66471", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21441", "https://errata.almalinux.org/8/ALSA-2026-1254.html", "https://errata.rockylinux.org/RLSA-2026:1087", "https://github.com/urllib3/urllib3", "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b", "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99", "https://linux.oracle.com/cve/CVE-2026-21441.html", "https://linux.oracle.com/errata/ELSA-2026-1254.html", "https://lists.debian.org/debian-lts-announce/2026/01/msg00017.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-21441", "https://ubuntu.com/security/notices/USN-7955-1", "https://ubuntu.com/security/notices/USN-7955-2", "https://ubuntu.com/security/notices/USN-8010-1", "https://www.cve.org/CVERecord?id=CVE-2026-21441" ], "PublishedDate": "2026-01-07T22:15:44.04Z", "LastModifiedDate": "2026-01-23T09:15:47.823Z" }, { "VulnerabilityID": "CVE-2026-44431", "VendorIDs": [ "GHSA-qccp-gfcp-xxvc" ], "PkgName": "urllib3", "PkgIdentifier": { "PURL": "pkg:pypi/urllib3@2.2.1", "UID": "e354d3669279162c" }, "InstalledVersion": "2.2.1", "FixedVersion": "2.7.0", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44431", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:92e227f7c051180a33e7734e7118b1455fe29e36e531c737d93a93679c075e95", "Title": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers", "Description": "urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.", "Severity": "HIGH", "CweIDs": [ "CWE-200" ], "VendorSeverity": { "azure": 3, "ghsa": 3, "nvd": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V3Score": 5.3, "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "V3Score": 5.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-44431", "https://github.com/urllib3/urllib3", "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc", "https://nvd.nist.gov/vuln/detail/CVE-2026-44431", "https://www.cve.org/CVERecord?id=CVE-2026-44431" ], "PublishedDate": "2026-05-13T16:16:57.15Z", "LastModifiedDate": "2026-05-14T13:56:27.263Z" }, { "VulnerabilityID": "CVE-2024-37891", "VendorIDs": [ "GHSA-34jh-p97f-mpxf" ], "PkgName": "urllib3", "PkgIdentifier": { "PURL": "pkg:pypi/urllib3@2.2.1", "UID": "e354d3669279162c" }, "InstalledVersion": "2.2.1", "FixedVersion": "1.26.19, 2.2.2", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-37891", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:eda02ccaa7ec4edaf2960ef0375916909902d99d92ca87053a05f29e7a5880e4", "Title": "urllib3: proxy-authorization request header is not stripped during cross-origin redirects", "Description": " urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only sent to the configured proxy, as expected. However, when sending HTTP requests *without* using urllib3's proxy support, it's possible to accidentally configure the `Proxy-Authorization` header even though it won't have any effect as the request is not using a forwarding proxy or a tunneling proxy. In those cases, urllib3 doesn't treat the `Proxy-Authorization` HTTP header as one carrying authentication material and thus doesn't strip the header on cross-origin redirects. Because this is a highly unlikely scenario, we believe the severity of this vulnerability is low for almost all users. Out of an abundance of caution urllib3 will automatically strip the `Proxy-Authorization` header during cross-origin redirects to avoid the small chance that users are doing this on accident. Users should use urllib3's proxy support or disable automatic redirects to achieve safe processing of the `Proxy-Authorization` header, but we still decided to strip the header by default in order to further protect users who aren't using the correct approach. We believe the number of usages affected by this advisory is low. It requires all of the following to be true to be exploited: 1. Setting the `Proxy-Authorization` header without using urllib3's built-in proxy support. 2. Not disabling HTTP redirects. 3. Either not using an HTTPS origin server or for the proxy or target origin to redirect to a malicious origin. Users are advised to update to either version 1.26.19 or version 2.2.2. Users unable to upgrade may use the `Proxy-Authorization` header with urllib3's `ProxyManager`, disable HTTP redirects using `redirects=False` when sending requests, or not user the `Proxy-Authorization` header as mitigations.", "Severity": "MEDIUM", "CweIDs": [ "CWE-669" ], "VendorSeverity": { "alma": 2, "amazon": 2, "azure": 2, "cbl-mariner": 2, "ghsa": 2, "nvd": 2, "oracle-oval": 2, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N", "V3Score": 4.4 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "V3Score": 6.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N", "V3Score": 4.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2024:8843", "https://access.redhat.com/security/cve/CVE-2024-37891", "https://bugzilla.redhat.com/2292788", "https://bugzilla.redhat.com/show_bug.cgi?id=2292788", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37891", "https://errata.almalinux.org/8/ALSA-2024-8843.html", "https://errata.rockylinux.org/RLSA-2024:9457", "https://github.com/urllib3/urllib3", "https://github.com/urllib3/urllib3/commit/40b6d1605814dd1db0a46e202d6e56f2e4c9a468", "https://github.com/urllib3/urllib3/commit/accff72ecc2f6cf5a76d9570198a93ac7c90270e", "https://github.com/urllib3/urllib3/security/advisories/GHSA-34jh-p97f-mpxf", "https://linux.oracle.com/cve/CVE-2024-37891.html", "https://linux.oracle.com/errata/ELSA-2024-9458.html", "https://lists.debian.org/debian-lts-announce/2024/12/msg00020.html", "https://nvd.nist.gov/vuln/detail/CVE-2024-37891", "https://security.netapp.com/advisory/ntap-20240822-0003", "https://security.netapp.com/advisory/ntap-20240822-0003/", "https://ubuntu.com/security/notices/USN-7084-1", "https://ubuntu.com/security/notices/USN-7084-2", "https://www.cve.org/CVERecord?id=CVE-2024-37891", "https://www.vicarius.io/vsociety/posts/proxy-authorization-header-handling-vulnerability-in-urllib3-cve-2024-37891" ], "PublishedDate": "2024-06-17T20:15:13.45Z", "LastModifiedDate": "2026-01-06T16:52:28.583Z" }, { "VulnerabilityID": "CVE-2025-50181", "VendorIDs": [ "GHSA-pq67-6m6q-mj2v" ], "PkgName": "urllib3", "PkgIdentifier": { "PURL": "pkg:pypi/urllib3@2.2.1", "UID": "e354d3669279162c" }, "InstalledVersion": "2.2.1", "FixedVersion": "2.5.0", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-50181", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:5c02989bcf9f0680a66514c21ec90036960204cf231c9a7d6f583b35e3b6a14f", "Title": "urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation", "Description": "urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects. By default, requests and botocore users are not affected. An application attempting to mitigate SSRF or open redirect vulnerabilities by disabling redirects at the PoolManager level will remain vulnerable. This issue has been patched in version 2.5.0.", "Severity": "MEDIUM", "CweIDs": [ "CWE-601" ], "VendorSeverity": { "amazon": 2, "azure": 2, "cbl-mariner": 2, "ghsa": 2, "nvd": 2, "photon": 2, "redhat": 2, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "V3Score": 5.3 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "V3Score": 6.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-50181", "https://github.com/urllib3/urllib3", "https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857", "https://github.com/urllib3/urllib3/releases/tag/2.5.0", "https://github.com/urllib3/urllib3/security/advisories/GHSA-pq67-6m6q-mj2v", "https://nvd.nist.gov/vuln/detail/CVE-2025-50181", "https://ubuntu.com/security/notices/USN-7599-1", "https://ubuntu.com/security/notices/USN-7599-2", "https://www.cve.org/CVERecord?id=CVE-2025-50181" ], "PublishedDate": "2025-06-19T01:15:24.453Z", "LastModifiedDate": "2025-12-22T19:15:49.04Z" }, { "VulnerabilityID": "CVE-2025-50182", "VendorIDs": [ "GHSA-48p4-8xcf-vxj5" ], "PkgName": "urllib3", "PkgIdentifier": { "PURL": "pkg:pypi/urllib3@2.2.1", "UID": "e354d3669279162c" }, "InstalledVersion": "2.2.1", "FixedVersion": "2.5.0", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-50182", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:7c6e0906ee3f3e18439180e0bbeaf55a6d072f919d0c79de41a2e0eeb96bc39b", "Title": "urllib3: urllib3 does not control redirects in browsers and Node.js", "Description": "urllib3 is a user-friendly HTTP client library for Python. Starting in version 2.2.0 and prior to 2.5.0, urllib3 does not control redirects in browsers and Node.js. urllib3 supports being used in a Pyodide runtime utilizing the JavaScript Fetch API or falling back on XMLHttpRequest. This means Python libraries can be used to make HTTP requests from a browser or Node.js. Additionally, urllib3 provides a mechanism to control redirects, but the retries and redirect parameters are ignored with Pyodide; the runtime itself determines redirect behavior. This issue has been patched in version 2.5.0.", "Severity": "MEDIUM", "CweIDs": [ "CWE-601" ], "VendorSeverity": { "ghsa": 2, "nvd": 2, "redhat": 2, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "V3Score": 5.3 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "V3Score": 6.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-50182", "https://github.com/urllib3/urllib3", "https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f", "https://github.com/urllib3/urllib3/releases/tag/2.5.0", "https://github.com/urllib3/urllib3/security/advisories/GHSA-48p4-8xcf-vxj5", "https://nvd.nist.gov/vuln/detail/CVE-2025-50182", "https://ubuntu.com/security/notices/USN-7599-1", "https://www.cve.org/CVERecord?id=CVE-2025-50182" ], "PublishedDate": "2025-06-19T02:15:17.967Z", "LastModifiedDate": "2025-12-22T19:15:49.177Z" }, { "VulnerabilityID": "CVE-2026-24049", "VendorIDs": [ "GHSA-8rrh-rw8j-w5fx" ], "PkgName": "wheel", "PkgIdentifier": { "PURL": "pkg:pypi/wheel@0.43.0", "UID": "1e880f31f9c4d8db" }, "InstalledVersion": "0.43.0", "FixedVersion": "0.46.2", "Status": "fixed", "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-24049", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:69a3ef0f96c224ee4907f9d60d0a0035df71dafc9d5a97b3985f276794e6e4fd", "Title": "wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking", "Description": "wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation, even though the extraction process itself might have sanitized the path. Attackers can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files (e.g., /etc/passwd, SSH keys, config files), allowing for Privilege Escalation or arbitrary code execution by modifying now-writable scripts. This issue has been fixed in version 0.46.2.", "Severity": "HIGH", "CweIDs": [ "CWE-22", "CWE-732" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "cbl-mariner": 2, "ghsa": 3, "nvd": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "V3Score": 7.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "V3Score": 5.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:2090", "https://access.redhat.com/security/cve/CVE-2026-24049", "https://bugzilla.redhat.com/2431959", "https://bugzilla.redhat.com/show_bug.cgi?id=2431959", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24049", "https://errata.almalinux.org/8/ALSA-2026-2090.html", "https://errata.rockylinux.org/RLSA-2026:1939", "https://github.com/pypa/wheel", "https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef", "https://github.com/pypa/wheel/commit/934fe177ff912c8e03d5ae951d3805e1fd90ba5e", "https://github.com/pypa/wheel/releases/tag/0.46.2", "https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx", "https://linux.oracle.com/cve/CVE-2026-24049.html", "https://linux.oracle.com/errata/ELSA-2026-2090.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-24049", "https://ubuntu.com/security/notices/USN-8221-1", "https://www.cve.org/CVERecord?id=CVE-2026-24049" ], "PublishedDate": "2026-01-22T05:16:23.157Z", "LastModifiedDate": "2026-02-18T14:56:48.657Z" } ] }, { "Target": ".env", "Class": "secret", "Secrets": [ { "RuleID": "gitlab-pat", "Category": "GitLab", "Severity": "CRITICAL", "Title": "GitLab Personal Access Token", "StartLine": 75, "EndLine": 75, "Code": { "Lines": [ { "Number": 73, "Content": "", "IsCause": false, "Annotation": "", "Truncated": false, "FirstCause": false, "LastCause": false }, { "Number": 74, "Content": "GITLAB_URL=https://git.steps.tw", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "GITLAB_URL=https://git.steps.tw", "FirstCause": false, "LastCause": false }, { "Number": 75, "Content": "GITLAB_TOKEN=**************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "GITLAB_TOKEN=**************************", "FirstCause": true, "LastCause": true }, { "Number": 76, "Content": "", "IsCause": false, "Annotation": "", "Truncated": false, "FirstCause": false, "LastCause": false } ] }, "Match": "GITLAB_TOKEN=**************************", "Offset": 1733 } ] }, { "Target": "storage/app/google-service.json", "Class": "secret", "Secrets": [ { "RuleID": "gcp-service-account", "Category": "Google", "Severity": "CRITICAL", "Title": "Google (GCP) Service-account", "StartLine": 2, "EndLine": 2, "Code": { "Lines": [ { "Number": 1, "Content": "{", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "{", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": " *************************,", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": " *************************,", "FirstCause": true, "LastCause": true }, { "Number": 3, "Content": " \"project_id\": \"apphwh-f80e4\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"apphwh-f80e4\",", "FirstCause": false, "LastCause": false } ] }, "Match": " *************************,", "Offset": 4 }, { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 5, "EndLine": 5, "Code": { "Lines": [ { "Number": 3, "Content": " \"project_id\": \"apphwh-f80e4\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"apphwh-f80e4\",", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": " \"private_key_id\": \"5a96874b84c630009be15c1e4ec3481033cb9582\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"private_key_id\": \"5a96874b84c630009be15c1e4ec3481033cb9582\",", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": ": \"-----BEGIN PRIVATE KEY-----**************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": ": \"-----BEGIN PRIVATE KEY-----**************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "FirstCause": true, "LastCause": true }, { "Number": 6, "Content": " \"client_email\": \"hwhapp@apphwh-f80e4.iam.gserviceaccount.com\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"client_email\": \"hwhapp@apphwh-f80e4.iam.gserviceaccount.com\",", "FirstCause": false, "LastCause": false } ] }, "Match": ": \"-----BEGIN PRIVATE KEY-----**************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "Offset": 172 } ] }, { "Target": "storage/app/public/projects/107/docs/1863_ntua-app-firebase-adminsdk-8d87j-60293aae67.json", "Class": "secret", "Secrets": [ { "RuleID": "gcp-service-account", "Category": "Google", "Severity": "CRITICAL", "Title": "Google (GCP) Service-account", "StartLine": 2, "EndLine": 2, "Code": { "Lines": [ { "Number": 1, "Content": "{", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "{", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": " *************************,", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": " *************************,", "FirstCause": true, "LastCause": true }, { "Number": 3, "Content": " \"project_id\": \"ntua-app\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"ntua-app\",", "FirstCause": false, "LastCause": false } ] }, "Match": " *************************,", "Offset": 4 }, { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 5, "EndLine": 5, "Code": { "Lines": [ { "Number": 3, "Content": " \"project_id\": \"ntua-app\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"ntua-app\",", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": " \"private_key_id\": \"60293aae676d5a1936d83aa64a1f4614b8a61cc4\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"private_key_id\": \"60293aae676d5a1936d83aa64a1f4614b8a61cc4\",", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "FirstCause": true, "LastCause": true }, { "Number": 6, "Content": " \"client_email\": \"firebase-adminsdk-8d87j@ntua-app.iam.gserviceaccount.com\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"client_email\": \"firebase-adminsdk-8d87j@ntua-app.iam.gserviceaccount.com\",", "FirstCause": false, "LastCause": false } ] }, "Match": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "Offset": 168 } ] }, { "Target": "storage/app/public/projects/109/docs/1864_nfuapp-firebase-adminsdk-yq58a-d14bc39fef.json", "Class": "secret", "Secrets": [ { "RuleID": "gcp-service-account", "Category": "Google", "Severity": "CRITICAL", "Title": "Google (GCP) Service-account", "StartLine": 2, "EndLine": 2, "Code": { "Lines": [ { "Number": 1, "Content": "{", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "{", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": " *************************,", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": " *************************,", "FirstCause": true, "LastCause": true }, { "Number": 3, "Content": " \"project_id\": \"nfuapp\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"nfuapp\",", "FirstCause": false, "LastCause": false } ] }, "Match": " *************************,", "Offset": 4 }, { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 5, "EndLine": 5, "Code": { "Lines": [ { "Number": 3, "Content": " \"project_id\": \"nfuapp\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"nfuapp\",", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": " \"private_key_id\": \"d14bc39fefea504bfaf8675a7ab2679c1f199dd9\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"private_key_id\": \"d14bc39fefea504bfaf8675a7ab2679c1f199dd9\",", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "FirstCause": true, "LastCause": true }, { "Number": 6, "Content": " \"client_email\": \"firebase-adminsdk-yq58a@nfuapp.iam.gserviceaccount.com\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"client_email\": \"firebase-adminsdk-yq58a@nfuapp.iam.gserviceaccount.com\",", "FirstCause": false, "LastCause": false } ] }, "Match": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "Offset": 166 } ] }, { "Target": "storage/app/public/projects/127/docs/1876_building-security-233e5-firebase-adminsdk-mes3l-62ccbf18fb.json", "Class": "secret", "Secrets": [ { "RuleID": "gcp-service-account", "Category": "Google", "Severity": "CRITICAL", "Title": "Google (GCP) Service-account", "StartLine": 2, "EndLine": 2, "Code": { "Lines": [ { "Number": 1, "Content": "{", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "{", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": " *************************,", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": " *************************,", "FirstCause": true, "LastCause": true }, { "Number": 3, "Content": " \"project_id\": \"building-security-233e5\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"building-security-233e5\",", "FirstCause": false, "LastCause": false } ] }, "Match": " *************************,", "Offset": 4 }, { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 5, "EndLine": 5, "Code": { "Lines": [ { "Number": 3, "Content": " \"project_id\": \"building-security-233e5\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"building-security-233e5\",", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": " \"private_key_id\": \"62ccbf18fb2d50a66ee42f12cf9ce301d82f6729\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"private_key_id\": \"62ccbf18fb2d50a66ee42f12cf9ce301d82f6729\",", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "FirstCause": true, "LastCause": true }, { "Number": 6, "Content": " \"client_email\": \"firebase-adminsdk-mes3l@building-security-233e5.iam.gserviceaccount.com\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"client_email\": \"firebase-adminsdk-mes3l@building-security-233e5.iam.gserviceaccount.com\",", "FirstCause": false, "LastCause": false } ] }, "Match": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "Offset": 183 } ] }, { "Target": "storage/app/public/projects/173/docs/1872_hkapp-df6f3-firebase-adminsdk-8an6i-4d6b039a05.json", "Class": "secret", "Secrets": [ { "RuleID": "gcp-service-account", "Category": "Google", "Severity": "CRITICAL", "Title": "Google (GCP) Service-account", "StartLine": 2, "EndLine": 2, "Code": { "Lines": [ { "Number": 1, "Content": "{", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "{", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": " *************************,", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": " *************************,", "FirstCause": true, "LastCause": true }, { "Number": 3, "Content": " \"project_id\": \"hkapp-df6f3\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"hkapp-df6f3\",", "FirstCause": false, "LastCause": false } ] }, "Match": " *************************,", "Offset": 4 }, { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 5, "EndLine": 5, "Code": { "Lines": [ { "Number": 3, "Content": " \"project_id\": \"hkapp-df6f3\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"hkapp-df6f3\",", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": " \"private_key_id\": \"4d6b039a0538ba1962499b12ae70c1821e72cb47\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"private_key_id\": \"4d6b039a0538ba1962499b12ae70c1821e72cb47\",", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "FirstCause": true, "LastCause": true }, { "Number": 6, "Content": " \"client_email\": \"firebase-adminsdk-8an6i@hkapp-df6f3.iam.gserviceaccount.com\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"client_email\": \"firebase-adminsdk-8an6i@hkapp-df6f3.iam.gserviceaccount.com\",", "FirstCause": false, "LastCause": false } ] }, "Match": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "Offset": 171 } ] }, { "Target": "storage/app/public/projects/173/docs/1884_AuthKey_HHGK68M5JZ.p8", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 5, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "********", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "********", "FirstCause": false, "LastCause": true }, { "Number": 6, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/public/projects/173/docs/1889_hkapp-df6f3-firebase-adminsdk-8an6i-4d6b039a05.json", "Class": "secret", "Secrets": [ { "RuleID": "gcp-service-account", "Category": "Google", "Severity": "CRITICAL", "Title": "Google (GCP) Service-account", "StartLine": 2, "EndLine": 2, "Code": { "Lines": [ { "Number": 1, "Content": "{", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "{", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": " *************************,", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": " *************************,", "FirstCause": true, "LastCause": true }, { "Number": 3, "Content": " \"project_id\": \"hkapp-df6f3\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"hkapp-df6f3\",", "FirstCause": false, "LastCause": false } ] }, "Match": " *************************,", "Offset": 4 }, { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 5, "EndLine": 5, "Code": { "Lines": [ { "Number": 3, "Content": " \"project_id\": \"hkapp-df6f3\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"hkapp-df6f3\",", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": " \"private_key_id\": \"4d6b039a0538ba1962499b12ae70c1821e72cb47\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"private_key_id\": \"4d6b039a0538ba1962499b12ae70c1821e72cb47\",", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "FirstCause": true, "LastCause": true }, { "Number": 6, "Content": " \"client_email\": \"firebase-adminsdk-8an6i@hkapp-df6f3.iam.gserviceaccount.com\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"client_email\": \"firebase-adminsdk-8an6i@hkapp-df6f3.iam.gserviceaccount.com\",", "FirstCause": false, "LastCause": false } ] }, "Match": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "Offset": 171 } ] }, { "Target": "storage/app/public/projects/174/docs/1886_AuthKey_W3XDP5L96Z.p8", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 5, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "********", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "********", "FirstCause": false, "LastCause": true }, { "Number": 6, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/public/projects/174/docs/1888_tw-steps-toeic-debb0-firebase-adminsdk-fbsvc-b9bd515783.json", "Class": "secret", "Secrets": [ { "RuleID": "gcp-service-account", "Category": "Google", "Severity": "CRITICAL", "Title": "Google (GCP) Service-account", "StartLine": 2, "EndLine": 2, "Code": { "Lines": [ { "Number": 1, "Content": "{", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "{", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": " *************************,", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": " *************************,", "FirstCause": true, "LastCause": true }, { "Number": 3, "Content": " \"project_id\": \"tw-steps-toeic-debb0\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"tw-steps-toeic-debb0\",", "FirstCause": false, "LastCause": false } ] }, "Match": " *************************,", "Offset": 4 }, { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 5, "EndLine": 5, "Code": { "Lines": [ { "Number": 3, "Content": " \"project_id\": \"tw-steps-toeic-debb0\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"tw-steps-toeic-debb0\",", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": " \"private_key_id\": \"b9bd515783ec4da52768f076e51d49b1c2229e01\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"private_key_id\": \"b9bd515783ec4da52768f076e51d49b1c2229e01\",", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "FirstCause": true, "LastCause": true }, { "Number": 6, "Content": " \"client_email\": \"firebase-adminsdk-fbsvc@tw-steps-toeic-debb0.iam.gserviceaccount.com\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"client_email\": \"firebase-adminsdk-fbsvc@tw-steps-toeic-debb0.iam.gserviceaccount.com\",", "FirstCause": false, "LastCause": false } ] }, "Match": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "Offset": 180 } ] }, { "Target": "storage/app/public/projects/197/docs/1861_service-account.scu.json", "Class": "secret", "Secrets": [ { "RuleID": "gcp-service-account", "Category": "Google", "Severity": "CRITICAL", "Title": "Google (GCP) Service-account", "StartLine": 2, "EndLine": 2, "Code": { "Lines": [ { "Number": 1, "Content": "{", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "{", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": " *************************,", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": " *************************,", "FirstCause": true, "LastCause": true }, { "Number": 3, "Content": " \"project_id\": \"scucc-1029\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"scucc-1029\",", "FirstCause": false, "LastCause": false } ] }, "Match": " *************************,", "Offset": 4 }, { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 5, "EndLine": 5, "Code": { "Lines": [ { "Number": 3, "Content": " \"project_id\": \"scucc-1029\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"scucc-1029\",", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": " \"private_key_id\": \"f7d4bd656f804c4d83d39fdd23059141adce1faf\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"private_key_id\": \"f7d4bd656f804c4d83d39fdd23059141adce1faf\",", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "FirstCause": true, "LastCause": true }, { "Number": 6, "Content": " \"client_email\": \"firebase-adminsdk-iwwk2@scucc-1029.iam.gserviceaccount.com\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"client_email\": \"firebase-adminsdk-iwwk2@scucc-1029.iam.gserviceaccount.com\",", "FirstCause": false, "LastCause": false } ] }, "Match": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "Offset": 170 } ] }, { "Target": "storage/app/public/projects/215/docs/1878_dgm-platform-apps-firebase-adminsdk-so6bb-0e6a629944.json", "Class": "secret", "Secrets": [ { "RuleID": "gcp-service-account", "Category": "Google", "Severity": "CRITICAL", "Title": "Google (GCP) Service-account", "StartLine": 2, "EndLine": 2, "Code": { "Lines": [ { "Number": 1, "Content": "{", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "{", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": " *************************,", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": " *************************,", "FirstCause": true, "LastCause": true }, { "Number": 3, "Content": " \"project_id\": \"dgm-platform-apps\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"dgm-platform-apps\",", "FirstCause": false, "LastCause": false } ] }, "Match": " *************************,", "Offset": 4 }, { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 5, "EndLine": 5, "Code": { "Lines": [ { "Number": 3, "Content": " \"project_id\": \"dgm-platform-apps\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"dgm-platform-apps\",", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": " \"private_key_id\": \"0e6a62994421f35c8688ab6130b21a4dd3fa059c\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"private_key_id\": \"0e6a62994421f35c8688ab6130b21a4dd3fa059c\",", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "FirstCause": true, "LastCause": true }, { "Number": 6, "Content": " \"client_email\": \"firebase-adminsdk-so6bb@dgm-platform-apps.iam.gserviceaccount.com\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"client_email\": \"firebase-adminsdk-so6bb@dgm-platform-apps.iam.gserviceaccount.com\",", "FirstCause": false, "LastCause": false } ] }, "Match": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "Offset": 177 } ] }, { "Target": "storage/app/public/projects/234/docs/1868_chihleeapp-b1c85-firebase-adminsdk-r97y2-07ced48666.json", "Class": "secret", "Secrets": [ { "RuleID": "gcp-service-account", "Category": "Google", "Severity": "CRITICAL", "Title": "Google (GCP) Service-account", "StartLine": 2, "EndLine": 2, "Code": { "Lines": [ { "Number": 1, "Content": "{", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "{", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": " *************************,", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": " *************************,", "FirstCause": true, "LastCause": true }, { "Number": 3, "Content": " \"project_id\": \"chihleeapp-b1c85\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"chihleeapp-b1c85\",", "FirstCause": false, "LastCause": false } ] }, "Match": " *************************,", "Offset": 4 }, { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 5, "EndLine": 5, "Code": { "Lines": [ { "Number": 3, "Content": " \"project_id\": \"chihleeapp-b1c85\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"chihleeapp-b1c85\",", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": " \"private_key_id\": \"07ced48666143b41ac5e75ccdb28e78c87cf67c9\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"private_key_id\": \"07ced48666143b41ac5e75ccdb28e78c87cf67c9\",", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "FirstCause": true, "LastCause": true }, { "Number": 6, "Content": " \"client_email\": \"firebase-adminsdk-r97y2@chihleeapp-b1c85.iam.gserviceaccount.com\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"client_email\": \"firebase-adminsdk-r97y2@chihleeapp-b1c85.iam.gserviceaccount.com\",", "FirstCause": false, "LastCause": false } ] }, "Match": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "Offset": 176 } ] }, { "Target": "storage/app/public/projects/286/docs/1867_lhuapp-161805-firebase-adminsdk-09l0j-63a0db1cfd.json", "Class": "secret", "Secrets": [ { "RuleID": "gcp-service-account", "Category": "Google", "Severity": "CRITICAL", "Title": "Google (GCP) Service-account", "StartLine": 2, "EndLine": 2, "Code": { "Lines": [ { "Number": 1, "Content": "{", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "{", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": " *************************,", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": " *************************,", "FirstCause": true, "LastCause": true }, { "Number": 3, "Content": " \"project_id\": \"lhuapp-161805\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"lhuapp-161805\",", "FirstCause": false, "LastCause": false } ] }, "Match": " *************************,", "Offset": 4 }, { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 5, "EndLine": 5, "Code": { "Lines": [ { "Number": 3, "Content": " \"project_id\": \"lhuapp-161805\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"lhuapp-161805\",", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": " \"private_key_id\": \"63a0db1cfda54311d1880cc4daf747d0a8522644\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"private_key_id\": \"63a0db1cfda54311d1880cc4daf747d0a8522644\",", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "FirstCause": true, "LastCause": true }, { "Number": 6, "Content": " \"client_email\": \"firebase-adminsdk-09l0j@lhuapp-161805.iam.gserviceaccount.com\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"client_email\": \"firebase-adminsdk-09l0j@lhuapp-161805.iam.gserviceaccount.com\",", "FirstCause": false, "LastCause": false } ] }, "Match": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "Offset": 173 } ] }, { "Target": "storage/app/public/projects/90/docs/1874_nouapp-9abbd-firebase-adminsdk-801c2-b3fd1fe972.json", "Class": "secret", "Secrets": [ { "RuleID": "gcp-service-account", "Category": "Google", "Severity": "CRITICAL", "Title": "Google (GCP) Service-account", "StartLine": 2, "EndLine": 2, "Code": { "Lines": [ { "Number": 1, "Content": "{", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "{", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": " *************************,", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": " *************************,", "FirstCause": true, "LastCause": true }, { "Number": 3, "Content": " \"project_id\": \"nouapp-9abbd\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"nouapp-9abbd\",", "FirstCause": false, "LastCause": false } ] }, "Match": " *************************,", "Offset": 4 }, { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 5, "EndLine": 5, "Code": { "Lines": [ { "Number": 3, "Content": " \"project_id\": \"nouapp-9abbd\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"nouapp-9abbd\",", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": " \"private_key_id\": \"b3fd1fe97297b535ad577b63efaefcd087ab4994\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"private_key_id\": \"b3fd1fe97297b535ad577b63efaefcd087ab4994\",", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "FirstCause": true, "LastCause": true }, { "Number": 6, "Content": " \"client_email\": \"firebase-adminsdk-801c2@nouapp-9abbd.iam.gserviceaccount.com\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"client_email\": \"firebase-adminsdk-801c2@nouapp-9abbd.iam.gserviceaccount.com\",", "FirstCause": false, "LastCause": false } ] }, "Match": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "Offset": 172 } ] }, { "Target": "storage/app/public/projects/90/docs/2078_AuthKey_DB8V78V3G4.p8", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 5, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "********", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "********", "FirstCause": false, "LastCause": true }, { "Number": 6, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/public/projects/95/docs/1862_tnua-app-firebase-adminsdk-tjumd-1b07b96db4.json", "Class": "secret", "Secrets": [ { "RuleID": "gcp-service-account", "Category": "Google", "Severity": "CRITICAL", "Title": "Google (GCP) Service-account", "StartLine": 2, "EndLine": 2, "Code": { "Lines": [ { "Number": 1, "Content": "{", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "{", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": " *************************,", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": " *************************,", "FirstCause": true, "LastCause": true }, { "Number": 3, "Content": " \"project_id\": \"tnua-app\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"tnua-app\",", "FirstCause": false, "LastCause": false } ] }, "Match": " *************************,", "Offset": 4 }, { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 5, "EndLine": 5, "Code": { "Lines": [ { "Number": 3, "Content": " \"project_id\": \"tnua-app\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"project_id\": \"tnua-app\",", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": " \"private_key_id\": \"1b07b96db47c7148748cafbd02e6bcb8252f9635\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"private_key_id\": \"1b07b96db47c7148748cafbd02e6bcb8252f9635\",", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "FirstCause": true, "LastCause": true }, { "Number": 6, "Content": " \"client_email\": \"firebase-adminsdk-tjumd@tnua-app.iam.gserviceaccount.com\",", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": " \"client_email\": \"firebase-adminsdk-tjumd@tnua-app.iam.gserviceaccount.com\",", "FirstCause": false, "LastCause": false } ] }, "Match": ": \"-----BEGIN PRIVATE KEY-----**********************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************-----END PRIVATE KEY", "Offset": 168 } ] }, { "Target": "storage/app/ssl-csr/67f886d87b2ba.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/67f887087bc9e.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/67f889d6b6b5b.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/67f8e14eb3536.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/67f8e59d09f56.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/67f8e5c8eb5d6.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/67fcb0a643818.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "********************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "********************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/67fcb0c8c5683.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/67fcb0ef9c252.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/67fcb0f6cc7ea.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/67fcb100901f9.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/67fcb103def18.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/6805b0faa3135.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/6805b10025ca9.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "****************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/6805b10e46023.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/6805b110d4a11.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/6805e623c7153.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/6805e626ecb33.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/680b572cd1491.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/6811902814abc.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/6811902c7cba4.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] }, { "Target": "storage/app/ssl-csr/6862474bb8911.key", "Class": "secret", "Secrets": [ { "RuleID": "private-key", "Category": "AsymmetricPrivateKey", "Severity": "HIGH", "Title": "Asymmetric Private Key", "StartLine": 2, "EndLine": 27, "Code": { "Lines": [ { "Number": 1, "Content": "-----BEGIN PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----BEGIN PRIVATE KEY-----", "FirstCause": false, "LastCause": false }, { "Number": 2, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": true, "LastCause": false }, { "Number": 3, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 4, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 5, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 6, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 7, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 8, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 9, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 10, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 11, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 12, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 13, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 14, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 15, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 16, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 17, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 18, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 19, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 20, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 21, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 22, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 23, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 24, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 25, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 26, "Content": "****************************************************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "****************************************************************", "FirstCause": false, "LastCause": false }, { "Number": 27, "Content": "************************", "IsCause": true, "Annotation": "", "Truncated": false, "Highlighted": "************************", "FirstCause": false, "LastCause": true }, { "Number": 28, "Content": "-----END PRIVATE KEY-----", "IsCause": false, "Annotation": "", "Truncated": false, "Highlighted": "-----END PRIVATE KEY-----", "FirstCause": false, "LastCause": false } ] }, "Match": "****************************************************************", "Offset": 28 } ] } ] }