{ "schemaVersion": 1, "version": "cso-v3-pairs-3", "cases": [ { "id": "node-sql-injection", "stack": "node", "family": "sql-injection", "severity": "high", "rootCause": "sql-injection", "location": { "path": "app.mjs", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "87267be77a89123b31f36c86c9a52e6eafbd266a313f3aca788a16fc47be7c65", "fixed": "069fb74d1b471879b4151ee60de6dcae5abe6b86935a811b3160afc888091ee5" } }, { "id": "node-command-injection", "stack": "node", "family": "command-injection", "severity": "high", "rootCause": "command-injection", "location": { "path": "app.mjs", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "4336fcd76b10ee6c36455288e14411c0ac2c62407e7ef22ae83cf957f77d17ed", "fixed": "bcf6a044ca201dba861c4764696e800230d9b215644465cd7ed31479d218c12d" } }, { "id": "node-path-traversal", "stack": "node", "family": "path-traversal", "severity": "high", "rootCause": "path-traversal", "location": { "path": "app.mjs", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "d69e959678cc3076202dbe9963ecde251cfece5744ee6718f4e82387efd5c994", "fixed": "48ba7360137d0732b139dc6061640768cbfa1e31f896d5feb93258bb341a4e34" } }, { "id": "node-ssrf", "stack": "node", "family": "ssrf", "severity": "high", "rootCause": "ssrf", "location": { "path": "app.mjs", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "dddf678fa3c900b2dd75953df953308c8e649eba1b061018075338163dba9d41", "fixed": "c6b0a7d485fb0becae52f41e072d51096610d9c31c0cf790225350f40acb01b1" } }, { "id": "node-object-authorization", "stack": "node", "family": "object-authorization", "severity": "high", "rootCause": "object-authorization", "location": { "path": "app.mjs", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "de4a888619db2d1992b2d46671f0b5fcde48903d6909cb23321a4019a574674a", "fixed": "32c3ddaa88abe9286e1905f68ee3261aaf9a4a209964d7e014f622d25f05dc2c" } }, { "id": "node-tenant-isolation", "stack": "node", "family": "tenant-isolation", "severity": "high", "rootCause": "tenant-isolation", "location": { "path": "app.mjs", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "fe9a035c0362f3513c7fb54d48acb5a835c84c424a9148be8a453f67dd1823fb", "fixed": "6df2ee7243dcb8e624c988320d8df23814912ce0d3c2fb9282c50070f3f5b159" } }, { "id": "node-html-injection", "stack": "node", "family": "html-injection", "severity": "medium", "rootCause": "html-injection", "location": { "path": "app.mjs", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "a373a32baef89b2d6ae97aac6c0a8aa56aa2d43c2f4f1d034e24249b272cf1da", "fixed": "c3c114c86bd25b1c1f1b2766ad39cbe100f1c42edaa961314a20a7c64d5cf8a3" } }, { "id": "node-open-redirect", "stack": "node", "family": "open-redirect", "severity": "medium", "rootCause": "open-redirect", "location": { "path": "app.mjs", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "12f0a273a9dc9960b7be8345794482274f7207f98b416c5211c0eb2e73633ba9", "fixed": "1547a8c5cce7a47b054e8b0d9ce5a065703d0a686c2fea8be3d70016290cbe4d" } }, { "id": "node-mass-assignment", "stack": "node", "family": "mass-assignment", "severity": "high", "rootCause": "mass-assignment", "location": { "path": "app.mjs", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "f0c6f6e3465069d9eba208a6ca899b1a6438d679937b89ebcd56c768d9cbd85b", "fixed": "cb08b01645e2186adfae2bdb17bd3d41240cb389f9ddd65223e286d91ac72d05" } }, { "id": "node-resource-exhaustion", "stack": "node", "family": "resource-exhaustion", "severity": "high", "rootCause": "resource-exhaustion", "location": { "path": "app.mjs", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "1671cb1dd6639c19aa687ec02f70190c39bbc1b7ccf436783560a173f9bb8d57", "fixed": "a78998de27bd98b4a90600352f2e431f34c0cc7a8a4c9f5de4fc8ec1877bb9ba" } }, { "id": "bun-sql-injection", "stack": "bun", "family": "sql-injection", "severity": "high", "rootCause": "sql-injection", "location": { "path": "app.ts", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "6e55eb6286eb0cd7a550bc0e2057b2344af21d34e0e73ff950e12446a5e306bc", "fixed": "b7e9df66ff955ebf4ed538798fbd8187e5929c1e4d3bd82c655e7513cb024269" } }, { "id": "bun-command-injection", "stack": "bun", "family": "command-injection", "severity": "high", "rootCause": "command-injection", "location": { "path": "app.ts", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "d4b222144463b15d360de50c675bbd4e01cd91b6fe97c090124e11406970bb0e", "fixed": "0522b906f1460ebb514ec45c7d4261575bf8bccb67c3add14ec83bc5afce4e3c" } }, { "id": "bun-path-traversal", "stack": "bun", "family": "path-traversal", "severity": "high", "rootCause": "path-traversal", "location": { "path": "app.ts", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "8d9225578ad93d0bf243d23e23db719ddf77f486b25065ff8797c093e4d8529b", "fixed": "380d546d31f4563edcecd8eeaed7c02aadb169a662776a9a4b026f7ea514468f" } }, { "id": "bun-ssrf", "stack": "bun", "family": "ssrf", "severity": "high", "rootCause": "ssrf", "location": { "path": "app.ts", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "80728866a613c4a3c1c5ffe468a098152f6e3632afa049905feb0ed286664f99", "fixed": "05992952d8922605ac472d1a39e1aed9b058453eb95296b469d022c62b6d1114" } }, { "id": "bun-object-authorization", "stack": "bun", "family": "object-authorization", "severity": "high", "rootCause": "object-authorization", "location": { "path": "app.ts", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "2d72c60a1aa2b560f00d3f066bdc0947bc52978755de7323402ee2f75498f9a6", "fixed": "b839b3f4f8354407eb6577f423d1651b40f7c3a68b079b04624b0b0d6de0294b" } }, { "id": "bun-tenant-isolation", "stack": "bun", "family": "tenant-isolation", "severity": "high", "rootCause": "tenant-isolation", "location": { "path": "app.ts", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "9d880c06e01294c8e785471165642a899a555c15e9409346946802f0189db53a", "fixed": "dd1b4c7fb3cce974bfe998a5df337f6270f7675a97ce91ca9647067d29bd4368" } }, { "id": "bun-html-injection", "stack": "bun", "family": "html-injection", "severity": "medium", "rootCause": "html-injection", "location": { "path": "app.ts", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "280970e0c738f3f98f72388b2094b30a81ae8de24631aab9759c5c467eb04dce", "fixed": "01d9ca12aeac526627c851609d034a35e57326b9f27e798853ad4338c8d6f0fe" } }, { "id": "bun-open-redirect", "stack": "bun", "family": "open-redirect", "severity": "medium", "rootCause": "open-redirect", "location": { "path": "app.ts", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "92e0f59a1a5cc9346dee8941ef218a82f739b5fb1ca06595a38ae4e3be3e5e50", "fixed": "93da544141e869c13e5136b834f4ae59f0469d17b55bc5455e69c9b2efe0e144" } }, { "id": "bun-mass-assignment", "stack": "bun", "family": "mass-assignment", "severity": "high", "rootCause": "mass-assignment", "location": { "path": "app.ts", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "046ae2d46f8bc9a185a7384a1dac8902cd0d4b8f23447564b77a27354e2587eb", "fixed": "79bb3ced148331d009b3e680c6c2040f6885e62873daedad0667fd2fd6173e1b" } }, { "id": "bun-resource-exhaustion", "stack": "bun", "family": "resource-exhaustion", "severity": "high", "rootCause": "resource-exhaustion", "location": { "path": "app.ts", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "785c96f9a0ee7b2e8a07135dd46c43fdf28d06caa2e5380d8c6d2a469397cc2c", "fixed": "d8ed22d72e5eb14c5e745b5d702377147b53a071de634597e4239435fd3a1c42" } }, { "id": "python-sql-injection", "stack": "python", "family": "sql-injection", "severity": "high", "rootCause": "sql-injection", "location": { "path": "app.py", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "fc2cb6a773be0e191372c33014deed8837738fa48843fa99eb8ff63367f5675d", "fixed": "07518c636f923497ed4d474b68e471216af0efb77bbd0751a3fdbc222055c71e" } }, { "id": "python-command-injection", "stack": "python", "family": "command-injection", "severity": "high", "rootCause": "command-injection", "location": { "path": "app.py", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "4137304be1b38300a68202f943e41680a0897a75c89a8fc222781e39c22f22a6", "fixed": "99bf0f2010d595321018e25428e76d408cf5efc6c96284dd7144c5802c259091" } }, { "id": "python-path-traversal", "stack": "python", "family": "path-traversal", "severity": "high", "rootCause": "path-traversal", "location": { "path": "app.py", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "c261d74c7a569025259984448056928741ccb07383684f9fda5e51b9280a4d5c", "fixed": "0fa6edad6b84f90efda50d1e49c584c8ca51ddb8ef9998034ad86b2bb7d81b76" } }, { "id": "python-ssrf", "stack": "python", "family": "ssrf", "severity": "high", "rootCause": "ssrf", "location": { "path": "app.py", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "5b06615f38d6d43ea4900551155eabd5b8ba9f856d15f78e79fde70856177792", "fixed": "814315a11b6b600c5e338822fc42fc9c4d6f66b88fa86de664ab0ccdeb91166e" } }, { "id": "python-object-authorization", "stack": "python", "family": "object-authorization", "severity": "high", "rootCause": "object-authorization", "location": { "path": "app.py", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "a151cda5d96ba2e7e9b940ceb936e28070b680d572079ba5364ab56a993599da", "fixed": "a8083c530ddb9fa4d0c0b0f6de4487ce0df7b811d2fb79c8cdbcdae0d8e3e2b4" } }, { "id": "python-tenant-isolation", "stack": "python", "family": "tenant-isolation", "severity": "high", "rootCause": "tenant-isolation", "location": { "path": "app.py", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "d8cad33e13f914d34c97eb365f5d7fed4f63c0cb64546abf182f28b8050c03e0", "fixed": "7ac649e25edcf30030f0ed3c22aa3bfacb38516ab435db4dee240c5d8e8c45a4" } }, { "id": "python-html-injection", "stack": "python", "family": "html-injection", "severity": "medium", "rootCause": "html-injection", "location": { "path": "app.py", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "aa9ca878ed3c100845728ee70fb1e4254d1ee5ef76d655b3c17d1269c17b190b", "fixed": "5a6cd758d4e007291eb01d922ef7994cc2f36371a7e96c99fcb4fabe643e3ce8" } }, { "id": "python-open-redirect", "stack": "python", "family": "open-redirect", "severity": "medium", "rootCause": "open-redirect", "location": { "path": "app.py", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "0c052ebc5fba7f165ba4e173ca477911f741ed512bd152e2b43a1b526f815267", "fixed": "2a3e70475e00d98fe6e2d6505d0ff71b9a9985f701e6a9fd081801d0162dbbd1" } }, { "id": "python-mass-assignment", "stack": "python", "family": "mass-assignment", "severity": "high", "rootCause": "mass-assignment", "location": { "path": "app.py", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "74ffa12e965869af108f8cfbde9903a66d3a96fc76478ece6739a36712f97f69", "fixed": "f4311765ac908b668ecfa3665d8023cf910e6afb1aff799802036a9f212c75ff" } }, { "id": "python-resource-exhaustion", "stack": "python", "family": "resource-exhaustion", "severity": "high", "rootCause": "resource-exhaustion", "location": { "path": "app.py", "symbol": "action" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "50f4a5c5ad4ac5fd9fc0a935a37a0ede2d6735dbf31f7ed9fae9f63029d98181", "fixed": "a25653768c0d551373d594a1505510325a01e06536fd1158c7b8617084fdb2dc" } }, { "id": "rails-sql-injection", "stack": "rails", "family": "sql-injection", "severity": "high", "rootCause": "sql-injection", "location": { "path": "app/controllers/cases_controller.rb", "symbol": "CasesController#show" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "ebcfded5f3a00b76f803986cf1e82ca725df8ecd5268758ffe5c7b1ffed602e6", "fixed": "3905e9acf8f564fb3ead4e53c823fca10a2bc6e28212b90cad95bf4cff515c7d" } }, { "id": "rails-command-injection", "stack": "rails", "family": "command-injection", "severity": "high", "rootCause": "command-injection", "location": { "path": "app/controllers/cases_controller.rb", "symbol": "CasesController#show" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "7938f3f18bbd5effddbd28029476f305a443148351707142267411d56d5fb0b8", "fixed": "a88dcb4e5d0bc19d79577791bbe4eccc946f22f7ad66a0471af005d83106bd5d" } }, { "id": "rails-path-traversal", "stack": "rails", "family": "path-traversal", "severity": "high", "rootCause": "path-traversal", "location": { "path": "app/controllers/cases_controller.rb", "symbol": "CasesController#show" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "b49d633543845557b4dea97674b04542df2309d53c46c61dad6532b561b4179e", "fixed": "a77ce178798cb01abaa55a815da3f8f16ab95add4103d540b27775735d857d9e" } }, { "id": "rails-ssrf", "stack": "rails", "family": "ssrf", "severity": "high", "rootCause": "ssrf", "location": { "path": "app/controllers/cases_controller.rb", "symbol": "CasesController#show" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "e8fbb44ae9e01e44615dc991920c655ab97ad16c3ef8d425f9d94a3d215beedd", "fixed": "0c2d952137fa644f4eba215b43988ad0092a4ce902863196309e65b30438661d" } }, { "id": "rails-object-authorization", "stack": "rails", "family": "object-authorization", "severity": "high", "rootCause": "object-authorization", "location": { "path": "app/controllers/cases_controller.rb", "symbol": "CasesController#show" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "5378c421c287d6a79f1d7c4836e472fe0851a7436aaee431e23b317a7fc259ca", "fixed": "976c0a27c7c647ddbd5e31d5a36668deb6e1ca5851702bbb280a2d1f81a3d84e" } }, { "id": "rails-tenant-isolation", "stack": "rails", "family": "tenant-isolation", "severity": "high", "rootCause": "tenant-isolation", "location": { "path": "app/controllers/cases_controller.rb", "symbol": "CasesController#show" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "0a082cf0146c15cb4ca585b50a024e4596642dbb6462c3370b5452a8c25eb550", "fixed": "5814fae616945cb1ead1d7046c89281c0f7215ccf4cb298a4cc517297adc0ba8" } }, { "id": "rails-html-injection", "stack": "rails", "family": "html-injection", "severity": "medium", "rootCause": "html-injection", "location": { "path": "app/controllers/cases_controller.rb", "symbol": "CasesController#show" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "118599300873d0a10f3e920157707f71703cd58cae9d597e5c98cf046b410507", "fixed": "12a2d8d6db8c6ed60faa1658aa63df414d60c6b85dcd7e417d229e7017a05949" } }, { "id": "rails-open-redirect", "stack": "rails", "family": "open-redirect", "severity": "medium", "rootCause": "open-redirect", "location": { "path": "app/controllers/cases_controller.rb", "symbol": "CasesController#show" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "77cce00579bc9b10bfc0be2755b5b6446034585456799e4e3771740a0d7f59ab", "fixed": "113b5e5c346fd4aebab9b4e3242d14784ee70e71c6e938c289e46dfcb968c4a8" } }, { "id": "rails-mass-assignment", "stack": "rails", "family": "mass-assignment", "severity": "high", "rootCause": "mass-assignment", "location": { "path": "app/controllers/cases_controller.rb", "symbol": "CasesController#show" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "17fce4f956eaa654b1b90f6fe78ccc604accc820f9496517296800ca541bc436", "fixed": "58b5132f336f6e115ff38b3c7b28bc0a00fca2444669008e3b30c3f6037a915e" } }, { "id": "rails-resource-exhaustion", "stack": "rails", "family": "resource-exhaustion", "severity": "high", "rootCause": "resource-exhaustion", "location": { "path": "app/controllers/cases_controller.rb", "symbol": "CasesController#show" }, "coreColdStart": true, "heldOut": true, "filesHash": { "vulnerable": "08e656bee75b724ba5b958c1887589df9931babec2c742e3b644236a677e007c", "fixed": "fb7f5a5011d05e1f9d27d19c70aca5f64c11bd2cbc68d3396053e7169d8e94ec" } } ] }