mirror of
https://github.com/garrytan/gstack.git
synced 2026-09-16 18:05:31 +02:00
Garry TanandOpenAI Codex
4a3c6a8a3c
* feat(cso): add verified audits and replayable repair bundles * fix(cso): harden qualification and setup boundaries * fix(cso): assemble security canaries at runtime * fix(cso): bound release proof and maintenance work Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): require complete evaluation reports Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): replay expired snapshots from supplied source Co-Authored-By: OpenAI Codex <noreply@openai.com> * test(cso): synchronize DNS cancellation assertion Co-Authored-By: OpenAI Codex <noreply@openai.com> * chore(ship): exempt repository owner from liveness proof Co-Authored-By: OpenAI Codex <noreply@openai.com> * test(cso): make recheck retention overlap deterministic Co-Authored-By: OpenAI Codex <noreply@openai.com> * chore: bump version and changelog (v1.85.0.0) Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): pass native release gates Co-Authored-By: OpenAI Codex <noreply@openai.com> * chore: move release to v1.86.0.0 Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): resolve rechecks by finding Co-Authored-By: OpenAI Codex <noreply@openai.com> * chore: move release to v1.87.0.0 Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): pass macOS and Windows release gates Normalize BSD wc output, compare Windows paths by filesystem identity, preserve portable snapshot race coverage, and narrow POSIX-only Windows fixtures. Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): harden native verification gates * fix(cso): refine Windows native diagnostics * test(cso): isolate Windows Git startup failure * test(cso): stabilize Windows native diagnostics * fix(cso): support hardened Git on Windows * fix(cso): close final verification gaps * test(cso): bound cold Docker fixture setup * fix(cso): restore cross-platform free-suite gates --------- Co-authored-by: OpenAI Codex <noreply@openai.com>
687 lines
20 KiB
JSON
687 lines
20 KiB
JSON
{
|
|
"schemaVersion": 1,
|
|
"version": "cso-v3-pairs-3",
|
|
"cases": [
|
|
{
|
|
"id": "node-sql-injection",
|
|
"stack": "node",
|
|
"family": "sql-injection",
|
|
"severity": "high",
|
|
"rootCause": "sql-injection",
|
|
"location": {
|
|
"path": "app.mjs",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "87267be77a89123b31f36c86c9a52e6eafbd266a313f3aca788a16fc47be7c65",
|
|
"fixed": "069fb74d1b471879b4151ee60de6dcae5abe6b86935a811b3160afc888091ee5"
|
|
}
|
|
},
|
|
{
|
|
"id": "node-command-injection",
|
|
"stack": "node",
|
|
"family": "command-injection",
|
|
"severity": "high",
|
|
"rootCause": "command-injection",
|
|
"location": {
|
|
"path": "app.mjs",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "4336fcd76b10ee6c36455288e14411c0ac2c62407e7ef22ae83cf957f77d17ed",
|
|
"fixed": "bcf6a044ca201dba861c4764696e800230d9b215644465cd7ed31479d218c12d"
|
|
}
|
|
},
|
|
{
|
|
"id": "node-path-traversal",
|
|
"stack": "node",
|
|
"family": "path-traversal",
|
|
"severity": "high",
|
|
"rootCause": "path-traversal",
|
|
"location": {
|
|
"path": "app.mjs",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "d69e959678cc3076202dbe9963ecde251cfece5744ee6718f4e82387efd5c994",
|
|
"fixed": "48ba7360137d0732b139dc6061640768cbfa1e31f896d5feb93258bb341a4e34"
|
|
}
|
|
},
|
|
{
|
|
"id": "node-ssrf",
|
|
"stack": "node",
|
|
"family": "ssrf",
|
|
"severity": "high",
|
|
"rootCause": "ssrf",
|
|
"location": {
|
|
"path": "app.mjs",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "dddf678fa3c900b2dd75953df953308c8e649eba1b061018075338163dba9d41",
|
|
"fixed": "c6b0a7d485fb0becae52f41e072d51096610d9c31c0cf790225350f40acb01b1"
|
|
}
|
|
},
|
|
{
|
|
"id": "node-object-authorization",
|
|
"stack": "node",
|
|
"family": "object-authorization",
|
|
"severity": "high",
|
|
"rootCause": "object-authorization",
|
|
"location": {
|
|
"path": "app.mjs",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "de4a888619db2d1992b2d46671f0b5fcde48903d6909cb23321a4019a574674a",
|
|
"fixed": "32c3ddaa88abe9286e1905f68ee3261aaf9a4a209964d7e014f622d25f05dc2c"
|
|
}
|
|
},
|
|
{
|
|
"id": "node-tenant-isolation",
|
|
"stack": "node",
|
|
"family": "tenant-isolation",
|
|
"severity": "high",
|
|
"rootCause": "tenant-isolation",
|
|
"location": {
|
|
"path": "app.mjs",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "fe9a035c0362f3513c7fb54d48acb5a835c84c424a9148be8a453f67dd1823fb",
|
|
"fixed": "6df2ee7243dcb8e624c988320d8df23814912ce0d3c2fb9282c50070f3f5b159"
|
|
}
|
|
},
|
|
{
|
|
"id": "node-html-injection",
|
|
"stack": "node",
|
|
"family": "html-injection",
|
|
"severity": "medium",
|
|
"rootCause": "html-injection",
|
|
"location": {
|
|
"path": "app.mjs",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "a373a32baef89b2d6ae97aac6c0a8aa56aa2d43c2f4f1d034e24249b272cf1da",
|
|
"fixed": "c3c114c86bd25b1c1f1b2766ad39cbe100f1c42edaa961314a20a7c64d5cf8a3"
|
|
}
|
|
},
|
|
{
|
|
"id": "node-open-redirect",
|
|
"stack": "node",
|
|
"family": "open-redirect",
|
|
"severity": "medium",
|
|
"rootCause": "open-redirect",
|
|
"location": {
|
|
"path": "app.mjs",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "12f0a273a9dc9960b7be8345794482274f7207f98b416c5211c0eb2e73633ba9",
|
|
"fixed": "1547a8c5cce7a47b054e8b0d9ce5a065703d0a686c2fea8be3d70016290cbe4d"
|
|
}
|
|
},
|
|
{
|
|
"id": "node-mass-assignment",
|
|
"stack": "node",
|
|
"family": "mass-assignment",
|
|
"severity": "high",
|
|
"rootCause": "mass-assignment",
|
|
"location": {
|
|
"path": "app.mjs",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "f0c6f6e3465069d9eba208a6ca899b1a6438d679937b89ebcd56c768d9cbd85b",
|
|
"fixed": "cb08b01645e2186adfae2bdb17bd3d41240cb389f9ddd65223e286d91ac72d05"
|
|
}
|
|
},
|
|
{
|
|
"id": "node-resource-exhaustion",
|
|
"stack": "node",
|
|
"family": "resource-exhaustion",
|
|
"severity": "high",
|
|
"rootCause": "resource-exhaustion",
|
|
"location": {
|
|
"path": "app.mjs",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "1671cb1dd6639c19aa687ec02f70190c39bbc1b7ccf436783560a173f9bb8d57",
|
|
"fixed": "a78998de27bd98b4a90600352f2e431f34c0cc7a8a4c9f5de4fc8ec1877bb9ba"
|
|
}
|
|
},
|
|
{
|
|
"id": "bun-sql-injection",
|
|
"stack": "bun",
|
|
"family": "sql-injection",
|
|
"severity": "high",
|
|
"rootCause": "sql-injection",
|
|
"location": {
|
|
"path": "app.ts",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "6e55eb6286eb0cd7a550bc0e2057b2344af21d34e0e73ff950e12446a5e306bc",
|
|
"fixed": "b7e9df66ff955ebf4ed538798fbd8187e5929c1e4d3bd82c655e7513cb024269"
|
|
}
|
|
},
|
|
{
|
|
"id": "bun-command-injection",
|
|
"stack": "bun",
|
|
"family": "command-injection",
|
|
"severity": "high",
|
|
"rootCause": "command-injection",
|
|
"location": {
|
|
"path": "app.ts",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "d4b222144463b15d360de50c675bbd4e01cd91b6fe97c090124e11406970bb0e",
|
|
"fixed": "0522b906f1460ebb514ec45c7d4261575bf8bccb67c3add14ec83bc5afce4e3c"
|
|
}
|
|
},
|
|
{
|
|
"id": "bun-path-traversal",
|
|
"stack": "bun",
|
|
"family": "path-traversal",
|
|
"severity": "high",
|
|
"rootCause": "path-traversal",
|
|
"location": {
|
|
"path": "app.ts",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "8d9225578ad93d0bf243d23e23db719ddf77f486b25065ff8797c093e4d8529b",
|
|
"fixed": "380d546d31f4563edcecd8eeaed7c02aadb169a662776a9a4b026f7ea514468f"
|
|
}
|
|
},
|
|
{
|
|
"id": "bun-ssrf",
|
|
"stack": "bun",
|
|
"family": "ssrf",
|
|
"severity": "high",
|
|
"rootCause": "ssrf",
|
|
"location": {
|
|
"path": "app.ts",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "80728866a613c4a3c1c5ffe468a098152f6e3632afa049905feb0ed286664f99",
|
|
"fixed": "05992952d8922605ac472d1a39e1aed9b058453eb95296b469d022c62b6d1114"
|
|
}
|
|
},
|
|
{
|
|
"id": "bun-object-authorization",
|
|
"stack": "bun",
|
|
"family": "object-authorization",
|
|
"severity": "high",
|
|
"rootCause": "object-authorization",
|
|
"location": {
|
|
"path": "app.ts",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "2d72c60a1aa2b560f00d3f066bdc0947bc52978755de7323402ee2f75498f9a6",
|
|
"fixed": "b839b3f4f8354407eb6577f423d1651b40f7c3a68b079b04624b0b0d6de0294b"
|
|
}
|
|
},
|
|
{
|
|
"id": "bun-tenant-isolation",
|
|
"stack": "bun",
|
|
"family": "tenant-isolation",
|
|
"severity": "high",
|
|
"rootCause": "tenant-isolation",
|
|
"location": {
|
|
"path": "app.ts",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "9d880c06e01294c8e785471165642a899a555c15e9409346946802f0189db53a",
|
|
"fixed": "dd1b4c7fb3cce974bfe998a5df337f6270f7675a97ce91ca9647067d29bd4368"
|
|
}
|
|
},
|
|
{
|
|
"id": "bun-html-injection",
|
|
"stack": "bun",
|
|
"family": "html-injection",
|
|
"severity": "medium",
|
|
"rootCause": "html-injection",
|
|
"location": {
|
|
"path": "app.ts",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "280970e0c738f3f98f72388b2094b30a81ae8de24631aab9759c5c467eb04dce",
|
|
"fixed": "01d9ca12aeac526627c851609d034a35e57326b9f27e798853ad4338c8d6f0fe"
|
|
}
|
|
},
|
|
{
|
|
"id": "bun-open-redirect",
|
|
"stack": "bun",
|
|
"family": "open-redirect",
|
|
"severity": "medium",
|
|
"rootCause": "open-redirect",
|
|
"location": {
|
|
"path": "app.ts",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "92e0f59a1a5cc9346dee8941ef218a82f739b5fb1ca06595a38ae4e3be3e5e50",
|
|
"fixed": "93da544141e869c13e5136b834f4ae59f0469d17b55bc5455e69c9b2efe0e144"
|
|
}
|
|
},
|
|
{
|
|
"id": "bun-mass-assignment",
|
|
"stack": "bun",
|
|
"family": "mass-assignment",
|
|
"severity": "high",
|
|
"rootCause": "mass-assignment",
|
|
"location": {
|
|
"path": "app.ts",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "046ae2d46f8bc9a185a7384a1dac8902cd0d4b8f23447564b77a27354e2587eb",
|
|
"fixed": "79bb3ced148331d009b3e680c6c2040f6885e62873daedad0667fd2fd6173e1b"
|
|
}
|
|
},
|
|
{
|
|
"id": "bun-resource-exhaustion",
|
|
"stack": "bun",
|
|
"family": "resource-exhaustion",
|
|
"severity": "high",
|
|
"rootCause": "resource-exhaustion",
|
|
"location": {
|
|
"path": "app.ts",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "785c96f9a0ee7b2e8a07135dd46c43fdf28d06caa2e5380d8c6d2a469397cc2c",
|
|
"fixed": "d8ed22d72e5eb14c5e745b5d702377147b53a071de634597e4239435fd3a1c42"
|
|
}
|
|
},
|
|
{
|
|
"id": "python-sql-injection",
|
|
"stack": "python",
|
|
"family": "sql-injection",
|
|
"severity": "high",
|
|
"rootCause": "sql-injection",
|
|
"location": {
|
|
"path": "app.py",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "fc2cb6a773be0e191372c33014deed8837738fa48843fa99eb8ff63367f5675d",
|
|
"fixed": "07518c636f923497ed4d474b68e471216af0efb77bbd0751a3fdbc222055c71e"
|
|
}
|
|
},
|
|
{
|
|
"id": "python-command-injection",
|
|
"stack": "python",
|
|
"family": "command-injection",
|
|
"severity": "high",
|
|
"rootCause": "command-injection",
|
|
"location": {
|
|
"path": "app.py",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "4137304be1b38300a68202f943e41680a0897a75c89a8fc222781e39c22f22a6",
|
|
"fixed": "99bf0f2010d595321018e25428e76d408cf5efc6c96284dd7144c5802c259091"
|
|
}
|
|
},
|
|
{
|
|
"id": "python-path-traversal",
|
|
"stack": "python",
|
|
"family": "path-traversal",
|
|
"severity": "high",
|
|
"rootCause": "path-traversal",
|
|
"location": {
|
|
"path": "app.py",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "c261d74c7a569025259984448056928741ccb07383684f9fda5e51b9280a4d5c",
|
|
"fixed": "0fa6edad6b84f90efda50d1e49c584c8ca51ddb8ef9998034ad86b2bb7d81b76"
|
|
}
|
|
},
|
|
{
|
|
"id": "python-ssrf",
|
|
"stack": "python",
|
|
"family": "ssrf",
|
|
"severity": "high",
|
|
"rootCause": "ssrf",
|
|
"location": {
|
|
"path": "app.py",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "5b06615f38d6d43ea4900551155eabd5b8ba9f856d15f78e79fde70856177792",
|
|
"fixed": "814315a11b6b600c5e338822fc42fc9c4d6f66b88fa86de664ab0ccdeb91166e"
|
|
}
|
|
},
|
|
{
|
|
"id": "python-object-authorization",
|
|
"stack": "python",
|
|
"family": "object-authorization",
|
|
"severity": "high",
|
|
"rootCause": "object-authorization",
|
|
"location": {
|
|
"path": "app.py",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "a151cda5d96ba2e7e9b940ceb936e28070b680d572079ba5364ab56a993599da",
|
|
"fixed": "a8083c530ddb9fa4d0c0b0f6de4487ce0df7b811d2fb79c8cdbcdae0d8e3e2b4"
|
|
}
|
|
},
|
|
{
|
|
"id": "python-tenant-isolation",
|
|
"stack": "python",
|
|
"family": "tenant-isolation",
|
|
"severity": "high",
|
|
"rootCause": "tenant-isolation",
|
|
"location": {
|
|
"path": "app.py",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "d8cad33e13f914d34c97eb365f5d7fed4f63c0cb64546abf182f28b8050c03e0",
|
|
"fixed": "7ac649e25edcf30030f0ed3c22aa3bfacb38516ab435db4dee240c5d8e8c45a4"
|
|
}
|
|
},
|
|
{
|
|
"id": "python-html-injection",
|
|
"stack": "python",
|
|
"family": "html-injection",
|
|
"severity": "medium",
|
|
"rootCause": "html-injection",
|
|
"location": {
|
|
"path": "app.py",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "aa9ca878ed3c100845728ee70fb1e4254d1ee5ef76d655b3c17d1269c17b190b",
|
|
"fixed": "5a6cd758d4e007291eb01d922ef7994cc2f36371a7e96c99fcb4fabe643e3ce8"
|
|
}
|
|
},
|
|
{
|
|
"id": "python-open-redirect",
|
|
"stack": "python",
|
|
"family": "open-redirect",
|
|
"severity": "medium",
|
|
"rootCause": "open-redirect",
|
|
"location": {
|
|
"path": "app.py",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "0c052ebc5fba7f165ba4e173ca477911f741ed512bd152e2b43a1b526f815267",
|
|
"fixed": "2a3e70475e00d98fe6e2d6505d0ff71b9a9985f701e6a9fd081801d0162dbbd1"
|
|
}
|
|
},
|
|
{
|
|
"id": "python-mass-assignment",
|
|
"stack": "python",
|
|
"family": "mass-assignment",
|
|
"severity": "high",
|
|
"rootCause": "mass-assignment",
|
|
"location": {
|
|
"path": "app.py",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "74ffa12e965869af108f8cfbde9903a66d3a96fc76478ece6739a36712f97f69",
|
|
"fixed": "f4311765ac908b668ecfa3665d8023cf910e6afb1aff799802036a9f212c75ff"
|
|
}
|
|
},
|
|
{
|
|
"id": "python-resource-exhaustion",
|
|
"stack": "python",
|
|
"family": "resource-exhaustion",
|
|
"severity": "high",
|
|
"rootCause": "resource-exhaustion",
|
|
"location": {
|
|
"path": "app.py",
|
|
"symbol": "action"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "50f4a5c5ad4ac5fd9fc0a935a37a0ede2d6735dbf31f7ed9fae9f63029d98181",
|
|
"fixed": "a25653768c0d551373d594a1505510325a01e06536fd1158c7b8617084fdb2dc"
|
|
}
|
|
},
|
|
{
|
|
"id": "rails-sql-injection",
|
|
"stack": "rails",
|
|
"family": "sql-injection",
|
|
"severity": "high",
|
|
"rootCause": "sql-injection",
|
|
"location": {
|
|
"path": "app/controllers/cases_controller.rb",
|
|
"symbol": "CasesController#show"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "ebcfded5f3a00b76f803986cf1e82ca725df8ecd5268758ffe5c7b1ffed602e6",
|
|
"fixed": "3905e9acf8f564fb3ead4e53c823fca10a2bc6e28212b90cad95bf4cff515c7d"
|
|
}
|
|
},
|
|
{
|
|
"id": "rails-command-injection",
|
|
"stack": "rails",
|
|
"family": "command-injection",
|
|
"severity": "high",
|
|
"rootCause": "command-injection",
|
|
"location": {
|
|
"path": "app/controllers/cases_controller.rb",
|
|
"symbol": "CasesController#show"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "7938f3f18bbd5effddbd28029476f305a443148351707142267411d56d5fb0b8",
|
|
"fixed": "a88dcb4e5d0bc19d79577791bbe4eccc946f22f7ad66a0471af005d83106bd5d"
|
|
}
|
|
},
|
|
{
|
|
"id": "rails-path-traversal",
|
|
"stack": "rails",
|
|
"family": "path-traversal",
|
|
"severity": "high",
|
|
"rootCause": "path-traversal",
|
|
"location": {
|
|
"path": "app/controllers/cases_controller.rb",
|
|
"symbol": "CasesController#show"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "b49d633543845557b4dea97674b04542df2309d53c46c61dad6532b561b4179e",
|
|
"fixed": "a77ce178798cb01abaa55a815da3f8f16ab95add4103d540b27775735d857d9e"
|
|
}
|
|
},
|
|
{
|
|
"id": "rails-ssrf",
|
|
"stack": "rails",
|
|
"family": "ssrf",
|
|
"severity": "high",
|
|
"rootCause": "ssrf",
|
|
"location": {
|
|
"path": "app/controllers/cases_controller.rb",
|
|
"symbol": "CasesController#show"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "e8fbb44ae9e01e44615dc991920c655ab97ad16c3ef8d425f9d94a3d215beedd",
|
|
"fixed": "0c2d952137fa644f4eba215b43988ad0092a4ce902863196309e65b30438661d"
|
|
}
|
|
},
|
|
{
|
|
"id": "rails-object-authorization",
|
|
"stack": "rails",
|
|
"family": "object-authorization",
|
|
"severity": "high",
|
|
"rootCause": "object-authorization",
|
|
"location": {
|
|
"path": "app/controllers/cases_controller.rb",
|
|
"symbol": "CasesController#show"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "5378c421c287d6a79f1d7c4836e472fe0851a7436aaee431e23b317a7fc259ca",
|
|
"fixed": "976c0a27c7c647ddbd5e31d5a36668deb6e1ca5851702bbb280a2d1f81a3d84e"
|
|
}
|
|
},
|
|
{
|
|
"id": "rails-tenant-isolation",
|
|
"stack": "rails",
|
|
"family": "tenant-isolation",
|
|
"severity": "high",
|
|
"rootCause": "tenant-isolation",
|
|
"location": {
|
|
"path": "app/controllers/cases_controller.rb",
|
|
"symbol": "CasesController#show"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "0a082cf0146c15cb4ca585b50a024e4596642dbb6462c3370b5452a8c25eb550",
|
|
"fixed": "5814fae616945cb1ead1d7046c89281c0f7215ccf4cb298a4cc517297adc0ba8"
|
|
}
|
|
},
|
|
{
|
|
"id": "rails-html-injection",
|
|
"stack": "rails",
|
|
"family": "html-injection",
|
|
"severity": "medium",
|
|
"rootCause": "html-injection",
|
|
"location": {
|
|
"path": "app/controllers/cases_controller.rb",
|
|
"symbol": "CasesController#show"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "118599300873d0a10f3e920157707f71703cd58cae9d597e5c98cf046b410507",
|
|
"fixed": "12a2d8d6db8c6ed60faa1658aa63df414d60c6b85dcd7e417d229e7017a05949"
|
|
}
|
|
},
|
|
{
|
|
"id": "rails-open-redirect",
|
|
"stack": "rails",
|
|
"family": "open-redirect",
|
|
"severity": "medium",
|
|
"rootCause": "open-redirect",
|
|
"location": {
|
|
"path": "app/controllers/cases_controller.rb",
|
|
"symbol": "CasesController#show"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "77cce00579bc9b10bfc0be2755b5b6446034585456799e4e3771740a0d7f59ab",
|
|
"fixed": "113b5e5c346fd4aebab9b4e3242d14784ee70e71c6e938c289e46dfcb968c4a8"
|
|
}
|
|
},
|
|
{
|
|
"id": "rails-mass-assignment",
|
|
"stack": "rails",
|
|
"family": "mass-assignment",
|
|
"severity": "high",
|
|
"rootCause": "mass-assignment",
|
|
"location": {
|
|
"path": "app/controllers/cases_controller.rb",
|
|
"symbol": "CasesController#show"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "17fce4f956eaa654b1b90f6fe78ccc604accc820f9496517296800ca541bc436",
|
|
"fixed": "58b5132f336f6e115ff38b3c7b28bc0a00fca2444669008e3b30c3f6037a915e"
|
|
}
|
|
},
|
|
{
|
|
"id": "rails-resource-exhaustion",
|
|
"stack": "rails",
|
|
"family": "resource-exhaustion",
|
|
"severity": "high",
|
|
"rootCause": "resource-exhaustion",
|
|
"location": {
|
|
"path": "app/controllers/cases_controller.rb",
|
|
"symbol": "CasesController#show"
|
|
},
|
|
"coreColdStart": true,
|
|
"heldOut": true,
|
|
"filesHash": {
|
|
"vulnerable": "08e656bee75b724ba5b958c1887589df9931babec2c742e3b644236a677e007c",
|
|
"fixed": "fb7f5a5011d05e1f9d27d19c70aca5f64c11bd2cbc68d3396053e7169d8e94ec"
|
|
}
|
|
}
|
|
]
|
|
}
|