XCracks
Sample data
D

Findings

All open vulnerabilities across connected repositories

Connect repo
2 Critical 3 High 3 Medium 2 Low 10 total
Filter by file, rule, repository…
Severity Finding Stage
  • CRIT

    SQL Injection via template literal

    src/auth/session.ts:47

    Proposed
  • CRIT

    Remote code execution in eval path

    src/worker/eval.ts:12

    Detected
  • HIGH

    Path traversal in file handler

    src/api/upload.ts:83

    Tested
  • HIGH

    Weak random for token generation

    src/utils/crypto.ts:21

    Validated
  • HIGH

    Hardcoded secret in environment default

    src/config/env.ts:5

    Merged
  • MED

    Overly permissive CORS origin wildcard

    src/middleware/cors.ts:14

    Detected
  • MED

    Missing CSRF token on state-changing route

    src/routes/account.ts:56

    Proposed
  • MED

    Sensitive data logged at info level

    src/logging/logger.ts:33

    Tested
  • LOW

    Dependency with known CVE pinned

    package.json:1

    Detected
  • LOW

    Missing security headers on API responses

    src/middleware/headers.ts:8

    Validated

10 findings shown