AuWoMe/planish
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[Security] MEDIUM: 12 issue(s) found in planish #10

New issue
Closed
opened 2026-05-14 23:24:40 +00:00 by Mark · 0 comments
Mark commented 2026-05-14 23:24:40 +00:00
Owner
Copy link

Security Scan Results for planish

Severity: MEDIUM
Findings: 12

1. docker_root_user

  • Details: Dockerfile does not set a non-root USER — container runs as root
  • File: Dockerfile

2. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/server/chunks/648.js
  • File: .next/server/chunks/648.js
  • Pattern: insecure_random

3. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/server/chunks/910.js
  • File: .next/server/chunks/910.js
  • Pattern: insecure_random

4. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/server/chunks/35.js
  • File: .next/server/chunks/35.js
  • Pattern: insecure_random

5. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/server/src/middleware.js
  • File: .next/server/src/middleware.js
  • Pattern: insecure_random

6. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/static/chunks/main-a1f1aae9d1aacc35.js
  • File: .next/static/chunks/main-a1f1aae9d1aacc35.js
  • Pattern: insecure_random

7. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/static/chunks/c36f3faa.fa1847d085a6ae60.js
  • File: .next/static/chunks/c36f3faa.fa1847d085a6ae60.js
  • Pattern: insecure_random

8. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/static/chunks/fd9d1056-0d4af8312cd2a00e.js
  • File: .next/static/chunks/fd9d1056-0d4af8312cd2a00e.js
  • Pattern: insecure_random

9. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/static/chunks/polyfills-42372ed130431b0a.js
  • File: .next/static/chunks/polyfills-42372ed130431b0a.js
  • Pattern: insecure_random

10. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/static/chunks/577-e8eb0197959382f9.js
  • File: .next/static/chunks/577-e8eb0197959382f9.js
  • Pattern: insecure_random

11. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/static/chunks/91-3de9034f8d61e0a3.js
  • File: .next/static/chunks/91-3de9034f8d61e0a3.js
  • Pattern: insecure_random

12. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/static/chunks/framework-f66176bb897dc684.js
  • File: .next/static/chunks/framework-f66176bb897dc684.js
  • Pattern: insecure_random

This issue was auto-generated by the security sweep cron job.

## Security Scan Results for `planish` **Severity:** MEDIUM **Findings:** 12 ### 1. docker_root_user - **Details:** Dockerfile does not set a non-root USER — container runs as root - **File:** `Dockerfile` ### 2. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/server/chunks/648.js - **File:** `.next/server/chunks/648.js` - **Pattern:** `insecure_random` ### 3. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/server/chunks/910.js - **File:** `.next/server/chunks/910.js` - **Pattern:** `insecure_random` ### 4. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/server/chunks/35.js - **File:** `.next/server/chunks/35.js` - **Pattern:** `insecure_random` ### 5. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/server/src/middleware.js - **File:** `.next/server/src/middleware.js` - **Pattern:** `insecure_random` ### 6. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/static/chunks/main-a1f1aae9d1aacc35.js - **File:** `.next/static/chunks/main-a1f1aae9d1aacc35.js` - **Pattern:** `insecure_random` ### 7. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/static/chunks/c36f3faa.fa1847d085a6ae60.js - **File:** `.next/static/chunks/c36f3faa.fa1847d085a6ae60.js` - **Pattern:** `insecure_random` ### 8. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/static/chunks/fd9d1056-0d4af8312cd2a00e.js - **File:** `.next/static/chunks/fd9d1056-0d4af8312cd2a00e.js` - **Pattern:** `insecure_random` ### 9. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/static/chunks/polyfills-42372ed130431b0a.js - **File:** `.next/static/chunks/polyfills-42372ed130431b0a.js` - **Pattern:** `insecure_random` ### 10. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/static/chunks/577-e8eb0197959382f9.js - **File:** `.next/static/chunks/577-e8eb0197959382f9.js` - **Pattern:** `insecure_random` ### 11. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/static/chunks/91-3de9034f8d61e0a3.js - **File:** `.next/static/chunks/91-3de9034f8d61e0a3.js` - **Pattern:** `insecure_random` ### 12. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/static/chunks/framework-f66176bb897dc684.js - **File:** `.next/static/chunks/framework-f66176bb897dc684.js` - **Pattern:** `insecure_random` --- *This issue was auto-generated by the security sweep cron job.*
Mark closed this issue 2026-08-09 18:37:41 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
No results found.
Labels
Clear labels   
blocked:needs-decision

   
bug

   
chore

   
in-progress

Locked by an active fixit pipeline run

  
security/high

High severity security issue

  
security/medium

Medium severity security issue

  
triage-approved
No labels
blocked:needs-decision
bug
chore
in-progress
security/high
security/medium
triage-approved
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
AuWoMe/planish#10
No description provided.