[Security] MEDIUM: 2 issue(s) found in compose_dash #19

New issue

Closed

opened 2026-05-14 23:22:37 +00:00 by Mark · 1 comment

Mark commented

2026-05-14 23:22:37 +00:00

Owner

Security Scan Results for `compose_dash`

Severity: MEDIUM
Findings: 2

1. auth_flaw

Details: Potential security issue (insecure_random) in dist/assets/index-C7AiOX5y.js
File: dist/assets/index-C7AiOX5y.js
Pattern: insecure_random

2. auth_flaw

Details: Potential security issue (insecure_random) in server/index.js
File: server/index.js
Pattern: insecure_random

This issue was auto-generated by the security sweep cron job.

## Security Scan Results for `compose_dash` **Severity:** MEDIUM **Findings:** 2 ### 1. auth_flaw - **Details:** Potential security issue (insecure_random) in dist/assets/index-C7AiOX5y.js - **File:** `dist/assets/index-C7AiOX5y.js` - **Pattern:** `insecure_random` ### 2. auth_flaw - **Details:** Potential security issue (insecure_random) in server/index.js - **File:** `server/index.js` - **Pattern:** `insecure_random` --- *This issue was auto-generated by the security sweep cron job.*

Mark added the

triage-approved

bug

labels

2026-05-17 22:57:53 +00:00

Mark added the

quickfix

label

2026-05-19 03:03:57 +00:00

Mark commented

2026-05-19 13:55:19 +00:00

Author

Owner

Closing as noise. The security scanner generates false positives from package-lock.json integrity hashes, stale dist/ artifacts, and transitive npm vulns. Issue filed on hermes-scripts#29 to fix the scanner.

Mark closed this issue

2026-05-19 13:55:19 +00:00