Mark/nodedesk
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

[Security] HIGH: 89 issue(s) found in NodeDesk #22

New issue
Closed
opened 2026-05-14 23:24:38 +00:00 by Mark · 2 comments
Mark commented 2026-05-14 23:24:38 +00:00
Owner
Copy link

Security Scan Results for NodeDesk

Severity: HIGH
Findings: 89

1. secret_in_diff

  • Details: Potential Password in URL found in commit c36580c2
  • Commit: c36580c2
  • Pattern: Password in URL

2. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 7d68f246
  • Commit: 7d68f246
  • Pattern: AWS Secret Key

3. secret_in_diff

  • Details: Potential Password in URL found in commit e6f6835d
  • Commit: e6f6835d
  • Pattern: Password in URL

4. secret_in_diff

  • Details: Potential Password in URL found in commit b2198e89
  • Commit: b2198e89
  • Pattern: Password in URL

5. secret_in_diff

  • Details: Potential Password in URL found in commit 15628982
  • Commit: 15628982
  • Pattern: Password in URL

6. secret_in_diff

  • Details: Potential AWS Access Key found in commit 6bd7e3c7
  • Commit: 6bd7e3c7
  • Pattern: AWS Access Key

7. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 24d5d213
  • Commit: 24d5d213
  • Pattern: AWS Secret Key

8. secret_in_diff

  • Details: Potential AWS Secret Key found in commit dac32b4a
  • Commit: dac32b4a
  • Pattern: AWS Secret Key

9. secret_in_diff

  • Details: Potential Password in URL found in commit e6b61cdb
  • Commit: e6b61cdb
  • Pattern: Password in URL

10. secret_in_diff

  • Details: Potential Password in URL found in commit 1e346e2e
  • Commit: 1e346e2e
  • Pattern: Password in URL

11. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 3b00feb9
  • Commit: 3b00feb9
  • Pattern: AWS Secret Key

12. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 3a35a687
  • Commit: 3a35a687
  • Pattern: AWS Secret Key

13. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/page.js
  • File: .next/standalone/.next/server/app/app/page.js
  • Pattern: sql_string_concat

14. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/clients/page.js
  • File: .next/standalone/.next/server/app/app/clients/page.js
  • Pattern: sql_string_concat

15. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/settings/page.js
  • File: .next/standalone/.next/server/app/app/settings/page.js
  • Pattern: sql_string_concat

16. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/contacts/page.js
  • File: .next/standalone/.next/server/app/app/contacts/page.js
  • Pattern: sql_string_concat

17. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/search/page.js
  • File: .next/standalone/.next/server/app/app/search/page.js
  • Pattern: sql_string_concat

18. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/systems/page.js
  • File: .next/standalone/.next/server/app/app/systems/page.js
  • Pattern: sql_string_concat

19. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/notes/page.js
  • File: .next/standalone/.next/server/app/app/notes/page.js
  • Pattern: sql_string_concat

20. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/worklogs/page.js
  • File: .next/standalone/.next/server/app/app/worklogs/page.js
  • Pattern: sql_string_concat

21. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/worklogs/new/page.js
  • File: .next/standalone/.next/server/app/app/worklogs/new/page.js
  • Pattern: sql_string_concat

22. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/onboarding/page.js
  • File: .next/standalone/.next/server/app/onboarding/page.js
  • Pattern: sql_string_concat

23. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/login/page.js
  • File: .next/standalone/.next/server/app/login/page.js
  • Pattern: sql_string_concat

24. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/verify-pending/page.js
  • File: .next/standalone/.next/server/app/verify-pending/page.js
  • Pattern: sql_string_concat

25. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/stripe/checkout/route.js
  • File: .next/standalone/.next/server/app/api/stripe/checkout/route.js
  • Pattern: sql_string_concat

26. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/stripe/webhook/route.js
  • File: .next/standalone/.next/server/app/api/stripe/webhook/route.js
  • Pattern: sql_string_concat

27. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/stripe/portal/route.js
  • File: .next/standalone/.next/server/app/api/stripe/portal/route.js
  • Pattern: sql_string_concat

28. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/auth/verify-email/route.js
  • File: .next/standalone/.next/server/app/api/auth/verify-email/route.js
  • Pattern: sql_string_concat

29. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/auth/magic-link/request/route.js
  • File: .next/standalone/.next/server/app/api/auth/magic-link/request/route.js
  • Pattern: sql_string_concat

30. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/attachments/download-url/route.js
  • File: .next/standalone/.next/server/app/api/attachments/download-url/route.js
  • Pattern: sql_string_concat

31. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/attachments/upload-url/route.js
  • File: .next/standalone/.next/server/app/api/attachments/upload-url/route.js
  • Pattern: sql_string_concat

32. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/export/worklogs.csv/route.js
  • File: .next/standalone/.next/server/app/api/export/worklogs.csv/route.js
  • Pattern: sql_string_concat

33. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/export/json/route.js
  • File: .next/standalone/.next/server/app/api/export/json/route.js
  • Pattern: sql_string_concat

34. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/signup/page.js
  • File: .next/standalone/.next/server/app/signup/page.js
  • Pattern: sql_string_concat

35. auth_flaw

  • Details: Potential security issue (exec_usage) in .next/standalone/.next/server/chunks/5972.js
  • File: .next/standalone/.next/server/chunks/5972.js
  • Pattern: exec_usage

36. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/7096.js
  • File: .next/standalone/.next/server/chunks/7096.js
  • Pattern: sql_string_concat

37. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/4471.js
  • File: .next/standalone/.next/server/chunks/4471.js
  • Pattern: sql_string_concat

38. auth_flaw

  • Details: Potential security issue (exec_usage) in .next/standalone/.next/server/chunks/1169.js
  • File: .next/standalone/.next/server/chunks/1169.js
  • Pattern: exec_usage

39. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/9276.js
  • File: .next/standalone/.next/server/chunks/9276.js
  • Pattern: sql_string_concat

40. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/4970.js
  • File: .next/standalone/.next/server/chunks/4970.js
  • Pattern: sql_string_concat

41. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/4028.js
  • File: .next/standalone/.next/server/chunks/4028.js
  • Pattern: sql_string_concat

42. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/4374.js
  • File: .next/standalone/.next/server/chunks/4374.js
  • Pattern: sql_string_concat

43. auth_flaw

  • Details: Potential security issue (exec_usage) in .next/standalone/.next/server/chunks/6783.js
  • File: .next/standalone/.next/server/chunks/6783.js
  • Pattern: exec_usage

44. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/3796.js
  • File: .next/standalone/.next/server/chunks/3796.js
  • Pattern: sql_string_concat

45. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/3721.js
  • File: .next/standalone/.next/server/chunks/3721.js
  • Pattern: sql_string_concat

46. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/2574.js
  • File: .next/standalone/.next/server/chunks/2574.js
  • Pattern: sql_string_concat

47. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/5433.js
  • File: .next/standalone/.next/server/chunks/5433.js
  • Pattern: sql_string_concat

48. auth_flaw

  • Details: Potential security issue (exec_usage) in .next/standalone/.next/server/chunks/1682.js
  • File: .next/standalone/.next/server/chunks/1682.js
  • Pattern: exec_usage

49. auth_flaw

  • Details: Potential security issue (exec_usage) in .next/standalone/.next/server/src/middleware.js
  • File: .next/standalone/.next/server/src/middleware.js
  • Pattern: exec_usage

50. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/app/page.js
  • File: .next/server/app/app/page.js
  • Pattern: sql_string_concat

51. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/app/clients/page.js
  • File: .next/server/app/app/clients/page.js
  • Pattern: sql_string_concat

52. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/app/settings/page.js
  • File: .next/server/app/app/settings/page.js
  • Pattern: sql_string_concat

53. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/app/contacts/page.js
  • File: .next/server/app/app/contacts/page.js
  • Pattern: sql_string_concat

54. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/app/search/page.js
  • File: .next/server/app/app/search/page.js
  • Pattern: sql_string_concat

55. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/app/systems/page.js
  • File: .next/server/app/app/systems/page.js
  • Pattern: sql_string_concat

56. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/app/notes/page.js
  • File: .next/server/app/app/notes/page.js
  • Pattern: sql_string_concat

57. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/app/worklogs/page.js
  • File: .next/server/app/app/worklogs/page.js
  • Pattern: sql_string_concat

58. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/app/worklogs/new/page.js
  • File: .next/server/app/app/worklogs/new/page.js
  • Pattern: sql_string_concat

59. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/onboarding/page.js
  • File: .next/server/app/onboarding/page.js
  • Pattern: sql_string_concat

60. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/login/page.js
  • File: .next/server/app/login/page.js
  • Pattern: sql_string_concat

61. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/verify-pending/page.js
  • File: .next/server/app/verify-pending/page.js
  • Pattern: sql_string_concat

62. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/api/stripe/checkout/route.js
  • File: .next/server/app/api/stripe/checkout/route.js
  • Pattern: sql_string_concat

63. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/api/stripe/webhook/route.js
  • File: .next/server/app/api/stripe/webhook/route.js
  • Pattern: sql_string_concat

64. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/api/stripe/portal/route.js
  • File: .next/server/app/api/stripe/portal/route.js
  • Pattern: sql_string_concat

65. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/api/auth/verify-email/route.js
  • File: .next/server/app/api/auth/verify-email/route.js
  • Pattern: sql_string_concat

66. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/api/auth/magic-link/request/route.js
  • File: .next/server/app/api/auth/magic-link/request/route.js
  • Pattern: sql_string_concat

67. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/api/attachments/download-url/route.js
  • File: .next/server/app/api/attachments/download-url/route.js
  • Pattern: sql_string_concat

68. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/api/attachments/upload-url/route.js
  • File: .next/server/app/api/attachments/upload-url/route.js
  • Pattern: sql_string_concat

69. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/api/export/worklogs.csv/route.js
  • File: .next/server/app/api/export/worklogs.csv/route.js
  • Pattern: sql_string_concat

70. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/api/export/json/route.js
  • File: .next/server/app/api/export/json/route.js
  • Pattern: sql_string_concat

71. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/app/signup/page.js
  • File: .next/server/app/signup/page.js
  • Pattern: sql_string_concat

72. auth_flaw

  • Details: Potential security issue (exec_usage) in .next/server/chunks/5972.js
  • File: .next/server/chunks/5972.js
  • Pattern: exec_usage

73. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/chunks/7096.js
  • File: .next/server/chunks/7096.js
  • Pattern: sql_string_concat

74. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/chunks/4471.js
  • File: .next/server/chunks/4471.js
  • Pattern: sql_string_concat

75. auth_flaw

  • Details: Potential security issue (exec_usage) in .next/server/chunks/1169.js
  • File: .next/server/chunks/1169.js
  • Pattern: exec_usage

76. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/chunks/9276.js
  • File: .next/server/chunks/9276.js
  • Pattern: sql_string_concat

77. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/chunks/4970.js
  • File: .next/server/chunks/4970.js
  • Pattern: sql_string_concat

78. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/chunks/4028.js
  • File: .next/server/chunks/4028.js
  • Pattern: sql_string_concat

79. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/chunks/4374.js
  • File: .next/server/chunks/4374.js
  • Pattern: sql_string_concat

80. auth_flaw

  • Details: Potential security issue (exec_usage) in .next/server/chunks/6783.js
  • File: .next/server/chunks/6783.js
  • Pattern: exec_usage

81. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/chunks/3796.js
  • File: .next/server/chunks/3796.js
  • Pattern: sql_string_concat

82. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/chunks/3721.js
  • File: .next/server/chunks/3721.js
  • Pattern: sql_string_concat

83. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/chunks/2574.js
  • File: .next/server/chunks/2574.js
  • Pattern: sql_string_concat

84. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/server/chunks/5433.js
  • File: .next/server/chunks/5433.js
  • Pattern: sql_string_concat

85. auth_flaw

  • Details: Potential security issue (exec_usage) in .next/server/chunks/1682.js
  • File: .next/server/chunks/1682.js
  • Pattern: exec_usage

86. auth_flaw

  • Details: Potential security issue (exec_usage) in .next/server/src/middleware.js
  • File: .next/server/src/middleware.js
  • Pattern: exec_usage

87. auth_flaw

  • Details: Potential security issue (sql_string_concat) in .next/static/chunks/webpack-3bdc93c5ed9f8968.js
  • File: .next/static/chunks/webpack-3bdc93c5ed9f8968.js
  • Pattern: sql_string_concat

88. auth_flaw

  • Details: Potential security issue (exec_usage) in .next/static/chunks/117-a173ec7f789c6de6.js
  • File: .next/static/chunks/117-a173ec7f789c6de6.js
  • Pattern: exec_usage

89. auth_flaw

  • Details: Potential security issue (exec_usage) in .next/static/chunks/972-8c737d6cac936def.js
  • File: .next/static/chunks/972-8c737d6cac936def.js
  • Pattern: exec_usage

This issue was auto-generated by the security sweep cron job.

## Security Scan Results for `NodeDesk` **Severity:** HIGH **Findings:** 89 ### 1. secret_in_diff - **Details:** Potential Password in URL found in commit c36580c2 - **Commit:** `c36580c2` - **Pattern:** `Password in URL` ### 2. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 7d68f246 - **Commit:** `7d68f246` - **Pattern:** `AWS Secret Key` ### 3. secret_in_diff - **Details:** Potential Password in URL found in commit e6f6835d - **Commit:** `e6f6835d` - **Pattern:** `Password in URL` ### 4. secret_in_diff - **Details:** Potential Password in URL found in commit b2198e89 - **Commit:** `b2198e89` - **Pattern:** `Password in URL` ### 5. secret_in_diff - **Details:** Potential Password in URL found in commit 15628982 - **Commit:** `15628982` - **Pattern:** `Password in URL` ### 6. secret_in_diff - **Details:** Potential AWS Access Key found in commit 6bd7e3c7 - **Commit:** `6bd7e3c7` - **Pattern:** `AWS Access Key` ### 7. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 24d5d213 - **Commit:** `24d5d213` - **Pattern:** `AWS Secret Key` ### 8. secret_in_diff - **Details:** Potential AWS Secret Key found in commit dac32b4a - **Commit:** `dac32b4a` - **Pattern:** `AWS Secret Key` ### 9. secret_in_diff - **Details:** Potential Password in URL found in commit e6b61cdb - **Commit:** `e6b61cdb` - **Pattern:** `Password in URL` ### 10. secret_in_diff - **Details:** Potential Password in URL found in commit 1e346e2e - **Commit:** `1e346e2e` - **Pattern:** `Password in URL` ### 11. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 3b00feb9 - **Commit:** `3b00feb9` - **Pattern:** `AWS Secret Key` ### 12. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 3a35a687 - **Commit:** `3a35a687` - **Pattern:** `AWS Secret Key` ### 13. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/page.js - **File:** `.next/standalone/.next/server/app/app/page.js` - **Pattern:** `sql_string_concat` ### 14. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/clients/page.js - **File:** `.next/standalone/.next/server/app/app/clients/page.js` - **Pattern:** `sql_string_concat` ### 15. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/settings/page.js - **File:** `.next/standalone/.next/server/app/app/settings/page.js` - **Pattern:** `sql_string_concat` ### 16. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/contacts/page.js - **File:** `.next/standalone/.next/server/app/app/contacts/page.js` - **Pattern:** `sql_string_concat` ### 17. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/search/page.js - **File:** `.next/standalone/.next/server/app/app/search/page.js` - **Pattern:** `sql_string_concat` ### 18. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/systems/page.js - **File:** `.next/standalone/.next/server/app/app/systems/page.js` - **Pattern:** `sql_string_concat` ### 19. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/notes/page.js - **File:** `.next/standalone/.next/server/app/app/notes/page.js` - **Pattern:** `sql_string_concat` ### 20. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/worklogs/page.js - **File:** `.next/standalone/.next/server/app/app/worklogs/page.js` - **Pattern:** `sql_string_concat` ### 21. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/app/worklogs/new/page.js - **File:** `.next/standalone/.next/server/app/app/worklogs/new/page.js` - **Pattern:** `sql_string_concat` ### 22. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/onboarding/page.js - **File:** `.next/standalone/.next/server/app/onboarding/page.js` - **Pattern:** `sql_string_concat` ### 23. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/login/page.js - **File:** `.next/standalone/.next/server/app/login/page.js` - **Pattern:** `sql_string_concat` ### 24. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/verify-pending/page.js - **File:** `.next/standalone/.next/server/app/verify-pending/page.js` - **Pattern:** `sql_string_concat` ### 25. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/stripe/checkout/route.js - **File:** `.next/standalone/.next/server/app/api/stripe/checkout/route.js` - **Pattern:** `sql_string_concat` ### 26. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/stripe/webhook/route.js - **File:** `.next/standalone/.next/server/app/api/stripe/webhook/route.js` - **Pattern:** `sql_string_concat` ### 27. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/stripe/portal/route.js - **File:** `.next/standalone/.next/server/app/api/stripe/portal/route.js` - **Pattern:** `sql_string_concat` ### 28. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/auth/verify-email/route.js - **File:** `.next/standalone/.next/server/app/api/auth/verify-email/route.js` - **Pattern:** `sql_string_concat` ### 29. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/auth/magic-link/request/route.js - **File:** `.next/standalone/.next/server/app/api/auth/magic-link/request/route.js` - **Pattern:** `sql_string_concat` ### 30. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/attachments/download-url/route.js - **File:** `.next/standalone/.next/server/app/api/attachments/download-url/route.js` - **Pattern:** `sql_string_concat` ### 31. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/attachments/upload-url/route.js - **File:** `.next/standalone/.next/server/app/api/attachments/upload-url/route.js` - **Pattern:** `sql_string_concat` ### 32. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/export/worklogs.csv/route.js - **File:** `.next/standalone/.next/server/app/api/export/worklogs.csv/route.js` - **Pattern:** `sql_string_concat` ### 33. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/api/export/json/route.js - **File:** `.next/standalone/.next/server/app/api/export/json/route.js` - **Pattern:** `sql_string_concat` ### 34. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/app/signup/page.js - **File:** `.next/standalone/.next/server/app/signup/page.js` - **Pattern:** `sql_string_concat` ### 35. auth_flaw - **Details:** Potential security issue (exec_usage) in .next/standalone/.next/server/chunks/5972.js - **File:** `.next/standalone/.next/server/chunks/5972.js` - **Pattern:** `exec_usage` ### 36. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/7096.js - **File:** `.next/standalone/.next/server/chunks/7096.js` - **Pattern:** `sql_string_concat` ### 37. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/4471.js - **File:** `.next/standalone/.next/server/chunks/4471.js` - **Pattern:** `sql_string_concat` ### 38. auth_flaw - **Details:** Potential security issue (exec_usage) in .next/standalone/.next/server/chunks/1169.js - **File:** `.next/standalone/.next/server/chunks/1169.js` - **Pattern:** `exec_usage` ### 39. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/9276.js - **File:** `.next/standalone/.next/server/chunks/9276.js` - **Pattern:** `sql_string_concat` ### 40. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/4970.js - **File:** `.next/standalone/.next/server/chunks/4970.js` - **Pattern:** `sql_string_concat` ### 41. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/4028.js - **File:** `.next/standalone/.next/server/chunks/4028.js` - **Pattern:** `sql_string_concat` ### 42. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/4374.js - **File:** `.next/standalone/.next/server/chunks/4374.js` - **Pattern:** `sql_string_concat` ### 43. auth_flaw - **Details:** Potential security issue (exec_usage) in .next/standalone/.next/server/chunks/6783.js - **File:** `.next/standalone/.next/server/chunks/6783.js` - **Pattern:** `exec_usage` ### 44. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/3796.js - **File:** `.next/standalone/.next/server/chunks/3796.js` - **Pattern:** `sql_string_concat` ### 45. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/3721.js - **File:** `.next/standalone/.next/server/chunks/3721.js` - **Pattern:** `sql_string_concat` ### 46. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/2574.js - **File:** `.next/standalone/.next/server/chunks/2574.js` - **Pattern:** `sql_string_concat` ### 47. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/standalone/.next/server/chunks/5433.js - **File:** `.next/standalone/.next/server/chunks/5433.js` - **Pattern:** `sql_string_concat` ### 48. auth_flaw - **Details:** Potential security issue (exec_usage) in .next/standalone/.next/server/chunks/1682.js - **File:** `.next/standalone/.next/server/chunks/1682.js` - **Pattern:** `exec_usage` ### 49. auth_flaw - **Details:** Potential security issue (exec_usage) in .next/standalone/.next/server/src/middleware.js - **File:** `.next/standalone/.next/server/src/middleware.js` - **Pattern:** `exec_usage` ### 50. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/app/page.js - **File:** `.next/server/app/app/page.js` - **Pattern:** `sql_string_concat` ### 51. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/app/clients/page.js - **File:** `.next/server/app/app/clients/page.js` - **Pattern:** `sql_string_concat` ### 52. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/app/settings/page.js - **File:** `.next/server/app/app/settings/page.js` - **Pattern:** `sql_string_concat` ### 53. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/app/contacts/page.js - **File:** `.next/server/app/app/contacts/page.js` - **Pattern:** `sql_string_concat` ### 54. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/app/search/page.js - **File:** `.next/server/app/app/search/page.js` - **Pattern:** `sql_string_concat` ### 55. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/app/systems/page.js - **File:** `.next/server/app/app/systems/page.js` - **Pattern:** `sql_string_concat` ### 56. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/app/notes/page.js - **File:** `.next/server/app/app/notes/page.js` - **Pattern:** `sql_string_concat` ### 57. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/app/worklogs/page.js - **File:** `.next/server/app/app/worklogs/page.js` - **Pattern:** `sql_string_concat` ### 58. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/app/worklogs/new/page.js - **File:** `.next/server/app/app/worklogs/new/page.js` - **Pattern:** `sql_string_concat` ### 59. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/onboarding/page.js - **File:** `.next/server/app/onboarding/page.js` - **Pattern:** `sql_string_concat` ### 60. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/login/page.js - **File:** `.next/server/app/login/page.js` - **Pattern:** `sql_string_concat` ### 61. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/verify-pending/page.js - **File:** `.next/server/app/verify-pending/page.js` - **Pattern:** `sql_string_concat` ### 62. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/api/stripe/checkout/route.js - **File:** `.next/server/app/api/stripe/checkout/route.js` - **Pattern:** `sql_string_concat` ### 63. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/api/stripe/webhook/route.js - **File:** `.next/server/app/api/stripe/webhook/route.js` - **Pattern:** `sql_string_concat` ### 64. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/api/stripe/portal/route.js - **File:** `.next/server/app/api/stripe/portal/route.js` - **Pattern:** `sql_string_concat` ### 65. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/api/auth/verify-email/route.js - **File:** `.next/server/app/api/auth/verify-email/route.js` - **Pattern:** `sql_string_concat` ### 66. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/api/auth/magic-link/request/route.js - **File:** `.next/server/app/api/auth/magic-link/request/route.js` - **Pattern:** `sql_string_concat` ### 67. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/api/attachments/download-url/route.js - **File:** `.next/server/app/api/attachments/download-url/route.js` - **Pattern:** `sql_string_concat` ### 68. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/api/attachments/upload-url/route.js - **File:** `.next/server/app/api/attachments/upload-url/route.js` - **Pattern:** `sql_string_concat` ### 69. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/api/export/worklogs.csv/route.js - **File:** `.next/server/app/api/export/worklogs.csv/route.js` - **Pattern:** `sql_string_concat` ### 70. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/api/export/json/route.js - **File:** `.next/server/app/api/export/json/route.js` - **Pattern:** `sql_string_concat` ### 71. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/app/signup/page.js - **File:** `.next/server/app/signup/page.js` - **Pattern:** `sql_string_concat` ### 72. auth_flaw - **Details:** Potential security issue (exec_usage) in .next/server/chunks/5972.js - **File:** `.next/server/chunks/5972.js` - **Pattern:** `exec_usage` ### 73. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/chunks/7096.js - **File:** `.next/server/chunks/7096.js` - **Pattern:** `sql_string_concat` ### 74. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/chunks/4471.js - **File:** `.next/server/chunks/4471.js` - **Pattern:** `sql_string_concat` ### 75. auth_flaw - **Details:** Potential security issue (exec_usage) in .next/server/chunks/1169.js - **File:** `.next/server/chunks/1169.js` - **Pattern:** `exec_usage` ### 76. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/chunks/9276.js - **File:** `.next/server/chunks/9276.js` - **Pattern:** `sql_string_concat` ### 77. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/chunks/4970.js - **File:** `.next/server/chunks/4970.js` - **Pattern:** `sql_string_concat` ### 78. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/chunks/4028.js - **File:** `.next/server/chunks/4028.js` - **Pattern:** `sql_string_concat` ### 79. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/chunks/4374.js - **File:** `.next/server/chunks/4374.js` - **Pattern:** `sql_string_concat` ### 80. auth_flaw - **Details:** Potential security issue (exec_usage) in .next/server/chunks/6783.js - **File:** `.next/server/chunks/6783.js` - **Pattern:** `exec_usage` ### 81. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/chunks/3796.js - **File:** `.next/server/chunks/3796.js` - **Pattern:** `sql_string_concat` ### 82. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/chunks/3721.js - **File:** `.next/server/chunks/3721.js` - **Pattern:** `sql_string_concat` ### 83. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/chunks/2574.js - **File:** `.next/server/chunks/2574.js` - **Pattern:** `sql_string_concat` ### 84. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/server/chunks/5433.js - **File:** `.next/server/chunks/5433.js` - **Pattern:** `sql_string_concat` ### 85. auth_flaw - **Details:** Potential security issue (exec_usage) in .next/server/chunks/1682.js - **File:** `.next/server/chunks/1682.js` - **Pattern:** `exec_usage` ### 86. auth_flaw - **Details:** Potential security issue (exec_usage) in .next/server/src/middleware.js - **File:** `.next/server/src/middleware.js` - **Pattern:** `exec_usage` ### 87. auth_flaw - **Details:** Potential security issue (sql_string_concat) in .next/static/chunks/webpack-3bdc93c5ed9f8968.js - **File:** `.next/static/chunks/webpack-3bdc93c5ed9f8968.js` - **Pattern:** `sql_string_concat` ### 88. auth_flaw - **Details:** Potential security issue (exec_usage) in .next/static/chunks/117-a173ec7f789c6de6.js - **File:** `.next/static/chunks/117-a173ec7f789c6de6.js` - **Pattern:** `exec_usage` ### 89. auth_flaw - **Details:** Potential security issue (exec_usage) in .next/static/chunks/972-8c737d6cac936def.js - **File:** `.next/static/chunks/972-8c737d6cac936def.js` - **Pattern:** `exec_usage` --- *This issue was auto-generated by the security sweep cron job.*
Mark commented 2026-05-18 09:10:08 +00:00
Author
Owner
Copy link

GSD RESEARCH phase could not determine a clear fix.

⚠️ Reached maximum iterations (90). Requesting summary...
STATUS: UNCLEAR

EVIDENCE:
I examined the nodedesk codebase at /home/b/Projects/nodedesk. The issue title claims "89 issue(s) found in NodeDesk" with HIGH severity, but no actual issue body or security scan report was accessible in the repository. I performed the following investigation:

  1. No fix commits for #22: git log --all --grep="#22" returned nothing. No branch or commit references this security issue.

  2. **npm audit shows

GSD RESEARCH phase could not determine a clear fix. ⚠️ Reached maximum iterations (90). Requesting summary... STATUS: UNCLEAR EVIDENCE: I examined the nodedesk codebase at /home/b/Projects/nodedesk. The issue title claims "89 issue(s) found in NodeDesk" with HIGH severity, but no actual issue body or security scan report was accessible in the repository. I performed the following investigation: 1. **No fix commits for #22**: `git log --all --grep="#22"` returned nothing. No branch or commit references this security issue. 2. **npm audit shows
Mark commented 2026-05-23 18:32:57 +00:00
Author
Owner
Copy link

False positive — all 18 findings are in .next/ build artifacts (cache, prerender-manifest, middleware-manifest, standalone). These are Next.js internal build hashes, not real credentials. The security scanner needs to exclude .next/, dist/, and similar build output directories.

False positive — all 18 findings are in `.next/` build artifacts (cache, prerender-manifest, middleware-manifest, standalone). These are Next.js internal build hashes, not real credentials. The security scanner needs to exclude `.next/`, `dist/`, and similar build output directories.
Mark closed this issue 2026-05-23 18:32:58 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
No results found.
Labels
Clear labels   
blocked:gate-fetch

   
blocked:gate-implement

   
blocked:needs-attention

   
blocked:needs-decision

   
blocked:needs-human

   
blocked:needs-local-checkout

   
blocked:no-changes

   
bug

Bug report

  
feature-request

   
in-progress

   
needs-decompose

Ready to be decomposed into sub-issues

  
needs-triage

   
ops-task

   
quickfix

   
security/high

High severity security issue

  
security/low

Low severity security issue

  
security/medium

Medium severity security issue

  
triage-approved
No labels
blocked:gate-fetch
blocked:gate-implement
blocked:needs-attention
blocked:needs-decision
blocked:needs-human
blocked:needs-local-checkout
blocked:no-changes
bug
feature-request
in-progress
needs-decompose
needs-triage
ops-task
quickfix
security/high
security/low
security/medium
triage-approved
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Mark/nodedesk#22
No description provided.