Mark/osint-hub
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[Security] MEDIUM: 2 issue(s) found in osint-hub #58

New issue
Closed
opened 2026-05-14 23:22:11 +00:00 by Mark · 1 comment
Mark commented 2026-05-14 23:22:11 +00:00
Owner
Copy link

Security Scan Results for osint-hub

Severity: MEDIUM
Findings: 2

1. auth_flaw

  • Details: Potential security issue (hardcoded_jwt_secret) in backend/tests/fixtures/database.py
  • File: backend/tests/fixtures/database.py
  • Pattern: hardcoded_jwt_secret

2. auth_flaw

  • Details: Potential security issue (cors_wildcard) in .venv/lib/python3.12/site-packages/starlette/middleware/cors.py
  • File: .venv/lib/python3.12/site-packages/starlette/middleware/cors.py
  • Pattern: cors_wildcard

This issue was auto-generated by the security sweep cron job.

## Security Scan Results for `osint-hub` **Severity:** MEDIUM **Findings:** 2 ### 1. auth_flaw - **Details:** Potential security issue (hardcoded_jwt_secret) in backend/tests/fixtures/database.py - **File:** `backend/tests/fixtures/database.py` - **Pattern:** `hardcoded_jwt_secret` ### 2. auth_flaw - **Details:** Potential security issue (cors_wildcard) in .venv/lib/python3.12/site-packages/starlette/middleware/cors.py - **File:** `.venv/lib/python3.12/site-packages/starlette/middleware/cors.py` - **Pattern:** `cors_wildcard` --- *This issue was auto-generated by the security sweep cron job.*
Mark commented 2026-05-19 13:55:20 +00:00
Author
Owner
Copy link

Closing as noise. The security scanner generates false positives from package-lock.json integrity hashes, stale dist/ artifacts, and transitive npm vulns. Issue filed on hermes-scripts#29 to fix the scanner.

Closing as noise. The security scanner generates false positives from package-lock.json integrity hashes, stale dist/ artifacts, and transitive npm vulns. Issue filed on hermes-scripts#29 to fix the scanner.
Mark closed this issue 2026-05-19 13:55:21 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
No results found.
Labels
Clear labels   
agentic-osint

Agentic OSINT features

  
audit

   
blocked:commit-ready-failed

   
blocked:gate-fetch

   
blocked:gate-fetch

   
blocked:gate-lint

   
blocked:gate-plan

   
blocked:gate-research

   
blocked:needs-decision

   
blocked:needs-human

   
blocked:no-changes

   
blocked:preflight

Repo has dirty lint; kilo-gsd preflight refuses to dispatch until lint-cleanup lands

  
blocked:verify-failed

   
bug

Something is not working

  
chore

Config/cleanup item

  
deferred

Deferred — will revisit later

  
enhancement

Enhancement request

  
feature-request

   
in-progress

   
lint-baseline

   
lint-cleanup

kilo-gsd preflight lint gate: repo has dirty ruff state, cleanup required before fixer dispatch

  
needs-decompose

Issue needs decompose processing

  
needs-triage

   
performance

   
quickfix

   
security/medium

Medium severity security issue

  
triage-approved

Approved by triage

No labels
agentic-osint
audit
blocked:commit-ready-failed
blocked:gate-fetch
blocked:gate-fetch
blocked:gate-lint
blocked:gate-plan
blocked:gate-research
blocked:needs-decision
blocked:needs-human
blocked:no-changes
blocked:preflight
blocked:verify-failed
bug
chore
deferred
enhancement
feature-request
in-progress
lint-baseline
lint-cleanup
needs-decompose
needs-triage
performance
quickfix
security/medium
triage-approved
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Mark/osint-hub#58
No description provided.