Mark/osint-hub
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[Security] MEDIUM: 2 issue(s) found in osint_hub #60

New issue
Closed
opened 2026-05-14 23:22:33 +00:00 by Mark · 1 comment
Mark commented 2026-05-14 23:22:33 +00:00
Owner
Copy link

Security Scan Results for osint_hub

Severity: MEDIUM
Findings: 2

1. auth_flaw

  • Details: Potential security issue (hardcoded_jwt_secret) in backend/tests/fixtures/database.py
  • File: backend/tests/fixtures/database.py
  • Pattern: hardcoded_jwt_secret

2. auth_flaw

  • Details: Potential security issue (insecure_random) in frontend/dist/assets/index-DOHj3qqi.js
  • File: frontend/dist/assets/index-DOHj3qqi.js
  • Pattern: insecure_random

This issue was auto-generated by the security sweep cron job.

## Security Scan Results for `osint_hub` **Severity:** MEDIUM **Findings:** 2 ### 1. auth_flaw - **Details:** Potential security issue (hardcoded_jwt_secret) in backend/tests/fixtures/database.py - **File:** `backend/tests/fixtures/database.py` - **Pattern:** `hardcoded_jwt_secret` ### 2. auth_flaw - **Details:** Potential security issue (insecure_random) in frontend/dist/assets/index-DOHj3qqi.js - **File:** `frontend/dist/assets/index-DOHj3qqi.js` - **Pattern:** `insecure_random` --- *This issue was auto-generated by the security sweep cron job.*
Mark commented 2026-05-15 13:37:05 +00:00
Author
Owner
Copy link

Bug filed at #61 for the hardcoded JWT secret in test fixtures. The insecure_random finding was in frontend/dist/ (build artifact — not actionable). Closing security issue.

Bug filed at #61 for the hardcoded JWT secret in test fixtures. The insecure_random finding was in frontend/dist/ (build artifact — not actionable). Closing security issue.
Mark closed this issue 2026-05-15 13:37:05 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
No results found.
Labels
Clear labels   
agentic-osint

Agentic OSINT features

  
audit

   
blocked:commit-ready-failed

   
blocked:gate-fetch

   
blocked:gate-fetch

   
blocked:gate-lint

   
blocked:gate-plan

   
blocked:gate-research

   
blocked:needs-decision

   
blocked:needs-human

   
blocked:no-changes

   
blocked:preflight

Repo has dirty lint; kilo-gsd preflight refuses to dispatch until lint-cleanup lands

  
blocked:verify-failed

   
bug

Something is not working

  
chore

Config/cleanup item

  
deferred

Deferred — will revisit later

  
enhancement

Enhancement request

  
feature-request

   
in-progress

   
lint-baseline

   
lint-cleanup

kilo-gsd preflight lint gate: repo has dirty ruff state, cleanup required before fixer dispatch

  
needs-decompose

Issue needs decompose processing

  
needs-triage

   
performance

   
quickfix

   
security/medium

Medium severity security issue

  
triage-approved

Approved by triage

No labels
agentic-osint
audit
blocked:commit-ready-failed
blocked:gate-fetch
blocked:gate-fetch
blocked:gate-lint
blocked:gate-plan
blocked:gate-research
blocked:needs-decision
blocked:needs-human
blocked:no-changes
blocked:preflight
blocked:verify-failed
bug
chore
deferred
enhancement
feature-request
in-progress
lint-baseline
lint-cleanup
needs-decompose
needs-triage
performance
quickfix
security/medium
triage-approved
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Mark/osint-hub#60
No description provided.