[Security] MEDIUM: 2 issue(s) found in redlens #24

New issue

Closed

opened 2026-05-14 23:22:38 +00:00 by Mark · 1 comment

Mark commented

2026-05-14 23:22:38 +00:00

Owner

Security Scan Results for `redlens`

Severity: MEDIUM
Findings: 2

1. auth_flaw

Details: Potential security issue (insecure_random) in app/dist/assets/index-DvQ2vAWL.js
File: app/dist/assets/index-DvQ2vAWL.js
Pattern: insecure_random

2. auth_flaw

Details: Potential security issue (insecure_random) in app/src/components/ui/sidebar.tsx
File: app/src/components/ui/sidebar.tsx
Pattern: insecure_random

This issue was auto-generated by the security sweep cron job.

## Security Scan Results for `redlens` **Severity:** MEDIUM **Findings:** 2 ### 1. auth_flaw - **Details:** Potential security issue (insecure_random) in app/dist/assets/index-DvQ2vAWL.js - **File:** `app/dist/assets/index-DvQ2vAWL.js` - **Pattern:** `insecure_random` ### 2. auth_flaw - **Details:** Potential security issue (insecure_random) in app/src/components/ui/sidebar.tsx - **File:** `app/src/components/ui/sidebar.tsx` - **Pattern:** `insecure_random` --- *This issue was auto-generated by the security sweep cron job.*

Mark added the

triage-approved

bug

labels

2026-05-17 22:57:53 +00:00

Mark commented

2026-05-19 13:55:19 +00:00

Author

Owner

Closing as noise. The security scanner generates false positives from package-lock.json integrity hashes, stale dist/ artifacts, and transitive npm vulns. Issue filed on hermes-scripts#29 to fix the scanner.

Mark closed this issue

2026-05-19 13:55:19 +00:00