[Security] HIGH: 60 issue(s) found in vikunja-cli #15
Labels
No labels
blocked:gate-research
bug
feature-request
in-progress
needs-triage
quickfix
security/medium
triage-approved
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
Mark/vikunja-cli#15
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Security Scan Results for
vikunja-cliSeverity: HIGH
Findings: 60
1. secret_in_diff
c00376d5c00376d5AWS Secret Key2. secret_in_diff
d7925c84d7925c84AWS Secret Key3. secret_in_diff
7dedec8b7dedec8bAWS Secret Key4. secret_in_diff
059311c2059311c2AWS Secret Key5. secret_in_diff
2af133642af13364AWS Secret Key6. secret_in_diff
7d2ec9777d2ec977AWS Secret Key7. secret_in_diff
96cdf11496cdf114AWS Secret Key8. secret_in_diff
e2a47e39e2a47e39Password in URL9. secret_in_diff
6eb4f00b6eb4f00bPassword in URL10. hardcoded_secret
vikunja_env/lib/python3.12/site-packages/pip/_internal/utils/misc.pypassword_assignment11. vulnerable_dependency
12. auth_flaw
tests/test_api_client.pydisable_ssl_verify13. auth_flaw
vikunjatool/api/client.pydisable_ssl_verify14. auth_flaw
vikunja_env/lib/python3.12/site-packages/setuptools/wheel.pyeval_usage15. auth_flaw
vikunja_env/lib/python3.12/site-packages/setuptools/launch.pyexec_usage16. auth_flaw
vikunja_env/lib/python3.12/site-packages/setuptools/build_meta.pyexec_usage17. auth_flaw
vikunja_env/lib/python3.12/site-packages/setuptools/tests/test_editable_install.pyexec_usage18. auth_flaw
vikunja_env/lib/python3.12/site-packages/setuptools/tests/config/test_pyprojecttoml.pyexec_usage19. auth_flaw
vikunja_env/lib/python3.12/site-packages/setuptools/_vendor/typing_extensions.pyeval_usage20. auth_flaw
vikunja_env/lib/python3.12/site-packages/setuptools/_vendor/jaraco/functools/__init__.pyeval_usage21. auth_flaw
vikunja_env/lib/python3.12/site-packages/setuptools/_vendor/packaging/licenses/__init__.pyeval_usage22. auth_flaw
vikunja_env/lib/python3.12/site-packages/setuptools/_distutils/core.pyexec_usage23. auth_flaw
vikunja_env/lib/python3.12/site-packages/setuptools/_distutils/compilers/C/base.pyeval_usage24. auth_flaw
vikunja_env/lib/python3.12/site-packages/pip/_internal/utils/setuptools_build.pyexec_usage25. auth_flaw
vikunja_env/lib/python3.12/site-packages/pip/_internal/network/session.pydisable_ssl_verify26. auth_flaw
vikunja_env/lib/python3.12/site-packages/pip/_vendor/six.pyexec_usage27. auth_flaw
vikunja_env/lib/python3.12/site-packages/pip/_vendor/typing_extensions.pyeval_usage28. auth_flaw
vikunja_env/lib/python3.12/site-packages/pip/_vendor/distlib/wheel.pydisable_ssl_verify29. auth_flaw
vikunja_env/lib/python3.12/site-packages/pip/_vendor/pkg_resources/__init__.pyexec_usage30. auth_flaw
vikunja_env/lib/python3.12/site-packages/pip/_vendor/pygments/formatters/__init__.pyeval_usage31. auth_flaw
vikunja_env/lib/python3.12/site-packages/pip/_vendor/pygments/lexers/__init__.pyexec_usage32. auth_flaw
vikunja_env/lib/python3.12/site-packages/pip/_vendor/pyparsing/results.pyeval_usage33. auth_flaw
vikunja_env/lib/python3.12/site-packages/pip/_vendor/urllib3/packages/six.pyexec_usage34. auth_flaw
vikunja_env/lib/python3.12/site-packages/pip/_vendor/urllib3/contrib/securetransport.pydisable_ssl_verify35. auth_flaw
vikunja_env/lib/python3.12/site-packages/pkg_resources/__init__.pyexec_usage36. auth_flaw
.venv/lib/python3.12/site-packages/_pytest/skipping.pyeval_usage37. auth_flaw
.venv/lib/python3.12/site-packages/_pytest/pytester.pyeval_usage38. auth_flaw
.venv/lib/python3.12/site-packages/_pytest/_code/code.pyeval_usage39. auth_flaw
.venv/lib/python3.12/site-packages/_pytest/_py/path.pyexec_usage40. auth_flaw
.venv/lib/python3.12/site-packages/_pytest/mark/__init__.pyeval_usage41. auth_flaw
.venv/lib/python3.12/site-packages/_pytest/mark/expression.pyeval_usage42. auth_flaw
.venv/lib/python3.12/site-packages/_pytest/assertion/rewrite.pyexec_usage43. auth_flaw
.venv/lib/python3.12/site-packages/pip/_internal/utils/setuptools_build.pyexec_usage44. auth_flaw
.venv/lib/python3.12/site-packages/pip/_internal/network/session.pydisable_ssl_verify45. auth_flaw
.venv/lib/python3.12/site-packages/pip/_vendor/six.pyexec_usage46. auth_flaw
.venv/lib/python3.12/site-packages/pip/_vendor/typing_extensions.pyeval_usage47. auth_flaw
.venv/lib/python3.12/site-packages/pip/_vendor/distlib/wheel.pydisable_ssl_verify48. auth_flaw
.venv/lib/python3.12/site-packages/pip/_vendor/pkg_resources/__init__.pyexec_usage49. auth_flaw
.venv/lib/python3.12/site-packages/pip/_vendor/pygments/formatters/__init__.pyeval_usage50. auth_flaw
.venv/lib/python3.12/site-packages/pip/_vendor/pygments/lexers/__init__.pyexec_usage51. auth_flaw
.venv/lib/python3.12/site-packages/pip/_vendor/pyparsing/results.pyeval_usage52. auth_flaw
.venv/lib/python3.12/site-packages/pip/_vendor/urllib3/packages/six.pyexec_usage53. auth_flaw
.venv/lib/python3.12/site-packages/pip/_vendor/urllib3/contrib/securetransport.pydisable_ssl_verify54. auth_flaw
.venv/lib/python3.12/site-packages/pygments/formatters/__init__.pyeval_usage55. auth_flaw
.venv/lib/python3.12/site-packages/pygments/lexers/__init__.pyexec_usage56. auth_flaw
.venv/lib/python3.12/site-packages/pygments/lexers/_julia_builtins.pyeval_usage57. auth_flaw
.venv/lib/python3.12/site-packages/coverage/execfile.pyexec_usage58. auth_flaw
.venv/lib/python3.12/site-packages/coverage/parser.pyeval_usage59. auth_flaw
.venv/lib/python3.12/site-packages/coverage/templite.pyexec_usage60. auth_flaw
.venv/lib/python3.12/site-packages/coverage/htmlfiles/coverage_html.jsexec_usageThis issue was auto-generated by the security sweep cron job.
GSD RESEARCH phase failed: LLM provider timeout or error.
Retry on next pipeline tick.
Fixed in commit. Closing.