[Security] MEDIUM: 4 issue(s) found in yeedi_awmbuild #11

New issue

Closed

opened 2026-05-14 23:23:06 +00:00 by Mark · 1 comment

Mark commented

2026-05-14 23:23:06 +00:00

Owner

Security Scan Results for `yeedi_awmbuild`

Severity: MEDIUM
Findings: 4

1. auth_flaw

Details: Potential security issue (hardcoded_jwt_secret) in .venv/lib/python3.12/site-packages/botocore/credentials.py
File: .venv/lib/python3.12/site-packages/botocore/credentials.py
Pattern: hardcoded_jwt_secret

2. auth_flaw

Details: Potential security issue (hardcoded_jwt_secret) in .venv/lib/python3.12/site-packages/homeassistant/components/baidu/tts.py
File: .venv/lib/python3.12/site-packages/homeassistant/components/baidu/tts.py
Pattern: hardcoded_jwt_secret

3. auth_flaw

Details: Potential security issue (hardcoded_jwt_secret) in .venv/lib/python3.12/site-packages/homeassistant/components/minio/init.py
File: .venv/lib/python3.12/site-packages/homeassistant/components/minio/__init__.py
Pattern: hardcoded_jwt_secret

4. auth_flaw

Details: Potential security issue (hardcoded_jwt_secret) in .venv/lib/python3.12/site-packages/homeassistant/helpers/config_entry_oauth2_flow.py
File: .venv/lib/python3.12/site-packages/homeassistant/helpers/config_entry_oauth2_flow.py
Pattern: hardcoded_jwt_secret

This issue was auto-generated by the security sweep cron job.

## Security Scan Results for `yeedi_awmbuild` **Severity:** MEDIUM **Findings:** 4 ### 1. auth_flaw - **Details:** Potential security issue (hardcoded_jwt_secret) in .venv/lib/python3.12/site-packages/botocore/credentials.py - **File:** `.venv/lib/python3.12/site-packages/botocore/credentials.py` - **Pattern:** `hardcoded_jwt_secret` ### 2. auth_flaw - **Details:** Potential security issue (hardcoded_jwt_secret) in .venv/lib/python3.12/site-packages/homeassistant/components/baidu/tts.py - **File:** `.venv/lib/python3.12/site-packages/homeassistant/components/baidu/tts.py` - **Pattern:** `hardcoded_jwt_secret` ### 3. auth_flaw - **Details:** Potential security issue (hardcoded_jwt_secret) in .venv/lib/python3.12/site-packages/homeassistant/components/minio/__init__.py - **File:** `.venv/lib/python3.12/site-packages/homeassistant/components/minio/__init__.py` - **Pattern:** `hardcoded_jwt_secret` ### 4. auth_flaw - **Details:** Potential security issue (hardcoded_jwt_secret) in .venv/lib/python3.12/site-packages/homeassistant/helpers/config_entry_oauth2_flow.py - **File:** `.venv/lib/python3.12/site-packages/homeassistant/helpers/config_entry_oauth2_flow.py` - **Pattern:** `hardcoded_jwt_secret` --- *This issue was auto-generated by the security sweep cron job.*

Mark commented

2026-05-15 10:51:28 +00:00

Author

Owner

Fixed in commit. Closing.