AuWoMe/forgeflow
2
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions

[Security] MEDIUM: 10 issue(s) found in forgeflow #21

New issue
Closed
opened 2026-05-14 23:25:29 +00:00 by Mark · 0 comments
Mark commented 2026-05-14 23:25:29 +00:00
Owner
Copy link

Security Scan Results for forgeflow

Severity: MEDIUM
Findings: 10

1. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/server/app/api/uploadthing/route.js
  • File: .next/server/app/api/uploadthing/route.js
  • Pattern: insecure_random

2. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/server/app/api/boms/[bomId]/export/route.js
  • File: .next/server/app/api/boms/[bomId]/export/route.js
  • Pattern: insecure_random

3. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/server/chunks/922.js
  • File: .next/server/chunks/922.js
  • Pattern: insecure_random

4. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/server/chunks/7464.js
  • File: .next/server/chunks/7464.js
  • Pattern: insecure_random

5. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/server/src/middleware.js
  • File: .next/server/src/middleware.js
  • Pattern: insecure_random

6. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/static/chunks/polyfills-78c92fac7aa8fdd8.js
  • File: .next/static/chunks/polyfills-78c92fac7aa8fdd8.js
  • Pattern: insecure_random

7. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/static/chunks/main-215a62defd085b3c.js
  • File: .next/static/chunks/main-215a62defd085b3c.js
  • Pattern: insecure_random

8. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/static/chunks/fd9d1056-1363ad45f7f9efd2.js
  • File: .next/static/chunks/fd9d1056-1363ad45f7f9efd2.js
  • Pattern: insecure_random

9. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/static/chunks/73-12cba05a9df5456c.js
  • File: .next/static/chunks/73-12cba05a9df5456c.js
  • Pattern: insecure_random

10. auth_flaw

  • Details: Potential security issue (insecure_random) in .next/static/chunks/framework-00a8ba1a63cfdc9e.js
  • File: .next/static/chunks/framework-00a8ba1a63cfdc9e.js
  • Pattern: insecure_random

This issue was auto-generated by the security sweep cron job.

## Security Scan Results for `forgeflow` **Severity:** MEDIUM **Findings:** 10 ### 1. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/server/app/api/uploadthing/route.js - **File:** `.next/server/app/api/uploadthing/route.js` - **Pattern:** `insecure_random` ### 2. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/server/app/api/boms/[bomId]/export/route.js - **File:** `.next/server/app/api/boms/[bomId]/export/route.js` - **Pattern:** `insecure_random` ### 3. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/server/chunks/922.js - **File:** `.next/server/chunks/922.js` - **Pattern:** `insecure_random` ### 4. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/server/chunks/7464.js - **File:** `.next/server/chunks/7464.js` - **Pattern:** `insecure_random` ### 5. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/server/src/middleware.js - **File:** `.next/server/src/middleware.js` - **Pattern:** `insecure_random` ### 6. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/static/chunks/polyfills-78c92fac7aa8fdd8.js - **File:** `.next/static/chunks/polyfills-78c92fac7aa8fdd8.js` - **Pattern:** `insecure_random` ### 7. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/static/chunks/main-215a62defd085b3c.js - **File:** `.next/static/chunks/main-215a62defd085b3c.js` - **Pattern:** `insecure_random` ### 8. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/static/chunks/fd9d1056-1363ad45f7f9efd2.js - **File:** `.next/static/chunks/fd9d1056-1363ad45f7f9efd2.js` - **Pattern:** `insecure_random` ### 9. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/static/chunks/73-12cba05a9df5456c.js - **File:** `.next/static/chunks/73-12cba05a9df5456c.js` - **Pattern:** `insecure_random` ### 10. auth_flaw - **Details:** Potential security issue (insecure_random) in .next/static/chunks/framework-00a8ba1a63cfdc9e.js - **File:** `.next/static/chunks/framework-00a8ba1a63cfdc9e.js` - **Pattern:** `insecure_random` --- *This issue was auto-generated by the security sweep cron job.*
Mark 2026-07-31 06:59:48 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
No results found.
Labels
Clear labels   
blocked:needs-attention

Manually blocked — needs human attention

  
blocked:needs-decision

   
bug

Functional defect — incorrect behavior, regression, or unmet expectation

  
chore

Config / cleanup / hygiene item, no functional behavior change

  
in-progress

Currently being worked by an agent

  
quickfix

Small, low-risk, spec-aligned — opencode fast-path

  
security/high

High severity security issue

  
triage-approved

Approved by triage — eligible for the issue-fixer pipeline

No labels
blocked:needs-attention
blocked:needs-decision
bug
chore
in-progress
quickfix
security/high
triage-approved
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
AuWoMe/forgeflow#21
No description provided.