Update yaml
package version to 2.4.5 and adjust dependency versioning
#21
NShiftKey / NShiftKey - code security check
required action
Jun 30, 2024 in 38s
Summary
- 2 security issue(s)
- High : 0
- Medium : 1
- Low : 1
Details
NShiftKey
-
Use of vulnerable crypto algorithm
- Description : If the SHA1 hash function with low security is used, it is vulnerable because attacker can decrypt it.
- Countermeasure : Use secure encryption algorithm. See link below for details. https://naver-security.github.io/nshiftkey-rule-guides/Weak_Hash_used_-_SHA1_eng
- Target Code : Accenture-mercury-nodejs/dist/system/rest-automation.js [view change history] [ignore this]
Accenture-mercury-nodejs/dist/system/rest-automation.js
Lines 791 to 793 in 55486dd
- Target Code : Accenture-mercury-nodejs/dist/system/rest-automation.js [view change history] [ignore this]
-
Potential SQL Injection
- Description : If SQL statements are created and used using unverified input values, internal DB data can be leaked or altered.
- Countermeasure : Verify the input values and use Stored Procedure. See the link below for more information. https://naver-security.github.io/nshiftkey-rule-guides/SQLi_-_SQL_Injection_eng
- Target Code : Accenture-mercury-nodejs/docs/search/search_index.json [view change history] [ignore this]
https://github.com/2lambda123/Accenture-mercury-nodejs/blob/55486ddd6979dbc29722516249f4d74ac6689d0e/docs/search/search_index.json#L386-L388
- Target Code : Accenture-mercury-nodejs/docs/search/search_index.json [view change history] [ignore this]
Loading