Sharang Parnerkar sharang
  • Joined on 2026-02-06
sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[medium] Potential race condition in SSH public key display

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[medium] Complex nested control flow in doc_context function

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[high] Path Traversal via HELP_DOCS_PATH Environment Variable

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[high] Insecure Direct Object Reference in Documentation Loading

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[medium] Inconsistent error handling in doc_context function

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[high] Incorrect fallback logic in doc_context() when walking up from binary location

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[medium] Potential security vulnerability in JavaScript string escaping

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[medium] Inconsistent async behavior between web and non-web targets

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[high] Potential XSS via Copy Button

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[medium] Complex boolean expression in conditional rendering

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[high] Incorrect JavaScript string escaping in copy functionality

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[medium] Inconsistent error handling in copy button

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[high] Insecure Direct Object Reference in Notification Creation

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[high] Incorrect upsert logic for CVE notifications

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[medium] Inconsistent error handling with unwrap() in database operations

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[medium] Complex boolean expression in notification creation logic

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[medium] Potential Command Injection via User-Controlled Repository Name

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[medium] Potential panic from unwrap_or_default() in notification creation

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

[medium] Inconsistent error handling in notification creation loop

sharang commented on pull request sharang/compliance-scanner-agent#55 2026-03-30 13:04:09 +00:00
fix: CVE notifications during scan + help chat doc loading + Dockerfile

Compliance scan found 28 issue(s) in this PR: