Loading the registry…
Cursor Rules are .cursorrules / .cursor/rules files that steer Cursor's AI; scanned with the same pipeline.
We found this by crawling public sources and nobody has attested to it. That is how most of the registry gets here, and it is not a mark against the artifact — it only means no authenticated act of publication is on record. An artifact can be the vendor's own and still appear here.
8 critical findings reported by trivy, osv-scanner. The composite score alone does not reflect this — read the per-scanner reports below.
Cursor Rules are .cursorrules / .cursor/rules files that steer Cursor's AI. Review the scanned source before copying them into your own project.
nerlo install -- beastofsyn/readease
6 of 11 scanners examined this package. The rest do not apply to it — language, ecosystem and packaging decide which analyzers can say anything, and a scanner that cannot examine an artifact reports nothing rather than passing it.
v2.0.11
7 findings · 8.2s
v0.3.74
3 findings · 2.4s
v0.1.0
2 findings · 3.7s
v0.1.0
0 findings · 3.8s
v0.71.0
121 findings · 0.3s
v2.3.8
128 findings · 1.5s
v1.4.0
None of the entry points this scanner reads were found in this artifact. What each scanner covers
0 findings · 0.2s
vv0.3.2
No Go packages were found in this artifact. What each scanner covers
0 findings · 0.1s
v0.1.0
This scanner found nothing in this artifact that it assesses. What each scanner covers
0 findings · 0.9s
v0.71.0
No container image was published for this artifact. What each scanner covers
0 findings · 0.0s
vv1.6.0
No Go modules were found in this artifact. What each scanner covers
0 findings · 0.1s
1 scan on record. Every scan's full results are retained immutably for 24 months.
| Completed | Composite | Change | Scanners | Status |
|---|---|---|---|---|
| Aug 22, 2026 | Flagged41 | — | agentshield ·n/a: not applicablecisco-skill-scanner: completeagent-audit-kit: completenerlo-behavioral: completenerlo-install-instruction: completecapslock ·n/a: not applicablenerlo-multi-source ·n/a: not applicabletrivy: completeosv-scanner: completetrivy_image ·n/a: not applicablegovulncheck ·n/a: not applicable | completed |
Findings in files this artifact installs stand as reported; a model re-read the rest and said which ones it believes are false positives. This is a second opinion published beside the evidence, not a correction to it: the per-scanner reports above are unchanged, every dismissed finding is still listed there at its original severity, and the score and the Flagged badge are computed from those raw severities alone. Nothing below moved them.
Out of 261 findings across every scanner that examined this package. None of the 8 findings rated critical by their scanner were dismissed.
These findings are in files this artifact installs and are not placeholder values. No false-positive basis can be corroborated for such a finding, so this review never dismisses one; they were not sent to the model and stand at their scanner's severity.
3 GHSA-537c-gmf6-5ccf
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt, backend/requirements.txt · reported by osv-scanner, trivy
3 GHSA-h4gh-qq45-vh27
Files: backend/requirements.txt, /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by trivy, osv-scanner
3 GHSA-jm77-qphf-c4w8
Files: backend/requirements.txt, /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by trivy, osv-scanner
3 GHSA-v8gr-m533-ghj9
Files: backend/requirements.txt, /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by trivy, osv-scanner
2 FILE_MAGIC_MISMATCH
Files: /repo/frontend/vite.config.js · reported by cisco-skill-scanner
2 GHSA-5cpq-8wj7-hf2v
Files: backend/requirements.txt, /repo/backend/requirements.txt · reported by trivy, osv-scanner
2 MANIFEST_MISSING_LICENSE
Files: /repo/SKILL.md, /repo/frontend/SKILL.md · reported by cisco-skill-scanner
2 PYSEC-2023-254
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2024-225
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2024-52
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2026-1200
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2026-1201
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2026-1202
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2026-1203
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2026-1283
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2026-1285
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2026-1826
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2026-188
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2026-2116
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2026-2117
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2026-2119
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2026-2141
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2026-25
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2026-287
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2026-35
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2026-3553
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 PYSEC-2026-3554
Files: /repo/backend/requirements.txt, /repo/backend/requirements_fastapi.txt · reported by osv-scanner
2 SOCIAL_ENG_VAGUE_DESCRIPTION
Files: /repo/SKILL.md, /repo/frontend/SKILL.md · reported by cisco-skill-scanner
1 AAK-LEGAL-002
Files: frontend/package.json · reported by agent-audit-kit
1 AAK-OAUTH-005
Files: backend/dependencies.py · reported by agent-audit-kit
1 AAK-OAUTH-008
Files: backend/dependencies.py · reported by agent-audit-kit
1 CVE-2023-26159
Files: frontend/package-lock.json · reported by trivy
1 CVE-2023-26364
Files: frontend/package-lock.json · reported by trivy
1 CVE-2023-29483
Files: backend/requirements.txt · reported by trivy
1 CVE-2023-30861
Files: backend/requirements.txt · reported by trivy
1 CVE-2023-32681
Files: backend/requirements.txt · reported by trivy
1 CVE-2023-32731
Files: backend/requirements.txt · reported by trivy
1 CVE-2023-32732
Files: backend/requirements.txt · reported by trivy
1 CVE-2023-33953
Files: backend/requirements.txt · reported by trivy
1 CVE-2023-37920
Files: backend/requirements.txt · reported by trivy
1 CVE-2023-43804
Files: backend/requirements.txt · reported by trivy
1 CVE-2023-45803
Files: backend/requirements.txt · reported by trivy
1 CVE-2023-45857
Files: frontend/package-lock.json · reported by trivy
1 CVE-2023-46136
Files: backend/requirements.txt · reported by trivy
1 CVE-2023-4785
Files: backend/requirements.txt · reported by trivy
1 CVE-2023-48631
Files: frontend/package-lock.json · reported by trivy
1 CVE-2023-49083
Files: backend/requirements.txt · reported by trivy
1 CVE-2023-50782
Files: backend/requirements.txt · reported by trivy
1 CVE-2023-52323
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-0727
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-1681
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-21503
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-26130
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-28849
Files: frontend/package-lock.json · reported by trivy
1 CVE-2024-34064
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-34069
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-35195
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-3651
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-37568
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-37891
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-39338
Files: frontend/package-lock.json · reported by trivy
1 CVE-2024-39689
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-4067
Files: frontend/package-lock.json · reported by trivy
1 CVE-2024-4068
Files: frontend/package-lock.json · reported by trivy
1 CVE-2024-45296
Files: frontend/package-lock.json · reported by trivy
1 CVE-2024-47081
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-49766
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-49767
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-5569
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-56201
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-5629
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-56326
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-6221
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-6839
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-6844
Files: backend/requirements.txt · reported by trivy
1 CVE-2024-6866
Files: backend/requirements.txt · reported by trivy
1 CVE-2025-13465
Files: frontend/package-lock.json · reported by trivy
1 CVE-2025-27152
Files: frontend/package-lock.json · reported by trivy
1 CVE-2025-27516
Files: backend/requirements.txt · reported by trivy
1 CVE-2025-4565
Files: backend/requirements.txt · reported by trivy
1 CVE-2025-50181
Files: backend/requirements.txt · reported by trivy
1 CVE-2025-58754
Files: frontend/package-lock.json · reported by trivy
1 CVE-2025-59420
Files: backend/requirements.txt · reported by trivy
1 CVE-2025-61920
Files: backend/requirements.txt · reported by trivy
1 CVE-2025-62706
Files: backend/requirements.txt · reported by trivy
1 CVE-2025-62718
Files: frontend/package-lock.json · reported by trivy
1 CVE-2025-66221
Files: backend/requirements.txt · reported by trivy
1 CVE-2025-66418
Files: backend/requirements.txt · reported by trivy
1 CVE-2025-66471
Files: backend/requirements.txt · reported by trivy
1 CVE-2025-68158
Files: backend/requirements.txt · reported by trivy
1 CVE-2025-7783
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-0994
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-12143
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-21441
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-21860
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-25639
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-25645
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-26007
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-27199
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-27205
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-27212
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-27962
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-28490
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-28498
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-2950
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-30922
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-33671
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-33672
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-34073
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-40175
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-41425
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-41479
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-42033
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-42034
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-42035
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-42036
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-42037
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-42038
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-42039
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-42040
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-42041
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-42042
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-42043
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-42044
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-42264
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-44431
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-44486
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-44487
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-44490
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-44494
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-44495
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-44496
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-44681
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-45409
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-4800
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-49356
Files: frontend/package-lock.json · reported by trivy
1 CVE-2026-59884
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-59885
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-59886
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-69249
Files: backend/requirements.txt · reported by trivy
1 GHSA-42h9-826w-cgv3
Files: frontend/package-lock.json · reported by trivy
1 GHSA-7q8q-rj6j-mhjq
Files: frontend/package-lock.json · reported by trivy
1 GHSA-mmx7-hfxf-jppx
Files: frontend/package-lock.json · reported by trivy
1 GHSA-pmv8-rq9r-6j72
Files: frontend/package-lock.json · reported by trivy
1 GHSA-r4q5-vmmm-2653
Files: frontend/package-lock.json · reported by trivy
1 opt.nerlo-rules.nerlo-js-secret-to-network-egress
Files: /repo/frontend/src/services/api.jsx · reported by nerlo-behavioral
1 opt.nerlo-rules.nerlo-py-secret-to-network-egress
Files: /repo/backend/services/text_processing.py · reported by nerlo-behavioral
1 PYSEC-2023-112
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2023-135
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2023-175
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2023-192
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2023-212
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2023-221
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2023-62
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2023-74
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2024-230
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2024-232
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2024-233
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2024-38
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2024-48
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2024-60
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2025-185
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-1307
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-141
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1424
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1426
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1427
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1428
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1471
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1472
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1473
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1474
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1475
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-165
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-1793
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-1794
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-1805
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1806
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1811
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1850
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-1851
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-1852
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-1872
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1873
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1994
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1995
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1996
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1998
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-1999
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-2043
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-2044
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-2045
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-2046
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-2074
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-2120
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-2121
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-2132
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-215
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-2151
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-2253
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-2254
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-2255
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-2256
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-2257
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-2263
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-2275
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-2320
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-2874
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-3036
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-3037
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-3038
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-3039
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-3040
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-3041
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-3417
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-3451
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-3453
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-3454
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-3455
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-3456
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-3457
Files: /repo/backend/requirements.txt · reported by osv-scanner
1 PYSEC-2026-3493
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-3494
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-3495
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-3496
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 PYSEC-2026-457
Files: /repo/backend/requirements_fastapi.txt · reported by osv-scanner
1 TOOL_ABUSE_UNDECLARED_NETWORK
Files: /repo/repo/PROJECT_REPORT.md · reported by cisco-skill-scanner
The model could have called any of these a false positive and did not.
1 CVE-2024-22195
Files: backend/requirements.txt · reported by trivy
1 CVE-2026-69248
Files: backend/requirements.txt · reported by trivy
Critical vulnerabilities and potential secret exfiltration detected.
The artifact contains multiple critical and high severity vulnerabilities in its dependencies, as indicated by several PYSEC and CVE findings across backend and frontend components. Additionally, behavioral analysis identified code paths in `backend/services/text_processing.py` and `frontend/src/services/api.jsx` that could lead to secrets being sent over the network. These findings warrant immediate attention due to the potential for severe impact.
Concern level assessed by the review: Critical. This is the review's scale, not the registry badge.
Reviewed by gemini-2.5-flash. The model sees the findings, not your code, and cannot change a score.
Showing 25 of 124; the rest are in the per-scanner reports above.