Release: Merge release into master from: release/2.42.0 #11512
Merged
DryRunSecurity / Sensitive Files Analyzer
succeeded
Jan 6, 2025 in 1s
DryRun Security
Details
Sensitive Files Analyzer Findings: 2 detected
⚠️ Potential Sensitive File components/package.json (click for details)
Type | Potential Sensitive File |
Description | Node.js/ExpressJS/Next.js applications manage their dependencies through package.json and package-lock.json files. A change in these files may indicate an addition of a library/dependency which could introduce additional risk to the application either through vulnerable code, expansion of the application's attack surface via additional routes, or malicious code. |
Filename | components/package.json |
CodeLink | django-DefectDojo/components/package.json Lines 1 to 6 in 848aa5e |
⚠️ Potential Sensitive File docs/package-lock.json (click for details)
Type | Potential Sensitive File |
Description | Node.js/ExpressJS/Next.js applications manage their dependencies through package.json and package-lock.json files. A change in these files may indicate an addition of a library/dependency which could introduce additional risk to the application either through vulnerable code, expansion of the application's attack surface via additional routes, or malicious code. |
Filename | docs/package-lock.json |
CodeLink | django-DefectDojo/docs/package-lock.json Lines 1504 to 1512 in 848aa5e |
Loading