Wayland MCP Server

Findings (200)

• highHigh. Something risky that needs a close look before you install.
  dropper issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dropper issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  code-execution issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  code-execution issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  code-execution issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  code-execution issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  exfiltration issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  electron.vite.config.ts:14
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  electron.vite.config.ts:71
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/afterSign.js:24
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/afterSign.js:29
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/afterSign.js:75
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/afterSign.js:138
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/benchmark-startup.ts:228
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/benchmark-startup.ts:250
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/build-with-builder.js:255
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/build-with-builder.js:268
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/build-with-builder.js:284
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/build-with-builder.js:304
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/build-with-builder.js:811
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/build-with-builder.js:833
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/build-with-builder.js:956
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/generate-i18n-types.js:80
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/postinstall.js:175
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/postinstall.js:181
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/postinstall.js:242
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/rebuildNativeModules.js:134
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/rebuildNativeModules.js:254
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/rebuildNativeModules.js:307
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/run-benchmarks.ts:149
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/run-benchmarks.ts:298
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/run-benchmarks.ts:681
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/run-benchmarks.ts:682
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/signingExec.js:187
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/signingExec.js:224
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/process/agent/acp/AcpDetector.ts:115
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/process/agent/acp/AcpDetector.ts:269
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/process/agent/acp/AcpDetector.ts:283
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/process/agent/acp/AcpDetector.ts:301
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Turns off TLS certificate checking, allowing traffic interception.

  src/process/channels/plugins/tier3/synology-chat/SynologyChatPlugin.ts:313
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Turns off TLS certificate checking, allowing traffic interception.

  src/process/channels/plugins/tier3/synology-chat/SynologyChatPlugin.ts:371
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Contacts a hard-coded IP address instead of a domain name.

  src/process/resources/builtinMcp/constants.ts:201
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Contacts a hard-coded IP address instead of a domain name.

  src/process/resources/builtinMcp/constants.ts:202
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Contacts a hard-coded IP address instead of a domain name.

  src/process/resources/builtinMcp/constants.ts:207
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Contacts a hard-coded IP address instead of a domain name.

  src/process/resources/builtinMcp/constants.ts:208
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/process/resources/skills/mermaid/scripts/render.ts:20
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/process/services/mcpServices/McpService.ts:125
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/process/services/mcpServices/McpService.ts:138
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  src/process/utils/configureConsole.ts:19
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @grpc/grpc-js@1.14.4: 2 known vulnerabilities

  GHSA-f596-whhp-79r4, GHSA-m9gg-hp2v-232j

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @modelcontextprotocol/sdk@1.27.1: 6 known vulnerabilities

  GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @modelcontextprotocol/sdk@1.29.0: 12 known vulnerabilities

  GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +7 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @opentelemetry/propagator-jaeger@2.7.1: 1 known vulnerability

  GHSA-45rx-2jwx-cxfr

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  app-builder-lib@26.10.0: 1 known vulnerability

  GHSA-7g7r-gx96-252g

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  app-builder-lib@26.8.1: 1 known vulnerability

  GHSA-7g7r-gx96-252g

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  body-parser@2.2.2: 2 known vulnerabilities

  GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  brace-expansion@2.1.4: 6 known vulnerabilities

  GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr +1 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  builder-util-runtime@9.5.1: 1 known vulnerability

  GHSA-p2f4-r6v6-j797

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  builder-util-runtime@9.6.0: 1 known vulnerability

  GHSA-p2f4-r6v6-j797

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  electron@41.10.5: 11 known vulnerabilities

  GHSA-2p8c-gr87-2676, GHSA-3qxv-5xgr-q7w9, GHSA-98mx-cjp9-gchm, GHSA-997q-gvvc-jwmx, GHSA-9qh4-3jw8-366w +6 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  extract-zip@2.0.1: 4 known vulnerabilities

  GHSA-7pqw-9j4j-h8q3, GHSA-jmr9-qjv8-65gv, GHSA-7pqw-9j4j-h8q3, GHSA-jmr9-qjv8-65gv

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  fast-uri@3.1.6: 7 known vulnerabilities

  GHSA-333x-w4r6-6crp, GHSA-58mr-gqgx-xq4g, GHSA-hrr3-gc8f-f4qj, GHSA-qw65-cvwx-89v3, GHSA-w74x-v6f9-j3xg +2 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  fflate@0.8.2: 1 known vulnerability

  GHSA-px8p-9vwx-vf98

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  follow-redirects@1.16.0: 6 known vulnerabilities

  GHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8, GHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p +1 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  happy-dom@20.9.0: 3 known vulnerabilities

  GHSA-5fpq-26gf-qwcr, GHSA-834v-8h66-3h79, GHSA-c8p4-j97h-3vg8

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  markdown-it@14.1.1: 5 known vulnerabilities

  GHSA-253c-mchw-3w2r, GHSA-6v5v-wf23-fmfq, GHSA-gfr2-rv44-r23c, GHSA-r7fv-28h4-cvq7, GHSA-vfgh-jcmw-g37q

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  multer@2.3.0: 2 known vulnerabilities

  GHSA-3pph-fpjx-jg34, GHSA-q7qp-rjg7-q26m

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  nodemailer@9.1.1: 12 known vulnerabilities

  GHSA-39m8-27wv-hr27, GHSA-4ffr-jq9g-5ffx, GHSA-4g23-2xm8-66gc, GHSA-6vj9-mwq6-2f5v, GHSA-85x2-q946-cp5h +7 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  pdfjs-dist@5.6.205: 1 known vulnerability

  GHSA-hq66-cqwq-w95j

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  prosemirror-view@1.41.8: 1 known vulnerability

  GHSA-c8x8-7fp4-3x9w

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  sharp@0.35.4: 2 known vulnerabilities

  GHSA-wq5f-xc86-pv6w, GHSA-wq5f-xc86-pv6w

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  source-map-js@1.2.1: 1 known vulnerability

  GHSA-68fv-2mgg-jv7q

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  systeminformation@5.31.7: 3 known vulnerabilities

  GHSA-3f7j-7jwc-fxfj, GHSA-4vjg-vx72-qq4g, GHSA-7648-jmwf-vw7j

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  undici@7.29.1: 8 known vulnerabilities

  GHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +3 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  uuid@11.1.0: 1 known vulnerability

  GHSA-w5hq-g745-h8pq

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  uuid@13.0.0: 1 known vulnerability

  GHSA-w5hq-g745-h8pq

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  uuid@8.3.2: 1 known vulnerability

  GHSA-w5hq-g745-h8pq

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  uuid@9.0.1: 1 known vulnerability

  GHSA-w5hq-g745-h8pq

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  vite@6.4.3: 5 known vulnerabilities

  GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  zod@3.25.76: 2 known vulnerabilities

  GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  body-parser@2.3.0: 1 known vulnerability

  GHSA-27r3-jxmh-p828

  scripts/tvcontrol/package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  zod@4.3.6: 1 known vulnerability

  GHSA-mrhx-c7xc-m3w5

  scripts/tvcontrol/package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  basic-ftp@5.3.1: 1 known vulnerability

  GHSA-c475-qrg2-pj4r

  src/process/channels/whatsapp-bridge/bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Install or build failed in a clean environment

  npm error code EOVERRIDE npm error Override for js-yaml@4.3.2 conflicts with direct dependency npm error A complete log of this run can be found in: /tmp/home/.npm/_logs/2026-11-05T20_30_53_325Z-debug-0.log
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: curl-auth-header

  2 matches in this file

  src/process/resources/assistant/moltbook/moltbook-skills.md:59
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: curl-auth-header

  13 matches in this file

  src/process/resources/skills/moltbook/HEARTBEAT.md:27
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: curl-auth-header

  15 matches in this file

  src/process/resources/skills/moltbook/MESSAGING.md:36
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: curl-auth-header

  40 matches in this file

  src/process/resources/skills/moltbook/SKILL.md:150
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  src/process/resources/skills-library/bodies/skills/backend-systems/rest-api-design/SKILL.md:440
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  src/process/resources/skills-library/bodies/skills/security/application-secrets-security/SKILL.md:388
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  2 matches in this file

  src/process/resources/skills-library/bodies/skills/writing/api-documenter/SKILL.md:118
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  src/process/services/database/migration_v60.bun.test.ts:16
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  tests/fixtures/constitution-fs/base-991c502-committed/.constitution-keys.enc:1
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  tests/fixtures/constitution-fs/base-991c502-pending-ledger-only/.constitution-keys.enc:1
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  tests/unit/common/chat/imageGenFal.test.ts:10
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: private-key

  2 matches in this file

  tests/unit/acpStderrRingTruncationLeak.test.ts:448
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  tests/unit/feedbackBridge.test.ts:109
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: curl-auth-header

  tests/unit/execution/ExecutionSpine.dom.test.tsx:329
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: jwt

  tests/unit/process/acp/errors/agentStartupErrorRedaction.test.ts:25
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  tests/unit/process/channels/plugins/tier2/ms-teams/MsTeamsVerifier.test.ts:28
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  tests/unit/process/doctor/doctorRegistryComposition.test.ts:53
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  tests/unit/process/services/database/conversationRowCredentials.test.ts:17
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  tests/unit/process/providers/keyDiscovery.test.ts:62
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  tests/unit/process/services/recovery/externalRecoveryCrypto.test.ts:40
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: gcp-api-key

  2 matches in this file

  tests/fixtures/secretCorpus.ts:98
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: stripe-access-token

  2 matches in this file

  tests/fixtures/secretCorpus.ts:118
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  10 matches in this file

  tests/fixtures/secretCorpus.ts:47
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: jwt

  2 matches in this file

  tests/fixtures/secretCorpus.ts:105
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  tests/unit/projectKnowledgeRefresh.test.ts:388
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: gitlab-pat

  3 matches in this file

  tests/unit/capabilityProjection.test.ts:1135
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  3 matches in this file

  tests/unit/capabilityProjection.test.ts:1166
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: gitlab-deploy-token

  2 matches in this file

  tests/unit/capabilityProjection.test.ts:1136
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: jwt

  2 matches in this file

  tests/unit/capabilityProjection.test.ts:1147
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  3 matches in this file

  tests/unit/renderer/conversation/CronJobSiderSection.dom.test.tsx:42
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  tests/unit/redactCommandSecrets.test.ts:155
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: curl-auth-header

  4 matches in this file

  tests/unit/redactCommandSecrets.test.ts:22
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  tests/unit/renderer/conversation/CronJobSiderItem.dom.test.tsx:220
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: slack-legacy-workspace-token

  tests/unit/secretRedaction.superset.test.ts:69
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  5 matches in this file

  tests/unit/webserver/providerKeyRoutes.test.ts:94
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: jwt

  tests/unit/process/doctor/doctorSurfaceSecretRedaction.test.ts:42
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  2 matches in this file

  tests/unit/process/doctor/doctorSurfaceSecretRedaction.test.ts:53
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  4 matches in this file

  tests/unit/webserver/mcpConfigRoutes.test.ts:378
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: openai-api-key

  tests/unit/renderer/modelsSettings.dom.test.tsx:746
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: curl-auth-header

  tests/unit/workflowExport.test.ts:36
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: jwt

  tests/unit/secretRedaction.gluedVendorPrefix.test.ts:66
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: gcp-api-key

  tests/unit/secretRedaction.gluedVendorPrefix.test.ts:63
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: stripe-access-token

  tests/unit/secretRedaction.gluedVendorPrefix.test.ts:47
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  10 matches in this file

  tests/unit/secretRedaction.gluedVendorPrefix.test.ts:44
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: jwt

  tests/unit/secretRedaction.test.ts:126
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: private-key

  tests/unit/secretRedaction.test.ts:946
• lowLow. Minor, or common in normal tools. Shown for information.
  @babel/core@7.29.0: 1 known vulnerability

  GHSA-4x5r-pxfx-6jf8

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @hono/node-server@1.19.11: 3 known vulnerabilities

  GHSA-92pp-h63x-v22m, GHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @opentelemetry/core@1.30.1: 1 known vulnerability

  GHSA-8988-4f7v-96qf

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @opentelemetry/core@2.5.0: 1 known vulnerability

  GHSA-8988-4f7v-96qf

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @opentelemetry/core@2.6.0: 1 known vulnerability

  GHSA-8988-4f7v-96qf

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @opentelemetry/core@2.6.1: 1 known vulnerability

  GHSA-8988-4f7v-96qf

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @opentelemetry/core@2.7.1: 1 known vulnerability

  GHSA-8988-4f7v-96qf

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @opentelemetry/instrumentation-knex@0.58.0: 1 known vulnerability

  GHSA-qqmp-wf37-98f9

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @opentelemetry/instrumentation-mongoose@0.60.0: 1 known vulnerability

  GHSA-qqmp-wf37-98f9

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @opentelemetry/instrumentation-mysql@0.60.0: 1 known vulnerability

  GHSA-qqmp-wf37-98f9

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @opentelemetry/instrumentation-mysql2@0.60.0: 1 known vulnerability

  GHSA-qqmp-wf37-98f9

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @opentelemetry/instrumentation-pg@0.66.0: 1 known vulnerability

  GHSA-qqmp-wf37-98f9

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @opentelemetry/instrumentation-tedious@0.33.0: 1 known vulnerability

  GHSA-qqmp-wf37-98f9

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @tootallnate/once@2.0.0: 1 known vulnerability

  GHSA-vpq2-c234-7xj6

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @vitest/mocker@4.1.0: 2 known vulnerabilities

  GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  deepmerge@4.3.1: 1 known vulnerability

  GHSA-gcqx-w48m-w2h4

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  esbuild@0.27.4: 1 known vulnerability

  GHSA-g7r4-m6w7-qqqr

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  esbuild@0.28.0: 1 known vulnerability

  GHSA-g7r4-m6w7-qqqr

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  glob@10.5.0: 2 known vulnerabilities

  GHSA-3g3m-2fjr-6pw4, GHSA-3g3m-2fjr-6pw4

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  glob@12.0.0: 1 known vulnerability

  GHSA-3g3m-2fjr-6pw4

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  glob@13.0.6: 1 known vulnerability

  GHSA-3g3m-2fjr-6pw4

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  hono@4.12.30: 9 known vulnerabilities

  GHSA-54fx-42gc-7vw4, GHSA-5r4p-p66f-jhc7, GHSA-79qm-7rj5-m7r9, GHSA-8j4g-w8fx-2239, GHSA-crvj-82cr-hjcx +4 more

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  ip-address@10.3.1: 10 known vulnerabilities

  GHSA-2vr4-cq9g-pvrc, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +5 more

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  katex@0.16.38: 1 known vulnerability

  GHSA-238p-pmpm-9mq7

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  katex@0.16.47: 1 known vulnerability

  GHSA-238p-pmpm-9mq7

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  mermaid@11.16.0: 5 known vulnerabilities

  GHSA-2v8p-3f2j-5mp7, GHSA-3rrr-jr9j-h3q3, GHSA-6x64-9x62-f2gx, GHSA-c4c3-pg64-4m4v, GHSA-rhh3-jpg6-66xh

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  minimatch@9.0.9: 2 known vulnerabilities

  GHSA-g3hv-75wg-m249, GHSA-g3hv-75wg-m249

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  music-metadata@11.12.3: 5 known vulnerabilities

  GHSA-53v6-4h7p-p4gj, GHSA-5gfj-9q3v-qfp3, GHSA-8j4c-6x6g-rq3j, GHSA-f94x-6692-553q, GHSA-jjpr-9cvf-cq55

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  postcss@8.5.18: 1 known vulnerability

  GHSA-fxqj-rqcc-2cmp

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  protobufjs@8.5.0: 3 known vulnerabilities

  GHSA-f38q-mgvj-vph7, GHSA-j3f2-48v5-ccww, GHSA-jfj6-75fj-8934

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  qs@6.15.0: 4 known vulnerabilities

  GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  smol-toml@1.8.0: 1 known vulnerability

  GHSA-r4xh-jqrq-34v2

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  vitest@4.1.0: 1 known vulnerability

  GHSA-82fw-gwwq-j7x9

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  yaml@2.8.2: 1 known vulnerability

  GHSA-48c2-rrv3-qjmp

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @hono/node-server@1.19.17: 1 known vulnerability

  GHSA-rmxm-3fg6-px4f

  scripts/tvcontrol/package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  fast-uri@3.1.7: 5 known vulnerabilities

  GHSA-333x-w4r6-6crp, GHSA-hrr3-gc8f-f4qj, GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h

  scripts/tvcontrol/package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  hono@4.13.7: 1 known vulnerability

  GHSA-5r4p-p66f-jhc7

  scripts/tvcontrol/package-lock.json