Snyk Vulnerability Dashboard

[bwappsec]

Welcome to your Github/Snyk Dashboard! The purpose of this issue is to bring snyk visability more natively into Github. Below you will see a summarization of the total vulnerabilities found in this repo and your top vulnerabilities by priority score. For more comprehensive information check out the snyk dashboard. This issue will refresh on every merge to main, to stay as close to up to date as possible.

Repo Vulnerability Summary

0	1	0	25

View Repo In Snyk

Top Issues by priority score:

Note: Does not include code issues, we are working on including those.

• CRITICAL : Incomplete List of Disallowed Inputs

  • Bandwidth/api-specs:site/package.json

• HIGH : Cross-site Request Forgery (CSRF)

  • Bandwidth/node-sdk:package.json

• HIGH : Regular Expression Denial of Service (ReDoS)

  • Bandwidth/api-specs:ruleset/package.json

• LOW : EPL-2.0 license

  • Bandwidth/api-specs:site/package.json

• MEDIUM : Missing Release of Resource after Effective Lifetime

  • Bandwidth/api-specs:ruleset/package.json