marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-16 03:49:26 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
03d925fffa5d64104c0dfe1bd77ba696461c8bd3
Open_Ultra_SAST/benchmarks/valid/pilot/pool-valid.toml
T

88 lines
166 KiB
TOML
Raw Normal View History

feat(benchmark): freeze the valid-benchmark pilot, 12 verified positives + 240 negatives
2026-10-12 19:42:45 +02:00
status = "frozen"
pool = "valid"
seed = 0
[[repository]]
changes = [{"advisory" = "GHSA-mwwr-p57h-56pf", "base" = "872bb338f7d31f6afe517a076ac3e3edafaaaf08", "case_id" = "bytebase-dbhub-f2624a2ead8d31ca", "cwe" = "CWE-184", "family" = "access_control", "files" = [{"head_lines" = [[135, 143]], "path" = "src/utils/sql-parser.ts"}], "function" = "scanTokenMySQL", "function_lines" = [135, 143], "head" = "d65c6b424e9d10678fb6f7dda93fba180d7baff9", "kind" = "vulnerability", "label_check" = "confirmed", "method" = "fix_site", "path" = "src/utils/sql-parser.ts"}, {"base" = "8b27f88ef534e3224f56ba7ebbcd1813a67608a1", "case_id" = "bytebase-dbhub-ordinary-0cda00c4aeb38ed48d4dace85d642673820c38cf", "files" = [{"head_lines" = [[117, 117]], "path" = "src/tools/index.ts"}], "head" = "0cda00c4aeb38ed48d4dace85d642673820c38cf", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "925752d3d1ed8d4ef1a94c4ee84eb2d4b3782d3b", "case_id" = "bytebase-dbhub-ordinary-1e79762019bef0378682a895ed72e3e32659d4bb", "files" = [{"head_lines" = [[50, 52], [64, 64]], "path" = "CLAUDE.md"}, {"head_lines" = [[228, 228], [682, 682]], "path" = "README.md"}, {"head_lines" = [], "path" = "resources/images/mcp-inspector.webp"}, {"head_lines" = [[46, 46], [48, 48], [129, 129], [330, 330]], "path" = "src/__tests__/json-rpc-integration.test.ts"}, {"head_lines" = [[183, 183], [211, 211]], "path" = "src/server.ts"}], "head" = "1e79762019bef0378682a895ed72e3e32659d4bb", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 1}, {"base" = "a85a14c41f3986c652aa12ff35d3d3f3458c3923", "case_id" = "bytebase-dbhub-ordinary-22342dd2bc37736673818c01c03fdc658db7b28a", "files" = [{"head_lines" = [[94, 94], [96, 96], [99, 99]], "path" = "CLAUDE.md"}, {"head_lines" = [[220, 237]], "path" = "README.md"}, {"head_lines" = [[39, 39]], "path" = "package.json"}, {"head_lines" = [[38, 40], [2158, 2160], [4667, 4668]], "path" = "pnpm-lock.yaml"}, {"head_lines" = [[1, 133]], "path" = "src/config/__tests__/ssh-config-integration.test.ts"}, {"head_lines" = [[6, 6], [233, 233], [235, 235], [239, 239], [243, 243], [248, 260]], "path" = "src/config/env.ts"}, {"head_lines" = [[1, 1], [8, 8], [108, 219]], "path" = "src/connectors/__tests__/postgres-ssh.integration.test.ts"}, {"head_lines" = [[1, 178]], "path" = "src/utils/__tests__/ssh-config-parser.test.ts"}, {"head_lines" = [[1, 163]], "path" = "src/utils/ssh-config-parser.ts"}], "head" = "22342dd2bc37736673818c01c03fdc658db7b28a", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 3, "time_third" = 0}, {"base" = "82749d0d7afefc5da6cb167dbf257aaf657f3ebb", "case_id" = "bytebase-dbhub-ordinary-2d5662ec675a574cc2263958e60bc61267d140bc", "files" = [{"head_lines" = [[165, 169]], "path" = "src/server.ts"}], "head" = "2d5662ec675a574cc2263958e60bc61267d140bc", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "11c8781e9591549ff8582a5cffd5d76bec00aeba", "case_id" = "bytebase-dbhub-ordinary-5bd45460f1ef8a3c4ffc91bac36590a5d3c03d74", "files" = [{"head_lines" = [[20, 27]], "path" = "src/connectors/__tests__/sqlite.integration.test.ts"}, {"head_lines" = [[126, 137], [140, 142]], "path" = "src/connectors/sqlite/index.ts"}], "head" = "5bd45460f1ef8a3c4ffc91bac36590a5d3c03d74", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 1}, {"base" = "049a0da27ac6a8232a976a1a73e5f162f74701f7", "case_id" = "bytebase-dbhub-ordinary-6fea1621a241c7ddbf096b12d0eb1306a8f0c020", "files" = [{"head_lines" = [[91, 91], [96, 118], [219, 223]], "path" = "dbhub.toml.example"}, {"head_lines" = [[97, 97], [106, 106], [112, 146]], "path" = "docs/config/multi-database.mdx"}, {"head_lines" = [[42, 45], [164, 230], [328, 328], [432, 437]], "path" = "docs/config/server-options.mdx"}, {"head_lines" = [[487, 655], [856, 856], [858, 866], [871, 909], [969, 969], [977, 1008]], "path" = "src/config/__tests__/toml-loader.test.ts"}, {"head_lines" = [[24, 32], [34, 34], [89, 89], [91, 91], [302, 351], [444, 447], [450, 456], [469, 469], [478, 488]], "path" = "src/config/toml-loader.ts"}, {"h
id = "bytebase/dbhub"
repository = "bytebase/dbhub"
slice = 1
url = "https://github.com/bytebase/dbhub.git"
[[repository]]
changes = [{"advisory" = "GHSA-2xhg-73j7-rrgx", "base" = "fa7477ee48515f4248bc91a025eab0ca83423fe0", "case_id" = "contentful-contentful-mcp-server-22e8b2fc09c3b2c4", "case_ids" = ["contentful-contentful-mcp-server-22e8b2fc09c3b2c4", "contentful-contentful-mcp-server-df53a40a29ee8d8d"], "cwe" = "CWE-918", "family" = "untrusted_destination", "files" = [{"head_lines" = [[101, 141]], "path" = "packages/mcp-tools/src/tools/jobs/space-to-space-migration/importSpace.ts"}, {"head_lines" = [[124, 176]], "path" = "packages/mcp-tools/src/tools/jobs/space-to-space-migration/exportSpace.ts"}], "function" = "tool", "function_lines" = [101, 141], "head" = "6e0038494a09c435f6a0a9a76fde2dc077f18b18", "kind" = "vulnerability", "label_check" = "confirmed", "method" = "fix_site", "path" = "packages/mcp-tools/src/tools/jobs/space-to-space-migration/importSpace.ts", "targets" = [{"case_id" = "contentful-contentful-mcp-server-22e8b2fc09c3b2c4", "cwe" = "CWE-918", "family" = "untrusted_destination", "function" = "tool", "function_lines" = [101, 141], "path" = "packages/mcp-tools/src/tools/jobs/space-to-space-migration/importSpace.ts"}, {"case_id" = "contentful-contentful-mcp-server-df53a40a29ee8d8d", "cwe" = "CWE-918", "family" = "untrusted_destination", "function" = "tool", "function_lines" = [124, 176], "path" = "packages/mcp-tools/src/tools/jobs/space-to-space-migration/exportSpace.ts"}]}, {"base" = "0dedf7ad55753f11a608be81838a111dfc2f749e", "case_id" = "contentful-contentful-mcp-server-ordinary-0a2bbee3c5bfa415aeeacbd71943a237e6b1a4e2", "files" = [{"head_lines" = [[184, 236]], "path" = "src/tools/assets/listAssets.test.ts"}, {"head_lines" = [[28, 33], [58, 74]], "path" = "src/tools/assets/listAssets.ts"}, {"head_lines" = [[186, 227]], "path" = "src/tools/assets/uploadAsset.test.ts"}, {"head_lines" = [[18, 23], [50, 50], [53, 57]], "path" = "src/tools/assets/uploadAsset.ts"}], "head" = "0a2bbee3c5bfa415aeeacbd71943a237e6b1a4e2", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "ab3ca318e30dfb739591944ed8c0a6d0c21cd608", "case_id" = "contentful-contentful-mcp-server-ordinary-0eb5a3eb620ae5b258690fd2aa53a9c2a0fd599e", "files" = [{"head_lines" = [[51, 51]], "path" = "packages/mcp-tools/src/tools/context/instructions.ts"}, {"head_lines" = [[114, 114]], "path" = "packages/mcp-tools/src/tools/entries/register.ts"}, {"head_lines" = [[35, 35], [89, 89], [300, 300], [435, 435], [487, 487], [527, 527], [559, 559], [579, 579], [608, 649]], "path" = "packages/mcp-tools/src/tools/entries/updateEntry.test.ts"}, {"head_lines" = [[17, 24], [51, 60]], "path" = "packages/mcp-tools/src/tools/entries/updateEntry.ts"}], "head" = "0eb5a3eb620ae5b258690fd2aa53a9c2a0fd599e", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 2}, {"base" = "c073130155f360268e3d4b0717c444c69af16d97", "case_id" = "contentful-contentful-mcp-server-ordinary-1943f7cfe7d03bdfd08173ec9c84dd9562e5c0aa", "files" = [{"head_lines" = [[2, 3]], "path" = ".npmrc"}, {"head_lines" = [[123, 123], [136, 136]], "path" = "packages/mcp-tools/src/tools/ai-actions/register.ts"}, {"head_lines" = [[95, 95], [108, 108], [121, 121]], "path" = "packages/mcp-tools/src/tools/assets/register.ts"}, {"head_lines" = [[105, 105], [117, 117]], "path" = "packages/mcp-tools/src/tools/content-types/register.ts"}, {"head_lines" = [[95, 95], [108, 108], [121, 121]], "path" = "packages/mcp-tools/src/tools/entries/register.ts"}], "head" = "1943f7cfe7d03bdfd08173ec9c84dd9562e5c0aa", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 2}, {"base" = "83da193f7fbeda12b9b0b82119264fa59df43bb8", "case_id" = "contentful-contentful-mcp-server-ordinary-23bc723799e639f9a66b21f163046bfcb2293a67", "files" = [{"head_lines" = [[271, 342]], "path" = "src/tools/content-types/createContentType.test.ts"}, {"head_lines" = [[8, 8], [26, 26], [44, 44]], "path" = "src/tools/content-types/createContentType.ts"}, {"head_lines" = [[233, 299]], "path" = "src/tools/content-types/updateContentType.test.ts"}, {"head_lines" = [[8, 8], [28, 28], [
id = "contentful/contentful-mcp-server"
repository = "contentful/contentful-mcp-server"
slice = 1
url = "https://github.com/contentful/contentful-mcp-server.git"
[[repository]]
changes = [{"advisory" = "GHSA-5j53-63w8-8625", "base" = "7cf413cd766b9cb0ab323ce424ddab2c0d235932", "case_id" = "fastapi-users-fastapi-users-178fe59502d96974", "case_ids" = ["fastapi-users-fastapi-users-178fe59502d96974", "fastapi-users-fastapi-users-9c433ae430a57ba5", "fastapi-users-fastapi-users-e791a1b252858adc"], "cwe" = "CWE-285", "family" = "access_control", "files" = [{"head_lines" = [[175, 182]], "path" = "fastapi_users/router/oauth.py"}, {"head_lines" = [[28, 35]], "path" = "fastapi_users/router/oauth.py"}, {"head_lines" = [[57, 58]], "path" = "fastapi_users/router/oauth.py"}], "function" = "get_oauth_associate_router", "function_lines" = [175, 182], "head" = "bcee8c9b884de31decb5d799aead3974a0b5b158", "kind" = "vulnerability", "label_check" = "confirmed", "method" = "fix_site", "path" = "fastapi_users/router/oauth.py", "targets" = [{"case_id" = "fastapi-users-fastapi-users-178fe59502d96974", "cwe" = "CWE-285", "family" = "access_control", "function" = "get_oauth_associate_router", "function_lines" = [175, 182], "path" = "fastapi_users/router/oauth.py"}, {"case_id" = "fastapi-users-fastapi-users-9c433ae430a57ba5", "cwe" = "CWE-285", "family" = "access_control", "function" = "get_oauth_router", "function_lines" = [28, 35], "path" = "fastapi_users/router/oauth.py"}, {"case_id" = "fastapi-users-fastapi-users-e791a1b252858adc", "cwe" = "CWE-285", "family" = "access_control", "function" = "authorize", "function_lines" = [57, 58], "path" = "fastapi_users/router/oauth.py"}]}, {"base" = "d4227ae20fdb3a44be21223604c75f1da183e073", "case_id" = "fastapi-users-fastapi-users-ordinary-1df6e7d1621fcfa1db848a6d6480ede9f02ca6e0", "files" = [{"head_lines" = [[131, 138]], "path" = "fastapi_users/fastapi_users.py"}], "head" = "1df6e7d1621fcfa1db848a6d6480ede9f02ca6e0", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "373157c284f81a9862b4ce3be6f52381bfc6cb7a", "case_id" = "fastapi-users-fastapi-users-ordinary-2829824a95a331e6c4a50989f7a6ab1ab282ab27", "files" = [{"head_lines" = [[37, 37]], "path" = "Pipfile"}, {"head_lines" = [[4, 4], [27, 56], [111, 114], [124, 125], [128, 128], [148, 149], [151, 152], [552, 555], [612, 613], [615, 616], [644, 645], [647, 648], [652, 653], [656, 656], [667, 668], [671, 671], [776, 777], [780, 780], [880, 881], [884, 884], [928, 929], [932, 932], [1147, 1148], [1151, 1151], [1155, 1186], [1207, 1208], [1211, 1211]], "path" = "Pipfile.lock"}, {"head_lines" = [[200, 200]], "path" = "fastapi_users/db/sqlalchemy.py"}], "head" = "2829824a95a331e6c4a50989f7a6ab1ab282ab27", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "848315badc1e9447cfe4a8ff6928a4d77ff5ab70", "case_id" = "fastapi-users-fastapi-users-ordinary-45354ee9f0f9c11045523913e75531b2490bef64", "files" = [{"head_lines" = [[4, 4], [27, 27], [32, 32], [46, 46], [63, 63], [70, 70]], "path" = "fastapi_users/models.py"}], "head" = "45354ee9f0f9c11045523913e75531b2490bef64", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "3146a1ffe6c97d97291834ba250ca58a9ae9496c", "case_id" = "fastapi-users-fastapi-users-ordinary-4776117f10656d71b6c859f64ed68540b6a3091f", "files" = [{"head_lines" = [[3, 3], [8, 69], [79, 79], [89, 89], [99, 99], [109, 109], [119, 119], [132, 132], [145, 145], [158, 158], [171, 171]], "path" = "docs/usage/dependency-callables.md"}, {"head_lines" = [[100, 109]], "path" = "fastapi_users/authentication/__init__.py"}, {"head_lines" = [[60, 60]], "path" = "mkdocs.yml"}], "head" = "4776117f10656d71b6c859f64ed68540b6a3091f", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "aa4344f7937445eb79acf0da7dac3041ffe68317", "case_id" = "fastapi-users-fastapi-users-ordinary-54590167a6465b4c3fa70a7897f68c9e9eadbff4", "files" = [{"head_lines" = [[15, 15], [27, 27], [36, 41]], "path" = "fastapi_users/models.py"}], "head" = "54590167a6465b4c3fa70a7897f68c9e9eadbff4", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 1}, {"base" = "46
id = "fastapi-users/fastapi-users"
repository = "fastapi-users/fastapi-users"
slice = 1
url = "https://github.com/fastapi-users/fastapi-users.git"
[[repository]]
changes = [{"advisory" = "GHSA-c3h8-g69v-pjrg", "base" = "65301c194593d46a84623b64e5fde2f51d3550f6", "case_id" = "i18next-i18next-http-middleware-f3e2a6886951f36a", "cwe" = "CWE-113", "family" = "output_encoding", "files" = [{"head_lines" = [[42, 133]], "path" = "lib/index.js"}], "function" = "extendOptionsWithDefaults", "function_lines" = [42, 133], "head" = "a1d92a8f03292644d1c6fa83f1b77121d39daf4d", "kind" = "vulnerability", "label_check" = "confirmed", "method" = "fix_site", "path" = "lib/index.js"}, {"base" = "76a5f8ca3ab0836f07fad13be51ed9a0bd323a78", "case_id" = "i18next-i18next-http-middleware-ordinary-0c5e4b874beff1ec9d6e194b83f97fe4b6db2d2d", "files" = [{"head_lines" = [[1, 3]], "path" = "CHANGELOG.md"}, {"head_lines" = [[29, 30]], "path" = "lib/httpFunctions.js"}, {"head_lines" = [[26, 26]], "path" = "package.json"}], "head" = "0c5e4b874beff1ec9d6e194b83f97fe4b6db2d2d", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "a527a8aa6affbfdeafae9c172287f3f0437a9d61", "case_id" = "i18next-i18next-http-middleware-ordinary-0ecb06a5c9319e1d3b69ebf89a2fc8f226a1de3c", "files" = [{"head_lines" = [[8, 8], [38, 38]], "path" = "test/languageDetector.js"}], "head" = "0ecb06a5c9319e1d3b69ebf89a2fc8f226a1de3c", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "b9012ee5659977ac92c1529221832899c67ae6dc", "case_id" = "i18next-i18next-http-middleware-ordinary-140c11237ee3d7130b265d4e0eca187a91c755ab", "files" = [{"head_lines" = [[12, 12]], "path" = ".npmignore"}, {"head_lines" = [[1, 2]], "path" = "CHANGELOG.md"}, {"head_lines" = [[23, 25]], "path" = "lib/LanguageDetector.js"}, {"head_lines" = [[82, 83], [86, 86]], "path" = "lib/languageLookups/cookie.js"}], "head" = "140c11237ee3d7130b265d4e0eca187a91c755ab", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "9b01a7b41f9c0cdabd8c50a346c5898afeb72bae", "case_id" = "i18next-i18next-http-middleware-ordinary-27fb3d7a651280a8632c7b0ad9f489afb979f866", "files" = [{"head_lines" = [[301, 311]], "path" = "README.md"}, {"head_lines" = [[18, 18], [21, 23], [39, 40], [65, 65], [66, 66], [68, 68], [71, 75], [105, 128]], "path" = "lib/LanguageDetector.js"}], "head" = "27fb3d7a651280a8632c7b0ad9f489afb979f866", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "221ef42a4deaabb0502c0eea2c0c41acd8541442", "case_id" = "i18next-i18next-http-middleware-ordinary-41ac7ff80f939bee3f1170ced00d62e0c5746753", "files" = [{"head_lines" = [[61, 68]], "path" = "README.md"}, {"head_lines" = [[27, 28]], "path" = "example/fastify/index.js"}, {"head_lines" = [[152, 157], [251, 251]], "path" = "lib/index.js"}, {"head_lines" = [[16, 17]], "path" = "test/addRoute.fastify.js"}, {"head_lines" = [[16, 17]], "path" = "test/middleware.fastify.js"}], "head" = "41ac7ff80f939bee3f1170ced00d62e0c5746753", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "6edc535e9a5d91c2040f1856935c731873e08cb9", "case_id" = "i18next-i18next-http-middleware-ordinary-4c28da5517fd43466c835a5e183089cf8ecec373", "files" = [{"head_lines" = [[173, 173]], "path" = "lib/index.js"}], "head" = "4c28da5517fd43466c835a5e183089cf8ecec373", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 2}, {"base" = "41ac7ff80f939bee3f1170ced00d62e0c5746753", "case_id" = "i18next-i18next-http-middleware-ordinary-4f3f2e23a2fbaacfce5ca822e1d5905e608d1e9b", "files" = [{"head_lines" = [[42, 42]], "path" = "lib/index.js"}, {"head_lines" = [[2, 2], [10, 10], [87, 87]], "path" = "lib/languageLookups/cookie.js"}, {"head_lines" = [[1, 6], [16, 17]], "path" = "lib/languageLookups/querystring.js"}, {"head_lines" = [[1, 99]], "path" = "test/languageDetector.js"}], "head" = "4f3f2e23a2fbaacfce5ca822e1d5905e608d1e9b", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "6b7417e26f5be6b866bb78db86d36f5999fd5550", "case_id" = "i18next-i18next-http-middleware-ordinary-6a209863e1838e
id = "i18next/i18next-http-middleware"
repository = "i18next/i18next-http-middleware"
slice = 1
url = "https://github.com/i18next/i18next-http-middleware.git"
[[repository]]
changes = [{"advisory" = "GHSA-3rm2-h79c-8qw6", "base" = "2c07360420e74087f5bc63032ab155d93e0a0b10", "case_id" = "imzbf-md-editor-v3-14658213915dbde5", "case_ids" = ["imzbf-md-editor-v3-14658213915dbde5", "imzbf-md-editor-v3-b9c833a3524a57a9"], "cwe" = "CWE-79", "family" = "output_encoding", "files" = [{"head_lines" = [[61, 193]], "path" = "packages/MdEditor/layouts/Content/markdownIt/code/index.ts"}, {"head_lines" = [[64, 225]], "path" = "packages/MdEditor/layouts/Content/composition/useMarkdownIt.ts"}], "function" = "fenceGroup", "function_lines" = [61, 193], "head" = "bea48ec0ba51c19deda9486eb06050b5b8f50b51", "kind" = "vulnerability", "label_check" = "confirmed", "method" = "fix_site", "path" = "packages/MdEditor/layouts/Content/markdownIt/code/index.ts", "targets" = [{"case_id" = "imzbf-md-editor-v3-14658213915dbde5", "cwe" = "CWE-79", "family" = "output_encoding", "function" = "fenceGroup", "function_lines" = [61, 193], "path" = "packages/MdEditor/layouts/Content/markdownIt/code/index.ts"}, {"case_id" = "imzbf-md-editor-v3-b9c833a3524a57a9", "cwe" = "CWE-79", "family" = "output_encoding", "function" = "useMarkdownIt", "function_lines" = [64, 225], "path" = "packages/MdEditor/layouts/Content/composition/useMarkdownIt.ts"}]}, {"base" = "238f684e2061bd0b7a808a35c46ae5fbc1a3dff1", "case_id" = "imzbf-md-editor-v3-ordinary-19f6aa3c73978028305899a4e45070a5e904817b", "files" = [{"head_lines" = [[38, 38]], "path" = "MdEditor/extensions/MdCatalog/CatalogLink.tsx"}, {"head_lines" = [[14, 14], [21, 21], [40, 40], [63, 63], [74, 75], [115, 126], [134, 191]], "path" = "MdEditor/extensions/MdCatalog/index.tsx"}, {"head_lines" = [[63, 68]], "path" = "MdEditor/extensions/MdCatalog/style.less"}, {"head_lines" = [[132, 132]], "path" = "MdEditor/type.ts"}, {"head_lines" = [[329, 343]], "path" = "MdEditor/utils/index.ts"}], "head" = "19f6aa3c73978028305899a4e45070a5e904817b", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "dd1f04dc1a27efe9ccbb534c933a77571cf52e82", "case_id" = "imzbf-md-editor-v3-ordinary-25eb0f9dfb7221c893b1578fc6e9cc88f8c40dc5", "files" = [{"head_lines" = [[27, 27]], "path" = "MdEditor/NormalToolbar.tsx"}, {"head_lines" = [[800, 804], [806, 806]], "path" = "MdEditor/layouts/Toolbar/index.tsx"}], "head" = "25eb0f9dfb7221c893b1578fc6e9cc88f8c40dc5", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "1ef322b1693286e91066c88a5b1a4f615a50351c", "case_id" = "imzbf-md-editor-v3-ordinary-317a8f4e68b5a00f7c98aef04d5866c75d55a4e0", "files" = [{"head_lines" = [[16, 16], [83, 83]], "path" = "MdEditor/layouts/Content/markdownIt/admonition/index.ts"}], "head" = "317a8f4e68b5a00f7c98aef04d5866c75d55a4e0", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "e674c1255b0ea7eb3b96cdcc06f862d4c915cf4d", "case_id" = "imzbf-md-editor-v3-ordinary-3a4b37cd7bdfd1e371d5c3197007f7570c2b3232", "files" = [{"head_lines" = [[24, 24], [27, 27], [28, 28], [54, 54], [89, 89], [103, 103], [107, 107], [123, 123], [128, 128], [141, 141], [156, 156], [164, 164], [239, 239], [248, 248], [275, 275], [278, 278], [279, 279]], "path" = "MdEditor/Editor.tsx"}, {"head_lines" = [[341, 341], [381, 381], [386, 386], [391, 391]], "path" = "MdEditor/composition.ts"}, {"head_lines" = [[32, 32], [79, 79]], "path" = "MdEditor/layouts/Content/index.tsx"}], "head" = "3a4b37cd7bdfd1e371d5c3197007f7570c2b3232", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "71f30ac5415894ed383a8aed0aea75df8f8ff6df", "case_id" = "imzbf-md-editor-v3-ordinary-628c55336273e52d1589a54e8f3e9384ea4ac3c6", "files" = [{"head_lines" = [[46, 46]], "path" = "MdEditor/layouts/Content/composition/useCodeMirror.ts"}], "head" = "628c55336273e52d1589a54e8f3e9384ea4ac3c6", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "9866b44762bcdd071fda3d1a777fc7cb1c0d8c35", "case_id" = "imzbf-md-editor-v3-ordinary-6ceb835f403f309d90864c3d7f248d40d8f1c0fe", "files" = [{"head_lines" =
id = "imzbf/md-editor-v3"
repository = "imzbf/md-editor-v3"
slice = 1
url = "https://github.com/imzbf/md-editor-v3.git"
[[repository]]
changes = [{"advisory" = "GHSA-4qhp-652w-c22x", "base" = "4ad12f204ad0b85580fc32137c647baaff044e95", "case_id" = "jupyter-lsp-jupyterlab-lsp-59f9a8b80b133f6f", "cwe" = "CWE-22", "family" = "path", "files" = [{"head_lines" = [[119, 205]], "path" = "python_packages/jupyter_lsp/jupyter_lsp/virtual_documents_shadow.py"}], "function" = "shadow_virtual_documents", "function_lines" = [119, 205], "head" = "1f1ddca8192a37754d33618de8a37f61ae1e007a", "kind" = "vulnerability", "label_check" = "confirmed", "method" = "fix_site", "path" = "python_packages/jupyter_lsp/jupyter_lsp/virtual_documents_shadow.py"}, {"base" = "3b8b15fb8b787b746998b1d1717b41e26257c026", "case_id" = "jupyter-lsp-jupyterlab-lsp-ordinary-197773236c8b5b7338f7423353feae7298e760c2", "files" = [{"head_lines" = [[104, 104]], "path" = "src/index.ts"}], "head" = "197773236c8b5b7338f7423353feae7298e760c2", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "b4a61425e56bfa07c664ca7f4486976d000ad576", "case_id" = "jupyter-lsp-jupyterlab-lsp-ordinary-2545902bf76ddc050a0cf644f19a18d0e8af38ff", "files" = [{"head_lines" = [[13, 13]], "path" = "src/virtual/document.spec.ts"}], "head" = "2545902bf76ddc050a0cf644f19a18d0e8af38ff", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "82bf8338a9f7ae9d515e7d34d492294e70cbeb6f", "case_id" = "jupyter-lsp-jupyterlab-lsp-ordinary-341102f3ee2bfeb3035da6adaa30a72abcc81554", "files" = [{"head_lines" = [[192, 199]], "path" = "packages/jupyterlab-lsp/src/edits.ts"}], "head" = "341102f3ee2bfeb3035da6adaa30a72abcc81554", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "5a19c2d4bf417f00fff8634f6db6c8d6f32a1fb6", "case_id" = "jupyter-lsp-jupyterlab-lsp-ordinary-37f130f1dfebcf62672d7e08475b19fcd26df9c3", "files" = [{"head_lines" = [[14, 14]], "path" = "azure-pipelines.yml"}, {"head_lines" = [[6, 6], [125, 125]], "path" = "py_src/jupyter_lsp/README.md"}, {"head_lines" = [[3, 3]], "path" = "py_src/jupyter_lsp/_version.py"}], "head" = "37f130f1dfebcf62672d7e08475b19fcd26df9c3", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "b93c5feb5189c31f6e934d885d329030d4669fcd", "case_id" = "jupyter-lsp-jupyterlab-lsp-ordinary-3b8b15fb8b787b746998b1d1717b41e26257c026", "files" = [{"head_lines" = [[26, 26], [29, 29], [67, 78], [87, 94], [123, 124], [134, 135]], "path" = "src/command_manager.ts"}, {"head_lines" = [[87, 87], [112, 112], [115, 115], [120, 120]], "path" = "src/index.ts"}], "head" = "3b8b15fb8b787b746998b1d1717b41e26257c026", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "2262bf020be9e4e40bdf7a7de18d0626de9e1433", "case_id" = "jupyter-lsp-jupyterlab-lsp-ordinary-6a53d8f7ae3b51f8148b7e60d74a52259f27484c", "files" = [{"head_lines" = [[3, 3], [13, 13], [20, 20], [22, 22], [84, 84]], "path" = "src/adapters/codemirror/cm_adapter.ts"}, {"head_lines" = [[248, 248], [392, 392]], "path" = "src/adapters/jupyterlab/jl_adapter.ts"}], "head" = "6a53d8f7ae3b51f8148b7e60d74a52259f27484c", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "4da6697c93b43ca739d2a4b91ca83c3e1f436454", "case_id" = "jupyter-lsp-jupyterlab-lsp-ordinary-6c536c7404c9b8915ae6fcbd6acb7f09a9bf06b6", "files" = [{"head_lines" = [[196, 196], [204, 204], [299, 299], [324, 324], [351, 351], [361, 361], [468, 479]], "path" = "atest/05_Features/Completion.robot"}, {"head_lines" = [[43, 43], [50, 50]], "path" = "atest/05_Features/Signature.robot"}, {"head_lines" = [[25, 26], [35, 36], [38, 39], [45, 46], [48, 49], [52, 53], [61, 62]], "path" = "atest/Variables.resource"}, {"head_lines" = [[365, 365]], "path" = "docs/Installation.ipynb"}, {"head_lines" = [[35, 35], [447, 451]], "path" = "packages/jupyterlab-lsp/src/features/completion/completion.ts"}], "head" = "6c536c7404c9b8915ae6fcbd6acb7f09a9bf06b6", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "c2d087713449f31eba3075f
id = "jupyter-lsp/jupyterlab-lsp"
repository = "jupyter-lsp/jupyterlab-lsp"
slice = 1
url = "https://github.com/jupyter-lsp/jupyterlab-lsp.git"
[[repository]]
changes = [{"advisory" = "GHSA-35g4-qx3c-vjhx", "base" = "b69e745584a34fcfd858df33e4631e420da07b9f", "case_id" = "matrix-org-matrix-appservice-bridge-3a8081647e10c293", "cwe" = "CWE-306", "family" = "access_control", "files" = [{"head_lines" = [[145, 183]], "path" = "src/components/room-upgrade-handler.ts"}], "function" = "onJoinedNewRoom", "function_lines" = [145, 183], "head" = "1b587e2455cbd30779f5052d2d2d46d58463a3e2", "kind" = "vulnerability", "label_check" = "confirmed", "method" = "fix_site", "path" = "src/components/room-upgrade-handler.ts"}, {"base" = "75866a7d23cd0bba785b9cf447e8dac21417866b", "case_id" = "matrix-org-matrix-appservice-bridge-ordinary-07d9b57485d678d140d53c7c2199191c5ecd5206", "files" = [{"head_lines" = [[184, 205], [541, 547]], "path" = "verto/verto.js"}], "head" = "07d9b57485d678d140d53c7c2199191c5ecd5206", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "5b5e0756918ee0777e6883a684831e3eb9e098f1", "case_id" = "matrix-org-matrix-appservice-bridge-ordinary-0d15b14ab8b6936d11fffcc0133d372dbe26b9f7", "files" = [{"head_lines" = [[126, 140], [142, 143], [146, 147], [150, 150], [156, 157], [161, 161]], "path" = "lib/components/room-upgrade-handler.js"}], "head" = "0d15b14ab8b6936d11fffcc0133d372dbe26b9f7", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "ee142dfa23b7925d0487540a8d45c82da14fdd61", "case_id" = "matrix-org-matrix-appservice-bridge-ordinary-2126d2cc80bcd3c7d36acd989beea804dce4e607", "files" = [{"head_lines" = [[364, 364], [391, 391], [404, 404]], "path" = "lib/bridge.js"}, {"head_lines" = [[278, 279], [305, 306], [337, 338], [369, 370]], "path" = "spec/integ/bridge.spec.js"}], "head" = "2126d2cc80bcd3c7d36acd989beea804dce4e607", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "50e8b8ae3b31e3027a095d443ecdb0da678cc7bf", "case_id" = "matrix-org-matrix-appservice-bridge-ordinary-351222bba6e445fe5506fddbaacdaa82442bb25c", "files" = [{"head_lines" = [[56, 56], [67, 67], [70, 70]], "path" = "lib/components/logging.js"}], "head" = "351222bba6e445fe5506fddbaacdaa82442bb25c", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "68b429eb2c6b5338ea218bb8a988390b4f4905ab", "case_id" = "matrix-org-matrix-appservice-bridge-ordinary-4cea3a28b2481810b47a5a085dcd878c600b6cd9", "files" = [{"head_lines" = [[8, 8], [12, 12]], "path" = "package.json"}, {"head_lines" = [[5, 5]], "path" = "spec/log.js"}, {"head_lines" = [[55, 55]], "path" = "spec/unit/client-factory.spec.js"}, {"head_lines" = [[1, 250]], "path" = "spec/unit/intent.spec.js"}, {"head_lines" = [[20, 20], [43, 43], [58, 58], [74, 74]], "path" = "spec/unit/request-factory.spec.js"}, {"head_lines" = [[53, 53]], "path" = "spec/unit/request.spec.js"}], "head" = "4cea3a28b2481810b47a5a085dcd878c600b6cd9", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 3, "time_third" = 0}, {"base" = "f5cc220e7f69ed28a33fb50a957129bfbbaff6ed", "case_id" = "matrix-org-matrix-appservice-bridge-ordinary-52bd6bd4825d63f7fbf05a89bd68ce752ab4552e", "files" = [{"head_lines" = [[33, 33], [50, 50], [73, 73], [80, 80], [88, 93], [99, 99], [104, 104], [113, 121], [149, 149], [155, 158], [190, 193], [198, 200]], "path" = "lib/components/cli.js"}], "head" = "52bd6bd4825d63f7fbf05a89bd68ce752ab4552e", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "cf45ad6af9f13cbd435528a5073508a48fade1a2", "case_id" = "matrix-org-matrix-appservice-bridge-ordinary-7018468eadcc47afb14f08e5fbee12172c8e3cbb", "files" = [{"head_lines" = [[1, 1]], "path" = "src/components/stores/event-store.ts"}, {"head_lines" = [[1, 1]], "path" = "src/components/stores/room-store.ts"}, {"head_lines" = [[1, 1]], "path" = "src/components/stores/user-activity-store.ts"}, {"head_lines" = [[1, 1]], "path" = "src/components/stores/user-store.ts"}], "head" = "7018468eadcc47afb14f08e5fbee12172c8e3cbb", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_thir
id = "matrix-org/matrix-appservice-bridge"
repository = "matrix-org/matrix-appservice-bridge"
slice = 1
url = "https://github.com/matrix-org/matrix-appservice-bridge.git"
[[repository]]
changes = [{"advisory" = "GHSA-8wwf-2644-f8x4", "base" = "e343c577cd7da4d304b837d4a07ab4df1e023092", "case_id" = "nvbn-thefuck-456ad18acb14f1b2", "case_ids" = ["nvbn-thefuck-456ad18acb14f1b2", "nvbn-thefuck-74126de049d52d8c"], "cwe" = "CWE-22", "family" = "path", "files" = [{"head_lines" = [[41, 49]], "path" = "thefuck/rules/dirty_untar.py"}, {"head_lines" = [[45, 55]], "path" = "thefuck/rules/dirty_unzip.py"}], "function" = "side_effect", "function_lines" = [41, 49], "head" = "6da0bc557f0fd94ea1397d3a7f508be896cc98d8", "kind" = "vulnerability", "label_check" = "confirmed", "method" = "fix_site", "path" = "thefuck/rules/dirty_untar.py", "targets" = [{"case_id" = "nvbn-thefuck-456ad18acb14f1b2", "cwe" = "CWE-22", "family" = "path", "function" = "side_effect", "function_lines" = [41, 49], "path" = "thefuck/rules/dirty_untar.py"}, {"case_id" = "nvbn-thefuck-74126de049d52d8c", "cwe" = "CWE-22", "family" = "path", "function" = "side_effect", "function_lines" = [45, 55], "path" = "thefuck/rules/dirty_unzip.py"}]}, {"base" = "a849b653528e8f408c234229a4dc703f36d8a860", "case_id" = "nvbn-thefuck-ordinary-1b961c4b876324717f91f646cffa581539736763", "files" = [{"head_lines" = [[34, 34]], "path" = "setup.py"}, {"head_lines" = [[131, 132], [156, 162]], "path" = "thefuck/main.py"}, {"head_lines" = [[11, 11], [244, 245]], "path" = "thefuck/shells.py"}], "head" = "1b961c4b876324717f91f646cffa581539736763", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "0235c0654d966aedcfc5ad27c51a2e720cdc559c", "case_id" = "nvbn-thefuck-ordinary-1f96faef2cd530806310478f6e812113ed583874", "files" = [{"head_lines" = [[2, 2], [37, 37], [41, 41], [45, 46]], "path" = "tests/rules/test_composer_not_command.py"}, {"head_lines" = [[3, 3], [6, 8], [14, 14]], "path" = "thefuck/rules/composer_not_command.py"}], "head" = "1f96faef2cd530806310478f6e812113ed583874", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "ec5b69ca6313d8c7ad0fde836f20da197cd0abe2", "case_id" = "nvbn-thefuck-ordinary-20779731d3185af5c46d2037fe3d0682608237b7", "files" = [{"head_lines" = [[8, 8], [15, 15], [30, 30]], "path" = "thefuck/entrypoints/not_configured.py"}], "head" = "20779731d3185af5c46d2037fe3d0682608237b7", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "8b1f078e27610995147f6d1af1fa3c40ff2ea526", "case_id" = "nvbn-thefuck-ordinary-251b69b5a00fbbd3a63d3b42dcf12e8adfc46b71", "files" = [{"head_lines" = [[6, 10], [12, 12], [17, 17], [22, 22]], "path" = "tests/rules/test_history.py"}, {"head_lines" = [[9, 25], [29, 33], [37, 42]], "path" = "tests/rules/test_no_command.py"}, {"head_lines" = [[6, 7], [233, 258]], "path" = "tests/test_utils.py"}, {"head_lines" = [[2, 2], [7, 7], [12, 12]], "path" = "thefuck/rules/history.py"}, {"head_lines" = [[2, 3], [15, 19], [23, 37]], "path" = "thefuck/rules/no_command.py"}, {"head_lines" = [[272, 292]], "path" = "thefuck/utils.py"}], "head" = "251b69b5a00fbbd3a63d3b42dcf12e8adfc46b71", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "cae76eb55fea5664672f0af7d4a12f56f349518d", "case_id" = "nvbn-thefuck-ordinary-4fe64e3dfa61167a3dba4b42692b803cb5fb0fbf", "files" = [{"head_lines" = [[6, 11], [25, 31]], "path" = "tests/rules/test_git_add.py"}, {"head_lines" = [[4, 14], [19, 20], [25, 25]], "path" = "thefuck/rules/git_add.py"}], "head" = "4fe64e3dfa61167a3dba4b42692b803cb5fb0fbf", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "20b6c4c1600e5d696c0f004242b6d21ce90ea4f0", "case_id" = "nvbn-thefuck-ordinary-54c408a6b572e84f75b1f11133d6769a6aef3dab", "files" = [{"head_lines" = [[199, 199], [206, 206]], "path" = "README.md"}, {"head_lines" = [[14, 16], [40, 40], [46, 46], [66, 66], [68, 68]], "path" = "tests/test_conf.py"}, {"head_lines" = [[28, 28]], "path" = "tests/test_main.py"}, {"head_lines" = [[31, 31], [48, 48], [71, 72]], "path" = "thefuck/conf.py"}], "head" = "54c408a6b572e84f75b1f11133d6769a6aef3dab", "kind" = "o
id = "nvbn/thefuck"
repository = "nvbn/thefuck"
slice = 1
url = "https://github.com/nvbn/thefuck.git"
[[repository]]
changes = [{"advisory" = "GHSA-798p-78g2-v556", "base" = "bb7439b553b9f965adc3d43bcd415c42eebe2f40", "case_id" = "ondata-ckan-mcp-server-01a3f68f84397eb4", "case_ids" = ["ondata-ckan-mcp-server-01a3f68f84397eb4", "ondata-ckan-mcp-server-b0b05cdc830b1f8b"], "cwe" = "CWE-918", "family" = "untrusted_destination", "files" = [{"head_lines" = [[47, 103]], "path" = "src/tools/sparql.ts"}, {"head_lines" = [[245, 309]], "path" = "src/utils/http.ts"}], "function" = "querySparqlEndpoint", "function_lines" = [47, 103], "head" = "129ba172ec15429347ea1faf5c919af730720370", "kind" = "vulnerability", "label_check" = "confirmed", "method" = "fix_site", "path" = "src/tools/sparql.ts", "targets" = [{"case_id" = "ondata-ckan-mcp-server-01a3f68f84397eb4", "cwe" = "CWE-918", "family" = "untrusted_destination", "function" = "querySparqlEndpoint", "function_lines" = [47, 103], "path" = "src/tools/sparql.ts"}, {"case_id" = "ondata-ckan-mcp-server-b0b05cdc830b1f8b", "cwe" = "CWE-918", "family" = "untrusted_destination", "function" = "validateServerUrl", "function_lines" = [245, 309], "path" = "src/utils/http.ts"}]}, {"base" = "9399cde163c48e111647715991bac4c557b6f229", "case_id" = "ondata-ckan-mcp-server-ordinary-244a6d8bfd96d68f7956f8410122442054706cfa", "files" = [{"head_lines" = [[5, 57]], "path" = "LOG.md"}, {"head_lines" = [[4, 6], [8, 33], [35, 38], [42, 66]], "path" = "openspec/specs/ckan-search/spec.md"}, {"head_lines" = [[10, 10], [378, 382]], "path" = "src/tools/organization.ts"}, {"head_lines" = [[178, 183], [228, 239], [245, 259], [262, 270], [273, 279], [281, 283], [1178, 1192], [1196, 1196]], "path" = "src/tools/package.ts"}, {"head_lines" = [[9, 9], [95, 101], [115, 144]], "path" = "src/tools/tag.ts"}, {"head_lines" = [[7, 7], [582, 645]], "path" = "tests/unit/package-scoring.test.ts"}], "head" = "244a6d8bfd96d68f7956f8410122442054706cfa", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 2}, {"base" = "efe6f8fc7e9ec400aa22032ac1bf9cb5c46af43a", "case_id" = "ondata-ckan-mcp-server-ordinary-3a3345c1e3d185a8a7ca86b76f2ea43af64baa70", "files" = [{"head_lines" = [[192, 205], [209, 209]], "path" = "tests/integration/quality.test.ts"}], "head" = "3a3345c1e3d185a8a7ca86b76f2ea43af64baa70", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "ea1a9841bfa680764a29dddd9ee97258ba37f52d", "case_id" = "ondata-ckan-mcp-server-ordinary-40aff756ed87b3221d38b572085c06f969667a84", "files" = [{"head_lines" = [[3, 10]], "path" = "LOG.md"}, {"head_lines" = [[3, 3]], "path" = "package.json"}, {"head_lines" = [[148, 148], [162, 162]], "path" = "src/README.md"}, {"head_lines" = [[82, 93]], "path" = "src/portals.json"}, {"head_lines" = [[48, 50], [99, 99]], "path" = "src/tools/datastore.ts"}, {"head_lines" = [[347, 347]], "path" = "src/tools/group.ts"}, {"head_lines" = [[395, 395]], "path" = "src/tools/organization.ts"}, {"head_lines" = [[610, 610], [790, 790], [1010, 1010]], "path" = "src/tools/package.ts"}], "head" = "40aff756ed87b3221d38b572085c06f969667a84", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "021ae01549e491953249d58213567d45fd62d9da", "case_id" = "ondata-ckan-mcp-server-ordinary-426fc8aba1196eecf51d49f32d219c26912a3037", "files" = [{"head_lines" = [[5, 9]], "path" = "LOG.md"}, {"head_lines" = [[3, 3], [9, 9]], "path" = "package-lock.json"}, {"head_lines" = [[3, 3]], "path" = "package.json"}, {"head_lines" = [[248, 260]], "path" = "src/utils/http.ts"}], "head" = "426fc8aba1196eecf51d49f32d219c26912a3037", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "b62203454ac1709e2513451eddd2a7c662c2515b", "case_id" = "ondata-ckan-mcp-server-ordinary-453be092fbc0ce6195df2559726905b7f7656094", "files" = [{"head_lines" = [[5, 13]], "path" = "LOG.md"}, {"head_lines" = [[3, 3], [9, 9]], "path" = "package-lock.json"}, {"head_lines" = [[3, 3]], "path" = "package.json"}, {"head_lines" = [[41, 56]], "path" = "tests/integration/quality.test.ts"}], "head" = "453be092fbc0ce6195df2559726905b7
id = "ondata/ckan-mcp-server"
repository = "ondata/ckan-mcp-server"
slice = 1
url = "https://github.com/ondata/ckan-mcp-server.git"
[[repository]]
changes = [{"advisory" = "GHSA-pgr8-jg6h-8gw6", "base" = "20f2b4c553ee343f491faf63e39427fba9908c7c", "case_id" = "webpack-webpack-bundle-analyzer-8e07af8a5ee1cc52", "cwe" = "CWE-79", "family" = "output_encoding", "files" = [{"head_lines" = [[55, 55]], "path" = "src/viewer.js"}], "function" = "chartData", "function_lines" = [55, 55], "head" = "9836649e870ef2e0a19da1ad4b17bf92c645e536", "kind" = "vulnerability", "label_check" = "confirmed", "method" = "fix_site", "path" = "src/viewer.js"}, {"base" = "6ae609a0ecdd4499e762d723eecfa85d92ca432c", "case_id" = "webpack-webpack-bundle-analyzer-ordinary-0cd709eac54f1a53d53c9594ba1319946b5e5ed5", "files" = [{"head_lines" = [[36, 37], [42, 43]], "path" = "client/components/Icon.jsx"}], "head" = "0cd709eac54f1a53d53c9594ba1319946b5e5ed5", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "0ce95e5ad155670a8b7f7085684185849acf70a6", "case_id" = "webpack-webpack-bundle-analyzer-ordinary-0d03f0ad184c5c34b9f3e71d2404e8b6777f05bb", "files" = [{"head_lines" = [[15, 18]], "path" = "src/analyzer.js"}], "head" = "0d03f0ad184c5c34b9f3e71d2404e8b6777f05bb", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "f94fb30ed5deefa40b0b1f563c653083fce890a2", "case_id" = "webpack-webpack-bundle-analyzer-ordinary-182181258468c2b0a1bf38dec0a7ee85c4f2b834", "files" = [{"head_lines" = [[101, 101]], "path" = "src/bin/analyzer.js"}], "head" = "182181258468c2b0a1bf38dec0a7ee85c4f2b834", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "1a4ada7d14e7a58e3eef1afb5a312ba871a16737", "case_id" = "webpack-webpack-bundle-analyzer-ordinary-23979e42400996f807e6cbd020b73d6aac6faa83", "files" = [{"head_lines" = [[1, 1]], "path" = ".eslintignore"}, {"head_lines" = [[119, 119], [131, 131]], "path" = ".eslintrc.json"}, {"head_lines" = [[2, 2]], "path" = "client/.eslintrc.json"}, {"head_lines" = [[1, 68]], "path" = "gulpfile.babel.js"}, {"head_lines" = [[1, 1]], "path" = "gulpfile.js"}, {"head_lines" = [[22, 26], [49, 49], [52, 52], [59, 60]], "path" = "package.json"}, {"head_lines" = [[1, 6]], "path" = "test/.eslintrc.json"}, {"head_lines" = [[1, 1]], "path" = "test/bundles/validCommonBundleWithModulesAsArray.js"}, {"head_lines" = [[1, 5]], "path" = "test/bundles/validCommonBundleWithModulesAsArray.sizes.json"}, {"head_lines" = [[1, 1]], "path" = "test/bundles/validCommonBundleWithModulesAsObject.js"}, {"head_lines" = [[1, 5]], "path" = "test/bundles/validCommonBundleWithModulesAsObject.sizes.json"}, {"head_lines" = [[1, 1]], "path" = "test/bundles/validExtraBundleWithModulesAsArray.js"}, {"head_lines" = [[1, 4]], "path" = "test/bundles/validExtraBundleWithModulesAsArray.sizes.json"}, {"head_lines" = [[1, 27]], "path" = "test/parseUtils.js"}], "head" = "23979e42400996f807e6cbd020b73d6aac6faa83", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "8c1497527b87aa8ef8f8761d67b7975e89d0116d", "case_id" = "webpack-webpack-bundle-analyzer-ordinary-492929cdfb2d20c36e062e041d1a32668dc0864b", "files" = [{"head_lines" = [[19, 22]], "path" = "CHANGELOG.md"}, {"head_lines" = [[1, 3]], "path" = "client/assets/icon-moon.svg"}, {"head_lines" = [[1, 4]], "path" = "client/assets/icon-sun.svg"}, {"head_lines" = [[2, 3], [10, 10], [12, 12], [17, 17]], "path" = "client/components/Button.css"}, {"head_lines" = [[13, 13], [17, 17], [19, 20]], "path" = "client/components/Dropdown.css"}, {"head_lines" = [[4, 8]], "path" = "client/components/Icon.css"}, {"head_lines" = [[7, 8], [18, 25]], "path" = "client/components/Icon.jsx"}, {"head_lines" = [[16, 16], [21, 28]], "path" = "client/components/Search.css"}, {"head_lines" = [[4, 4], [6, 6], [11, 11], [49, 58]], "path" = "client/components/Sidebar.css"}, {"head_lines" = [[7, 7], [52, 52]], "path" = "client/components/Sidebar.jsx"}, {"head_lines" = [[1, 19]], "path" = "client/components/ThemeToggle.css"}, {"head_lines" = [[1, 27]], "path" = "client/components/ThemeToggle.jsx"}, {"head_lines" = [[15, 27], [195, 212]], "path"
id = "webpack/webpack-bundle-analyzer"
repository = "webpack/webpack-bundle-analyzer"
slice = 1
url = "https://github.com/webpack/webpack-bundle-analyzer.git"
[[repository]]
changes = [{"advisory" = "GHSA-ch57-39q2-4crm", "base" = "4086e2b5f61615a813b70b25bc76095083552135", "case_id" = "zenitram-malla-15753fae1999978e", "case_ids" = ["zenitram-malla-15753fae1999978e", "zenitram-malla-45807117f798f314", "zenitram-malla-4c7ce7ae0b9dd0cf", "zenitram-malla-5b8f3116fefd595b", "zenitram-malla-72b8d4dc93a566fb", "zenitram-malla-73c0175a1009ffbf", "zenitram-malla-825a0f3ce563c373", "zenitram-malla-858255cb6145e104", "zenitram-malla-92e437caca55290b", "zenitram-malla-aeb1d1e3d40815a8", "zenitram-malla-bf4b3bcd2652952c", "zenitram-malla-c3ab7f5f4e769cc6", "zenitram-malla-f3535c03a02fa0e3"], "cwe" = "CWE-79", "family" = "output_encoding", "files" = [{"head_lines" = [[338, 353]], "path" = "src/malla/static/js/chat.js"}, {"head_lines" = [[81, 138]], "path" = "src/malla/static/js/relay_node_analysis.js"}, {"head_lines" = [[139, 155]], "path" = "src/malla/static/js/relay_node_analysis.js"}, {"head_lines" = [[216, 271]], "path" = "src/malla/static/js/modern-table.js"}, {"head_lines" = [[183, 188]], "path" = "src/malla/static/js/chat.js"}, {"head_lines" = [[354, 366]], "path" = "src/malla/static/js/chat.js"}, {"head_lines" = [[263, 297]], "path" = "src/malla/static/js/chat.js"}, {"head_lines" = [[1, 839]], "path" = "src/malla/static/js/chat.js"}, {"head_lines" = [[381, 413]], "path" = "src/malla/static/js/chat.js"}, {"head_lines" = [[217, 281]], "path" = "src/malla/static/js/node-picker.js"}, {"head_lines" = [[193, 197]], "path" = "src/malla/static/js/chat.js"}, {"head_lines" = [[319, 337]], "path" = "src/malla/static/js/chat.js"}, {"head_lines" = [[414, 440]], "path" = "src/malla/static/js/chat.js"}], "function" = "refreshPop", "function_lines" = [338, 353], "head" = "c8a2ed3ce9365c58fd357f66d7fc1b16bbf9b43c", "kind" = "vulnerability", "label_check" = "confirmed", "method" = "fix_site", "path" = "src/malla/static/js/chat.js", "targets" = [{"case_id" = "zenitram-malla-15753fae1999978e", "cwe" = "CWE-79", "family" = "output_encoding", "function" = "refreshPop", "function_lines" = [338, 353], "path" = "src/malla/static/js/chat.js"}, {"case_id" = "zenitram-malla-45807117f798f314", "cwe" = "CWE-79", "family" = "output_encoding", "function" = "renderTable", "function_lines" = [81, 138], "path" = "src/malla/static/js/relay_node_analysis.js"}, {"case_id" = "zenitram-malla-4c7ce7ae0b9dd0cf", "cwe" = "CWE-79", "family" = "output_encoding", "function" = "showNoDataMessage", "function_lines" = [139, 155], "path" = "src/malla/static/js/relay_node_analysis.js"}, {"case_id" = "zenitram-malla-5b8f3116fefd595b", "cwe" = "CWE-79", "family" = "output_encoding", "function" = "loadData", "function_lines" = [216, 271], "path" = "src/malla/static/js/modern-table.js"}, {"case_id" = "zenitram-malla-72b8d4dc93a566fb", "cwe" = "CWE-79", "family" = "output_encoding", "function" = "renderNodeLink", "function_lines" = [183, 188], "path" = "src/malla/static/js/chat.js"}, {"case_id" = "zenitram-malla-73c0175a1009ffbf", "cwe" = "CWE-79", "family" = "output_encoding", "function" = "replySnippet", "function_lines" = [354, 366], "path" = "src/malla/static/js/chat.js"}, {"case_id" = "zenitram-malla-825a0f3ce563c373", "cwe" = "CWE-79", "family" = "output_encoding", "function" = "popContent", "function_lines" = [263, 297], "path" = "src/malla/static/js/chat.js"}, {"case_id" = "zenitram-malla-858255cb6145e104", "cwe" = "CWE-79", "family" = "output_encoding", "function" = "function", "function_lines" = [1, 839], "path" = "src/malla/static/js/chat.js"}, {"case_id" = "zenitram-malla-92e437caca55290b", "cwe" = "CWE-79", "family" = "output_encoding", "function" = "buildLine", "function_lines" = [381, 413], "path" = "src/malla/static/js/chat.js"}, {"case_id" = "zenitram-malla-aeb1d1e3d40815a8", "cwe" = "CWE-79", "family" = "output_encoding", "function" = "renderResults", "function_lines" = [217, 281], "path" = "src/malla/static/js/node-picker.js"}, {"case_id" = "zenitram-malla-bf4b3bcd2652952c", "cwe" = "CWE-79", "family" = "output_encoding", "function" = "renderRelayCand", "function_lines" = [193, 197], "path" = "src/malla/static/js/chat.js"}, {"case
id = "zenitram/malla"
repository = "zenitram/malla"
slice = 1
url = "https://github.com/zenitraM/malla.git"
[[repository]]
changes = [{"advisory" = "GHSA-cv3r-c5h8-f4g5", "base" = "e436ee4ad067b64584ec9312c9e9c9a2641c1976", "case_id" = "zereight-gitlab-mcp-2367b459f8c3802b", "case_ids" = ["zereight-gitlab-mcp-2367b459f8c3802b", "zereight-gitlab-mcp-768c7d5a32ccc95b"], "cwe" = "CWE-22", "family" = "path", "files" = [{"head_lines" = [[947, 1092]], "path" = "index.ts"}, {"head_lines" = [[12243, 12287]], "path" = "index.ts"}], "function" = "validateConfiguration", "function_lines" = [947, 1092], "head" = "404a993ef5f86e99db693e8075fdb3a63625f1bd", "kind" = "vulnerability", "label_check" = "confirmed", "method" = "fix_site", "path" = "index.ts", "targets" = [{"case_id" = "zereight-gitlab-mcp-2367b459f8c3802b", "cwe" = "CWE-22", "family" = "path", "function" = "validateConfiguration", "function_lines" = [947, 1092], "path" = "index.ts"}, {"case_id" = "zereight-gitlab-mcp-768c7d5a32ccc95b", "cwe" = "CWE-22", "family" = "path", "function" = "startSSEServer", "function_lines" = [12243, 12287], "path" = "index.ts"}]}, {"base" = "3d7aa8035d996a312559e15f7dd1457e1f32a826", "case_id" = "zereight-gitlab-mcp-ordinary-140620397ba88ee6abbd6da01147a466905e1f22", "files" = [{"head_lines" = [[455, 455], [1058, 1061], [2553, 2553], [2567, 2567], [2757, 2761], [2830, 2834], [2836, 2838]], "path" = "index.ts"}, {"head_lines" = [[3, 3]], "path" = "package.json"}], "head" = "140620397ba88ee6abbd6da01147a466905e1f22", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "5a7dba4b6dcff62c337de2b5553e4a2fec9b01b3", "case_id" = "zereight-gitlab-mcp-ordinary-24112c921047945e322b746226d502e068087a75", "files" = [{"head_lines" = [[178, 178]], "path" = "README.md"}, {"head_lines" = [[970, 971], [4007, 4007], [4010, 4010], [4012, 4022], [4024, 4026], [4028, 4028], [4030, 4046], [5403, 5403]], "path" = "index.ts"}, {"head_lines" = [[1816, 1816]], "path" = "schemas.ts"}], "head" = "24112c921047945e322b746226d502e068087a75", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 1}, {"base" = "7c3de3c196c7eb6d83a85c41927c9aeaaf784f4b", "case_id" = "zereight-gitlab-mcp-ordinary-353013486f254738f83750b157baedb6dc7451d2", "files" = [{"head_lines" = [[356, 358], [366, 368]], "path" = "README.md"}, {"head_lines" = [[1721, 1721], [1746, 1746], [1761, 1761]], "path" = "index.ts"}, {"head_lines" = [[53, 55], [59, 59], [177, 179], [237, 237]], "path" = "test/test-toolset-filtering.ts"}], "head" = "353013486f254738f83750b157baedb6dc7451d2", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 1}, {"base" = "622c112f7f8b1ea9e64856321e49692094caa4ef", "case_id" = "zereight-gitlab-mcp-ordinary-44d8d11b4ab7b02536fa4cf84c4522d08105fc60", "files" = [{"head_lines" = [[910, 911], [915, 915], [918, 918]], "path" = "index.ts"}], "head" = "44d8d11b4ab7b02536fa4cf84c4522d08105fc60", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "cc9c957bd15a51a8c9ab7524dab1a56ae301c8ce", "case_id" = "zereight-gitlab-mcp-ordinary-587bb849b48ffc62d3da05e72fbb72dca70c1dc8", "files" = [{"head_lines" = [[24, 24]], "path" = "Formula/zereight-mcp-gitlab.rb"}, {"head_lines" = [[520, 520]], "path" = "docs/configuration/environment-variables.md"}, {"head_lines" = [[599, 599]], "path" = "index.ts"}, {"head_lines" = [[59, 59]], "path" = "scripts/sync-homebrew-formula.sh"}, {"head_lines" = [[86, 86], [93, 93], [113, 113]], "path" = "test/mcp-server-name.test.ts"}, {"head_lines" = [[135, 135], [188, 192]], "path" = "test/streamable-http-concurrent-session.test.ts"}], "head" = "587bb849b48ffc62d3da05e72fbb72dca70c1dc8", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 2}, {"base" = "74eabc02d7ac171471a3533cff1dfd878ccd44be", "case_id" = "zereight-gitlab-mcp-ordinary-5a7dba4b6dcff62c337de2b5553e4a2fec9b01b3", "files" = [{"head_lines" = [[2, 2], [41, 41], [63, 63], [105, 105], [142, 143], [148, 148], [198, 198], [233, 233], [380, 380], [386, 386], [408, 408], [429, 429], [450, 450], [452, 453], [455, 460], [488, 488], [527, 527], [584, 584], [593, 593],
id = "zereight/gitlab-mcp"
repository = "zereight/gitlab-mcp"
slice = 1
url = "https://github.com/zereight/gitlab-mcp.git"
Reference in New Issue Copy Permalink