Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Release/v1.4.1 #8

Closed
wants to merge 5 commits into from
Closed

Release/v1.4.1 #8

wants to merge 5 commits into from

Conversation

PascalKleindienst
Copy link
Collaborator

No description provided.

@github-actions GitHub Actions
Copy link

Logo
Checkmarx One – Scan Summary & Details – 575fef61-e33a-4760-b08f-c2fd9bffeb46

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH Client_DOM_Stored_XSS /frontend/src/js/payments/applepay.js: 109 Attack Vector
HIGH Client_DOM_Stored_XSS /frontend/src/js/payments/applepay.js: 109 Attack Vector
HIGH Client_DOM_Stored_XSS /frontend/src/js/payments/applepay.js: 100 Attack Vector
HIGH Client_DOM_Stored_XSS /vendor/unzerdev/php-sdk/examples/Applepay/index.php: 151 Attack Vector
HIGH Client_DOM_Stored_XSS /vendor/unzerdev/php-sdk/examples/Applepay/index.php: 172 Attack Vector
HIGH Reflected_XSS /src/Controllers/WebhookController.php: 42 Attack Vector
HIGH Reflected_XSS /src/Controllers/WebhookController.php: 42 Attack Vector
HIGH Stored_XSS /vendor/phpseclib/phpseclib/phpseclib/System/SSH/Common/Traits/ReadBytes.php: 31 Attack Vector
HIGH Stored_XSS /vendor/phpseclib/phpseclib/phpseclib/System/SSH/Common/Traits/ReadBytes.php: 31 Attack Vector
HIGH Stored_XSS /vendor/unzerdev/php-sdk/test/Fixtures/JsonProvider.php: 24 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Traits/Fingerprint.php: 52 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Formats/Keys/PuTTY.php: 338 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Formats/Keys/PuTTY.php: 311 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Formats/Keys/PuTTY.php: 247 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Formats/Keys/PuTTY.php: 81 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Formats/Keys/PKCS1.php: 105 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Random.php: 138 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Random.php: 137 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Random.php: 106 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Formats/Keys/PuTTY.php: 303 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 1102 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/RSA/PublicKey.php: 256 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Traits/Fingerprint.php: 42 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php: 3685 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php: 3685 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php: 3684 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php: 3684 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php: 4349 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php: 4349 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php: 4373 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php: 4373 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/File/X509.php: 1821 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/File/X509.php: 3619 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php: 4378 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php: 4378 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 1100 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/RSA/PrivateKey.php: 213 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/File/X509.php: 3642 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Formats/Keys/PuTTY.php: 315 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Formats/Keys/PuTTY.php: 315 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Formats/Keys/PuTTY.php: 200 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Formats/Keys/PuTTY.php: 260 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/File/X509.php: 3660 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Formats/Keys/PuTTY.php: 296 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Formats/Keys/PuTTY.php: 296 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/File/X509.php: 3646 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 1037 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/File/X509.php: 3665 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/PrivateKey.php: 120 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/PrivateKey.php: 120 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/File/X509.php: 1821 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 508 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 508 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 508 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 1106 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 525 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 525 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 525 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 1035 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 515 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 515 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 515 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php: 4377 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php: 4377 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 495 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 495 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 495 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 495 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 495 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 495 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 495 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 505 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 505 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 505 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 505 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php: 505 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php: 4327 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php: 4327 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php: 4327 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php: 4327 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 953 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 953 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 953 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 953 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 953 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 953 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 953 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/File/X509.php: 1863 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 1053 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 953 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 953 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 953 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 953 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 953 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 953 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/SymmetricKey.php: 953 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Hash.php: 782 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Hash.php: 782 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Hash.php: 782 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Hash.php: 782 Attack Vector
MEDIUM Broken_or_Risky_Hashing_Function /vendor/phpseclib/phpseclib/phpseclib/Crypt/Hash.php: 782 Attack Vector
MEDIUM

More results are available on AST platform

sebastianmeyer
sebastianmeyer previously approved these changes Aug 5, 2024
View reviewed changes
@PascalKleindienst PascalKleindienst dismissed sebastianmeyer’s stale review August 5, 2024 12:15

The merge-base changed after approval.

@PascalKleindienst PascalKleindienst deleted the release/v1.4.1 branch November 13, 2024 08:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@sebastianmeyer sebastianmeyer sebastianmeyer left review comments

Assignees
No one assigned
Labels
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@PascalKleindienst @sebastianmeyer