MendDemo-josh / GoThinkster

MIT License

0 stars 0 forks source link

Code Security Report: 3 total findings #2

Open mend-for-github-com[bot] opened 7 months ago

mend-for-github-com[bot] commented 7 months ago

Code Security Report

Scan Metadata

Latest Scan: 2024-05-22 01:01pm Total Findings: 3 | New Findings: 0 | Resolved Findings: 0 Tested Project Files: 15 Detected Programming Languages: 1 (Go)

[ ] Check this box to manually trigger a scan

Finding Details

Severity	Vulnerability Type	CWE	File	Data Flows	Date
Medium	Weak Pseudo-Random	[CWE-338](https://cwe.mitre.org/data/definitions/338.html)	[utils.go:22](https://github.com/MendDemo-josh/GoThinkster/blob/7b6aa04f176b957dc54e667fadb37e5b55a7db5f/common/utils.go#L22)	1	2024-04-24 01:55pm
Vulnerable Code https://github.com/MendDemo-josh/GoThinkster/blob/7b6aa04f176b957dc54e667fadb37e5b55a7db5f/common/utils.go#L22 Secure Code Warrior Training Material ● Training ▪ [Secure Code Warrior Weak Pseudo-Random Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/crypto/insecurerandomness/go/vanilla) ● Videos ▪ [Secure Code Warrior Weak Pseudo-Random Video](https://media.securecodewarrior.com/v2/Module_59_Insecure_Randomness_v2.mp4) ● Further Reading ▪ [OWASP Insecure Randomness](https://owasp.org/www-community/vulnerabilities/Insecure_Randomness)

Medium	Heap Inspection	[CWE-244](https://cwe.mitre.org/data/definitions/244.html)	[validators.go:16](https://github.com/MendDemo-josh/GoThinkster/blob/7b6aa04f176b957dc54e667fadb37e5b55a7db5f/users/validators.go#L16)	1	2024-04-24 01:55pm
Vulnerable Code https://github.com/MendDemo-josh/GoThinkster/blob/7b6aa04f176b957dc54e667fadb37e5b55a7db5f/users/validators.go#L16 Secure Code Warrior Training Material

Medium	Heap Inspection	[CWE-244](https://cwe.mitre.org/data/definitions/244.html)	[models.go:21](https://github.com/MendDemo-josh/GoThinkster/blob/7b6aa04f176b957dc54e667fadb37e5b55a7db5f/users/models.go#L21)	1	2024-04-24 01:55pm
Vulnerable Code https://github.com/MendDemo-josh/GoThinkster/blob/7b6aa04f176b957dc54e667fadb37e5b55a7db5f/users/models.go#L21 Secure Code Warrior Training Material