ZAP API Scan Report

[github-actions[bot]]

• Site: http://localhost:5000 New Alerts
  • A Server Error response code was returned by the server [100000] total: 2:
    • http://localhost:5000/users/2951972117354876282
    • http://localhost:5000/user
  • X-Content-Type-Options Header Missing [10021] total: 2:
    • http://localhost:5000/health
    • http://localhost:5000/openapi.json
  • A Client Error response code was returned by the server [100000] total: 86:
    • http://localhost:5000/latest/meta-data/
    • http://localhost:5000/user
    • http://localhost:5000/user/
    • http://localhost:5000
    • http://localhost:5000/
    • ..
  • Non-Storable Content [10049] total: 4:
    • http://localhost:5000/user
    • http://localhost:5000/user/
    • http://localhost:5000/user
    • http://localhost:5000/user
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • http://localhost:5000/users/
    • http://localhost:5000/user
    • http://localhost:5000/user
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • http://localhost:5000/users/
    • http://localhost:5000/user
    • http://localhost:5000/user
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • http://localhost:5000/users/
    • http://localhost:5000/user
    • http://localhost:5000/user
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • http://localhost:5000/users/
    • http://localhost:5000/user
    • http://localhost:5000/user
  • Storable and Cacheable Content [10049] total: 4:
    • http://localhost:5000/health
    • http://localhost:5000/openapi.json
    • http://localhost:5000/user/username
    • http://localhost:5000/users/

View the following link to download the report. RunnerID:8693109819

---

ZAP is supported by the Crash Override Open Source Fellowship

[github-actions[bot]]

• Site: http://localhost:5000 Resolved Alerts
  • Non-Storable Content [10049] total: 4:
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
  • Sec-Fetch-User Header is Missing [90005] total: 3:
  • Storable and Cacheable Content [10049] total: 4:

View the following link to download the report. RunnerID:9178544224

[github-actions[bot]]

• Site: https://127.0.0.1 New Alerts
  • A Server Error response code was returned by the server [100000] total: 2:
    • https://127.0.0.1/users/8300712943019611409
    • https://127.0.0.1/user
  • Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 7:
    • https://127.0.0.1/user/
    • https://127.0.0.1/health
    • https://127.0.0.1/openapi.json
    • https://127.0.0.1/user/username
    • https://127.0.0.1/users/
    • ..
  • Strict-Transport-Security Header Not Set [10035] total: 7:
    • https://127.0.0.1/user/
    • https://127.0.0.1/health
    • https://127.0.0.1/openapi.json
    • https://127.0.0.1/user/username
    • https://127.0.0.1/users/
    • ..
  • Unexpected Content-Type was returned [100001] total: 2:
    • https://127.0.0.1?aaa=bbb
    • https://127.0.0.1?class.module.classLoader.DefaultAssertionStatus=nonsense
  • X-Content-Type-Options Header Missing [10021] total: 2:
    • https://127.0.0.1/health
    • https://127.0.0.1/openapi.json
  • A Client Error response code was returned by the server [100000] total: 80:
    • https://127.0.0.1
    • https://127.0.0.1/
    • https://127.0.0.1/._darcs
    • https://127.0.0.1/.bzr
    • https://127.0.0.1/.DS_Store
    • ..
  • Non-Storable Content [10049] total: 3:
    • https://127.0.0.1/user/
    • https://127.0.0.1/user
    • https://127.0.0.1/user
  • Re-examine Cache-control Directives [10015] total: 2:
    • https://127.0.0.1/health
    • https://127.0.0.1/openapi.json
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • https://127.0.0.1/openapi.json
    • https://127.0.0.1/user/username
    • https://127.0.0.1/user
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • https://127.0.0.1/openapi.json
    • https://127.0.0.1/user/username
    • https://127.0.0.1/user
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • https://127.0.0.1/openapi.json
    • https://127.0.0.1/user/username
    • https://127.0.0.1/user
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • https://127.0.0.1/openapi.json
    • https://127.0.0.1/user/username
    • https://127.0.0.1/user
  • Storable and Cacheable Content [10049] total: 4:
    • https://127.0.0.1/health
    • https://127.0.0.1/openapi.json
    • https://127.0.0.1/user/username
    • https://127.0.0.1/users/

View the following link to download the report. RunnerID:9411247374

[github-actions[bot]]

• Site: https://127.0.0.1 Resolved Alerts
  • Non-Storable Content [10049] total: 3:
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
  • Sec-Fetch-User Header is Missing [90005] total: 3:
  • Storable and Cacheable Content [10049] total: 4:

View the following link to download the report. RunnerID:9663456109

[github-actions[bot]]

• Site: https://127.0.0.1 New Alerts
  • Non-Storable Content [10049] total: 3:
    • https://127.0.0.1/user/
    • https://127.0.0.1/user
    • https://127.0.0.1/user
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • https://127.0.0.1/openapi.json
    • https://127.0.0.1/user/username
    • https://127.0.0.1/user
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • https://127.0.0.1/openapi.json
    • https://127.0.0.1/user/username
    • https://127.0.0.1/user
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • https://127.0.0.1/openapi.json
    • https://127.0.0.1/user/username
    • https://127.0.0.1/user
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • https://127.0.0.1/openapi.json
    • https://127.0.0.1/user/username
    • https://127.0.0.1/user
  • Storable and Cacheable Content [10049] total: 4:
    • https://127.0.0.1/health
    • https://127.0.0.1/openapi.json
    • https://127.0.0.1/user/username
    • https://127.0.0.1/users/

View the following link to download the report. RunnerID:9760264143

[github-actions[bot]]

• Site: https://127.0.0.1 Resolved Alerts
  • Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 7:
  • Strict-Transport-Security Header Not Set [10035] total: 7:
  • X-Content-Type-Options Header Missing [10021] total: 2:
  • Non-Storable Content [10049] total: 3:
  • Re-examine Cache-control Directives [10015] total: 2:
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
  • Sec-Fetch-User Header is Missing [90005] total: 3:
  • Storable and Cacheable Content [10049] total: 4:

View the following link to download the report. RunnerID:10058811127

[github-actions[bot]]

• Site: https://127.0.0.1 New Alerts
  • Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 7:
    • https://127.0.0.1/user/
    • https://127.0.0.1/health
    • https://127.0.0.1/openapi.json
    • https://127.0.0.1/user/username
    • https://127.0.0.1/users/
    • ..
  • Strict-Transport-Security Header Not Set [10035] total: 7:
    • https://127.0.0.1/user/
    • https://127.0.0.1/health
    • https://127.0.0.1/openapi.json
    • https://127.0.0.1/user/username
    • https://127.0.0.1/users/
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 2:
    • https://127.0.0.1/health
    • https://127.0.0.1/openapi.json
  • Re-examine Cache-control Directives [10015] total: 2:
    • https://127.0.0.1/health
    • https://127.0.0.1/openapi.json

View the following link to download the report. RunnerID:10058839429

[github-actions[bot]]

• Site: https://127.0.0.1 Resolved Alerts
  • Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 7:
  • Strict-Transport-Security Header Not Set [10035] total: 7:
  • X-Content-Type-Options Header Missing [10021] total: 2:
  • Re-examine Cache-control Directives [10015] total: 2:

View the following link to download the report. RunnerID:10058806044

[github-actions[bot]]

• Site: https://127.0.0.1 New Alerts
  • Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 7:
    • https://127.0.0.1/user/
    • https://127.0.0.1/health
    • https://127.0.0.1/openapi.json
    • https://127.0.0.1/user/username
    • https://127.0.0.1/users/
    • ..
  • Strict-Transport-Security Header Not Set [10035] total: 7:
    • https://127.0.0.1/user/
    • https://127.0.0.1/health
    • https://127.0.0.1/openapi.json
    • https://127.0.0.1/user/username
    • https://127.0.0.1/users/
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 2:
    • https://127.0.0.1/health
    • https://127.0.0.1/openapi.json
  • Non-Storable Content [10049] total: 3:
    • https://127.0.0.1/user/
    • https://127.0.0.1/user
    • https://127.0.0.1/user
  • Re-examine Cache-control Directives [10015] total: 2:
    • https://127.0.0.1/health
    • https://127.0.0.1/openapi.json
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • https://127.0.0.1/users/
    • https://127.0.0.1/user
    • https://127.0.0.1/user
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • https://127.0.0.1/users/
    • https://127.0.0.1/user
    • https://127.0.0.1/user
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • https://127.0.0.1/users/
    • https://127.0.0.1/user
    • https://127.0.0.1/user
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • https://127.0.0.1/users/
    • https://127.0.0.1/user
    • https://127.0.0.1/user
  • Storable and Cacheable Content [10049] total: 4:
    • https://127.0.0.1/health
    • https://127.0.0.1/openapi.json
    • https://127.0.0.1/user/username
    • https://127.0.0.1/users/

View the following link to download the report. RunnerID:10180694984