fix: security vulnerabilities (Trust scan 137788cd)#371

Open

Jaden-JJH wants to merge 7 commits into

OWASP:masterfrom

Jaden-JJH:trust-security/fix-137788cd

Commits on Mar 3, 2026

fix: Arbitrary Code Execution in underscore, Arbitrary local file read vulnerability during template rend, Inefficient Regular Expression Complexity in marked, body-parser vulnerable to denial of s…
Jaden-JJH
committed
fix: Code String Concat (CWE-95), Eval Detected (CWE-95)
Jaden-JJH
committed
fix: Express Check Csurf Middleware Usage (CWE-352), Express Cookie Session No Path (CWE-522), Express Cookie Session No Expires (CWE-522), Express Cookie Session No Domain (CWE-522), Using Http Se…
Jaden-JJH
committed
fix: Django No Csrf Token (CWE-352)
Jaden-JJH
committed
fix: Plaintext Http Link (CWE-319)
Jaden-JJH
committed
fix: No New Privileges (CWE-732), Writable Filesystem Service (CWE-732)
Jaden-JJH
committed
fix: Express Open Redirect (CWE-601)
Jaden-JJH
committed