fix: security vulnerabilities (Trust scan 42e01b6e)#375

Open

Jaden-JJH wants to merge 9 commits into

OWASP:masterfrom

Jaden-JJH:trust-security/fix-42e01b6e

Commits on Mar 4, 2026

fix: Arbitrary Code Execution in underscore, body-parser vulnerable to denial of service when url encodin, Regular Expression Denial of Service in marked, Denial of Service in mongodb, Arbitrary lo…
Jaden-JJH
committed
fix: Identified a Private Key, which may compromise cryptographic, Detected Private Key (CWE-798)
Jaden-JJH
committed
fix: Code String Concat (CWE-95), Eval Detected (CWE-95)
Jaden-JJH
committed
fix: Detected Bcrypt Hash (CWE-798)
Jaden-JJH
committed
fix: Express Check Csurf Middleware Usage (CWE-352), Express Cookie Session No Domain (CWE-522), Express Cookie Session No Expires (CWE-522), Using Http Server (CWE-319), Express Cookie Session No …
Jaden-JJH
committed
fix: Django No Csrf Token (CWE-352)
Jaden-JJH
committed
fix: No New Privileges (CWE-732), Writable Filesystem Service (CWE-732)
Jaden-JJH
committed
fix: Express Open Redirect (CWE-601)
Jaden-JJH
committed
fix: Plaintext Http Link (CWE-319)
Jaden-JJH
committed