Skip to content

Document Dependabot metrics (#55730)

dc5346a
Select commit
Loading
Failed to load commit list.
Merged

Repo sync #39039

Document Dependabot metrics (#55730)
dc5346a
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Jun 24, 2025 in 4s

4 new alerts including 2 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 2 high
  • 2 medium

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 236 in src/frame/middleware/index.ts

See this annotation in the file changed.

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
a file system access
, but is not rate-limited.

Check failure on line 258 in src/frame/middleware/index.ts

See this annotation in the file changed.

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
a file system access
, but is not rate-limited.

Check warning on line 127 in src/search/middleware/search-routes.ts

See this annotation in the file changed.

Code scanning / CodeQL

Server-side URL redirect Medium

Untrusted URL redirection depends on a
user-provided value
.

Check warning on line 144 in src/shielding/middleware/handle-invalid-query-strings.ts

See this annotation in the file changed.

Code scanning / CodeQL

Server-side URL redirect Medium

Untrusted URL redirection depends on a
user-provided value
.