getsentry / getsentry/sentry-javascript
New Semgrep Finding for getsentry/javascript-debug-ids
Offen
Bug
javascript
Security
Supply-Chain-Vuln
- Vorherrschende Sprache
- TypeScript
- Sterne
- 8.7k
- Forks
- 1.8k
- Ø Merge
- 1 T. 17 Std.
- Gemergte PRs (30 T.)
- 515
Beschreibung
Repo: `getsentry/javascript-debug-ids`
Finding Confidence: Conditionally Reachable
Finding Severity: High
---
To reduce risk of accidental information disclosure, we are intentionally not exposing full vulnerability details here
Please see the parent ticket or Semgrep Console for more details: [https://semgrep.dev/orgs/sentry/supply-chain/findings/909969329]()
Beitragsleitfaden
Rechercherichtung
Start with the parent ticket or Semgrep Console finding 909969329 for the vulnerability details, then inspect the getsentry/javascript-debug-ids repository and its TypeScript code. Confirm the affected path and use resolution of the Semgrep finding as the completion criterion.
Vom Indexierungsmodell aus dem Issue-Text verfasst.
Bewertung
- Tech-Stack
- typescript
- Bereich
- security
- Issue-Typ
- Bug
- Schwierigkeit
- 4/5
- Geschätzter Aufwand
- 3-5 Tage
- Aktivitätsstatus
- Ruhig
- Klarheit
- Muss geklärt werden
- Anfängerfreundlichkeit
- 25/100