Audit

Compliance
Anti-Patterns
Code Governance
Infrastructure Security Database
Application Security Database
- Apex
- Bash
- C
- Clojure
- Cpp
- Csharp
- Dockerfile
- Elixir
- Fingerprints
- Generic
- Go
- Html
- Java
- Javascript
  - Ajv
  - Angular
  - Apollo
  - Argon2
  - Audit
  - Aws-lambda
  - Axios
  - Bluebird
  - Browser
  - Chrome-remote-interface
  - Crypto
  - Deno
  - Express
  - Fbjs
  - Firebase
  - Grpc
  - Intercom
  - Jose
  - Jquery
  - Jsonwebtoken
  - Jssha
  - Jwt-simple
  - Knex
  - Lang
  - Monaco-editor
  - Mongodb
  - Mongoose
  - Mssql
  - Mysql
  - Node-expat
  - Passport-jwt
  - Pg
  - Phantom
    - Security
      - Audit
  - Playwright
  - Puppeteer
  - React
  - Sandbox
  - Sax
  - Sequelize
  - Serialize-javascript
  - Shelljs
  - Superagent
  - Thenify
  - Vm2
  - Vue
  - Wkhtmltoimage
  - Wkhtmltopdf
  - Xml2json
- Json
- Kotlin
- Ocaml
- Php
- Problem-based-packs
- Python
- Ruby
- Rust
- Scala
- Solidity
- Swift
- Terraform
- Typescript
- Yaml

phantom-injection

If unverified user data can reach the phantom page methods it can result in Server-Side Request Forgery vulnerabilities
Likelihood: LOW
Confidence: LOW
CWE:
- CWE-918: Server-Side Request Forgery (SSRF)
OWASP:
- A10:2021 - Server-Side Request Forgery (SSRF)

Node pg pool hardcoded secret Audit

Start Here

Setup

Pull Request Review

Scan center

Integrations

IDE

Rule Reference

Resources