> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Audit

<AccordionGroup>
  <Accordion title="puppeteer-evaluate-code-injection">
    If unverified user data can reach the `evaluate` method it can result in Server-Side Request Forgery vulnerabilities<br />**Likelihood**: LOW<br />**Confidence**: LOW<br />**CWE**: <br />- CWE-918: Server-Side Request Forgery (SSRF)
    <br />**OWASP**: <br />- A10:2021 - Server-Side Request Forgery (SSRF)
  </Accordion>

  <Accordion title="puppeteer-evaluate-arg-injection">
    If unverified user data can reach the `evaluate` method it can result in Server-Side Request Forgery vulnerabilities<br />**Likelihood**: LOW<br />**Confidence**: LOW<br />**CWE**: <br />- CWE-918: Server-Side Request Forgery (SSRF)
    <br />**OWASP**: <br />- A10:2021 - Server-Side Request Forgery (SSRF)
  </Accordion>

  <Accordion title="puppeteer-goto-injection">
    If unverified user data can reach the `goto` method it can result in Server-Side Request Forgery vulnerabilities<br />**Likelihood**: LOW<br />**Confidence**: LOW<br />**CWE**: <br />- CWE-918: Server-Side Request Forgery (SSRF)
    <br />**OWASP**: <br />- A10:2021 - Server-Side Request Forgery (SSRF)
  </Accordion>

  <Accordion title="puppeteer-exposed-chrome-devtools">
    Remote debugging protocol does not perform any authentication, so exposing it too widely can be a security risk.<br />**Likelihood**: LOW<br />**Confidence**: LOW<br />**CWE**: <br />- CWE-94: Improper Control of Generation of Code ('Code Injection')
    <br />**OWASP**: <br />- A03:2021 - Injection
  </Accordion>

  <Accordion title="puppeteer-setcontent-injection">
    If unverified user data can reach the `setContent` method it can result in Server-Side Request Forgery vulnerabilities<br />**Likelihood**: LOW<br />**Confidence**: LOW<br />**CWE**: <br />- CWE-918: Server-Side Request Forgery (SSRF)
    <br />**OWASP**: <br />- A10:2021 - Server-Side Request Forgery (SSRF)
  </Accordion>
</AccordionGroup>