> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

<AccordionGroup>
  <Accordion title="insecure-hashes">
    Detected cryptographically insecure hashing function<br />**Likelihood**: LOW<br />**Confidence**: HIGH<br />**CWE**: <br />- C
    <br />- W
    <br />- E
    <br />- -
    <br />- 3
    <br />- 2
    <br />- 8
    <br />- :
    <br />-\
    <br />- U
    <br />- s
    <br />- e
    <br />-\
    <br />- o
    <br />- f
    <br />-\
    <br />- W
    <br />- e
    <br />- a
    <br />- k
    <br />-\
    <br />- H
    <br />- a
    <br />- s
    <br />- h
  </Accordion>

  <Accordion title="unsafe-usage">
    Detected 'unsafe' usage, please audit for secure usage<br />**Likelihood**: LOW<br />**Confidence**: HIGH<br />**CWE**: <br />- C
    <br />- W
    <br />- E
    <br />- -
    <br />- 2
    <br />- 4
    <br />- 2
    <br />- :
    <br />-\
    <br />- U
    <br />- s
    <br />- e
    <br />-\
    <br />- o
    <br />- f
    <br />-\
    <br />- I
    <br />- n
    <br />- h
    <br />- e
    <br />- r
    <br />- e
    <br />- n
    <br />- t
    <br />- l
    <br />- y
    <br />-\
    <br />- D
    <br />- a
    <br />- n
    <br />- g
    <br />- e
    <br />- r
    <br />- o
    <br />- u
    <br />- s
    <br />-\
    <br />- F
    <br />- u
    <br />- n
    <br />- c
    <br />- t
    <br />- i
    <br />- o
    <br />- n
  </Accordion>

  <Accordion title="current-exe">
    current\_exe should not be used for security operations. From the docs: "The output of this function should not be trusted for anything that might have security implications. Basically, if users can run the executable, they can change the output arbitrarily."<br />**Likelihood**: LOW<br />**Confidence**: HIGH<br />**CWE**: <br />- C
    <br />- W
    <br />- E
    <br />- -
    <br />- 8
    <br />- 0
    <br />- 7
    <br />- :
    <br />-\
    <br />- R
    <br />- e
    <br />- l
    <br />- i
    <br />- a
    <br />- n
    <br />- c
    <br />- e
    <br />-\
    <br />- o
    <br />- n
    <br />-\
    <br />- U
    <br />- n
    <br />- t
    <br />- r
    <br />- u
    <br />- s
    <br />- t
    <br />- e
    <br />- d
    <br />-\
    <br />- I
    <br />- n
    <br />- p
    <br />- u
    <br />- t
    <br />- s
    <br />-\
    <br />- i
    <br />- n
    <br />-\
    <br />- a
    <br />-\
    <br />- S
    <br />- e
    <br />- c
    <br />- u
    <br />- r
    <br />- i
    <br />- t
    <br />- y
    <br />-\
    <br />- D
    <br />- e
    <br />- c
    <br />- i
    <br />- s
    <br />- i
    <br />- o
    <br />- n
  </Accordion>

  <Accordion title="reqwest-accept-invalid">
    Dangerously accepting invalid TLS information<br />**Likelihood**: LOW<br />**Confidence**: HIGH<br />**CWE**: <br />- C
    <br />- W
    <br />- E
    <br />- -
    <br />- 2
    <br />- 9
    <br />- 5
    <br />- :
    <br />-\
    <br />- I
    <br />- m
    <br />- p
    <br />- r
    <br />- o
    <br />- p
    <br />- e
    <br />- r
    <br />-\
    <br />- C
    <br />- e
    <br />- r
    <br />- t
    <br />- i
    <br />- f
    <br />- i
    <br />- c
    <br />- a
    <br />- t
    <br />- e
    <br />-\
    <br />- V
    <br />- a
    <br />- l
    <br />- i
    <br />- d
    <br />- a
    <br />- t
    <br />- i
    <br />- o
    <br />- n
  </Accordion>

  <Accordion title="ssl-verify-none">
    SSL verification disabled, this allows for MitM attacks<br />**Likelihood**: LOW<br />**Confidence**: HIGH<br />**CWE**: <br />- C
    <br />- W
    <br />- E
    <br />- -
    <br />- 2
    <br />- 9
    <br />- 5
    <br />- :
    <br />-\
    <br />- I
    <br />- m
    <br />- p
    <br />- r
    <br />- o
    <br />- p
    <br />- e
    <br />- r
    <br />-\
    <br />- C
    <br />- e
    <br />- r
    <br />- t
    <br />- i
    <br />- f
    <br />- i
    <br />- c
    <br />- a
    <br />- t
    <br />- e
    <br />-\
    <br />- V
    <br />- a
    <br />- l
    <br />- i
    <br />- d
    <br />- a
    <br />- t
    <br />- i
    <br />- o
    <br />- n
  </Accordion>

  <Accordion title="temp-dir">
    temp\_dir should not be used for security operations. From the docs: 'The temporary directory may be shared among users, or between processes with different privileges; thus, the creation of any files or directories in the temporary directory must use a secure method to create a uniquely named file. Creating a file or directory with a fixed or predictable name may result in “insecure temporary file” security vulnerabilities.'<br />**Likelihood**: LOW<br />**Confidence**: HIGH<br />**CWE**: <br />- C
    <br />- W
    <br />- E
    <br />- -
    <br />- 8
    <br />- 0
    <br />- 7
    <br />- :
    <br />-\
    <br />- R
    <br />- e
    <br />- l
    <br />- i
    <br />- a
    <br />- n
    <br />- c
    <br />- e
    <br />-\
    <br />- o
    <br />- n
    <br />-\
    <br />- U
    <br />- n
    <br />- t
    <br />- r
    <br />- u
    <br />- s
    <br />- t
    <br />- e
    <br />- d
    <br />-\
    <br />- I
    <br />- n
    <br />- p
    <br />- u
    <br />- t
    <br />- s
    <br />-\
    <br />- i
    <br />- n
    <br />-\
    <br />- a
    <br />-\
    <br />- S
    <br />- e
    <br />- c
    <br />- u
    <br />- r
    <br />- i
    <br />- t
    <br />- y
    <br />-\
    <br />- D
    <br />- e
    <br />- c
    <br />- i
    <br />- s
    <br />- i
    <br />- o
    <br />- n
  </Accordion>

  <Accordion title="args">
    args should not be used for security operations. From the docs: "The first element is traditionally the path of the executable, but it can be set to arbitrary text, and might not even exist. This means this property should not be relied upon for security purposes."<br />**Likelihood**: LOW<br />**Confidence**: HIGH<br />**CWE**: <br />- C
    <br />- W
    <br />- E
    <br />- -
    <br />- 8
    <br />- 0
    <br />- 7
    <br />- :
    <br />-\
    <br />- R
    <br />- e
    <br />- l
    <br />- i
    <br />- a
    <br />- n
    <br />- c
    <br />- e
    <br />-\
    <br />- o
    <br />- n
    <br />-\
    <br />- U
    <br />- n
    <br />- t
    <br />- r
    <br />- u
    <br />- s
    <br />- t
    <br />- e
    <br />- d
    <br />-\
    <br />- I
    <br />- n
    <br />- p
    <br />- u
    <br />- t
    <br />- s
    <br />-\
    <br />- i
    <br />- n
    <br />-\
    <br />- a
    <br />-\
    <br />- S
    <br />- e
    <br />- c
    <br />- u
    <br />- r
    <br />- i
    <br />- t
    <br />- y
    <br />-\
    <br />- D
    <br />- e
    <br />- c
    <br />- i
    <br />- s
    <br />- i
    <br />- o
    <br />- n
  </Accordion>

  <Accordion title="reqwest-set-sensitive">
    Set sensitive flag on security headers with 'set\_sensitive' to treat data with special care<br />**Likelihood**: LOW<br />**Confidence**: MEDIUM<br />**CWE**: <br />- C
    <br />- W
    <br />- E
    <br />- -
    <br />- 9
    <br />- 2
    <br />- 1
    <br />- :
    <br />-\
    <br />- S
    <br />- t
    <br />- o
    <br />- r
    <br />- a
    <br />- g
    <br />- e
    <br />-\
    <br />- o
    <br />- f
    <br />-\
    <br />- S
    <br />- e
    <br />- n
    <br />- s
    <br />- i
    <br />- t
    <br />- i
    <br />- v
    <br />- e
    <br />-\
    <br />- D
    <br />- a
    <br />- t
    <br />- a
    <br />-\
    <br />- i
    <br />- n
    <br />-\
    <br />- a
    <br />-\
    <br />- M
    <br />- e
    <br />- c
    <br />- h
    <br />- a
    <br />- n
    <br />- i
    <br />- s
    <br />- m
    <br />-\
    <br />- w
    <br />- i
    <br />- t
    <br />- h
    <br />- o
    <br />- u
    <br />- t
    <br />-\
    <br />- A
    <br />- c
    <br />- c
    <br />- e
    <br />- s
    <br />- s
    <br />-\
    <br />- C
    <br />- o
    <br />- n
    <br />- t
    <br />- r
    <br />- o
    <br />- l
  </Accordion>

  <Accordion title="args-os">
    args\_os should not be used for security operations. From the docs: "The first element is traditionally the path of the executable, but it can be set to arbitrary text, and might not even exist. This means this property should not be relied upon for security purposes."<br />**Likelihood**: LOW<br />**Confidence**: HIGH<br />**CWE**: <br />- C
    <br />- W
    <br />- E
    <br />- -
    <br />- 8
    <br />- 0
    <br />- 7
    <br />- :
    <br />-\
    <br />- R
    <br />- e
    <br />- l
    <br />- i
    <br />- a
    <br />- n
    <br />- c
    <br />- e
    <br />-\
    <br />- o
    <br />- n
    <br />-\
    <br />- U
    <br />- n
    <br />- t
    <br />- r
    <br />- u
    <br />- s
    <br />- t
    <br />- e
    <br />- d
    <br />-\
    <br />- I
    <br />- n
    <br />- p
    <br />- u
    <br />- t
    <br />- s
    <br />-\
    <br />- i
    <br />- n
    <br />-\
    <br />- a
    <br />-\
    <br />- S
    <br />- e
    <br />- c
    <br />- u
    <br />- r
    <br />- i
    <br />- t
    <br />- y
    <br />-\
    <br />- D
    <br />- e
    <br />- c
    <br />- i
    <br />- s
    <br />- i
    <br />- o
    <br />- n
  </Accordion>

  <Accordion title="rustls-dangerous">
    Dangerous client config used, ensure SSL verification<br />**Likelihood**: LOW<br />**Confidence**: HIGH<br />**CWE**: <br />- C
    <br />- W
    <br />- E
    <br />- -
    <br />- 2
    <br />- 9
    <br />- 5
    <br />- :
    <br />-\
    <br />- I
    <br />- m
    <br />- p
    <br />- r
    <br />- o
    <br />- p
    <br />- e
    <br />- r
    <br />-\
    <br />- C
    <br />- e
    <br />- r
    <br />- t
    <br />- i
    <br />- f
    <br />- i
    <br />- c
    <br />- a
    <br />- t
    <br />- e
    <br />-\
    <br />- V
    <br />- a
    <br />- l
    <br />- i
    <br />- d
    <br />- a
    <br />- t
    <br />- i
    <br />- o
    <br />- n
  </Accordion>
</AccordionGroup>
