📦 deps(thirdparty): update snapshots
This commit is contained in:
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"name": "agentic-bundle-security-engineer",
|
||||
"version": "14.0.0",
|
||||
"version": "14.1.0",
|
||||
"description": "Editorial \"Security Engineer\" bundle for Claude Code from Agentic Awesome Skills.",
|
||||
"author": {
|
||||
"name": "sickn33 and contributors",
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"name": "aasb-security-engineer",
|
||||
"version": "14.0.0",
|
||||
"version": "14.1.0",
|
||||
"description": "Install the \"Security Engineer\" editorial skill bundle from Agentic Awesome Skills.",
|
||||
"author": {
|
||||
"name": "sickn33 and contributors",
|
||||
|
||||
+1
-1
@@ -204,7 +204,7 @@ Is it actively exploited (EPSS >0.5)?
|
||||
| Pattern | Risk | Look For |
|
||||
|---------|------|----------|
|
||||
| **String concat in queries** | Injection | `"SELECT * FROM " + user_input` |
|
||||
| **Dynamic code execution** | RCE | `eval()`, `exec()`, `Function()` |
|
||||
| **Dynamic code execution** | RCE | `eval()`, `exec()`, `Function()` | <!-- security-allowlist: defensive vulnerability taxonomy -->
|
||||
| **Unsafe deserialization** | RCE | `pickle.loads()`, `unserialize()` |
|
||||
| **Path manipulation** | Traversal | User input in file paths |
|
||||
| **Disabled security** | Various | `verify=False`, `--insecure` |
|
||||
|
||||
Reference in New Issue
Block a user