Scans / #4102

storefront

storefront

github.com/loki/storefront · on file since Jun 1, 2026
Scanned

Findings

Jun 2, 2026 · 9:15 AM
User input reaches a SQL string unparameterized CWE-89
src/api/orders.ts:42
CriticalOpen
Hardcoded API key committed to the repo CWE-798
src/config/secrets.ts:9
HighIgnored
Dependency pinned to a version with a known CVE CWE-1104
package.json
MediumFixed
Risk score78