Code Security Report: 10 total findings [main]

[mend-for-github-com]

Code Security Report

Scan Metadata

Latest Scan: 2025-02-06 12:17am
Total Findings: 10 | New Findings: 0 | Resolved Findings: 0
Tested Project Files: 158
Detected Programming Languages: 1 (C/C++ (Beta))

• Check this box to manually trigger a scan

Finding Details

Severity	Vulnerability Type	CWE	File	Data Flows	Detected
Medium	Heap Inspection	CWE-244	child_process.h:68	1	2024-11-15 09:12pm
Vulnerable Code nx-lyve-cloud-plugin/src/lib/cloudfuse/child_process.h Line 68 in 1c766df processReturn encryptConfig(const std::string passphrase); Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	child_process.h:40	1	2024-08-30 11:29pm
Vulnerable Code nx-lyve-cloud-plugin/src/lib/cloudfuse/child_process.h Line 40 in 1c766df processReturn mount(const std::string passphrase); Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	device_info.h:47	1	2024-07-17 04:21pm
Vulnerable Code nx-lyve-cloud-plugin/src/lib/nx/sdk/helpers/device_info.h Line 47 in 1c766df std::string m_password; Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	settings_model.h:22	1	2024-08-30 11:29pm
Vulnerable Code nx-lyve-cloud-plugin/src/plugin/settings/settings_model.h Line 22 in 1c766df static const std::string kSecretKeyPasswordFieldId = "secretKey"; Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	child_process.h:39	1	2024-08-30 11:29pm
Vulnerable Code nx-lyve-cloud-plugin/src/lib/cloudfuse/child_process.h Line 39 in 1c766df processReturn dryRun(const std::string passphrase); Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	engine.cpp:262	1	2024-08-30 10:35pm
Vulnerable Code nx-lyve-cloud-plugin/src/plugin/settings/engine.cpp Line 262 in 1c766df std::string secretKey = values[kSecretKeyPasswordFieldId]; Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	engine.cpp:512	1	2024-08-30 10:35pm
Vulnerable Code nx-lyve-cloud-plugin/src/plugin/settings/engine.cpp Line 512 in 1c766df std::string generatePassphrase() Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	engine.h:52	1	2024-08-29 11:46pm
Vulnerable Code nx-lyve-cloud-plugin/src/plugin/settings/engine.h Line 52 in 1c766df std::string m_passphrase; Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	engine.cpp:42	1	2024-08-30 04:10pm
Vulnerable Code nx-lyve-cloud-plugin/src/plugin/settings/engine.cpp Line 42 in 1c766df static std::string generatePassphrase(); Secure Code Warrior Training Material
Medium	Heap Inspection	CWE-244	engine.cpp:406	1	2024-08-30 10:35pm
Vulnerable Code nx-lyve-cloud-plugin/src/plugin/settings/engine.cpp Line 406 in 1c766df std::string secretKey = values[kSecretKeyPasswordFieldId]; Secure Code Warrior Training Material