Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.
Record dictionary is filtered by privacy status but returned verbatim without stripping sensitive operator-side or internal fields. Ensure only public allowlisted fields are returned.
Returning raw application objects in API route handlers can expose sensitive credentials such as API tokens, private keys, or client secrets. Ensure sensitive fields are redacted before returning the object in response payloads.
Detected a potentially inverted redaction filter. Using '!strings.HasPrefix' with an auth-related or secret-related prefix acts as an allow-list, thus deleting all non-matching normal entries and preserving only the sensitive items that were likely meant to be redacted. Remove the negation to properly redact objects that match the prefix.
