Skip to content

fix(security): integrate Bright CI pipeline for security tests and remediation#854

Open
tssbox wants to merge 8 commits intofixer/fix_workflow_tc01from
bright/547c3f57-7593-4931-9aee-98b18004094f
Open

fix(security): integrate Bright CI pipeline for security tests and remediation#854
tssbox wants to merge 8 commits intofixer/fix_workflow_tc01from
bright/547c3f57-7593-4931-9aee-98b18004094f

Conversation

@tssbox
Copy link
Contributor

@tssbox tssbox commented Jan 27, 2026

Note

Fixed 2 of 2 vulnerabilities.
Please review the fixes before merging.

Fix Vulnerability Endpoint Affected Files Resolution
[Critical] XPATH Injection GET /api/partners/searchPartners src/partners/partners.service.ts Sanitize user input by escaping single quotes to prevent XPath injection.
[Critical] XPATH Injection GET /api/partners/partnerLogin src/partners/partners.service.ts, src/partners/partners.controller.ts Sanitize user input by using parameterized XPath queries to prevent injection attacks.
Workflow execution details
  • Repository Analysis: TypeScript, NestJS
  • Entrypoints Discovery: 3 entrypoints found
  • Attack Vectors Identification
  • E2E Security Tests Generation: 3 test files generated
  • E2E Security Tests Execution: 2 vulnerabilities found
  • Cleanup Irrelevant Test Files: 1 test files removed
  • Applying Security Fixes: 2 fixes generated
  • E2E Security Tests Execution: 0 vulnerabilities found
  • ⏭️ Cleanup Irrelevant Test Files: Skipped
  • ⏭️ Applying Security Fixes: Skipped
  • Workflow Wrap-Up

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

Comments