[Security] execSync calls without timeout — potential DoS

[djimit]

Auto-Generated Issue

Category: security
Severity: high
Generated by: DjimFlo Self-Analysis Bridge

Description

Multiple execSync calls in the codebase lack a timeout parameter, creating potential denial-of-service risks if commands hang indefinitely.

Affected Files

• packages/server/src/services/repository-scanner.ts
• packages/server/src/services/self-repository-service.ts
• packages/server/src/services/self-deploy-service.ts
• packages/server/src/services/diff-capture.ts

Recommended Action

Add timeout: 10_000 to all execSync options objects.

---

Auto-generated by DjimFlo Self-Analysis Bridge.

[djimit]

Progress

Fix implemented in PR #38:

• Added timeout: 10_000 to execSync calls
• Files: repository-scanner.ts, self-repository-service.ts, self-deploy-service.ts, diff-capture.ts