<< Back to security report

──nasa-ammos/slim/slim-continuous-testing — semgrep Scan

Repositorynasa-ammos/slim →

Commit2dc1c7c →

VerdictFAIL

Score70

DateSep 14, 2026

──Findings

Severity	Rule	Message	File:Line
HIGH	javascript.lang.security.detect-child-process.detect-child-process	Detected calls to child_process from a function argument `itemName`. This could lead to a command injection if the input is user controllable. Try to avoid calls to child_process, and if it is needed ensure user input is correctly sanitized or sandboxed.	nasa-ammos/slim/slim-continuous-testing-834c1ef4/src/conf/create-marketplace-zips.js:40 →
HIGH	javascript.lang.security.detect-child-process.detect-child-process	Detected calls to child_process from a function argument `itemType`. This could lead to a command injection if the input is user controllable. Try to avoid calls to child_process, and if it is needed ensure user input is correctly sanitized or sandboxed.	nasa-ammos/slim/slim-continuous-testing-834c1ef4/src/conf/create-marketplace-zips.js:40 →