<< Back to security report
Repositoryz80dev/lemon →
Commit4fb91bd →
VerdictPASS
Score80
DateSep 4, 2026
| Severity | Rule | Message | File:Line |
|---|---|---|---|
| MEDIUM | node_insecure_random_generator | crypto.pseudoRandomBytes()/Math.random() is a cryptographically weak random number generator. | z80dev/lemon/agent-games-20f201a2/apps/lemon_sim_ui/priv/static/assets/app-237d4acb5c50a4e47f95f2064e0c37ae.js:0 → |
| MEDIUM | node_insecure_random_generator | crypto.pseudoRandomBytes()/Math.random() is a cryptographically weak random number generator. | z80dev/lemon/agent-games-20f201a2/apps/lemon_sim_ui/priv/static/assets/app.js:0 → |
| MEDIUM | node_insecure_random_generator | crypto.pseudoRandomBytes()/Math.random() is a cryptographically weak random number generator. | z80dev/lemon/agent-games-20f201a2/apps/lemon_web/priv/static/assets/vendor/phoenix_live_view.esm.js:0 → |
| MEDIUM | node_timing_attack | String comparisons using '===', '!==', '!=' and '==' is vulnerable to timing attacks. A timing attack allows the attacker to learn potentially sensitive information by, for example, measuring how long it takes for the application to respond to a request. More info: https://nodejs.org/en/learn/getting-started/security-best-practices#information-exposure-through-timing-attacks-cwe-208 | z80dev/lemon/agent-games-20f201a2/apps/lemon_web/priv/static/assets/vendor/phoenix_live_view.esm.js:0 → |