Skip to content

FIPS 140-3 validated password hashing — ADR, packaging, and build pipeline - #8469

Draft
aaronlippold wants to merge 197 commits into
masterfrom
feature/fips-compliant-password-hashing
Draft

FIPS 140-3 validated password hashing — ADR, packaging, and build pipeline#8469
aaronlippold wants to merge 197 commits into
masterfrom
feature/fips-compliant-password-hashing

docs(authn): cite the tracking card for the LDAP prefer-at disable

6c69c3c
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Aug 16, 2026 in 3s

9 new alerts including 2 critical severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 2 critical
  • 4 high
  • 3 medium

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 161 in apps/backend/src/tenable/tenable.controller.ts

See this annotation in the file changed.

Code scanning / CodeQL

Server-side request forgery Critical

The
URL
Loading
of this request depends on a
user-provided value
Loading
.

Check failure on line 62 in apps/backend/src/tenable/tenable.service.ts

See this annotation in the file changed.

Code scanning / CodeQL

Server-side request forgery Critical

The
URL
Loading
of this request depends on a
user-provided value
Loading
.

Check failure on line 80 in apps/frontend/src/utilities/helper_util.ts

See this annotation in the file changed.

Code scanning / CodeQL

Clear text storage of sensitive information High

This stores sensitive data returned by
an access to password
Loading
as clear text.
This stores sensitive data returned by
an access to secretkey
Loading
as clear text.

Check failure on line 138 in libs/hdf-converters/src/utils/fingerprinting.ts

See this annotation in the file changed.

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
Loading
that depends on
library input
Loading
may run slow on strings starting with 'xmlns' and with many repetitions of 'xmlns'.
This
regular expression
Loading
that depends on
library input
Loading
may run slow on strings starting with 'xmlnshttp' and with many repetitions of 'http'.

Check failure on line 143 in libs/hdf-converters/src/utils/fingerprinting.ts

See this annotation in the file changed.

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
Loading
that depends on
library input
Loading
may run slow on strings starting with '<netsparker-' and with many repetitions of '<netsparker-'.
This
regular expression
Loading
that depends on
library input
Loading
may run slow on strings starting with '<netsparker-generated' and with many repetitions of 'generated'.

Check failure on line 144 in libs/hdf-converters/src/utils/fingerprinting.ts

See this annotation in the file changed.

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
Loading
that depends on
library input
Loading
may run slow on strings starting with '<invicti-' and with many repetitions of '<invicti-'.
This
regular expression
Loading
that depends on
library input
Loading
may run slow on strings starting with '<invicti-generated' and with many repetitions of 'generated'.

Check warning on line 238 in apps/backend/src/tenable/tenable-filtering-agent.spec.ts

See this annotation in the file changed.

Code scanning / CodeQL

Clear text transmission of sensitive cookie Medium test

Sensitive cookie sent without enforcing SSL encryption.

Check warning on line 133 in apps/backend/src/tenable/tenable-no-redirect.spec.ts

See this annotation in the file changed.

Code scanning / CodeQL

Clear text transmission of sensitive cookie Medium test

Sensitive cookie sent without enforcing SSL encryption.

Check warning on line 85 in apps/backend/src/tenable/tenable.controller.spec.ts

See this annotation in the file changed.

Code scanning / CodeQL

Clear text transmission of sensitive cookie Medium test

Sensitive cookie sent without enforcing SSL encryption.