📦
Histórico de auditoria
gsi-geocode - 1 auditoria
Versão da auditoria 1 Mais recente
13 de out. de 2026, 03:47
All 38 static findings are false positives: documented GSI requests, Markdown backticks, Japanese Unicode normalization, and ordinary JSON fixtures. No evidence found of prompt injection, credential theft, concealed execution, or unrelated data transfer. Unbounded response buffering creates a low-severity availability risk for broad searches.
11
Arquivos analisados
276
Linhas analisadas
3
Itens de revisão
0
Falsos positivos ignorados
Preocupações de segurança confirmadas (1)
Baixo
Unbounded Address-Search Response Buffering
The helper buffers complete HTTP responses and builds every geocoding row before limiting displayed results. Broad searches can consume excessive memory.
The HTTP helper calls read without a byte limit, and geocoding materializes all rows before slicing. Documentation explicitly confirms uncapped searches and full downloads.
Fatores de risco
🌐 Acesso à rede (12)
⚙️ Comandos externos (22)
Auditado por: codex