📦
审计历史
gsi-geocode - 1 审计
审计版本 1 最新
2026年10月13日 03:47
All 38 static findings are false positives: documented GSI requests, Markdown backticks, Japanese Unicode normalization, and ordinary JSON fixtures. No evidence found of prompt injection, credential theft, concealed execution, or unrelated data transfer. Unbounded response buffering creates a low-severity availability risk for broad searches.
11
已扫描文件
276
分析行数
3
复核项
0
已忽略误报
已确认安全问题 (1)
低
Unbounded Address-Search Response Buffering
The helper buffers complete HTTP responses and builds every geocoding row before limiting displayed results. Broad searches can consume excessive memory.
The HTTP helper calls read without a byte limit, and geocoding materializes all rows before slicing. Documentation explicitly confirms uncapped searches and full downloads.
风险因素
🌐 网络访问 (12)
⚙️ 外部命令 (22)
审计者: codex