PRISM

acme / storefront / SecurityDemo data

Security

Every security finding, with where it is and what depends on it.

Analyze a repository

2

critical

1

high

0

medium

3 findings

Explain with AI
  • critical

    SQL injection in user lookup

    src/api/users.ts:184

    13 dependent modules

    Semgrep · taint trace

    94
  • critical

    Hardcoded payment secret

    src/config/payments.ts:12

    Exposed in 3 builds

    Secret scan

    91
  • high

    jsonwebtoken 8.5.1 has a known CVE

    package.json

    Auth path

    Dependency audit

    79

Checks: SQL and shell commands built from strings, eval and new Function, XSS sinks, unsafe deserialization, committed secrets and .env files, and dependencies with known vulnerabilities (OSV.dev).