143
Critical
86
High
107
Medium
8
Low
344
Total
medium
49
lib/section-source-note.mjs::readSectionSource
medium
47
mcp/create-server.mjs::sectionSourceMcpErrorMessage
medium
47
test/section-source.test.mjs::note
medium
47
test/gateway-scooling-write-back-smoke.test.mjs::validPayload
medium
47
cli/index.mjs::runGetMetadataFacets
medium
47
test/gateway-scooling-write-back-smoke.test.mjs::withSmokeServer
medium
47
hub/gateway/server.mjs::sanitizedMetadataFacetsGatewayError
medium
47
hub/gateway/server.mjs::sanitizedDocumentTreeGatewayError
medium
47
hub/gateway/server.mjs::normalizeGatewayMetadataFacetsPath
medium
47
hub/gateway/server.mjs::normalizeGatewayDocumentTreePath
medium
47
test/hub-metadata-facets-self-hosted-route.test.mjs::routeSource
medium
47
test/hub-metadata-facets-self-hosted-route.test.mjs::readRepoFile
medium
47
test/hub-document-tree-self-hosted-route.test.mjs::routeSource
medium
47
test/hub-document-tree-self-hosted-route.test.mjs::readRepoFile
medium
47
test/gateway-metadata-facets-rest.test.mjs::startServer
medium
47
test/gateway-metadata-facets-rest.test.mjs::startGateway
medium
47
test/gateway-metadata-facets-rest.test.mjs::signTestJwt
medium
47
test/gateway-document-tree-rest.test.mjs::startServer
medium
47
test/gateway-document-tree-rest.test.mjs::startGateway
medium
47
test/gateway-document-tree-rest.test.mjs::signTestJwt
medium
47
hub/bridge/server.mjs::getBridgeEmbeddingConfig
medium
47
hub/bridge/server.mjs::defaultEmbeddingModelForBridge
medium
47
test/hub-section-source-self-hosted-route.test.mjs::routeSource
medium
47
test/hub-section-source-self-hosted-route.test.mjs::readRepoFile
medium
47
lib/indexer-chunk-options.mjs::safeIndexerChunkSizeForEmbedding
medium
47
lib/indexer-chunk-options.mjs::resolveIndexerChunkOptions
medium
47
lib/indexer-chunk-options.mjs::defaultBridgeEmbeddingModelForProvider
medium
47
lib/indexer-chunk-options.mjs::parsePositiveInteger
medium
46
hub/gateway/server.mjs::getHostedAccessContext
medium
46
hub/gateway/scooling-write-back-smoke.mjs::configuredEnvironment
medium
46
hub/gateway/scooling-write-back-smoke.mjs::createScoolingWriteBackSmokeRouter
medium
46
hub/gateway/scooling-write-back-smoke.mjs::normalizeBooleanFlag
medium
46
hub/gateway/scooling-write-back-smoke.mjs::smokeEnabled
medium
46
hub/gateway/scooling-write-back-smoke.mjs::validSmokeRequest
medium
46
test/bridge-hosted-context-settings.test.mjs::signTestJwt
medium
46
test/gateway-settings-hosted-vault-filter.test.mjs::signTestJwt
medium
46
hub/gateway/mcp-proxy.mjs::isMcpInitializeRequest
medium
46
hub/gateway/mcp-proxy.mjs::createMcpProxyRouter
medium
46
hub/gateway/mcp-proxy.mjs::getOrCreateSession
medium
46
hub/gateway/server.mjs::hostedContextAbortSignal
medium
46
hub/gateway/server.mjs::fetchHostedAccessContextForVault
medium
46
hub/gateway/scooling-write-back-smoke.mjs::canisterMetadataAvailable
medium
44
test/mcp-hosted-note-outline.test.mjs::parseToolResult
medium
44
test/mcp-hosted-note-outline.test.mjs::restore
medium
44
test/mcp-hosted-note-outline.test.mjs::makeCtx
medium
44
test/mcp-hosted-note-outline.test.mjs::installFetchMock
medium
44
test/mcp-hosted-note-outline.test.mjs::headerGet
medium
44
test/mcp-hosted-note-outline.test.mjs::connectPair
medium
43
hub/bridge/server.mjs::resolveHostedBridgeSettingsContext
medium
43
hub/bridge/server.mjs::hostedContextAbortSignal
medium
43
hub/bridge/server.mjs::explicitVaultAccessForUser
medium
43
hub/bridge/server.mjs::resolveHostedBridgeContext
medium
43
hub/bridge/server.mjs::fetchCanisterVaultIdsForUser
medium
40
web/hub/hub.js::appendSectionSourceDebugRow
medium
39
test/section-source-scooling-compatibility-smoke.test.mjs::connectPair
medium
39
test/section-source-scooling-compatibility-smoke.test.mjs::assertNoForbiddenKeys
medium
39
test/section-source-scooling-compatibility-smoke.test.mjs::assertNoForbiddenText
medium
39
test/section-source-scooling-compatibility-smoke.test.mjs::assertScoolingStrictCompatible
medium
39
test/section-source-scooling-compatibility-smoke.test.mjs::callGetSectionSource
medium
39
test/section-source-scooling-compatibility-smoke.test.mjs::readRepoFile
medium
39
test/section-source-scooling-compatibility-smoke.test.mjs::sectionSourceToolSource
medium
39
test/section-source-scooling-compatibility-smoke.test.mjs::walk
medium
39
test/section-source-scooling-compatibility-smoke.test.mjs::listFixtureFiles
medium
33
lib/section-source.mjs::hasSubstantiveContent
medium
33
lib/section-source.mjs::buildSectionSourceFromMarkdown
medium
33
lib/section-source.mjs::buildSectionSourceFromOutlineAndBody
medium
33
lib/section-source.mjs::collectHeadingNodes
medium
33
lib/section-source.mjs::endOffset
medium
33
lib/section-source.mjs::flattenSections
medium
33
lib/section-source.mjs::flattenTreeHeadingIds
medium
33
lib/section-source.mjs::hasBodyContentInBoundary
medium
33
lib/section-source.mjs::buildSectionSource
medium
33
lib/section-source.mjs::nextPeerOrAncestorStartOffset
medium
33
lib/section-source.mjs::startOffsetOf
medium
33
test/document-tree.test.mjs::outline
medium
33
lib/section-source.mjs::assignSectionIds
medium
33
lib/section-source.mjs::bodyAvailabilityByHeadingId
medium
28
lib/note-outline.mjs::normalizeOutlinePath
medium
28
lib/note-outline.mjs::normalizeHeadingText
medium
28
lib/note-outline.mjs::normalizeHeadingDepth
medium
28
lib/note-outline.mjs::headingId
medium
28
lib/note-outline.mjs::extractPlainText
medium
28
lib/note-outline.mjs::displayTitle
medium
28
lib/note-outline.mjs::collectHeadings
medium
28
lib/note-outline.mjs::buildNoteOutlineFromMarkdown
medium
28
lib/note-outline.mjs::buildNoteOutline
medium
28
lib/vault.mjs::capFacetValue
medium
28
lib/vault.mjs::capScalar
medium
28
lib/vault.mjs::capSlug
medium
28
lib/vault.mjs::normalizeFacetSlugArray
medium
28
lib/vault.mjs::normalizeMetadataFacets
medium
28
lib/vault.mjs::normalizeFacetRelativePath
medium
28
lib/vault.mjs::inferredFolderForFacetPath
medium
28
lib/vault.mjs::dateFacetString
medium
28
lib/vault.mjs::capSlugArray
medium
28
lib/note-outline.mjs::normalizePositiveInteger
medium
28
lib/vault.mjs::capFacetSlug
medium
27
test/gateway-admin-billing-repair.test.mjs::adminToken
medium
27
test/gateway-admin-billing-repair.test.mjs::createGateway
medium
27
test/gateway-admin-billing-repair.test.mjs::get