143
Critical
86
High
94
Medium
8
Low
331
Total
critical
81
hub/gateway/mcp-hosted-server.mjs::createHostedMcpServer
critical
81
mcp/create-server.mjs::mountKnowtationMcp
critical
80
cli/index.mjs::main
critical
78
web/hub/hub.js::attachNoteDetailReadActions
critical
78
test/hub-note-outline-self-hosted-route.test.mjs::routeSource
critical
78
test/section-source-hosted-implementation-spec.test.mjs::assertHostedSectionSourceAbsent
critical
78
web/hub/hub.js::renderSectionSourceData
critical
76
hub/gateway/refresh-token-store.mjs::pruneRefreshTokens
critical
76
hub/gateway/refresh-token-store.mjs::normalizeRecords
critical
76
hub/gateway/refresh-token-store.mjs::loadRefreshRecords
critical
76
hub/gateway/refresh-token-store.mjs::issueRefreshToken
critical
76
hub/gateway/refresh-token-store.mjs::getBlobStore
critical
76
hub/gateway/refresh-token-store.mjs::createGatewayRefreshStore
critical
76
hub/auth-session.mjs::refreshHandler
critical
76
hub/auth-session.mjs::refreshError
critical
76
hub/auth-session.mjs::refreshCookieOptions
critical
76
test/section-source-policy.test.mjs::readRepoFile
critical
76
hub/auth-session.mjs::readPresentedToken
critical
76
hub/auth-session.mjs::logoutHandler
critical
76
hub/auth-session.mjs::issueRefreshCookie
critical
76
hub/auth-session.mjs::createRefreshHandler
critical
76
hub/auth-session.mjs::clearCookieOptions
critical
76
test/mcp-section-source.test.mjs::readRepoFile
critical
76
test/section-source-hosted-implementation-spec.test.mjs::makeCtx
critical
76
test/hub-integration-guides.test.mjs::onOpen
critical
76
web/hub/hub.js::openIntegGuideModal
critical
76
test/mcp-section-source.test.mjs::sectionSourceToolSource
critical
76
web/hub/hub.js::closeIntegGuideModal
critical
76
web/hub/hub.js::bindIntegrationGuideModalControlsOnce
critical
76
web/hub/hub-integration-guides.mjs::renderIntegrationGuideHtml
critical
76
web/hub/hub-integration-guides.mjs::listIntegrationGuideIds
critical
76
web/hub/hub-integration-guides.mjs::wireIntegrationTiles
critical
76
web/hub/hub.js::api
critical
76
web/hub/hub.js::refreshAccessToken
critical
76
test/section-source-hosted-implementation-spec.test.mjs::connectPair
critical
76
hub/gateway/server.mjs::refreshCookiePolicy
critical
76
hub/gateway/server.mjs::issueRefreshCookieSafe
critical
76
hub/gateway/server.mjs::issueAccessTokenForSub
critical
76
hub/gateway/server.mjs::decodeVerifiedToken
critical
76
test/refresh-tokens-store.test.mjs::storeFile
critical
76
test/gateway-session-introspection.test.mjs::createGateway
critical
76
test/gateway-session-introspection.test.mjs::adminPayload
critical
76
test/gateway-refresh-token-store.test.mjs::setJSON
critical
76
test/gateway-refresh-token-store.test.mjs::get
critical
76
test/gateway-refresh-token-store.test.mjs::createStubBlobStore
critical
76
hub/refresh-tokens.mjs::filePathFor
critical
76
hub/lib/refresh-token-core.mjs::revokeAllForSub
critical
76
hub/auth-session.mjs::createLogoutHandler
critical
76
netlify/functions/gateway.mjs::handler
critical
76
hub/server.mjs::handleAuthCallback
critical
76
hub/server.mjs::refreshCookiePolicy
critical
76
hub/server.mjs::issueAccessTokenForSub
critical
76
hub/gateway/server.mjs::scopesForRole
critical
76
test/refresh-token-core.test.mjs::buildLargeStore
critical
76
test/gateway-session-introspection.test.mjs::validPayload
critical
76
test/gateway-session-introspection.test.mjs::startServer
critical
76
test/gateway-session-introspection.test.mjs::makeJwt
critical
76
test/gateway-session-introspection.test.mjs::get
critical
76
web/hub/hub.js::openSettingsIntegrationsTab
critical
76
test/mcp-section-source.test.mjs::parseToolResult
critical
76
test/gateway-auth-refresh-wiring.test.mjs::load
critical
76
test/section-source-hosted-implementation-spec.test.mjs::hostedRuntimeSource
critical
76
test/auth-session.test.mjs::status
critical
76
test/section-source-hosted-implementation-spec.test.mjs::installFetchMock
critical
76
test/auth-session.test.mjs::set
critical
76
test/section-source-hosted-implementation-spec.test.mjs::restore
critical
76
test/auth-session.test.mjs::mockRes
critical
76
test/auth-session.test.mjs::json
critical
76
test/auth-session.test.mjs::issueAccessToken
critical
76
test/auth-session.test.mjs::fileStore
critical
76
test/auth-session.test.mjs::cookieOptions
critical
76
test/auth-session.test.mjs::cookie
critical
76
web/hub/hub-integration-guides.mjs::getIntegrationGuide
critical
76
test/auth-session.test.mjs::clearCookie
critical
76
test/auth-session.test.mjs::asyncSigner
critical
76
test/auth-refresh-wiring.test.mjs::load
critical
76
hub/refresh-tokens.mjs::writeRefreshTokens
critical
76
hub/refresh-tokens.mjs::rotateRefreshToken
critical
76
hub/refresh-tokens.mjs::revokeRefreshToken
critical
76
test/section-source-hosted-implementation-spec.test.mjs::readRepoFile
critical
76
web/hub/hub-integration-guides.mjs::escapeHtml
critical
76
web/hub/hub.js::openImportModal
critical
76
web/hub/hub.js::scheduleIntegrationGuidesInit
critical
76
test/mcp-section-source.test.mjs::connectPair
critical
76
test/hub-integration-guides.test.mjs::querySelectorAll
critical
76
hub/refresh-tokens.mjs::revokeAllRefreshTokensForSub
critical
76
hub/refresh-tokens.mjs::readRefreshTokens
critical
76
hub/refresh-tokens.mjs::pruneRefreshTokens
critical
76
hub/refresh-tokens.mjs::issueRefreshToken
critical
76
hub/lib/refresh-token-core.mjs::sanitizeMeta
critical
76
hub/lib/refresh-token-core.mjs::safeEqualHashes
critical
76
hub/lib/refresh-token-core.mjs::rotateToken
critical
76
hub/lib/refresh-token-core.mjs::revokeToken
critical
76
hub/lib/refresh-token-core.mjs::revokeFamily
critical
76
hub/lib/refresh-token-core.mjs::pruneExpired
critical
76
hub/lib/refresh-token-core.mjs::parseToken
critical
76
hub/lib/refresh-token-core.mjs::issueToken
critical
76
hub/lib/refresh-token-core.mjs::hashSecret
critical
76
hub/lib/refresh-token-core.mjs::generateRefreshToken
critical
76
hub/lib/refresh-token-core.mjs::cloneRecords
critical
76
hub/gateway/refresh-token-store.mjs::writeToFile
critical
76
hub/gateway/refresh-token-store.mjs::writeToBlob
critical
76
hub/gateway/refresh-token-store.mjs::rotateRefreshToken
critical
76
hub/gateway/refresh-token-store.mjs::saveRefreshRecords
critical
76
hub/gateway/refresh-token-store.mjs::revokeRefreshToken
critical
76
hub/server.mjs::issueSession
critical
76
hub/gateway/refresh-token-store.mjs::revokeAllRefreshTokensForSub
critical
76
hub/gateway/refresh-token-store.mjs::refreshFilePath
critical
76
hub/gateway/refresh-token-store.mjs::readFromFile
critical
76
hub/gateway/refresh-token-store.mjs::readFromBlob
critical
75
test/section-source-hub-rest-openapi-spec.test.mjs::makeCtx
critical
75
test/section-source-hub-rest-openapi-spec.test.mjs::readRepoFile
critical
75
test/section-source-hub-rest-openapi-spec.test.mjs::restore
critical
75
test/hub-section-source-ui-runtime.test.mjs::hubUiSource
critical
75
test/hub-section-source-ui-runtime.test.mjs::hubSectionSourceRuntime
critical
75
test/hub-section-source-ui-runtime.test.mjs::connectPair
critical
75
test/hub-section-source-ui-runtime.test.mjs::makeCtx
critical
75
web/hub/hub.js::setSectionSourcePanelState
critical
75
web/hub/hub.js::toggleSectionSourcePanel
critical
75
web/hub/hub.js::bindNoteClicks
critical
75
web/hub/hub.js::closeDetailPanel
critical
75
web/hub/hub.js::deleteOpenNote
critical
75
web/hub/hub.js::openCopyNoteToVaultModal
critical
75
web/hub/hub.js::openNote
critical
75
web/hub/hub.js::openProposal
critical
75
web/hub/hub.js::switchNoteToEditMode
critical
75
web/hub/hub.js::switchNoteToReadMode
critical
75
test/hub-section-source-ui-runtime.test.mjs::restore
critical
75
test/section-source-hub-rest-openapi-spec.test.mjs::hubRuntimeSource
critical
75
test/hub-section-source-ui-runtime.test.mjs::sourceSlice
critical
75
test/hub-section-source-ui-runtime.test.mjs::readRepoFile
critical
75
web/hub/hub.js::createSectionSourceButton
critical
75
web/hub/hub.js::sectionSourceEndpointForPath
critical
75
web/hub/hub.js::sectionSourceErrorMessage
critical
75
web/hub/hub.js::sectionSourcePayloadHasForbiddenKeys
critical
75
web/hub/hub.js::resetDetailSectionSourceState
critical
75
web/hub/hub.js::normalizeSectionSourcePathForUi
critical
75
web/hub/hub.js::normalizeSectionSourceForRender
critical
75
web/hub/hub.js::loadSectionSourceForCurrentNote
critical
75
test/hub-section-source-ui-runtime.test.mjs::installFetchMock
critical
75
test/section-source-hub-rest-openapi-spec.test.mjs::connectPair
critical
75
test/section-source-hub-rest-openapi-spec.test.mjs::installFetchMock
critical
75
test/section-source-hub-rest-openapi-spec.test.mjs::openApiSource
high
74
mcp/resources/register.mjs::_fetchMusePrimeContext
high
74
mcp/resources/register.mjs::registerKnowtationResources
high
71
test/section-source-hub-ui-spec.test.mjs::restore
high
71
test/section-source-hub-ui-spec.test.mjs::installFetchMock
high
71
lib/document-tree.mjs::normalizeTreePath
high
71
lib/document-tree.mjs::normalizeHeadings
high
71
lib/document-tree.mjs::buildDocumentTreeFromOutline
high
71
test/section-source-hub-ui-spec.test.mjs::readRepoFile
high
71
test/section-source-hub-ui-spec.test.mjs::makeCtx
high
71
test/section-source-scooling-adapter-spec.test.mjs::readRepoFile
high
71
test/section-source-scooling-adapter-spec.test.mjs::hostedRuntimeSource
high
71
test/section-source-hub-ui-spec.test.mjs::hubUiSource
high
71
test/section-source-scooling-adapter-spec.test.mjs::scoolingBoundarySource
high
71
test/section-source-hub-ui-spec.test.mjs::connectPair
high
70
test/section-source-hosted-auth-spec.test.mjs::restore
high
70
test/section-source-hosted-auth-spec.test.mjs::connectPair
high
70
test/section-source-hosted-auth-spec.test.mjs::makeCtx
high
70
test/section-source-hosted-auth-spec.test.mjs::hostedRuntimeSource
high
70
test/section-source-hosted-auth-spec.test.mjs::readRepoFile
high
70
test/section-source-hosted-auth-spec.test.mjs::installFetchMock
high
67
hub/gateway/scooling-note-outline-smoke.mjs::safeString
high
67
test/gateway-note-outline-rest.test.mjs::signTestJwt
high
67
test/gateway-note-outline-rest.test.mjs::startServer
high
67
test/gateway-scooling-note-outline-smoke.test.mjs::startServer
high
67
test/gateway-scooling-note-outline-smoke.test.mjs::validOutline
high
67
hub/gateway/mcp-hosted-server.mjs::normalizeHostedDocumentTreePath
high
67
lib/document-tree.mjs::normalizeMaxHeadings
high
67
lib/vault.mjs::isPathInside
high
67
lib/vault.mjs::resolveExistingVaultFilePath
high
67
lib/vault.mjs::noteFileExistsInVault
high
67
lib/vault.mjs::readNote
high
67
hub/gateway/scooling-note-outline-smoke.mjs::createScoolingNoteOutlineSmokeRouter
high
67
hub/gateway/scooling-note-outline-smoke.mjs::configuredEnvironment
high
67
hub/gateway/scooling-note-outline-smoke.mjs::defaultAuthorizationHeader
high
67
hub/gateway/scooling-note-outline-smoke.mjs::hasForbiddenRequestCredentials
high
67
hub/gateway/scooling-note-outline-smoke.mjs::isSafeHeading
high
67
hub/gateway/scooling-note-outline-smoke.mjs::mapUpstreamStatus
high
67
hub/gateway/scooling-note-outline-smoke.mjs::normalizeBooleanFlag
high
67
hub/gateway/scooling-note-outline-smoke.mjs::normalizeEndpoint
high
67
hub/gateway/scooling-note-outline-smoke.mjs::normalizeVaultRelativePath
high
67
hub/gateway/scooling-note-outline-smoke.mjs::readBridgeNoteOutline
high
67
hub/gateway/scooling-note-outline-smoke.mjs::sanitizeError
high
67
hub/gateway/scooling-note-outline-smoke.mjs::sanitizeNoteOutline
high
67
hub/gateway/scooling-note-outline-smoke.mjs::smokeEnabled
high
67
test/gateway-note-outline-rest.test.mjs::startGateway
high
67
test/gateway-scooling-note-outline-smoke.test.mjs::withBridgeServer
high
67
test/hub-note-outline-self-hosted-route.test.mjs::readRepoFile
high
67
hub/gateway/server.mjs::normalizeGatewayNoteOutlinePath
high
67
hub/gateway/server.mjs::sanitizedNoteOutlineGatewayError
high
65
test/section-source-mcp-spec.test.mjs::readRepoFile
high
63
test/mcp-metadata-facets.test.mjs::parseToolResult
high
63
test/mcp-metadata-facets.test.mjs::connectPair
high
63
test/mcp-document-tree.test.mjs::parseToolResult
high
63
test/mcp-document-tree.test.mjs::connectPair
high
62
test/section-source-cli-spec.test.mjs::readRepoFile
high
60
test/cli.test.mjs::runCli
high
60
cli/index.mjs::runGetNoteOutline
high
60
test/cli.test.mjs::cliEnv
high
59
cli/index.mjs::runGetDocumentTree
high
58
cli/index.mjs::runGetSectionSource
high
57
test/section-source-transport-plan.test.mjs::readRepoFile
high
57
test/mcp-hosted-document-tree.test.mjs::connectPair
high
57
test/mcp-hosted-document-tree.test.mjs::restore
high
57
test/mcp-hosted-document-tree.test.mjs::parseToolResult
high
57
test/mcp-hosted-document-tree.test.mjs::installFetchMock
high
57
test/mcp-hosted-document-tree.test.mjs::makeCtx
high
57
test/mcp-hosted-document-tree.test.mjs::headerGet
high
52
test/mcp-hosted-section-source.test.mjs::parseToolResult
high
52
hub/gateway/mcp-hosted-server.mjs::sanitizeHostedSectionSourceError
high
52
test/mcp-hosted-section-source.test.mjs::connectPair
high
52
test/mcp-hosted-section-source.test.mjs::installFetchMock
high
52
test/section-source-hosted-implementation-spec.test.mjs::assertHostedSectionSourcePresentAndScoped
high
52
test/mcp-hosted-section-source.test.mjs::headerGet
high
52
test/mcp-hosted-section-source.test.mjs::makeCtx
high
52
test/mcp-hosted-section-source.test.mjs::restore
high
51
test/mcp-hosted-metadata-facets.test.mjs::parseToolResult
high
51
test/mcp-hosted-metadata-facets.test.mjs::restore
high
51
test/mcp-hosted-metadata-facets.test.mjs::installFetchMock
high
51
test/mcp-hosted-metadata-facets.test.mjs::headerGet
high
51
test/mcp-hosted-metadata-facets.test.mjs::makeCtx
high
51
test/mcp-hosted-metadata-facets.test.mjs::connectPair
high
50
test/gateway-section-source-rest.test.mjs::startGateway
high
50
hub/gateway/server.mjs::sanitizedSectionSourceGatewayError
high
50
hub/gateway/server.mjs::normalizeGatewaySectionSourcePath
high
50
test/gateway-section-source-rest.test.mjs::startServer
high
50
test/gateway-section-source-rest.test.mjs::signTestJwt
medium
49
lib/section-source-note.mjs::readSectionSource
medium
47
test/hub-section-source-self-hosted-route.test.mjs::routeSource
medium
47
lib/indexer-chunk-options.mjs::safeIndexerChunkSizeForEmbedding
medium
47
lib/indexer-chunk-options.mjs::resolveIndexerChunkOptions
medium
47
lib/indexer-chunk-options.mjs::parsePositiveInteger
medium
47
lib/indexer-chunk-options.mjs::defaultBridgeEmbeddingModelForProvider
medium
47
mcp/create-server.mjs::sectionSourceMcpErrorMessage
medium
47
hub/bridge/server.mjs::defaultEmbeddingModelForBridge
medium
47
test/gateway-document-tree-rest.test.mjs::signTestJwt
medium
47
test/gateway-document-tree-rest.test.mjs::startGateway
medium
47
test/gateway-document-tree-rest.test.mjs::startServer
medium
47
test/gateway-metadata-facets-rest.test.mjs::signTestJwt
medium
47
test/gateway-metadata-facets-rest.test.mjs::startGateway
medium
47
test/gateway-metadata-facets-rest.test.mjs::startServer
medium
47
test/hub-document-tree-self-hosted-route.test.mjs::readRepoFile
medium
47
test/hub-document-tree-self-hosted-route.test.mjs::routeSource
medium
47
test/hub-metadata-facets-self-hosted-route.test.mjs::readRepoFile
medium
47
test/hub-metadata-facets-self-hosted-route.test.mjs::routeSource
medium
47
hub/gateway/server.mjs::normalizeGatewayDocumentTreePath
medium
47
hub/gateway/server.mjs::normalizeGatewayMetadataFacetsPath
medium
47
hub/gateway/server.mjs::sanitizedDocumentTreeGatewayError