github.com/binwiederhier/ntfy

Detected a Generic API Key, potentially exposing access to various services and sensitive operations.

Detected a Generic API Key, potentially exposing access to various services and sensitive operations.

Detected a Generic API Key, potentially exposing access to various services and sensitive operations.

Detected a Generic API Key, potentially exposing access to various services and sensitive operations.

Detected a Generic API Key, potentially exposing access to various services and sensitive operations.

Detected a Generic API Key, potentially exposing access to various services and sensitive operations.

Detected a Generic API Key, potentially exposing access to various services and sensitive operations.

Detected a Generic API Key, potentially exposing access to various services and sensitive operations.

Detected a Generic API Key, potentially exposing access to various services and sensitive operations.

Detected a Generic API Key, potentially exposing access to various services and sensitive operations.

Detected a Generic API Key, potentially exposing access to various services and sensitive operations.

Detected a Generic API Key, potentially exposing access to various services and sensitive operations.

Detected a Generic API Key, potentially exposing access to various services and sensitive operations.

Detected a Generic API Key, potentially exposing access to various services and sensitive operations.

Found a Stripe Access Token, posing a risk to payment processing services and sensitive financial data.

Command injection: exec.Command/exec.CommandContext is invoked with a shell (sh/bash -c) plus an interpolated string, or with argv[0] AND its args spread from the same parsed slice (command[0], command[1:]...) — i.e. a command string split into an argv and executed, which lets in…

SQL built by concatenation/Sprintf passed to Query/Exec/QueryRow — SQL injection. The statement text is assembled from a formatted or concatenated string (directly or via an intermediate variable). Use parameterized placeholders ($1/?) with separate args, never string building. C…

SQL built by concatenation/Sprintf passed to Query/Exec/QueryRow — SQL injection. The statement text is assembled from a formatted or concatenated string (directly or via an intermediate variable). Use parameterized placeholders ($1/?) with separate args, never string building. C…

Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.