manaflow-ai/sandbox-agent

API keys, passwords or tokens committed into the repo.

• Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
  docs/docs.json:21
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.

via Gitleaks v8.21.2 · MIT

Packages you depend on that have known security holes (CVEs).

• Serious CVE-2026-25896 fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-25896). Fix: Update that package to its patched version.
• Serious CVE-2026-41242 protobufjs: protobufjs: Arbitrary code execution via injected protobuf definition type fields
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-41242). Fix: Update that package to its patched version.
• Serious CVE-2026-9277 shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-9277). Fix: Update that package to its patched version.
• Serious CVE-2026-59873 tar: node-tar: Denial of Service via crafted gzip bomb
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-59873). Fix: Update that package to its patched version.
• Serious CVE-2026-59873 tar: node-tar: Denial of Service via crafted gzip bomb
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-59873). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-33068 Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-33068). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-39861 Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-39861). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-35603 Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-35603). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-54316 claude-code: Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-54316). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-48068 grpc-js: @grpc/grpc-js: Server crash via malformed HTTP/2 stream initiation
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-48068). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-48069 grpc-js: @grpc/grpc-js: Client or server crash via malformed compressed message
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-48069). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-25547 brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-25547). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-44288 protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-44288). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-50146 Astro: Reflected XSS via unescaped slot name
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-50146). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-54299 Astro: Host header SSRF in prerendered error page fetch
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-54299). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-41067 Astro: XSS in define:vars via incomplete </script> tag sanitization
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-41067). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-54298 Astro: XSS via Unescaped Attribute Names in Spread Props
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-54298). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-59729 Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-59729). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-73422 Astro: Reflected XSS via unescaped View Transition animation properties
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-73422). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-25639 axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-25639). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-42033 axios: Axios: HTTP Transport Hijacking via Prototype Pollution
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-42033). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-42035 axios: Axios: Arbitrary HTTP header injection via prototype pollution
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-42035). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-42043 axios: Axios: NO_PROXY bypass via crafted URL
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-42043). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-42264 axios: Axios: Prototype pollution allows information disclosure and request manipulation
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-42264). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-44486 axios: Axios: Information disclosure of proxy credentials via HTTP redirects
  pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-44486). Fix: Update that package to its patched version.

via Trivy v0.70.0 · Apache-2.0

Your dependencies cross-checked against the OSV vulnerability database.

• Serious GHSA-fg94-h982-f3mm Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-54316). Fix: Update that package to its patched version.
• Serious GHSA-vp62-r36r-9xqp Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-39861). Fix: Update that package to its patched version.
• Serious GHSA-m7jm-9gc2-mpf2 fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-25896). Fix: Update that package to its patched version.
• Serious GHSA-xq3m-2v4x-88gg Arbitrary code execution in protobufjs
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-41242). Fix: Update that package to its patched version.
• Serious GHSA-w7jw-789q-3m8p shell-quote quote() does not escape newlines in object .op values
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-9277). Fix: Update that package to its patched version.
• Serious GHSA-23hp-3jrh-7fpw node-tar: Decompression/parse DoS via unlimited input
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-59873). Fix: Update that package to its patched version.
• Serious GHSA-23hp-3jrh-7fpw node-tar: Decompression/parse DoS via unlimited input
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-59873). Fix: Update that package to its patched version.
• Serious GHSA-3qcw-2rhx-2726 Turbo: Unexpected local code execution during Yarn Berry detection
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-45772). Fix: Update that package to its patched version.
• Serious GHSA-5xrq-8626-4rwp When Vitest UI server is listening, arbitrary file can be read and executed
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-47429). Fix: Update that package to its patched version.
• Worth fixing GHSA-5cwg-9f6j-9jvx Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-35603). Fix: Update that package to its patched version.
• Worth fixing GHSA-mmgp-wc2j-qcv7 Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-33068). Fix: Update that package to its patched version.
• Worth fixing GHSA-5375-pq7m-f5r2 @grpc/grpc-js: A malformed request can cause a server crash
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-48068). Fix: Update that package to its patched version.
• Worth fixing GHSA-99f4-grh7-6pcq @grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-48069). Fix: Update that package to its patched version.
• Worth fixing GHSA-7h2j-956f-4vf2 @isaacs/brace-expansion has Uncontrolled Resource Consumption
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-25547). Fix: Update that package to its patched version.
• Worth fixing GHSA-q6x5-8v7m-xcrf protobufjs has overlong UTF-8 decoding
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-44288). Fix: Update that package to its patched version.
• Worth fixing GHSA-2pvr-wf23-7pc7 Astro: Host header SSRF in prerendered error page fetch
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-54299). Fix: Update that package to its patched version.
• Worth fixing GHSA-4g3v-8h47-v7g6 Astro: Reflected XSS via unescaped View Transition animation properties
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-73422). Fix: Update that package to its patched version.
• Worth fixing GHSA-8hv8-536x-4wqp Astro: Reflected XSS via unescaped slot name
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-50146). Fix: Update that package to its patched version.
• Worth fixing GHSA-f48w-9m4c-m7f5 Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-59729). Fix: Update that package to its patched version.
• Worth fixing GHSA-g735-7g2w-hh3f Astro: Remote allowlist bypass via unanchored matchPathname wildcard
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-33769). Fix: Update that package to its patched version.
• Worth fixing GHSA-j687-52p2-xcff Astro: XSS in define:vars via incomplete </script> tag sanitization
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-41067). Fix: Update that package to its patched version.
• Worth fixing GHSA-jrpj-wcv7-9fh9 Astro: XSS via Unescaped Attribute Names in Spread Props
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-54298). Fix: Update that package to its patched version.
• Worth fixing GHSA-xr5h-phrj-8vxv Astro: Server island encrypted parameters vulnerable to cross-component replay
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-45028). Fix: Update that package to its patched version.
• Worth fixing GHSA-35jp-ww65-95wh axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-44494). Fix: Update that package to its patched version.
• Worth fixing GHSA-3g43-6gmg-66jw axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
  /workdirs/scan-1ca688b3-c419-4a32-a90f-961ba1494149/pnpm-lock.yaml
  A package you depend on has a known security hole (CVE-2026-44495). Fix: Update that package to its patched version.

via OSV-Scanner v1.9.2 · Apache-2.0

Code that can be exploited: injection, hardcoded credentials and similar.

Nothing found by this check. ✓

via Semgrep v1.147.0 · LGPL-2.1

Packages that look intentionally malicious: typosquats, sneaky install scripts.

This check didn’t finish — that’s not the same as “clean.” Try Check again above.

via Guarddog v2.10.0 · Apache-2.0

error: npm:timeout