Vulnérabilités de Sécurité TypeScript

CWE-20 7 règles

Improper Input Validation

CWE-200 5 règles

Exposure of Sensitive Information to an Unauthorized Actor

2 critical

CWE-704 5 règles

Incorrect Type Conversion or Cast

CWE-798 5 règles

Use of Hard-coded Credentials

2 critical

CWE-89 4 règles

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

4 critical

CWE-79 3 règles

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

1 critical

CWE-94 3 règles

Improper Control of Generation of Code ('Code Injection')

1 critical

CWE-285 3 règles

Improper Authorization

3 critical

CWE-639 3 règles

Authorization Bypass Through User-Controlled Key

1 critical

CWE-22 2 règles

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

1 critical

CWE-209 2 règles

Generation of Error Message Containing Sensitive Information

CWE-327 2 règles

Use of a Broken or Risky Cryptographic Algorithm

CWE-400 2 règles

Uncontrolled Resource Consumption

CWE-502 2 règles

Deserialization of Untrusted Data

1 critical

CWE-601 2 règles

URL Redirection to Untrusted Site ('Open Redirect')

CWE-770 2 règles

Allocation of Resources Without Limits or Throttling

CWE-915 2 règles

Improperly Controlled Modification of Dynamically-Determined Object Attributes

2 critical

CWE-918 2 règles

Server-Side Request Forgery (SSRF)

CWE-1321 2 règles

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

CWE-74 1 règles

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')