Vulnerabilities Dashboard - Go

[nullify-josh]

3 Potential vulnerability sources found in Go files within this repo

⚠️ CRITICAL	🔴 HIGH	🔵 MEDIUM	⚪ LOW
0	0	3	0

Nullify Code - Go 🔵 MEDIUM Severity CWE-676

Use of net/http serve function that has no support for setting timeouts

Use of net/http serve function that has no support for setting timeouts
Read more:
https://cwe.mitre.org/data/definitions/676.html

webhooks/_examples/single-handler/main.go

Line 38 in 69430a8

http.ListenAndServe(":3000", nil)

Nullify Code - Go 🔵 MEDIUM Severity CWE-676

Use of net/http serve function that has no support for setting timeouts

Use of net/http serve function that has no support for setting timeouts
Read more:
https://cwe.mitre.org/data/definitions/676.html

webhooks/_examples/multiple-handlers/main.go

Line 61 in 69430a8

http.ListenAndServe(":3000", nil)

Nullify Code - Go 🔵 MEDIUM Severity CWE-327

Blocklisted import crypto/sha1: weak cryptographic primitive

Blocklisted import crypto/sha1: weak cryptographic primitive
Read more:
https://cwe.mitre.org/data/definitions/327.html

webhooks/github/github.go

Line 5 in 69430a8

"crypto/sha1"