Skip to content

Fix: Security Scan Vulnerabilities (#136)#137

Open
HarshavardhanVemali wants to merge 3 commits into
fetchai:mainfrom
HarshavardhanVemali:fix/security-scan-vulnerabilities
Open

Fix: Security Scan Vulnerabilities (#136)#137
HarshavardhanVemali wants to merge 3 commits into
fetchai:mainfrom
HarshavardhanVemali:fix/security-scan-vulnerabilities

Conversation

@HarshavardhanVemali

@HarshavardhanVemali HarshavardhanVemali commented May 25, 2026

Copy link
Copy Markdown

Resolves #136.

This PR introduces fixes for the security vulnerabilities reported:

  1. Removed hardcoded debug mode in Flask frontend.
  2. Added missing request timeouts across Python agents.
  3. Removed silent exception suppression in video-to-map agents.
  4. Ran npm audit fix to update vulnerable frontend-integration dependencies.

Testing completed:

  • Bandit shows 0 high/medium/low severity vulnerabilities.
  • npm run build succeeds successfully on frontend.

GSSoC Labels Requested:

  • level:intermediate
  • type:bug
  • type:security
  • quality:clean

@HarshavardhanVemali

Copy link
Copy Markdown
Author

Hello Mentors / Maintainers! As per the GSSoC contribution guidelines, could you please review this PR and add the appropriate labels?

Suggested labels:

  • level:intermediate
  • type:bug
  • type:security

Once reviewed, please also consider adding the gssoc:approved and mentor:username labels so the contribution counts towards GSSoC. Thank you!

@gautammanak1

Copy link
Copy Markdown
Collaborator

Thanks for the contribution 🚀

The CI for this PR is currently failing. Please fix the following so we can move forward:

  • changelog-check — add an entry to contributors/CHANGELOG.md (community agents) or root CHANGELOG.md
  • format — run ruff format . and commit the result
  • lint — run ruff check . --fix and resolve remaining warnings
  • stargazer-gate — please ⭐ star this repository (the gate passes once you've starred)

Once the checks are green it'll be ready for maintainer review. Let me know if you need any help! 🙌

@github-actions github-actions Bot added gssoc26 GirlScript Summer of Code 2026 contribution level2 GSSoC level 2 - intermediate (medium points) level:intermediate GSSoC difficulty: intermediate-level task labels Jun 16, 2026
@HarshavardhanVemali

Copy link
Copy Markdown
Author

All CI pipeline issues have been resolved (formatting, linting, and changelog updates). The repository has also been starred to pass the stargazer gate. This PR is ready for review!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

gssoc26 GirlScript Summer of Code 2026 contribution level:intermediate GSSoC difficulty: intermediate-level task level2 GSSoC level 2 - intermediate (medium points)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Bug: Security Scan Findings & Vulnerabilities

2 participants