Skip to content

Web Vitals Reference#80

Open
mbenach wants to merge 12 commits into
Blazemeter:mainfrom
keithpuzey:main
Open

Web Vitals Reference#80
mbenach wants to merge 12 commits into
Blazemeter:mainfrom
keithpuzey:main

Web Vital Skills and Reports

0e1445f
Select commit
Loading
Failed to load commit list.
Mend for GitHub.com / Mend Code Security Check failed Jun 2, 2026 in 11m 58s

Code Security Report

New findings (2)

The Code Security Check detected a total of 2 new findings.

SeverityVulnerability TypeCWEFileData FlowsDetected
HighPath/Directory Traversal

CWE-22

fetch_blazemeter_metadata.py:163

12026-06-02 09:56am
Vulnerable Code

bzm-mcp/skills/blazemeter-web-vitals/scripts/fetch_blazemeter_metadata.py

Lines 158 to 163 in 0e1445f

existing_sessions = metadata.get("sessions", [])
regions = sorted({s.get("location") for s in existing_sessions if s.get("location")})
metadata["regions"] = regions
# Save updated metadata
with open(metadata_file, 'w') as f:

1 Data Flow/s detected

bzm-mcp/skills/blazemeter-web-vitals/scripts/fetch_blazemeter_metadata.py

Line 177 in 0e1445f

execution_dir = sys.argv[1]

bzm-mcp/skills/blazemeter-web-vitals/scripts/fetch_blazemeter_metadata.py

Line 92 in 0e1445f

) -> Dict:

bzm-mcp/skills/blazemeter-web-vitals/scripts/fetch_blazemeter_metadata.py

Line 141 in 0e1445f

metadata_file = Path(execution_dir) / "execution-metadata.json"

bzm-mcp/skills/blazemeter-web-vitals/scripts/fetch_blazemeter_metadata.py

Line 163 in 0e1445f

with open(metadata_file, 'w') as f:

Secure Code Warrior Training Material

● Training

   ▪ Secure Code Warrior Path/Directory Traversal Training

● Videos

   ▪ Secure Code Warrior Path/Directory Traversal Video

● Further Reading

   ▪ OWASP Path Traversal

   ▪ OWASP Input Validation Cheat Sheet

 
HighPath/Directory Traversal

CWE-22

fetch_blazemeter_metadata.py:142

12026-06-02 09:56am
Vulnerable Code

bzm-mcp/skills/blazemeter-web-vitals/scripts/fetch_blazemeter_metadata.py

Lines 137 to 142 in 0e1445f

fetcher.close()
# Load existing metadata
metadata_file = Path(execution_dir) / "execution-metadata.json"
with open(metadata_file, 'r') as f:

1 Data Flow/s detected

bzm-mcp/skills/blazemeter-web-vitals/scripts/fetch_blazemeter_metadata.py

Line 177 in 0e1445f

execution_dir = sys.argv[1]

bzm-mcp/skills/blazemeter-web-vitals/scripts/fetch_blazemeter_metadata.py

Line 92 in 0e1445f

) -> Dict:

bzm-mcp/skills/blazemeter-web-vitals/scripts/fetch_blazemeter_metadata.py

Line 141 in 0e1445f

metadata_file = Path(execution_dir) / "execution-metadata.json"

bzm-mcp/skills/blazemeter-web-vitals/scripts/fetch_blazemeter_metadata.py

Line 142 in 0e1445f

with open(metadata_file, 'r') as f:

Secure Code Warrior Training Material

● Training

   ▪ Secure Code Warrior Path/Directory Traversal Training

● Videos

   ▪ Secure Code Warrior Path/Directory Traversal Video

● Further Reading

   ▪ OWASP Path Traversal

   ▪ OWASP Input Validation Cheat Sheet

Resolved findings

No findings were resolved in comparison to the base branch.

Overall findings

The Code Security Check detected a total of 2 findings, 2 of them high severity. More details about the overall state can be found in the Mend Application.


Scan token: ac91b55fc7c84c009d8d0f8b69f2f2c4
View more details on Mend for GitHub.com