13 new issues (0 max.) of at least severity.
Annotations
Check failure on line 87 in app/routes/api.projects.$.tsx
codacy-production / Codacy Static Code Analysis
app/routes/api.projects.$.tsx#L87
The application dynamically constructs file or path information.
Check failure on line 197 in app/routes/api.projects.$.tsx
codacy-production / Codacy Static Code Analysis
app/routes/api.projects.$.tsx#L197
Checks for setting the environment variable NODE_TLS_REJECT_UNAUTHORIZED to 0, which disables TLS verification.
Check warning on line 12 in backend/main.py
codacy-production / Codacy Static Code Analysis
backend/main.py#L12
'datetime.datetime' imported but unused (F401)
Check warning on line 72 in backend/main.py
codacy-production / Codacy Static Code Analysis
backend/main.py#L72
Try, Except, Pass detected.
Check warning on line 62 in backend/poetry.lock
codacy-production / Codacy Static Code Analysis
backend/poetry.lock#L62
Insecure dependency pypi/rsa@4.2 (CVE-2020-25658: python-rsa: bleichenbacher timing oracle attack against RSA decryption) (update to 4.7)
Check warning on line 231 in backend/poetry.lock
codacy-production / Codacy Static Code Analysis
backend/poetry.lock#L231
Insecure dependency pypi/python-multipart@0.0.20 (CVE-2026-24486: python-multipart: Python-Multipart: Arbitrary file write via path traversal vulnerability) (update to 0.0.22)
Check warning on line 232 in backend/poetry.lock
codacy-production / Codacy Static Code Analysis
backend/poetry.lock#L232
Insecure dependency pypi/starlette@0.47.3 (CVE-2025-62727: starlette: Starlette DoS via Range header merging) (update to 0.49.1)
Check warning on line 301 in backend/poetry.lock
codacy-production / Codacy Static Code Analysis
backend/poetry.lock#L301
Insecure dependency pypi/pyasn1@0.6.1 (CVE-2026-23490: pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID) (update to 0.6.2)
Check warning on line 311 in backend/poetry.lock
codacy-production / Codacy Static Code Analysis
backend/poetry.lock#L311
Insecure dependency pypi/urllib3@2.5.0 (CVE-2025-66418: urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion) (update to 2.6.0)
Check warning on line 311 in backend/poetry.lock
codacy-production / Codacy Static Code Analysis
backend/poetry.lock#L311
Insecure dependency pypi/urllib3@2.5.0 (CVE-2025-66471: urllib3: urllib3 Streaming API improperly handles highly compressed data) (update to 2.6.0)
Check warning on line 311 in backend/poetry.lock
codacy-production / Codacy Static Code Analysis
backend/poetry.lock#L311
Insecure dependency pypi/urllib3@2.5.0 (CVE-2026-21441: urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)) (update to 2.6.3)
Check warning on line 26 in pnpm-lock.yaml
codacy-production / Codacy Static Code Analysis
pnpm-lock.yaml#L26
Insecure dependency npm/minimatch@10.2.2 (CVE-2026-27903: minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns) (update to 10.2.3)
Check warning on line 26 in pnpm-lock.yaml
codacy-production / Codacy Static Code Analysis
pnpm-lock.yaml#L26
Insecure dependency npm/minimatch@10.2.2 (CVE-2026-27904: minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions) (update to 10.2.3)