SecOps #1288: [Sécurité] Vulnérabilité de code : scripts/backfill-extracted-skills.ts:226 (javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring) - GetYourJob - Redmine

Custom queries

Issues assigned to me
Reported issues
Updated issues
Watched issues

Actions

SecOps #1288

open

[Sécurité] Vulnérabilité de code : scripts/backfill-extracted-skills.ts:226 (javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring)

SecOps #1288: [Sécurité] Vulnérabilité de code : scripts/backfill-extracted-skills.ts:226 (javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring)

Added by Client Dashboard about 1 month ago. Updated 12 days ago.

Status:

Submitted

Priority:

Normal

Assignee:

Start date:

07/02/2026

Due date:

% Done:

Estimated time:

spec_ref:

build_status:

build_number:

ci_run_url:

scan_status:

scan_report_url:

deploy_status:

preprod_url:

deployed_at:

branch:

pr_url:

security_key:

scripts/backfill-extracted-skills.ts:226_javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring

severity:

low

paused:

Description

**Sévérité** : LOW
**Source** : Semgrep
`vuln-low`
**Emplacement** : scripts/backfill-extracted-skills.ts:226
**Règle** : javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring

Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string.

### Extrait de code
```
requires login
```

### Lien CVE
https://cwe.mitre.org/data/definitions/134.html

History
Notes

CD Updated by Client Dashboard about 1 month ago Actions
Copy link
#1

Vulnérabilité `scripts/backfill-extracted-skills.ts:226_javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring` à nouveau détectée par un scan ; ticket déjà ouvert (aucun doublon créé).