SecOps #1292: [Sécurité] Vulnérabilité de code : src/infrastructure/external/MatchingAgentIndexSync.ts:131 (javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring) - GetYourJob - Redmine

Actions

SecOps #1292

open

[Sécurité] Vulnérabilité de code : src/infrastructure/external/MatchingAgentIndexSync.ts:131 (javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring)

SecOps #1292: [Sécurité] Vulnérabilité de code : src/infrastructure/external/MatchingAgentIndexSync.ts:131 (javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring)

Added by Client Dashboard about 1 month ago. Updated 12 days ago.

Status:

Submitted

Priority:

Normal

Assignee:

Start date:

07/02/2026

Due date:

% Done:

Estimated time:

spec_ref:

build_status:

build_number:

ci_run_url:

scan_status:

scan_report_url:

deploy_status:

preprod_url:

deployed_at:

branch:

pr_url:

security_key:

src/infrastructure/external/MatchingAgentIndexSync.ts:131_javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring

severity:

low

paused:

Description

**Sévérité** : LOW
**Source** : Semgrep
`vuln-low`
**Emplacement** : src/infrastructure/external/MatchingAgentIndexSync.ts:131
**Règle** : javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring

Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string.

### Extrait de code
```
requires login
```

### Lien CVE
https://cwe.mitre.org/data/definitions/134.html

CD Updated by Client Dashboard about 1 month ago Actions
Copy link
#1

Vulnérabilité `src/infrastructure/external/MatchingAgentIndexSync.ts:131_javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring` à nouveau détectée par un scan ; ticket déjà ouvert (aucun doublon créé).