image-vulnerability-report

Warn

Audited by Snyk on Apr 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). Phase 3 explicitly instructs to "Cross-reference CVEs against known exploit databases (CISA KEV)," which requires fetching and interpreting public, user-facing third‑party data that can materially change risk assessments and remediation decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 12, 2026, 04:21 PM
Issues
1
Security Audit — snyk — image-vulnerability-report