tus-golang-nextjs

Warn

Audited by Snyk on Aug 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). O runtime workflow descrito só processa texto fornecido via headers de upload/metadata do TUS (ex.: Base64 em Upload-Metadata) no PreUploadCreateCallback e nos handlers POST/HEAD/PATCH do tusd, que exigem um upload específico iniciado pelo cliente (não uma fonte aberta como inbox/chat/feed).

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 18, 2026, 09:02 PM
Issues
1
Security Audit — snyk — tus-golang-nextjs