tus-golang-nextjs
Warn
Audited by Snyk on Aug 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). O runtime workflow descrito só processa texto fornecido via headers de upload/metadata do TUS (ex.: Base64 em
Upload-Metadata) noPreUploadCreateCallbacke nos handlersPOST/HEAD/PATCHdo tusd, que exigem um upload específico iniciado pelo cliente (não uma fonte aberta como inbox/chat/feed).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata