nextjs

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
templates/cache-component-use-cache.tsx

No clear evidence of supply-chain malware/backdoors in this snippet. The dominant security concern is DOM XSS: remote post.content is inserted into the DOM via dangerouslySetInnerHTML without sanitization in this module. Additional risks include authorization/data exposure if cookie role is not strongly validated and server-side resource selection is trusted too much, plus downstream stored injection risk from createPost forwarding unvalidated content to the backend. Overall, treat this module as security-relevant and ensure HTML sanitization and robust authentication/authorization checks are enforced upstream (and/or before rendering).

Confidence: 72%Severity: 62%
Audit Metadata
Analyzed At
Sep 18, 2026, 08:44 AM
Package URL
pkg:socket/skills-sh/evolv3ai%2Fclaude-skills-archive%2Fnextjs%2F@e36e6ade565889a520d53579fbb816d4f2a2c81cd73c89c55f5fba361fe6a725
Security Audit — socket — nextjs