nextjs
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
AnomalyAnomalytemplates/cache-component-use-cache.tsx
LOWAnomalyLOW
templates/cache-component-use-cache.tsx
No clear evidence of supply-chain malware/backdoors in this snippet. The dominant security concern is DOM XSS: remote post.content is inserted into the DOM via dangerouslySetInnerHTML without sanitization in this module. Additional risks include authorization/data exposure if cookie role is not strongly validated and server-side resource selection is trusted too much, plus downstream stored injection risk from createPost forwarding unvalidated content to the backend. Overall, treat this module as security-relevant and ensure HTML sanitization and robust authentication/authorization checks are enforced upstream (and/or before rendering).
Confidence: 72%Severity: 62%
Audit Metadata