tanstack-db-core-custom-adapter

Warn

Audited by Snyk on Aug 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The runtime workflow shown is a custom adapter pattern that ingests untrusted free-text/data from an outsider-accessible backend via myWebSocket.subscribe(config.endpoint, ...) and fetch(config.endpoint) (and buffers/replays those events), so attacker-submitted payloads can reach the LLM if it processes the received event.data/JSON items.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 10, 2026, 06:37 AM
Issues
1