protheus-reference
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
SecuritySecurityrest-api-reference.md
MEDIUMSecurityMEDIUM
rest-api-reference.md
The material is legitimate REST API documentation and example CRUD code. It contains no clear malware or supply-chain sabotage indicators. It does contain notable security risks if deployed unchanged: hardcoded sample credentials and tokens, wildcard CORS, HTTP without TLS, broad customer-data exposure, limited input and JSON validation, insufficiently demonstrated authorization, possible resource exhaustion through pagination or batch requests, and potentially verbose error responses. Replace all example secrets, enforce HTTPS and restrictive CORS, validate and bound inputs, apply authorization and rate limits, and avoid exposing internal exception details.
Confidence: 98%Severity: 72%
Audit Metadata