Source alert: https://github.com/KooshaPari/cliproxyapi-plusplus/security/code-scanning/129
Rule:
- ID: go/weak-sensitive-data-hashing
- Description: Use of a broken or weak cryptographic hashing algorithm on sensitive data
- Severity: high
Location:
- Ref: refs/heads/main
- File: pkg/llmproxy/executor/user_id_cache.go
- Line: 48
Message:
Sensitive data (password) is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.
Scope:
Source alert: https://github.com/KooshaPari/cliproxyapi-plusplus/security/code-scanning/129
Rule:
Location:
Message:
Sensitive data (password) is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.Scope: