| Severity | Finding | Time | Status | Action |
|---|---|---|---|---|
HIGH | CVE-2024-2222 detected in node:18.20 — patch available | 2m ago | Open | |
MEDIUM | Dependency lodash@4.17.20 flagged — upgrade recommended | 11m ago | Open | |
LOW | TLS 1.2 still active on api.acmecorp.com/v1 — upgrade to 1.3 | 34m ago | Fixed | Done |
HIGH | Exposed debug endpoint /internal/status — should be auth-gated | 1h ago | Fixed | Done |
INFO | Weekly scan completed — 3 new findings, 2 resolved | 2h ago | Open | |
MEDIUM | Outdated OpenSSL 1.1.1 in api container image | 5h ago | Open | |
LOW | CORS policy allows * on /api/public — review needed | 8h ago | Open | |
HIGH | RCE CVE-2026-7890 in express@4.18 — upgrade to 4.19+ | 12h ago | Fixed | Done |
MEDIUM | npm audit found 14 vulnerabilities (3 high, 11 low) | 1d ago | Open | |
INFO | New NIST CVE feed loaded — 1,247 entries indexed | 2d ago | Open |