Skip to content

[Snyk] Fix for 3 vulnerabilities - #77

Open
dotam99 wants to merge 1 commit into
productionfrom
snyk-fix-20187481e57d19ed6efd379d461b182e
Open

[Snyk] Fix for 3 vulnerabilities#77
dotam99 wants to merge 1 commit into
productionfrom
snyk-fix-20187481e57d19ed6efd379d461b182e

Conversation

@dotam99

@dotam99 dotam99 commented Feb 15, 2026

Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to fix 3 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • developers.cloudflare.com/package.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Prototype Pollution
SNYK-JS-AXIOS-15252993
  828  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-AJV-15274295
  803  
medium severity Allocation of Resources Without Limits or Throttling
SNYK-JS-QS-15268416
  708  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution
🦉 Allocation of Resources Without Limits or Throttling

@guardrails

guardrails Bot commented Feb 15, 2026

Copy link
Copy Markdown

⚠️ We detected 99 security issues in this pull request:

Mode: paranoid | Total findings: 99 | Considered vulnerability: 99

Hard-Coded Secrets (99)
Severity Details Docs
Medium Title: Hex High Entropy String
{ binding = "REDIRECTS", id = "8f79dc3f8f5840e1bde3fce52a67d62e" }
📚
Medium Title: Hex High Entropy String
{ binding = "REDIRECTS", id = "65462db7fc30456593591d0ee0384869" }
📚
Medium Title: Hex High Entropy String
{ binding = "REDIRECTS", id = "8851304780a744369049e4612d5b7132" }
📚
Medium Title: Hex High Entropy String
{ binding = "REDIRECTS", id = "d67abaab47504270a65afcf3f6460f5d" }
📚
Medium Title: Hex High Entropy String
{ binding = "REDIRECTS", id = "6405ea2c8e794feca7b5dfcc5e53875a" }
📚
Medium Title: Hex High Entropy String
{ binding = "REDIRECTS", id = "8a91001065b6459483db0b898a58cd2e" }
📚
Medium Title: Hex High Entropy String
{ binding = "REDIRECTS", id = "f28bd6bb32a84aa0b4827c5dc2466bc1" }
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.2.0
📚
Medium Title: Cloudflare Email
"author": "Cloudflare <github@cloudflare.com>",
📚
Medium Title: Cloudflare API Token
// Keep in sync with https://github.com/cloudflare/cloudflare-docs-engine/blob/ea2031c9575f7785ec9356963fd9cf6e00d2c379/src/components/mdx/directory-listing.js
📚
Medium Title: Cloudflare API Token
1. Ensure you’re running node version `>=12.0.0`, as [specified by Docs Engine](https://github.com/cloudflare/cloudflare-docs-engine/blob/765bc30127b0e80b570aade7044036925928c3ea/package.json#L50).
📚
Medium Title: Cloudflare API Token
4. Run the engine’s [`bootstrap` command](https://github.com/cloudflare/cloudflare-docs-engine/blob/765bc30127b0e80b570aade7044036925928c3ea/bin/commands.sh#L19-L39):
📚
Medium Title: Cloudflare API Token
This guide is for contributors to [@cloudflare/cloudflare-docs](https://github.com/cloudflare/cloudflare-docs). To review the full contribution guidelines, see [Contributing to Cloudflare's Documentation](https://github.com/cloudflare/cloudflare-docs/blob/186d17204a509d4c8514b4c4dafd00974b4713b8/CONTRIBUTING.md).
📚
Medium Title: Cloudflare API Token
Search is powered by Algolia DocSearch and [must be configured](/reference/configuration) in `docs-config.js`. Make a PR on [@algolia/docsearch-configs](https://github.com/algolia/docsearch-configs/pull/2300) to obtain an `indexName` and `apiKey` (e.g. see the [Workers PR](https://github.com/algolia/docsearch-configs/pull/2300)). Then simply set those values as `search.indexName` and `search.apiKey` (e.g. see the [Workers config](https://github.com/cloudflare/cloudflare-docs/blob/e72247549d20f649786251d0368de19560d1bbb2/products/workers/docs-config.js#L21-L24)). To disable search, set those values to the empty string (e.g. [Docs Engine example site](https://github.com/adamschwartz/docs-engine-example/blob/6d725ffa554454e1daa4c0d2a8a7e44408056e6b/docs-config.js#L21-L24)).
📚
Medium Title: Cloudflare API Token
However, these files can also be placed inside any sub-folder of your project. When doing this, you’ll need to then customize the `contentRepoFolder` property in `docs-config.js`, which is how the [products inside @cloudflare/cloudflare-docs](https://github.com/cloudflare/cloudflare-docs/tree/production/products) are all set up, e.g. the [Workers product](https://github.com/cloudflare/cloudflare-docs/blob/1efd366c25bc1bdd1a40f7bc4737310c6b00d15e/products/workers/docs-config.js#L6).
📚
Medium Title: Cloudflare API Token
The `search` field is used to add a search to the site, powered by Algolia DocSearch. To hide search, set `search.indexName` and `search.apiKey` to the empty string, as in the example above. For an example of a project using search, see the [Workers config](https://github.com/cloudflare/cloudflare-docs/blob/e72247549d20f649786251d0368de19560d1bbb2/products/workers/docs-config.js#L21-L24).
📚
Medium Title: Cloudflare API Token
- By default the engine assumes that a docs site’s structure is placed in the root of a project repo. However, this whole structure can also be placed inside any sub-folder by setting this property. For example, this site’s content is inside the [`products/docs-engine` folder](https://github.com/cloudflare/cloudflare-docs/tree/4fd3a4af9507b20bb23fea4d7c4f4cd349c0f463/products/docs-engine) of [@cloudflare/cloudflare-docs](https://github.com/cloudflare/cloudflare-docs) so its `"products/docs-engine"`.
📚
Medium Title: Cloudflare API Token
For an example of a project using search, see the [Workers config](https://github.com/cloudflare/cloudflare-docs/blob/e72247549d20f649786251d0368de19560d1bbb2/products/workers/docs-config.js#L21-L24).
📚
Medium Title: Cloudflare API Token
In the [Workers docs](https://developers.cloudflare.com/workers), there’s a partial used in the intro of all of the [Tutorials](https://developers.cloudflare.com/workers/tutorials), called “Before you start” which makes sure folks have the appropriate pre-requisites before starting a Workers tutorial ([source](https://github.com/cloudflare/cloudflare-docs/blob/4ba1e70d2a535c93ef6de42b0fc5178dabdb942b/products/workers/src/content/_partials/_tutorials-before-you-start.md)):
📚
Medium Title: Cloudflare API Token
Inside the tutorial it’s imported as you would any other MDX component ([source](https://github.com/cloudflare/cloudflare-docs/blob/4ba1e70d2a535c93ef6de42b0fc5178dabdb942b/products/workers/src/content/tutorials/build-a-qr-code-generator/index.md)):
📚
Medium Title: Cloudflare API Token
You can additional set your own frontmatter props in order to use them as variables inside of your pages. This is how the [Workers “Example” pages](https://github.com/cloudflare/cloudflare-docs/blob/4ba1e70d2a535c93ef6de42b0fc5178dabdb942b/products/workers/src/content/examples/alter-headers.md#L12) are constructed.
📚
Medium Title: Cloudflare API Token
If within a non-document-type page you’d like to have some content constrained by the normal content column, use the [`<ContentColumn/>` component](/reference/markdown#contentcolumn). The Workers Example pages use this component to [constrain the width](https://github.com/cloudflare/cloudflare-docs/blob/4ba1e70d2a535c93ef6de42b0fc5178dabdb942b/products/workers/src/content/examples/respond-with-another-site.md#L10-L22) of descriptive text while allowing the code example to be showcased.
📚
Medium Title: Cloudflare Email
If you have any questions, please contact your Cloudflare Account Team or [SaaSv2@cloudflare.com](mailto:SaaSv2@cloudflare.com).
📚
Medium Title: Cloudflare Email
To use Cloudflare’s Provisioning API capabilities requires enablement by Cloudflare. Reach out to partners@cloudflare.com for more information.
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.3.0
📚
Medium Title: Cloudflare Email
uses: cloudflare/wrangler-action@1.3.0
📚

More info on how to fix Hard-Coded Secrets in General and JavaScript.


👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants