Skip to content

Harden bcrypt password hashing policy - #32

Draft
hoang12122 wants to merge 10 commits into
mainfrom
agent/harden-password-hashing
Draft

Harden bcrypt password hashing policy#32
hoang12122 wants to merge 10 commits into
mainfrom
agent/harden-password-hashing

split oversized user service modules

b73d97e
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Jul 13, 2026 in 2s

2 new alerts including 2 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 2 high

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 22 in src/lib/actions/auth.actions.ts

See this annotation in the file changed.

Code scanning / CodeQL

Use of password hash with insufficient computational effort High

Password from
an access to userWithoutPassword
Loading
is hashed insecurely.
Password from a call to omitPassword is hashed insecurely.
Password from a call to omitPassword is hashed insecurely.

Check failure on line 232 in src/lib/services/ai/control-plane.ts

See this annotation in the file changed.

Code scanning / CodeQL

Use of password hash with insufficient computational effort High

Password from
an access to userWithoutPassword
Loading
is hashed insecurely.
Password from a call to omitPassword is hashed insecurely.