Skip to content
OpenAdvisories

Package · PyPI

ciguard

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    GHSA-7ww3-xvf5-cxwm

    ciguard: Web UI is missing HTTP defence-in-depth headers

    ## Summary ciguard's FastAPI Web UI (`src/ciguard/web/app.py`) does not set HTTP defence-in-depth headers. OWASP ZAP baseline scan flagged 11 alerts: missing Content-Security-Policy (Medium), X-Frame-Options (Medium), Sub-Resource-Integrity on `/api/docs` (Me…

    ciguard PyPI