CodeQL

fix(deps): bump express from 4.19.2 to 4.21.2 #2051

Triggered via pull request December 5, 2024 22:42

dependabot[bot]

opened #1419

dependabot/npm_and_yarn/express-4.21.2

Status Success

Total duration 2m 5s

Artifacts –

codeql.yml

on: pull_request

Matrix: Analyze

Annotations

51 warnings

src/main.js#L100

Found stat from package "node:fs/promises" with non literal argument at index 0 (security/detect-non-literal-fs-filename)

src/main.js#L150

Generic Object Injection Sink (security/detect-object-injection)

src/main.js#L212

Generic Object Injection Sink (security/detect-object-injection)

src/main.js#L239

Found stat from package "node:fs" with non literal argument at index 0 (security/detect-non-literal-fs-filename)

src/main.js#L255

Found stat from package "node:fs/promises" with non literal argument at index 0 (security/detect-non-literal-fs-filename)

src/mbtiles_wrapper.js#L15

Missing JSDoc @returns description (jsdoc/require-returns-description)

src/mbtiles_wrapper.js#L23

Missing JSDoc @returns description (jsdoc/require-returns-description)

src/mbtiles_wrapper.js#L33

Missing JSDoc @param "inputFile" type (jsdoc/require-param-type)

src/mbtiles_wrapper.js#L34

Missing JSDoc @returns description (jsdoc/require-returns-description)

src/pmtiles_adapter.js#L25

Missing JSDoc @param "fd" description (jsdoc/require-param-description)

src/pmtiles_adapter.js#L25

Missing JSDoc @param "fd" type (jsdoc/require-param-type)

src/pmtiles_adapter.js#L26

Missing JSDoc @param "buffer" description (jsdoc/require-param-description)

src/pmtiles_adapter.js#L26

Missing JSDoc @param "buffer" type (jsdoc/require-param-type)

src/pmtiles_adapter.js#L27

Missing JSDoc @param "offset" description (jsdoc/require-param-description)

src/pmtiles_adapter.js#L27

Missing JSDoc @param "offset" type (jsdoc/require-param-type)

src/pmtiles_adapter.js#L40

Missing JSDoc @returns declaration (jsdoc/require-returns)

src/pmtiles_adapter.js#L42

Missing JSDoc @param "FilePath" description (jsdoc/require-param-description)

src/pmtiles_adapter.js#L42

Missing JSDoc @param "FilePath" type (jsdoc/require-param-type)

src/pmtiles_adapter.js#L51

Found openSync from package "node:fs" with non literal argument at index 0 (security/detect-non-literal-fs-filename)

src/pmtiles_adapter.js#L58

Missing JSDoc @returns declaration (jsdoc/require-returns)

src/pmtiles_adapter.js#L60

Missing JSDoc @param "pmtiles" description (jsdoc/require-param-description)

src/pmtiles_adapter.js#L60

Missing JSDoc @param "pmtiles" type (jsdoc/require-param-type)

src/pmtiles_adapter.js#L99

Missing JSDoc @returns declaration (jsdoc/require-returns)

src/pmtiles_adapter.js#L101

Missing JSDoc @param "pmtiles" description (jsdoc/require-param-description)

src/pmtiles_adapter.js#L101

Missing JSDoc @param "pmtiles" type (jsdoc/require-param-type)

src/pmtiles_adapter.js#L102

Missing JSDoc @param "z" description (jsdoc/require-param-description)

src/pmtiles_adapter.js#L102

Missing JSDoc @param "z" type (jsdoc/require-param-type)

src/pmtiles_adapter.js#L103

Missing JSDoc @param "x" description (jsdoc/require-param-description)

src/pmtiles_adapter.js#L103

Missing JSDoc @param "x" type (jsdoc/require-param-type)

src/pmtiles_adapter.js#L104

Missing JSDoc @param "y" description (jsdoc/require-param-description)

src/pmtiles_adapter.js#L104

Missing JSDoc @param "y" type (jsdoc/require-param-type)

src/pmtiles_adapter.js#L118

Missing JSDoc @returns declaration (jsdoc/require-returns)

src/pmtiles_adapter.js#L120

Missing JSDoc @param "typenum" description (jsdoc/require-param-description)

src/pmtiles_adapter.js#L120

Missing JSDoc @param "typenum" type (jsdoc/require-param-type)

src/render.js#L9

Missing JSDoc @returns declaration (jsdoc/require-returns)

src/render.js#L11

The type 'List' is undefined (jsdoc/no-undefined-types)

src/render.js#L94

The type 'List' is undefined (jsdoc/no-undefined-types)

src/render.js#L109

Missing JSDoc @returns declaration (jsdoc/require-returns)

src/render.js#L112

The type 'List' is undefined (jsdoc/no-undefined-types)

src/serve_data.js#L78

Variable Assigned to Object Injection Sink (security/detect-object-injection)

src/serve_data.js#L139

Variable Assigned to Object Injection Sink (security/detect-object-injection)

src/serve_data.js#L215

Found stat from package "node:fs/promises" with non literal argument at index 0 (security/detect-non-literal-fs-filename)

src/serve_data.js#L266

Generic Object Injection Sink (security/detect-object-injection)

src/serve_rendered.js#L49

Unsafe Regular Expression (security/detect-unsafe-regex)

src/serve_rendered.js#L99

Variable Assigned to Object Injection Sink (security/detect-object-injection)

src/serve_rendered.js#L119

Generic Object Injection Sink (security/detect-object-injection)

src/serve_rendered.js#L125

Missing JSDoc @returns declaration (jsdoc/require-returns)

src/serve_rendered.js#L128

The type 'List' is undefined (jsdoc/no-undefined-types)

src/serve_rendered.js#L128

Expected @param names to be "coordinates, query". Got "coordinatePair, coordinates, query" (jsdoc/check-param-names)

src/serve_rendered.js#L129

Missing JSDoc @param "coordinates" description (jsdoc/require-param-description)

Analyze (javascript)

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): bump express from 4.19.2 to 4.21.2 #2051

Summary