Files
Kordant/piolium/attack-surface/balanced-verification-summary.md
2026-05-29 09:03:47 -04:00

1.6 KiB

Balanced Verification & Cleanup

Generated: 2026-05-28T15:06:13.718Z

Verification

  • Scope: lightweight package verification; live target confirmation remains /piolium-confirm.
  • Final finding directories: 11
  • Missing report.md: none
  • Missing PoC artifact: p8-001-xss-in-innerhtml, p8-002-puppeteer-ssrf, p8-003-open-redirect-return-url, p8-004-rate-limit-substring-bypass, p8-005-cors-origin-env-var, p8-006-webhook-type-coercion, p8-007-webhook-replay, p8-008-websocket-jwt-query-param, p8-009-websocket-no-origin-validation, p8-010-voiceprint-resource-exhaustion, p8-011-superjson-vulnerable-version
  • Missing evidence directory: p8-001-xss-in-innerhtml, p8-002-puppeteer-ssrf, p8-003-open-redirect-return-url, p8-004-rate-limit-substring-bypass, p8-005-cors-origin-env-var, p8-006-webhook-type-coercion, p8-007-webhook-replay, p8-008-websocket-jwt-query-param, p8-009-websocket-no-origin-validation, p8-010-voiceprint-resource-exhaustion, p8-011-superjson-vulnerable-version

Cleanup

  • Removed: piolium/tmp, piolium/confirm-workspace, piolium/findings-draft
  • Missing: piolium/probe-workspace, piolium/chamber-workspace, piolium/adversarial-reviews, piolium/bypass-analysis, piolium/codeql-artifacts, piolium/codeql-queries, piolium/semgrep-rules, piolium/agentic-actions-res, piolium/codeql-res, piolium/semgrep-res, piolium/real-env-evidence, piolium/raw, piolium/file-records, piolium/attack-surface/raw, piolium/attack-pattern-registry.json, piolium/authz-coverage-gaps.md, piolium/merged-results.sarif
  • Cleanup summary: piolium/attack-surface/balanced-cleanup-summary.json