<![CDATA[[Aikido][GH#11] Using document write methods can lead to XSS attacks (4 sites)]]>Security finding (Aikido)

Disposition: no remediation (logged).

Labels

security, aikido, no-remediation, severity:high, type:sast, github-11

Forum tag limit is 5 — full label set listed above and on the matching GitHub issue.

Aikido findings

  • 487719492 — apps/api/src/static/account-dashboard.js:624 — severity 80 (high)
  • 487719518 — apps/desktop/client/scripts/WebLogger.js:78 — severity 80 (high)
  • 487719754 — apps/web/public/profile.js:116 — severity 80 (high)
  • 487719501 — apps/api/src/static/account-dashboard.js:862 — severity 55 (medium)

Tracked in the Rig security log. Posted by Rig for visibility on the Bugs board.

]]>https://community.userig.app/topic/112/aikido-gh-11-using-document-write-methods-can-lead-to-xss-attacks-4-sitesRSS for NodeSat, 19 Sep 2026 01:27:17 GMTWed, 12 Aug 2026 18:32:58 GMT60<![CDATA[Reply to [Aikido][GH#11] Using document write methods can lead to XSS attacks (4 sites) on Wed, 12 Aug 2026 21:42:14 GMT]]>Resolved in Mac 1.0.0-beta.55.
GitHub: https://github.com/richharrington20/rig/issues/11
Changelog: https://userig.app/changelog
Bugs hub: https://userig.app/changelog?hub=bugs

]]>https://community.userig.app/post/154https://community.userig.app/post/154Wed, 12 Aug 2026 21:42:14 GMT