Psalm Security Analysis

Merge pull request #55452 from nextcloud/automated/noid/stable23-upda… #31746

Sign in to view logs

Triggered via push October 1, 2025 07:39

stable23

Status Success

Total duration 2m 9s

Artifacts –

psalm-security.yml

on: push

Annotations

11 errors

This version of the CodeQL Action was deprecated on January 18th, 2023, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v2. For more information, see https://github.blog/changelog/2023-01-18-code-scanning-codeql-action-v1-is-now-deprecated/

Psalm: core/Controller/SvgController.php#L129

Detected tainted file handling (see https://psalm.dev/255)

Psalm: apps/theming/lib/IconBuilder.php#L235

Detected tainted file handling (see https://psalm.dev/255)

Psalm: apps/theming/lib/IconBuilder.php#L137

Detected tainted file handling (see https://psalm.dev/255)

Psalm: apps/files_sharing/lib/Controller/ShareController.php#L665

Detected tainted cookie (see https://psalm.dev/257)

Psalm: apps/files_external/lib/MountConfig.php#L162

Detected tainted file handling (see https://psalm.dev/255)

Psalm: apps/files_external/lib/Lib/Storage/SFTP.php#L399

Detected tainted file handling (see https://psalm.dev/255)

Psalm: apps/files_external/lib/Lib/Storage/SFTP.php#L258

Detected tainted file handling (see https://psalm.dev/255)

Psalm: apps/files_external/lib/Lib/Storage/SFTP.php#L237

Detected tainted file handling (see https://psalm.dev/255)

Psalm: apps/admin_audit/lib/Actions/Action.php#L64

Detected tainted HTML (see https://psalm.dev/245)

Psalm: apps/admin_audit/lib/Actions/Action.php#L64

Detected tainted HTML (see https://psalm.dev/245)