ResumeMaker Vulnerability Reports – Scan History & Security Reports

SEC-OPS & AUDIT / Vulnerability Reports & Scan Comparison DIFF ENGINE v3.8

VERIFIED DOMAIN • NON-DESTRUCTIVE PROBE MODE

schedule Last Scan: 14:02:18 UTC

dns 44.204.19.102 (AWS eu-central-1)

100% Target Coverage

Health Index +6 DELTA

94 /100

vs Scan #1042 (88/100 - 7d ago)

Critical Severity CLEARED

0 (2 Patched)

verified_user Zero Remote Code Executions

High Risk ATTN REQ

1 Active Threat

warning CVE-2024-38021 in JS Lib

Medium Risk POLICIES

3 Misconfigurations

CSP Nonce • CORS • SameSite

Low & Info BENIGN

6 Observations

TLS 1.2 Deprecation, Headers

compare_arrows

Active Scan Diff Analysis

PROD vs STAGING

Side-by-side behavioral drift, regression detection, and remediation delta tracking

add_circle 2 Resolved Patches

change_circle 1 New Advisory (Δ)

check_circle 0 Regressions

speed -14s Scan Latency

Primary Baseline [TARGET A] CURRENT AUDIT

Scan #1043

Today, 14:02 UTC • Production Enclave

94/100

Duration: 42s

SCORE DELTA

+6 PTS

NET IMPROVEMENT

Comparison Reference [TARGET B] HISTORICAL BENCHMARK

Scan #1042

Oct 18, 09:30 UTC • Staging/Pre-release

88/100

Duration: 56s

VECTOR HEALTH EVOLUTION BY CATEGORY WEIGHTED CVSS IMPACT

Authentication 100%

Optimal • 0 Findings

SSL / Transport +18%

HSTS Enforced • TLS 1.3

HTTP Headers 78%

Missing Nonce, CORS looseness

Injection / XSS 100%

DAST Fuzz Cleared

Supply Chain -12%

1 Vulnerable Subresource

First Scan (older)

Second Scan (newer)

No scan yet. Run a scan on the Security Scanner page first.

history_edu

Audit History

LAST 30 DAYS

Scan #1043

Today, 14:02 • Prod

+6 pts

Scan #1042

Oct 18, 09:30 • Staging

Baseline

Scan #1041

Oct 11, 16:45 • Deploy

Init

verified

Regulatory Compliance

LIVE PASS

OWASP Top 10 (2024 Edition) 96% PASSED

Passes A01, A02, A03, A05, A07, A09

SOC 2 Type II Readiness CERTIFIED

Trust Services Criteria CC6.1 - CC6.8 Enforced

ISO 27001 Annex A.12 FORTIFIED

Operation Security & Vulnerability Management

Continuous AI Guardian

Autonomous web defense engine is watching ApexFintech.io network edges. Next scheduled deep probe in 2h 14m.

Enclave Hash: #0x9F41 Configure Guard →

{ "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json", "version": "2.1.0", "runs": [ { "tool": { "driver": { "name": "ResumeMaker Sec-Core", "version": "4.9.2-diff3.8", "informationUri": "https://webforge.ai/docs/security-audit", "rules": [ { "id": "CVE-2024-38021", "name": "LodashTemplatePrototypePollution", "shortDescription": { "text": "Prototype pollution vulnerability in template compilation" }, "defaultConfiguration": { "level": "error" }, "properties": { "cvss": 7.4, "cwe": "CWE-1321" } }, { "id": "CSP-004", "name": "MissingScriptSrcNonce", "shortDescription": { "text": "Content Security Policy lacks script nonce directive" }, "defaultConfiguration": { "level": "warning" }, "properties": { "cvss": 5.3, "cwe": "CWE-1021" } }, { "id": "CWE-942", "name": "PermissiveCorsWildcardCredentials", "defaultConfiguration": { "level": "warning" }, "properties": { "cvss": 6.1 } } ] } }, "invocations": [ { "executionSuccessful": true, "startTimeUtc": "2024-10-25T14:01:36Z", "endTimeUtc": "2024-10-25T14:02:18Z" } ], "results": [ { "ruleId": "CVE-2024-38021", "level": "error", "message": { "text": "Subresource lodash.template <= 4.5.0 evaluated arbitrary prototype injection vector." }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "static/js/bundle-vendor.min.js" }, "region": { "startLine": 317, "startColumn": 1 } } } ], "fixes": [ { "description": { "text": "Auto-PR #402: Bump package.json to lodash@4.17.21" } } ] }, { "ruleId": "CSP-004", "level": "warning", "message": { "text": "Directive script-src lacks unique nonce token under /checkout/*" } } ] } ] }

Active Scan Diff Analysis

Audit History

Regulatory Compliance

SARIF & JSON Security Export Inspector