86 lines
2.1 KiB
TypeScript
86 lines
2.1 KiB
TypeScript
/**
|
|
* CVE Remediation Tracking
|
|
*
|
|
* This file documents all security vulnerabilities addressed in the V3 security module
|
|
* and provides programmatic tracking of remediation status.
|
|
*
|
|
* @module v3/security/CVE-REMEDIATION
|
|
*/
|
|
export interface CVEEntry {
|
|
id: string;
|
|
title: string;
|
|
severity: 'critical' | 'high' | 'medium' | 'low';
|
|
description: string;
|
|
affectedFiles: string[];
|
|
remediationFile: string;
|
|
remediationStatus: 'fixed' | 'in_progress' | 'pending';
|
|
testFile: string;
|
|
testStatus: 'passing' | 'failing' | 'pending';
|
|
timeline: {
|
|
identified: string;
|
|
remediated?: string;
|
|
verified?: string;
|
|
};
|
|
}
|
|
/**
|
|
* Complete list of addressed CVEs and security issues
|
|
*/
|
|
export declare const CVE_REGISTRY: CVEEntry[];
|
|
/**
|
|
* Security patterns implemented
|
|
*/
|
|
export declare const SECURITY_PATTERNS: {
|
|
passwordHashing: {
|
|
algorithm: string;
|
|
rounds: number;
|
|
rationale: string;
|
|
};
|
|
credentialGeneration: {
|
|
method: string;
|
|
minPasswordLength: number;
|
|
minSecretLength: number;
|
|
rationale: string;
|
|
};
|
|
commandExecution: {
|
|
method: string;
|
|
shell: boolean;
|
|
allowlist: boolean;
|
|
rationale: string;
|
|
};
|
|
pathValidation: {
|
|
method: string;
|
|
symlinks: string;
|
|
blockedPatterns: (string | null)[];
|
|
rationale: string;
|
|
};
|
|
inputValidation: {
|
|
library: string;
|
|
sanitization: boolean;
|
|
rationale: string;
|
|
};
|
|
};
|
|
/**
|
|
* Summary of security improvements
|
|
*/
|
|
export declare const SECURITY_SUMMARY: {
|
|
cveCount: number;
|
|
fixedCount: number;
|
|
pendingCount: number;
|
|
criticalFixed: number;
|
|
highFixed: number;
|
|
testCoverage: string;
|
|
documentsCreated: string[];
|
|
testsCreated: string[];
|
|
};
|
|
/**
|
|
* Validates that all CVEs are addressed
|
|
*/
|
|
export declare function validateRemediation(): {
|
|
allFixed: boolean;
|
|
issues: string[];
|
|
};
|
|
/**
|
|
* Gets remediation report
|
|
*/
|
|
export declare function getRemediationReport(): string;
|
|
//# sourceMappingURL=CVE-REMEDIATION.d.ts.map
|