https://github.com/githubworkflow-staticpackager-qa/chatwoot/blob/44ac23d60cdee4959650add15085f7c247347ea3//veracode-helper/helper/yarn-lock-file-generator-v2.js#L5325-L5335
Filename: yarn-lock-file-generator-v2.js
Line: 5330
CWE: 95 (Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') ('Code Injection'))
This call to setTimeout() contains untrusted input or potentially untrusted data. If this input could be modified by an attacker, arbitrary JS code could be executed. Validate all untrusted and untrusted input to ensure that it conforms to the expected format, using centralized data validation routines when possible. In general, avoid executing code derived from untrusted input. References: CWE/nDon't know how to fix this? Don't know why this was reported?
Get Assistance from Veracode
https://github.com/githubworkflow-staticpackager-qa/chatwoot/blob/44ac23d60cdee4959650add15085f7c247347ea3//veracode-helper/helper/yarn-lock-file-generator-v2.js#L5325-L5335
Filename: yarn-lock-file-generator-v2.js
Line: 5330
CWE: 95 (Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') ('Code Injection'))
This call to setTimeout() contains untrusted input or potentially untrusted data. If this input could be modified by an attacker, arbitrary JS code could be executed. Validate all untrusted and untrusted input to ensure that it conforms to the expected format, using centralized data validation routines when possible. In general, avoid executing code derived from untrusted input. References: CWE/nDon't know how to fix this? Don't know why this was reported?
Get Assistance from Veracode