{
  "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/main/sarif-2.1/schema/sarif-schema-2.1.0.json",
  "runs": [
    {
      "invocations": [
        {
          "commandLine": "aegis scan-local /private/tmp/openclaw",
          "endTimeUtc": "2026-05-29T10:44:35Z",
          "executionSuccessful": true,
          "startTimeUtc": "2026-05-29T10:44:35Z"
        }
      ],
      "properties": {
        "callGraphEdges": 272014,
        "callGraphNodes": 82167,
        "filesScanned": 16991,
        "totalLines": 4180140,
        "vendorFilesSkipped": 68
      },
      "results": [
        {
          "fingerprints": {
            "aegis/stable/v1": "7b2540750a09187c"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/public/sw.js",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 67
                }
              }
            }
          ],
          "message": {
            "text": "Server-Side Request Forgery via fetch() at line 67"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-918:ui/public/sw.js:67:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 7.1,
            "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "untrusted"
          },
          "rank": 90.0,
          "ruleId": "CWE-918",
          "ruleIndex": 0
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "40b583841942a409"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/public/sw.js",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 78
                }
              }
            }
          ],
          "message": {
            "text": "Server-Side Request Forgery via fetch() at line 78"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-918:ui/public/sw.js:78:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 7.1,
            "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "untrusted"
          },
          "rank": 90.0,
          "ruleId": "CWE-918",
          "ruleIndex": 0
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "6c5b1b7671796b7f"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/public/sw.js",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 101
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 101"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/public/sw.js:101:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "9d8d3239534ee2f9"
          },
          "level": "note",
          "locations": [
            {
              "logicalLocations": [
                {
                  "kind": "function",
                  "name": "readPackageVersion"
                }
              ],
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/vite.config.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 53
                }
              }
            }
          ],
          "message": {
            "text": "Path Traversal via readFileSync() at line 53"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-22:ui/vite.config.ts:53:readPackageVersion"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 2.5999999999999996,
            "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "fp_score": 0.25,
            "reachability_type": "internal",
            "reachable": true,
            "severity": "low",
            "trust_level": "medium-trust"
          },
          "rank": 90.0,
          "ruleId": "CWE-22",
          "ruleIndex": 2
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "aa478d16ab896878"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/vite.config.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 58
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 58"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/vite.config.ts:58:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "9bfe98cd9529aa6d"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/vite.config.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 70
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 70"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/vite.config.ts:70:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "67428d409a855dda"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/activity-model.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 42
                }
              }
            }
          ],
          "message": {
            "text": "Sensitive cookie without HttpOnly flag at line 42"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-1004:ui/src/ui/activity-model.ts:42:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 4.3,
            "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-1004",
          "ruleIndex": 3
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "9fe151212a08347e"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/activity-model.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 107
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 107"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/activity-model.ts:107:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "05e0f35001e36274"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/app-settings.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 220
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 220"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/app-settings.ts:220:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "173791d5a5e5ff68"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/app-settings.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 841
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 841"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/app-settings.ts:841:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "5980b23b33f4830d"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/app-render.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 465
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 465"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/app-render.ts:465:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "8b8c9d9e71758c03"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/app-render.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 497
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 497"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/app-render.ts:497:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "20bda8da1b0f85c1"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/build-chat-items.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 81
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 81"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/build-chat-items.ts:81:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "e2d7bd65d297e3b4"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/realtime-talk.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 125
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 125"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/realtime-talk.ts:125:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "ee9effc0f7746af9"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/copy-as-markdown.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 23
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 23"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/copy-as-markdown.ts:23:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "3ca0970fdee4f6c9"
          },
          "level": "note",
          "locations": [
            {
              "logicalLocations": [
                {
                  "kind": "function",
                  "name": "resolveManagedOutgoingImageBlobUrl"
                }
              ],
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/grouped-render.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 1037
                }
              }
            }
          ],
          "message": {
            "text": "Server-Side Request Forgery via fetch() at line 1037"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-918:ui/src/ui/chat/grouped-render.ts:1037:resolveManagedOutgoingImageBlobUrl"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 4.1,
            "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": false,
            "severity": "low",
            "trust_level": "untrusted"
          },
          "rank": 90.0,
          "ruleId": "CWE-918",
          "ruleIndex": 0
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "e8dfa736bada5bf8"
          },
          "level": "note",
          "locations": [
            {
              "logicalLocations": [
                {
                  "kind": "function",
                  "name": "resolveAssistantAttachmentAvailability"
                }
              ],
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/grouped-render.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 1150
                }
              }
            }
          ],
          "message": {
            "text": "Server-Side Request Forgery via fetch() at line 1150"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-918:ui/src/ui/chat/grouped-render.ts:1150:resolveAssistantAttachmentAvailability"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 4.1,
            "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": false,
            "severity": "low",
            "trust_level": "untrusted"
          },
          "rank": 90.0,
          "ruleId": "CWE-918",
          "ruleIndex": 0
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "2c4cd62aca892971"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/grouped-render.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 154
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 154"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/grouped-render.ts:154:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "be73c18b78321e88"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/grouped-render.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 630
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 630"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/grouped-render.ts:630:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "0710cc5264ff12c9"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/grouped-render.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 892
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 892"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/grouped-render.ts:892:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "f5ce440131adb54d"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/grouped-render.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 986
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 986"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/grouped-render.ts:986:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "1adeec488ea8b83a"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/grouped-render.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 997
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 997"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/grouped-render.ts:997:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "22714fedad0c57c7"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/grouped-render.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 1400
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 1400"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/grouped-render.ts:1400:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "3d03fb3fee3bc6b2"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/deleted-messages.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 43
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 43"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/deleted-messages.ts:43:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "077138b940100847"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/deleted-messages.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 51
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 51"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/deleted-messages.ts:51:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "bf56002378cfd6e6"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/tool-cards.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 41
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 41"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/tool-cards.ts:41:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "6c5bbe4df018b8f1"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/tool-cards.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 101
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 101"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/tool-cards.ts:101:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "ae924d2fe246d908"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/tool-cards.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 175
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 175"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/tool-cards.ts:175:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "79a03395bb9f0483"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/slash-commands.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 454
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 454"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/slash-commands.ts:454:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "f6fc8ead35a36015"
          },
          "level": "note",
          "locations": [
            {
              "logicalLocations": [
                {
                  "kind": "function",
                  "name": "start"
                }
              ],
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/realtime-talk-webrtc.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 91
                }
              }
            }
          ],
          "message": {
            "text": "Server-Side Request Forgery via fetch() at line 91"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-918:ui/src/ui/chat/realtime-talk-webrtc.ts:91:start"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.6,
            "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "fp_score": 0.25,
            "reachability_type": "internal",
            "reachable": true,
            "severity": "low",
            "trust_level": "untrusted"
          },
          "rank": 90.0,
          "ruleId": "CWE-918",
          "ruleIndex": 0
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "be7e43ef9b15e170"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/realtime-talk-webrtc.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 145
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 145"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/realtime-talk-webrtc.ts:145:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "17fd2e4217479582"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/realtime-talk-google-live.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 53
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 53"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/realtime-talk-google-live.ts:53:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "68ad33cfd13c68e5"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/realtime-talk-google-live.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 191
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 191"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/realtime-talk-google-live.ts:191:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "fd4a3ced3acb0e50"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/pinned-messages.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 55
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 55"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/pinned-messages.ts:55:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "78b00096bc846660"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/pinned-messages.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 63
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 63"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/pinned-messages.ts:63:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "12170ccc0d888431"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/chat/tool-helpers.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 18
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 18"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/chat/tool-helpers.ts:18:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "3827026c2748ca0c"
          },
          "level": "note",
          "locations": [
            {
              "logicalLocations": [
                {
                  "kind": "function",
                  "name": "startNodesPolling"
                }
              ],
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/app-polling.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 21
                }
              }
            }
          ],
          "message": {
            "text": "Uncontrolled Resource Consumption via setInterval() at line 21"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-400:ui/src/ui/app-polling.ts:21:startNodesPolling"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 2.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": false,
            "severity": "low",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-400",
          "ruleIndex": 4
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "d569f234357fcd09"
          },
          "level": "note",
          "locations": [
            {
              "logicalLocations": [
                {
                  "kind": "function",
                  "name": "startLogsPolling"
                }
              ],
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/app-polling.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 41
                }
              }
            }
          ],
          "message": {
            "text": "Uncontrolled Resource Consumption via setInterval() at line 41"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-400:ui/src/ui/app-polling.ts:41:startLogsPolling"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 2.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": false,
            "severity": "low",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-400",
          "ruleIndex": 4
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "199a7e13fa6b5aee"
          },
          "level": "note",
          "locations": [
            {
              "logicalLocations": [
                {
                  "kind": "function",
                  "name": "startDebugPolling"
                }
              ],
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/app-polling.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 61
                }
              }
            }
          ],
          "message": {
            "text": "Uncontrolled Resource Consumption via setInterval() at line 61"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-400:ui/src/ui/app-polling.ts:61:startDebugPolling"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 2.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": false,
            "severity": "low",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-400",
          "ruleIndex": 4
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "a6a7a9943c0fa1a2"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/device-identity.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 93
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 93"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/device-identity.ts:93:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "74b3433178c364f8"
          },
          "level": "note",
          "locations": [
            {
              "logicalLocations": [
                {
                  "kind": "function",
                  "name": "refreshChatAvatar"
                }
              ],
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/app-chat.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 1352
                }
              }
            }
          ],
          "message": {
            "text": "Server-Side Request Forgery via fetch() at line 1352"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-918:ui/src/ui/app-chat.ts:1352:refreshChatAvatar"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 4.1,
            "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "fp_score": 0.25,
            "reachability_type": "internal",
            "reachable": true,
            "severity": "low",
            "trust_level": "medium-trust"
          },
          "rank": 90.0,
          "ruleId": "CWE-918",
          "ruleIndex": 0
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "e077bc373d2f7d3d"
          },
          "level": "note",
          "locations": [
            {
              "logicalLocations": [
                {
                  "kind": "function",
                  "name": "refreshChatAvatar"
                }
              ],
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/app-chat.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 1379
                }
              }
            }
          ],
          "message": {
            "text": "Server-Side Request Forgery via fetch() at line 1379"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-918:ui/src/ui/app-chat.ts:1379:refreshChatAvatar"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 4.1,
            "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "fp_score": 0.25,
            "reachability_type": "internal",
            "reachable": true,
            "severity": "low",
            "trust_level": "medium-trust"
          },
          "rank": 90.0,
          "ruleId": "CWE-918",
          "ruleIndex": 0
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "6940f3931080c3e4"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/app-chat.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 1395
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 1395"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/app-chat.ts:1395:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "3a0ee57b3d90a629"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/app.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 1334
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 1334"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/app.ts:1334:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "61a4e421d9d05330"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/app.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 1361
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 1361"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/app.ts:1361:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "2e46b397868504cb"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/storage.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 150
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 150"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/storage.ts:150:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "b50580810c5edece"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/storage.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 196
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 196"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/storage.ts:196:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "dcae8c7eee5b25d1"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/storage.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 215
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 215"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/storage.ts:215:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "ee2829f4404cd4c3"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/storage.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 311
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 311"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/storage.ts:311:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        },
        {
          "fingerprints": {
            "aegis/stable/v1": "831578d5db75210b"
          },
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "ui/src/ui/storage.ts",
                  "uriBaseId": "%SRCROOT%"
                },
                "region": {
                  "startColumn": 1,
                  "startLine": 328
                }
              }
            }
          ],
          "message": {
            "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 328"
          },
          "partialFingerprints": {
            "aegis/v1": "CWE-396:ui/src/ui/storage.ts:328:"
          },
          "properties": {
            "confidence": "high",
            "cvss_score": 5.0,
            "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "fp_score": 0.25,
            "reachability_type": null,
            "reachable": null,
            "severity": "medium",
            "trust_level": "unknown"
          },
          "rank": 90.0,
          "ruleId": "CWE-396",
          "ruleIndex": 1
        }
      ],
      "taxonomies": [
        {
          "informationUri": "https://cwe.mitre.org/data/published/cwe_v4.14.pdf",
          "name": "CWE",
          "organization": "MITRE",
          "shortDescription": {
            "text": "The MITRE Common Weakness Enumeration"
          },
          "taxa": [
            {
              "guid": "afb16603-8fe4-5bb7-afb1-66038fe45bb7",
              "helpUri": "https://cwe.mitre.org/data/definitions/918.html",
              "id": "CWE-918",
              "name": "Server-Side Request Forgery",
              "shortDescription": {
                "text": "Server-Side Request Forgery"
              }
            },
            {
              "guid": "d972f87a-26eb-9fcb-d972-f87a26eb9fcb",
              "helpUri": "https://cwe.mitre.org/data/definitions/396.html",
              "id": "CWE-396",
              "name": "CWE-396",
              "shortDescription": {
                "text": "CWE-396"
              }
            },
            {
              "guid": "b52bf349-4cae-d407-b52b-f3494caed407",
              "helpUri": "https://cwe.mitre.org/data/definitions/22.html",
              "id": "CWE-22",
              "name": "Path Traversal",
              "shortDescription": {
                "text": "Path Traversal"
              }
            },
            {
              "guid": "c495f278-72e4-b955-c495-f27872e4b955",
              "helpUri": "https://cwe.mitre.org/data/definitions/1004.html",
              "id": "CWE-1004",
              "name": "CWE-1004",
              "shortDescription": {
                "text": "CWE-1004"
              }
            },
            {
              "guid": "69aacb14-ac72-5c0d-69aa-cb14ac725c0d",
              "helpUri": "https://cwe.mitre.org/data/definitions/400.html",
              "id": "CWE-400",
              "name": "Uncontrolled Resource Consumption",
              "shortDescription": {
                "text": "Uncontrolled Resource Consumption"
              }
            }
          ],
          "version": "4.14"
        }
      ],
      "tool": {
        "driver": {
          "fullName": "Autonomous Equilateral Governed Intelligence System",
          "informationUri": "https://raknor.ai",
          "name": "AEGIS",
          "organization": "Equilateral AI (Pareidolia LLC)",
          "rules": [
            {
              "defaultConfiguration": {
                "level": "warning"
              },
              "fullDescription": {
                "text": "Server-Side Request Forgery via fetch() at line 67"
              },
              "helpUri": "https://cwe.mitre.org/data/definitions/918.html",
              "id": "CWE-918",
              "name": "SSRF",
              "properties": {
                "precision": "medium",
                "security-severity": "7.1",
                "tags": [
                  "security",
                  "CWE-918",
                  "medium"
                ]
              },
              "relationships": [
                {
                  "kinds": [
                    "superset"
                  ],
                  "target": {
                    "guid": "afb16603-8fe4-5bb7-afb1-66038fe45bb7",
                    "id": "CWE-918",
                    "toolComponent": {
                      "name": "CWE"
                    }
                  }
                }
              ],
              "shortDescription": {
                "text": "Server-Side Request Forgery"
              }
            },
            {
              "defaultConfiguration": {
                "level": "warning"
              },
              "fullDescription": {
                "text": "Bare 'catch {}' swallows errors silently — catch specific errors or rethrow at line 101"
              },
              "helpUri": "https://cwe.mitre.org/data/definitions/396.html",
              "id": "CWE-396",
              "name": "CWE396",
              "properties": {
                "precision": "medium",
                "security-severity": "5.0",
                "tags": [
                  "security",
                  "CWE-396",
                  "medium"
                ]
              },
              "relationships": [
                {
                  "kinds": [
                    "superset"
                  ],
                  "target": {
                    "guid": "d972f87a-26eb-9fcb-d972-f87a26eb9fcb",
                    "id": "CWE-396",
                    "toolComponent": {
                      "name": "CWE"
                    }
                  }
                }
              ],
              "shortDescription": {
                "text": "CWE-396"
              }
            },
            {
              "defaultConfiguration": {
                "level": "note"
              },
              "fullDescription": {
                "text": "Path Traversal via readFileSync() at line 53"
              },
              "helpUri": "https://cwe.mitre.org/data/definitions/22.html",
              "id": "CWE-22",
              "name": "PathTraversal",
              "properties": {
                "precision": "medium",
                "security-severity": "2.6",
                "tags": [
                  "security",
                  "CWE-22",
                  "low"
                ]
              },
              "relationships": [
                {
                  "kinds": [
                    "superset"
                  ],
                  "target": {
                    "guid": "b52bf349-4cae-d407-b52b-f3494caed407",
                    "id": "CWE-22",
                    "toolComponent": {
                      "name": "CWE"
                    }
                  }
                }
              ],
              "shortDescription": {
                "text": "Path Traversal"
              }
            },
            {
              "defaultConfiguration": {
                "level": "warning"
              },
              "fullDescription": {
                "text": "Sensitive cookie without HttpOnly flag at line 42"
              },
              "helpUri": "https://cwe.mitre.org/data/definitions/1004.html",
              "id": "CWE-1004",
              "name": "CWE1004",
              "properties": {
                "precision": "medium",
                "security-severity": "4.3",
                "tags": [
                  "security",
                  "CWE-1004",
                  "medium"
                ]
              },
              "relationships": [
                {
                  "kinds": [
                    "superset"
                  ],
                  "target": {
                    "guid": "c495f278-72e4-b955-c495-f27872e4b955",
                    "id": "CWE-1004",
                    "toolComponent": {
                      "name": "CWE"
                    }
                  }
                }
              ],
              "shortDescription": {
                "text": "CWE-1004"
              }
            },
            {
              "defaultConfiguration": {
                "level": "note"
              },
              "fullDescription": {
                "text": "Uncontrolled Resource Consumption via setInterval() at line 21"
              },
              "helpUri": "https://cwe.mitre.org/data/definitions/400.html",
              "id": "CWE-400",
              "name": "UncontrolledResourceConsumption",
              "properties": {
                "precision": "medium",
                "security-severity": "2.0",
                "tags": [
                  "security",
                  "CWE-400",
                  "low"
                ]
              },
              "relationships": [
                {
                  "kinds": [
                    "superset"
                  ],
                  "target": {
                    "guid": "69aacb14-ac72-5c0d-69aa-cb14ac725c0d",
                    "id": "CWE-400",
                    "toolComponent": {
                      "name": "CWE"
                    }
                  }
                }
              ],
              "shortDescription": {
                "text": "Uncontrolled Resource Consumption"
              }
            }
          ],
          "semanticVersion": "3.5.3",
          "version": "3.5.3"
        }
      }
    }
  ],
  "version": "2.1.0"
}