Naser Mansour 1b66e0b6ff Add full-codebase security report
First full scan (no docs/security-kb.md yet). 2 High, 3 Medium, 3 Low,
4 Informational findings — most notable: national_id stored/exported in
plaintext despite architecture.md claiming encryption, and a confirmed
CVE (CVE-2026-48019, CVSS 8.9) affecting the installed laravel/framework
12.43.1 via the guest-booking form's Mail::to() call. Report only — no
fixes applied, per the security-scan skill's non-capabilities.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-27 22:13:54 +03:00
2025-12-20 20:26:03 +02:00
2026-01-09 18:45:17 +02:00
2026-09-27 22:13:54 +03:00
2026-01-28 17:06:11 +02:00
2026-01-17 12:46:17 +02:00
2025-12-20 20:26:03 +02:00
2025-12-20 20:26:03 +02:00
2026-01-02 23:14:53 +02:00
2025-12-20 20:26:03 +02:00
2025-12-20 20:26:03 +02:00
2025-12-20 20:26:03 +02:00
2025-12-20 20:26:03 +02:00
2025-12-20 20:26:03 +02:00
2025-12-20 20:26:03 +02:00
2025-12-20 20:26:03 +02:00
2025-12-20 20:26:03 +02:00
2025-12-29 00:47:33 +02:00
2025-12-20 20:26:03 +02:00
S
Description
No description provided
7.9 MiB
Languages
PHP 59.5%
Blade 36.9%
CSS 3.1%
JavaScript 0.5%