NitroPack

{
    "slug": "nitropack",
    "finding_count": 12,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "classes/Feature/AjaxShortcodes.php",
            "line": 173,
            "snippet": "$tags = !empty($_POST[\"tags\"]) && is_string($_POST[\"tags\"]) ? json_decode(base64_decode($_POST['tags']), true) : [];",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "functions.php",
            "line": 430,
            "snippet": "$url = base64_decode( $_POST[\"nitroBeaconUrl\"] );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "functions.php",
            "line": 431,
            "snippet": "$cookiesJson = ! empty( $_POST[\"nitroBeaconCookies\"] ) ? base64_decode( $_POST[\"nitroBeaconCookies\"] ) : \"\"; // We need to fall back to empty string to remain backwards compatible. Otherwise cache f",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "functions.php",
            "line": 450,
            "snippet": "$url = base64_decode( $_POST[\"nitroBeaconUrl\"] );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "functions.php",
            "line": 453,
            "snippet": "$np_originalRequestCookies = json_decode( base64_decode( $_POST[\"nitroBeaconCookies\"] ), true );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "nitropack-sdk/bootstrap.php",
            "line": 143,
            "snippet": "$url = base64_decode($_POST[\"nitroBeaconUrl\"]);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "nitropack-sdk/bootstrap.php",
            "line": 144,
            "snippet": "$cookiesJson = !empty($_POST[\"nitroBeaconCookies\"]) ? base64_decode($_POST[\"nitroBeaconCookies\"]) : \"\"; // We need to fall back to empty string to remain backwards compatible. Otherwise cache",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "nitropack-sdk/bootstrap.php",
            "line": 154,
            "snippet": "$url = base64_decode($_POST[\"nitroBeaconUrl\"]);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "nitropack-sdk/bootstrap.php",
            "line": 157,
            "snippet": "NitroPack_CookieStore::$cookies = json_decode(base64_decode($_POST[\"nitroBeaconCookies\"]), true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "nitropack-sdk/NitroPack/SDK/Backlog.php",
            "line": 174,
            "snippet": "return json_decode(base64_decode($entry), true);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "nitropack-sdk/NitroPack/SDK/StorageDriver/Redis.php",
            "line": 137,
            "snippet": "$this->redis->eval('",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "nitropack-sdk/NitroPack/SDK/StorageDriver/Redis.php",
            "line": 231,
            "snippet": "$this->redis->eval('",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "9d96e81abdfd15a7b0cbd257bd7114adb3e18aca"
}