Unverified50% confidenceFactExact time
VICE's security scanning covers high-risk issues such as keys leaked in bundled files, Supabase RLS misconfigurations, exposed API endpoints, weak HTTP headers, and infrastructure configurations.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
8/16/2026
First Seen
Valid until: 11/14/2026
Sources
VICE Platform：独立开发者的AI安全扫描工具评测
Related Claims
UnverifiedHTTP存在三个根本性缺陷：缺乏隐私性、无法验证服务器身份、无法保证消息完整性70% similarUnverifiedLibraries such as tokio-uring must rely on unsafe code and carefully designed APIs to work around the memory safety issues of io_uring.70% similarUnverifiedSecurity researchers discovered security vulnerabilities in the Rabbit R1, including hardcoded API keys.70% similarUnverified攻击载荷会扫描 .npmrc 中的 npm 认证令牌、AWS/GCP/Azure 云凭证、环境变量中的密钥以及 CI/CD 部署密钥68% similarUnverifiedIn BYOK mode, API keys are stored in plaintext in local configuration files, posing a security risk of key leakage67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/759776API
curl https://kongchang.com/api/v1/knowledge/claims/759776MCP
get_claim(id=759776)