A group of Findings has been pushed to JIRA to be investigated and fixed:

Group: Group 2 in test/product / AdHoc Import - Fri, 12 Apr 2024 13:26:02 / cspodman Scan (SARIF)

Findings:

• Unsanitized Input From an HTTP Header Flows Into _, Where It Is Used as an URL to Perform a Request. This May Result in a Server-Side Request [...]
• Unsanitized Input From Filename Flows Into net.http.NewRequest, Where It Is Used as an URL to Perform a Request. This May Result in a Server- [...]