security: fix high-severity security issues
Some checks failed
API Endpoint Tests / test-api-endpoints (push) Has been cancelled
Integration Tests / test-service-integration (push) Has been cancelled
Python Tests / test-python (push) Has been cancelled
CLI Tests / test-cli (push) Has been cancelled
Security Scanning / security-scan (push) Has been cancelled

- Remove hardcoded passwords in wallet commands (2 instances)
- Fix SQL injection vectors with parameterized queries (3 instances)
- Replace MD5 hashes with SHA-256 in 14 locations
- Add table name validation in migration scripts
This commit is contained in:
aitbc
2026-04-18 10:42:40 +02:00
parent a8db89f8ef
commit 8424902bee
14 changed files with 34 additions and 20 deletions

View File

@@ -150,7 +150,7 @@ def cache_key_generator(*args, **kwargs) -> str:
# Create hash for consistent key length
key_string = "|".join(key_parts)
return hashlib.md5(key_string.encode()).hexdigest()
return hashlib.sha256(key_string.encode()).hexdigest()
def cached(ttl_seconds: int = 300, key_prefix: str = ""):