🔒 Information Disclosure vulnerabilities found in 1 file

[github-actions]

Security Vulnerability Report

Type: Information Disclosure
Severity: MEDIUM
Total Instances: 1
Affected Files: 1

Security Classification

• CWE: CWE-778
• OWASP: A09:2021 - Security Logging and Monitoring Failures
• Confidence: 80%

Description

This type of vulnerability can compromise the security of your application.

Affected Files

app/controllers/users_controller.rb

• Line 77: Detects missing security event logging that could prevent incident detection and investigation

  redirect_to(root_url) unless current_user?(@user)

Recommendation

Review and fix the identified vulnerabilities according to security best practices.

---

This issue was automatically generated by RSOLV security scanner
Repository: arubis/sample_rails_app
Branch: master
Scan Date: 2026-03-29T20:11:09.301Z

To dismiss this finding, add one of these labels:
rsolv:false-positive · rsolv:wont-fix · rsolv:accepted-risk · rsolv:deferred