Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

PrismML-Eng/Bonsai-demo

https://github.com/PrismML-Eng/Bonsai-demo · scanned 2026-07-23 19:41 UTC (1 month, 2 weeks ago)

256 raw signals (0 security + 256 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 month, 2 weeks ago · v3 · last Δ +0.5 (diff) · 254 actionable findings from 1 signal source. 2 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
77.1
/100
Security checks
77
0 findings
System graph
77
80.0% cov · 254 findings
Critical
2
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: severity: low × excluding tests × Reset all
Severity: Critical 2 High 42 Medium 190 Low 19 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 254 Crowd 0 Layer: Software 5 Security 100 Cicd 1 Quality 1 Dependencies 147
Scan summary Repository scanned at 77.1/100 with 80.0% coverage. It contains 214 nodes across 0 cross-layer flows, written primarily in mixed languages. Engine surfaced 256 findings — concentrated in dependencies (147), security (100), software (5). Risk profile is high: 2 critical, 42 high, 190 medium. Recommended next step: open the dependencies layer findings first — that's where the highest-impact wins live.

Showing 19 of 254 actionable findings. 256 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

low System graph security Trivy conf 1.00 CVE-2025-3000: torch 2.10.0 — uv.lock
A vulnerability classified as critical has been found in PyTorch 2.6.0 ... A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exp…
VulnCve 2025 3000
low System graph security Trivy conf 1.00 CVE-2026-4539: pygments 2.19.2 — uv.lock
pygments: Pygments: Denial of Service via inefficient regular expression processing in AdlLexer A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expr…
VulnCve 2026 4539
low System graph security Trivy conf 1.00 CVE-2026-50269: aiohttp 3.13.5 — uv.lock
aiohttp: AIOHTTP: CRLF injection in multipart headers AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.0, attacker-controlled input included into multipart/payload headers can be used to modify a request to inject additional headers or similar. In the u…
VulnCve 2026 50269
low System graph security Trivy conf 1.00 CVE-2026-53537: python-multipart 0.0.27 — uv.lock
multipart: Python-Multipart: Information disclosure via header parsing discrepancy Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, parse_options_header parsed Content-Disposition (and Content-Type) headers with email.message.Message, which transparently applies RFC 22…
VulnCve 2026 53537
low System graph security Trivy conf 1.00 CVE-2026-53538: python-multipart 0.0.27 — uv.lock
python-multipart: Python-Multipart: Information disclosure due to parser differential in form data handling Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, QuerystringParser treated ; as a field separator in application/x-www-form-urlencoded bodies, in addition to &. …
VulnCve 2026 53538
low System graph security Trivy conf 1.00 CVE-2026-53540: python-multipart 0.0.27 — uv.lock
python-multipart: Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.31, parse_form() did not validate the Content-Length header before using it to bound its chunked read of the request…
VulnCve 2026 53540
low System graph security Trivy conf 1.00 CVE-2026-54275: aiohttp 3.13.5 — uv.lock
aiohttp: AIOHTTP: TLS SNI check bypass via connection reuse AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, the server_hostname TLS SNI check can be bypassed when an existing connection is reused. If an application makes multiple requests to the sam…
VulnCve 2026 54275
low System graph security Trivy conf 1.00 CVE-2026-54279: aiohttp 3.13.5 — uv.lock
aiohttp: AIOHTTP: Host-Only Cookies Become Domain Cookies After CookieJar Persistence AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, host-only cookies that are saved with CookieJar.save() and then restored later with CookieJar.load() lose their hos…
VulnCve 2026 54279
low System graph security Trivy conf 1.00 CVE-2026-54280: aiohttp 3.13.5 — uv.lock
AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ... AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, payload resources are not closed correctly when a client disconnects in the middle of a write. If a payload is using an open f…
VulnCve 2026 54280
low System graph security Trivy conf 1.00 CVE-2026-54282: starlette 0.52.1 — uv.lock
starlette: Starlette: Information disclosure due to improper HTTP request path validation Starlette is a lightweight ASGI framework/toolkit. Prior to 1.3.0, the HTTP request path is not validated before being used to reconstruct request.url. Because request.url is rebuilt by concatenating {scheme}…
VulnCve 2026 54282
low System graph quality Debug conf 1.00 Debug logging residue appears in source files
Found 14 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup.
CleanupRepo hardeningGenerated repo pattern
low System graph cicd CI/CD security conf 1.00 3 occurrences GitHub Action is tag-pinned rather than SHA-pinned
actions/cache@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
3 files, 3 locations
.github/workflows/build-from-source-smoke.yml:30
.github/workflows/check-no-em-dashes.yml:21
.github/workflows/manual-platform-smoke.yml:66
CI/CD securitySupply chainGithub actions
low System graph software Dead code conf 1.00 Possibly dead Python function: execute_code
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
scripts/openwebui/tool_code_interpreter.py:150
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_data
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
scripts/openwebui/tool_web_fetch.py:135
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_startendtag
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
scripts/openwebui/tool_web_fetch.py:131
low System graph software Dead code conf 1.00 Possibly dead Python function: redirect_request
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
scripts/openwebui/tool_web_fetch.py:214
low System graph software Dead code conf 1.00 Possibly dead Python function: stream
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
scripts/openwebui/filter_mlx_stream.py:9
low System graph security Skillspector conf 0.70 SkillSpector EA3 (excessive-agency) in LICENSE
not limited to Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface. Skill: unknown Rule: EA3 Category: excessive-agency Severity: LOW Confidence: 0.70 Remediat…
LICENSE:27 Mcp skillExcessive agencyEa3
low System graph security Skillspector conf 0.15 SkillSpector TM1 (tool-misuse) in community-benchmarks/ternary-bonsai/cuda-rtx5060ti-linux.md
rm --gpus all -e CUDA_VISIBLE_DEVICES=$GPU -v "$D":/w nvidia/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: unknown Rule: TM1 Category: tool-misuse Severity: LOW …
community-benchmarks/ternary-bonsai/cuda-rtx5060ti-linux.md:17 Mcp skillTool misuseTm1
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/9cd6981e-5ccf-49ce-a07a-6fec118684e2/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/9cd6981e-5ccf-49ce-a07a-6fec118684e2/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.