Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
64 of your 284 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 3.76s · analysis 42.07s · 4.0 MB · GitHub API rate-limit (preflight)

google-research/timesfm

https://github.com/google-research/timesfm.git · scanned 2026-06-19 22:18 UTC (1 month, 1 week ago) · 10 languages

455 raw signals (256 security + 199 graph) 5th percentile · Python · small (2-20K LoC)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 month, 1 week ago · v1 · 392 actionable findings from 2 signal sources. 63 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
59.7
/100
Security checks
68
217 findings
System graph
51
50.0% cov · 175 findings
Critical
12
click to filter
Agents
10
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 100.0 0.15 15.00
security_score 53.0 0.25 13.25
testing_score 63.0 0.20 12.60
documentation_score 84.0 0.15 12.60
practices_score 67.0 0.15 10.05
code_quality 39.0 0.10 3.90
Overall 1.00 67.4
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 12 High 174 Medium 106 Low 66 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 217 System graph 175 Crowd 0 Layer: Software 191 Security 147 Quality 53 Cicd 1
Scan summary Repository scanned at 51.3/100 with 50.0% coverage. It contains 559 nodes across 0 cross-layer flows, written primarily in mixed languages. Engine surfaced 199 findings — concentrated in security (153), quality (24), software (20). Risk profile is high: 6 critical, 81 high, 57 medium. Recommended next step: open the security layer findings first — that's where the highest-impact wins live.

Showing 358 of 392 actionable findings. 455 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

critical Security checks software dependencies conf 0.88 h11: GHSA-vqfr-h8mv-ghfj
h11 accepts some malformed Chunked-Encoding bodies
v1/poetry.lock
critical Security checks software dependencies conf 0.88 jupyter-server: GHSA-fcw5-x6j4-ccmp
Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
v1/poetry.lock
critical Security checks software dependencies conf 0.88 keras: GHSA-x4wf-678h-2pmq
Keras code injection vulnerability
v1/poetry.lock
high Security checks quality Quality conf 1.00 ✓ Repobility Missing import: `stat` used but not imported
The file uses `stat.something(...)` but never imports `stat`. This raises NameError at runtime the first time the line executes.
timesfm-forecasting/scripts/check_system.py:164
critical Security checks software dependencies conf 0.88 nltk: GHSA-7p94-766c-hgjp
NLTK has a Zip Slip Vulnerability
v1/poetry.lock
critical Security checks software dependencies conf 0.88 tensorflow: GHSA-gw97-ff7c-9v96
TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation
v1/poetry.lock
critical Security checks software dependencies conf 0.88 torch: GHSA-53q9-r3pm-6pq6
PyTorch: `torch.load` with `weights_only=True` leads to remote code execution
v1/poetry.lock
critical System graph security Trivy conf 1.00 CVE-2023-25668: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25668 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can access heap memory which is not in the control of user, leading to a crash or remote code execution. The …
VulnCve 2023 25668
critical System graph security Trivy conf 1.00 CVE-2024-3660: keras 2.9.0 — v1/poetry.lock
A arbitrary code injection vulnerability in TensorFlow's Keras framewo ... A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective o…
VulnCve 2024 3660
critical System graph security Trivy conf 1.00 CVE-2025-14009: nltk 3.9.1 — v1/poetry.lock
nltk: Zip Slip Vulnerability in nltk Leading to Code Execution A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions. The _unzip_iter function in nltk/downloader.py uses zipfile.extractall() without performing path validation or security checks. This…
VulnCve 2025 14009
critical System graph security Trivy conf 1.00 CVE-2025-32434: torch 2.3.1 — v1/poetry.lock
PyTorch is a Python package that provides tensor computation with stro ... PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command Execution (RCE) vulnerab…
VulnCve 2025 32434
critical System graph security Trivy conf 1.00 CVE-2025-43859: h11 0.14.0 — v1/poetry.lock
h11: h11 accepts some malformed Chunked-Encoding bodies h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of line terminators in chunked-coding message bodies can lead to request smuggling vulnerabilities under certain conditions. This issue has been …
VulnCve 2025 43859
critical System graph security Trivy conf 1.00 CVE-2026-44727: jupyter-server 2.15.0 — v1/poetry.lock
Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP The nbconvert HTTP handlers in jupyter_server render user-authored notebook HTML under the Jupyter origin without a sandbox directive in their `Content-Security-Policy`. Combined with `nbconv…
VulnCve 2026 44727
high Security checks quality Quality conf 1.00 ✓ Repobility 25 occurrences `self.stacked_transformer_layer` used but never assigned in __init__
Method `transform_decode_state` of class `PatchedTimeSeriesDecoder` reads `self.stacked_transformer_layer`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance.
3 files, 25 locations
v1/src/timesfm/timesfm_jax.py:62, 63, 70, 71, 78, 86, 87, 88, +7 more (20 hits)
v1/src/timesfm/patched_decoder.py:291, 342, 538 (3 hits)
v1/src/timesfm/xreg_lib.py:450 (2 hits)
high Security checks software dependencies conf 0.88 gitpython: GHSA-7545-fcxq-7j24
GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository
v1/poetry.lock
high Security checks software dependencies conf 0.88 gitpython: GHSA-mv93-w799-cj2w
GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath
v1/poetry.lock
high Security checks software dependencies conf 0.88 gitpython: GHSA-v87r-6q3f-2j67
GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath
v1/poetry.lock
high Security checks software dependencies conf 0.88 gitpython: GHSA-x2qx-6953-8485
GitPython: Unsafe option check validates multi_options before shlex.split transformation
v1/poetry.lock
high Security checks software dependencies conf 0.88 idna: PYSEC-2026-215
Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as `"\u0660" * N` or `"\u30fb" * N + "\u6f22"` utilize the `valid_contexto`…
v1/poetry.lock
high Security checks software dependencies conf 0.88 idna: PYSEC-2026-215
Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as `"\u0660" * N` or `"\u30fb" * N + "\u6f22"` utilize the `valid_contexto`…
requirements.txt
high Security checks software dependencies conf 0.88 jupyter-core: GHSA-33p9-3p43-82vq
Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
v1/poetry.lock
high Security checks software dependencies conf 0.88 jupyter-server: GHSA-24qx-w28j-9m6p
Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat` (from huntr)
v1/poetry.lock
high Security checks software dependencies conf 0.88 jupyter-server: PYSEC-2026-67
Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17.0, the next query parameter in the login flow is insufficiently validated in `LoginFormHandler._redirect_safe()`, which allows redirects to arbitrary external domains via values such as `///example.c…
v1/poetry.lock
high Security checks software dependencies conf 0.88 jupyter-server: PYSEC-2026-68
Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the REST API allows an authenticated user to escape the configured root_dir and access sibling directories whose names begin with the same prefix as the root_dir. For exampl…
v1/poetry.lock
high Security checks software dependencies conf 0.88 jupyter-server: PYSEC-2026-69
Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the secret used to sign authentication cookies is persisted to a static file at ~/.local/share/jupyter/runtime/jupyter_cookie_secret and is never rotated when a user changes their password. After a password …
v1/poetry.lock
high Security checks software dependencies conf 0.88 jupyterlab: GHSA-mqcg-5x36-vfcg
JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content
v1/poetry.lock
high Security checks software dependencies conf 0.88 jupyterlab: GHSA-rch3-82jr-f9w9
Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS
v1/poetry.lock
high Security checks software dependencies conf 0.88 jupyterlab: PYSEC-2026-164
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager (allowed_extensions_uris) is not correctly enforced by JupyterLab. The …
v1/poetry.lock
high Security checks software dependencies conf 0.88 keras: GHSA-36fq-jgmw-4r9c
Keras is vulnerable to Deserialization of Untrusted Data
v1/poetry.lock
high Security checks software dependencies conf 0.88 keras: GHSA-4f3f-g24h-fr8m
Keras has an untrusted deserialization vulnerability
v1/poetry.lock
high Security checks software dependencies conf 0.88 keras: GHSA-hjqc-jx6g-rwp9
Keras Directory Traversal Vulnerability
v1/poetry.lock
high Security checks software dependencies conf 0.88 keras: PYSEC-2025-121
An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function.
v1/poetry.lock
high Security checks software dependencies conf 0.88 lxml: PYSEC-2026-87
lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input to read local files. Setting the resolve_entities option explicitly to resolve_entities='interna…
v1/poetry.lock
high Security checks software dependencies conf 0.88 markdown: PYSEC-2026-89
Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Because Python-Markdown does not catch this exception, any application that processes attacker-controlled Markdown m…
v1/poetry.lock
high Security checks software dependencies conf 0.88 mistune: GHSA-8mp2-v27r-99xp
Mistune has a ReDoS in LINK_TITLE_RE that allows denial of service via crafted Markdown input
v1/poetry.lock
high Security checks software dependencies conf 0.88 mistune: PYSEC-2026-168
Mistune is a Python Markdown parser with renderers and plugins. In 3.2.0 and realier, in src/mistune/directives/image.py, the render_figure() function concatenates figclass and figwidth options directly into HTML attributes without escaping. This allows attribute injection and XSS even when HTMLRen…
v1/poetry.lock
high Security checks software dependencies conf 0.88 msgpack: GHSA-6v7p-g79w-8964
MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error
v1/poetry.lock
high Security checks software dependencies conf 0.88 nbconvert: GHSA-xm59-rqc7-hhvf
nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
v1/poetry.lock
high Security checks software dependencies conf 0.88 nltk: GHSA-469j-vmhf-r6v7
NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite
v1/poetry.lock
high Security checks software dependencies conf 0.88 nltk: GHSA-jm6w-m3j8-898g
Unauthenticated remote shutdown in nltk.app.wordnet_app
v1/poetry.lock
high Security checks software dependencies conf 0.88 nltk: GHSA-p4gq-832x-fm9v
Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read
v1/poetry.lock
high Security checks software dependencies conf 0.88 nltk: PYSEC-2026-97
A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by…
v1/poetry.lock
high Security checks software dependencies conf 0.88 nltk: PYSEC-2026-98
A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classes fail to properly sanitize or validate file paths, enabling attac…
v1/poetry.lock
high Security checks software dependencies conf 0.88 nltk: PYSEC-2026-99
NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verification or sandboxing. An attacker can supply or replace the JAR file, enabling the execution of arbi…
v1/poetry.lock
high Security checks software dependencies conf 0.88 notebook: GHSA-mqcg-5x36-vfcg
JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content
v1/poetry.lock
high Security checks software dependencies conf 0.88 notebook: GHSA-rch3-82jr-f9w9
Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS
v1/poetry.lock
high Security checks quality Quality conf 1.00 ✓ Repobility Phantom test coverage: test_df
Test function `test_df` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line coverage without verifying anything.
v1/experiments/extended_benchmarks/utils.py:169
high Security checks quality Quality conf 1.00 ✓ Repobility Phantom test coverage: test_val_gen
Test function `test_val_gen` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line coverage without verifying anything.
v1/src/timesfm/data_loader.py:179
high Security checks software dependencies conf 0.88 pillow: GHSA-cfh3-3jmp-rvhc
Pillow affected by out-of-bounds write when loading PSD images
v1/poetry.lock
high Security checks software dependencies conf 0.88 pillow: GHSA-pwv6-vv43-88gr
Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)
v1/poetry.lock
high Security checks software dependencies conf 0.88 pillow: GHSA-whj4-6x5x-4v2j
FITS GZIP decompression bomb in Pillow
v1/poetry.lock
high Security checks software dependencies conf 0.88 pillow: PYSEC-2026-165
Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This issue has been patched in version 12.2.0.
v1/poetry.lock
high Security checks software dependencies conf 0.88 protobuf: GHSA-7gcm-g887-7qv7
protobuf affected by a JSON recursion depth bypass
v1/poetry.lock
high Security checks software dependencies conf 0.88 protobuf: GHSA-8qvm-5x2c-j2w7
protobuf-python has a potential Denial of Service issue
v1/poetry.lock
high Security checks software dependencies conf 0.88 pyasn1: GHSA-63vm-454h-vhhq
pyasn1 has a DoS vulnerability in decoder
v1/poetry.lock
high Security checks software dependencies conf 0.88 pyasn1: GHSA-jr27-m4p2-rc6r
Denial of Service in pyasn1 via Unbounded Recursion
v1/poetry.lock
high Security checks software dependencies conf 0.88 sentencepiece: GHSA-38vq-g6vr-w8wf
Sentencepiece has a a heap overflow issue
v1/poetry.lock
high Security checks software dependencies conf 0.88 setuptools: PYSEC-2025-49
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with…
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-49rq-hwc3-x77w
TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-558h-mq8x-7q9g
TensorFlow has Null Pointer Error in SparseSparseMaximum
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-5w96-866f-6rm8
TensorFlow has Floating Point Exception in TFLite in conv kernel
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-647v-r7qq-24fh
TensorFlow has Floating Point Exception in TensorListSplit with XLA
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-64jg-wjww-7c5w
TensorFlow has Null Pointer Error in TensorArrayConcatV2
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-68v3-g9cm-rmm6
TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-6hg6-5c2q-7rcr
TensorFlow has Heap-buffer-overflow in AvgPoolGrad
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-6wfh-89q8-44jq
TensorFlow has null dereference on ParallelConcat with XLA
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-7jvm-xxmr-v5cw
TensorFlow vulnerable to integer overflow in EditDistance
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-7x4v-9gxg-9hwj
TensorFlow has Segfault in Bincount with XLA
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-93vr-9q9m-pj8p
TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-94mm-g2mv-8p7r
TensorFlow has Null Pointer Error in LookupTableImportV2
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-f49c-87jh-g47q
TensorFlow has double free in Fractional(Max/Avg)Pool
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-f637-vh3r-vfh2
TensorFlow has Floating Point Exception in AudioSpectrogram
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-gf97-q72m-7579
TensorFlow has Null Pointer Error in RandomShuffle with XLA enable
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-gjh7-xx4r-x345
TensorFlow has segfault in array_ops.upper_bound
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-j5w9-hmfh-4cr6
TensorFlow has segmentation fault in tfg-translate
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-qjqc-vqcf-5qvj
TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
v1/poetry.lock
high Security checks software dependencies conf 0.88 tensorflow: GHSA-rcf8-g8jv-vg6p
TensorFlow has Floating Point Exception in AvgPoolGrad with XLA
v1/poetry.lock
high Security checks software dependencies conf 0.88 torch: PYSEC-2024-259
In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this is intended behavior in PyTorch distributed computing.
v1/poetry.lock
high Security checks software dependencies conf 0.88 torch: PYSEC-2025-191
A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnn_max_pool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be u…
v1/poetry.lock
high Security checks software dependencies conf 0.88 torch: PYSEC-2025-198
In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.
v1/poetry.lock
high Security checks software dependencies conf 0.88 torch: PYSEC-2025-203
An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.
v1/poetry.lock
high Security checks software dependencies conf 0.88 torch: PYSEC-2025-204
pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together.
v1/poetry.lock
high Security checks software dependencies conf 0.88 torch: PYSEC-2025-205
A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).
v1/poetry.lock
high Security checks software dependencies conf 0.88 torch: PYSEC-2025-206
pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().
v1/poetry.lock
high Security checks software dependencies conf 0.88 torch: PYSEC-2025-207
A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).
v1/poetry.lock
high Security checks software dependencies conf 0.88 torch: PYSEC-2025-208
A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Inductor, leading to a Denial of Service (DoS).
v1/poetry.lock
high Security checks software dependencies conf 0.88 torch: PYSEC-2025-209
An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.
v1/poetry.lock
high Security checks software dependencies conf 0.88 torch: PYSEC-2026-139
A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project …
v1/poetry.lock
high Security checks software dependencies conf 0.88 tornado: GHSA-3x9g-8vmp-wqvf
Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient
v1/poetry.lock
high Security checks software dependencies conf 0.88 tornado: GHSA-7cx3-6m66-7c5m
Tornado vulnerable to excessive logging caused by malformed multipart form data
v1/poetry.lock
high Security checks software dependencies conf 0.88 tornado: GHSA-fqwm-6jpj-5wxc
Tornado has cookie attribute injection via .RequestHandler.set_cookie
v1/poetry.lock
high Security checks software dependencies conf 0.88 tornado: GHSA-mgf9-4vpg-hj56
tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)
v1/poetry.lock
high Security checks software dependencies conf 0.88 tornado: PYSEC-2026-140
Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data is the max_body_size setting (default 100MB). Since parsing occurs synchronously on the main thread, this creates the possibilit…
v1/poetry.lock
high Security checks software dependencies conf 0.88 transformers: PYSEC-2024-227
Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in tha…
v1/poetry.lock
high Security checks software dependencies conf 0.88 transformers: PYSEC-2024-228
Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability i…
v1/poetry.lock
high Security checks software dependencies conf 0.88 transformers: PYSEC-2024-229
Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that…
v1/poetry.lock
high Security checks software dependencies conf 0.88 transformers: PYSEC-2025-211
Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in…
v1/poetry.lock
high Security checks software dependencies conf 0.88 transformers: PYSEC-2025-212
Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerabili…
v1/poetry.lock
high Security checks software dependencies conf 0.88 transformers: PYSEC-2025-213
Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in t…
v1/poetry.lock
high Security checks software dependencies conf 0.88 transformers: PYSEC-2025-214
Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target…
v1/poetry.lock
high Security checks software dependencies conf 0.88 transformers: PYSEC-2025-215
Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the targ…
v1/poetry.lock
high Security checks software dependencies conf 0.88 transformers: PYSEC-2025-216
Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the tar…
v1/poetry.lock
high Security checks software dependencies conf 0.88 transformers: PYSEC-2025-217
Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vul…
v1/poetry.lock
high Security checks software dependencies conf 0.88 transformers: PYSEC-2025-218
Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the t…
v1/poetry.lock
high Security checks software dependencies conf 0.88 transformers: PYSEC-2025-40
A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) attack. The regular expression used to process code blocks in docstrings contains nested quantifiers…
v1/poetry.lock
high Security checks software dependencies conf 0.88 urllib3: GHSA-2xpw-w6gg-jr37
urllib3 streaming API improperly handles highly compressed data
v1/poetry.lock
high Security checks software dependencies conf 0.88 urllib3: GHSA-38jv-5279-wg99
Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)
v1/poetry.lock
high Security checks software dependencies conf 0.88 urllib3: GHSA-gm62-xv2j-4w53
urllib3 allows an unbounded number of links in the decompression chain
v1/poetry.lock
high Security checks software dependencies conf 0.88 urllib3: PYSEC-2026-141
urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.
v1/poetry.lock
high Security checks software dependencies conf 0.88 wheel: GHSA-8rrh-rw8j-w5fx
Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack
v1/poetry.lock
high System graph security Trivy conf 1.00 CVE-2023-25658: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25658 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, an out of bounds read is in GRUBlockCellGrad. A fix is included in TensorFlow 2.12.0 and 2.11.1. Package: tensorflow Install…
VulnCve 2023 25658
high System graph security Trivy conf 1.00 CVE-2023-25659: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25659 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the parameter `indices` for `DynamicStitch` does not match the shape of the parameter `data`, it can trigger an stack OOB …
VulnCve 2023 25659
high System graph security Trivy conf 1.00 CVE-2023-25660: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25660 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when the parameter `summarize` of `tf.raw_ops.Print` is zero, the new method `SummarizeArray<bool>` will reference to a nullp…
VulnCve 2023 25660
high System graph security Trivy conf 1.00 CVE-2023-25662: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25662 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 are vulnerable to integer overflow in EditDistance. A fix is included in TensorFlow version 2.12.0 and version 2.11.1. Packag…
VulnCve 2023 25662
high System graph security Trivy conf 1.00 CVE-2023-25663: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25663 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `ctx->step_containter()` is a null ptr, the Lookup function will be executed with a null pointer. A fix is included in T…
VulnCve 2023 25663
high System graph security Trivy conf 1.00 CVE-2023-25664: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25664 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a heap buffer overflow in TAvgPoolGrad. A fix is included in TensorFlow 2.12.0 and 2.11.1. Package: tensorflow Inst…
VulnCve 2023 25664
high System graph security Trivy conf 1.00 CVE-2023-25665: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25665 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `SparseSparseMaximum` is given invalid sparse tensors as inputs, it can give a null pointer error. A fix is included in …
VulnCve 2023 25665
high System graph security Trivy conf 1.00 CVE-2023-25666: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25666 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a floating point exception in AudioSpectrogram. A fix is included in TensorFlow version 2.12.0 and version 2.11.1. …
VulnCve 2023 25666
high System graph security Trivy conf 1.00 CVE-2023-25669: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25669 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the stride and window size are not positive for `tf.raw_ops.AvgPoolGrad`, it can give a floating point exception. A fix is…
VulnCve 2023 25669
high System graph security Trivy conf 1.00 CVE-2023-25670: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25670 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a null point error in QuantizedMatMulWithBiasAndDequantize with MKL enabled. A fix is included in TensorFlow version 2.12…
VulnCve 2023 25670
high System graph security Trivy conf 1.00 CVE-2023-25671: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25671 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source platform for machine learning. There is out-of-bounds access due to mismatched integer type sizes. A fix is included in TensorFlow version 2.12.0 and version 2.11.1. Package: tensorflow Instal…
VulnCve 2023 25671
high System graph security Trivy conf 1.00 CVE-2023-25672: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25672 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source platform for machine learning. The function `tf.raw_ops.LookupTableImportV2` cannot handle scalars in the `values` parameter and gives an NPE. A fix is included in TensorFlow version 2.12.0 and…
VulnCve 2023 25672
high System graph security Trivy conf 1.00 CVE-2023-25673: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25673 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a Floating Point Exception in TensorListSplit with XLA. A fix is included in TensorFlow version 2.12.0 and version 2.11.1…
VulnCve 2023 25673
high System graph security Trivy conf 1.00 CVE-2023-25674: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25674 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source machine learning platform. Versions prior to 2.12.0 and 2.11.1 have a null pointer error in RandomShuffle with XLA enabled. A fix is included in TensorFlow 2.12.0 and 2.11.1. Package: tensorfl…
VulnCve 2023 25674
high System graph security Trivy conf 1.00 CVE-2023-25675: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25675 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.Bincount` segfaults when given a parameter `weights` that is neither the same shape as paramete…
VulnCve 2023 25675
high System graph security Trivy conf 1.00 CVE-2023-25676: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25676 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.ParallelConcat` segfaults with a nullptr dereference when given a parameter `shape` with rank t…
VulnCve 2023 25676
high System graph security Trivy conf 1.00 CVE-2023-25801: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25801 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1, `nn_ops.fractional_avg_pool_v2` and `nn_ops.fractional_max_pool_v2` require the first and fourth elements of their parameter `poo…
VulnCve 2023 25801
high System graph security Trivy conf 1.00 CVE-2023-27579: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-27579 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an end-to-end open source platform for machine learning. Constructing a tflite model with a paramater `filter_input_channel` of less than 1 gives a FPE. This issue has been patched in version 2.12. TensorFlow…
VulnCve 2023 27579
high System graph security Trivy conf 1.00 CVE-2023-33976: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-33976 affecting package tensorflow for versions less than 2.11.1-2 TensorFlow is an end-to-end open source platform for machine learning. `array_ops.upper_bound` causes a segfault when not given a rank 2 tensor. The fix will be included in TensorFlow 2.13 and will also cherrypick this com…
VulnCve 2023 33976
high System graph security Trivy conf 1.00 CVE-2024-11392: transformers 4.47.1 — v1/poetry.lock
transformers: Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary cod…
VulnCve 2024 11392
high System graph security Trivy conf 1.00 CVE-2024-11393: transformers 4.47.1 — v1/poetry.lock
transformers: Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb…
VulnCve 2024 11393
high System graph security Trivy conf 1.00 CVE-2024-11394: transformers 4.47.1 — v1/poetry.lock
transformers: Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code …
VulnCve 2024 11394
high System graph security Trivy conf 1.00 CVE-2025-12060: keras 2.9.0 — v1/poetry.lock
keras: Keras Path Traversal Vulnerability The keras.utils.get_file API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The utility uses Python's tarfile.extractall function without the filter="data" feature. A remote attacker can craft a…
VulnCve 2025 12060
high System graph security Trivy conf 1.00 CVE-2025-30167: jupyter-core 5.7.2 — v1/poetry.lock
Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared `%PROGRAMDATA%` directory is searched for con…
VulnCve 2025 30167
high System graph security Trivy conf 1.00 CVE-2025-4565: protobuf 3.19.6 — v1/poetry.lock
python-protobuf: Unbounded recursion in Python Protobuf Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion l…
VulnCve 2025 4565
high System graph security Trivy conf 1.00 CVE-2025-47273: setuptools 75.6.0 — v1/poetry.lock
setuptools: Path Traversal Vulnerability in setuptools PackageIndex setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be…
VulnCve 2025 47273
high System graph security Trivy conf 1.00 CVE-2025-47287: tornado 6.4.2 — v1/poetry.lock
tornado: Tornado Multipart Form-Data Denial of Service Tornado is a Python web framework and asynchronous networking library. When Tornado's ``multipart/form-data`` parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attac…
VulnCve 2025 47287
high System graph security Trivy conf 1.00 CVE-2025-53000: nbconvert 7.16.4 — v1/poetry.lock
nbconvert: nbconvert: Arbitrary code execution via malicious SVG to PDF conversion on Windows The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions of nbconvert up to and including 7.16.6 on Windows have a vulnerability in which co…
VulnCve 2025 53000
high System graph security Trivy conf 1.00 CVE-2025-66418: urllib3 2.3.0 — v1/poetry.lock
urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimi…
VulnCve 2025 66418
high System graph security Trivy conf 1.00 CVE-2025-66471: urllib3 2.3.0 — v1/poetry.lock
urllib3: urllib3 Streaming API improperly handles highly compressed data urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handlin…
VulnCve 2025 66471
high System graph security Trivy conf 1.00 CVE-2025-9906: keras 2.9.0 — v1/poetry.lock
keras: Arbitrary Code execution in Keras Safe Mode The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True. One can create a specially crafted .keras model archive that, when loaded via Model.load_model, will trigger arbitrary code to be ex…
VulnCve 2025 9906
high System graph security Trivy conf 1.00 CVE-2026-0846: nltk 3.9.1 — v1/poetry.lock
nltk: NLTK: Arbitrary file read via improper path validation in `filestring()` function A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified b…
VulnCve 2026 0846
high System graph security Trivy conf 1.00 CVE-2026-0847: nltk 3.9.1 — v1/poetry.lock
nltk: NLTK: Arbitrary file read via path traversal vulnerability A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classe…
VulnCve 2026 0847
high System graph security Trivy conf 1.00 CVE-2026-0994: protobuf 3.19.6 — v1/poetry.lock
python: protobuf: Protobuf: Denial of Service due to recursion depth bypass A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing rec…
VulnCve 2026 0994
high System graph security Trivy conf 1.00 CVE-2026-1260: sentencepiece 0.1.99 — v1/poetry.lock
sentencepiece: Sentencepiece: Invalid memory access leading to potential arbitrary code execution via a crafted model file. Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure. Package: sentencep…
VulnCve 2026 1260
high System graph security Trivy conf 1.00 CVE-2026-1462: keras 2.9.0 — v1/poetry.lock
keras: Keras: Arbitrary Code Execution Vulnerability Bypassing Safe Mode A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of `.keras` models, even when `safe_mode=True`. This bypas…
VulnCve 2026 1462
high System graph security Trivy conf 1.00 CVE-2026-21441: urllib3 2.3.0 — v1/poetry.lock
urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loadin…
VulnCve 2026 21441
high System graph security Trivy conf 1.00 CVE-2026-23490: pyasn1 0.6.1 — v1/poetry.lock
pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnera…
VulnCve 2026 23490
high System graph security Trivy conf 1.00 CVE-2026-24049: wheel 0.45.1 — v1/poetry.lock
wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mi…
VulnCve 2026 24049
high System graph security Trivy conf 1.00 CVE-2026-25990: pillow 11.0.0 — v1/poetry.lock
pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1. Package: pillow Installed: 11.0.0 Fixed …
VulnCve 2026 25990
high System graph security Trivy conf 1.00 CVE-2026-30922: pyasn1 0.6.1 — v1/poetry.lock
pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An at…
VulnCve 2026 30922
high System graph security Trivy conf 1.00 CVE-2026-31958: tornado 6.4.2 — v1/poetry.lock
tornado-python: Tornado: Denial of Service via large multipart bodies Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data is the max_body_size setting (default 100MB). Since parsi…
VulnCve 2026 31958
high System graph security Trivy conf 1.00 CVE-2026-33079: mistune 3.1.0 — v1/poetry.lock
mistune: Mistune: Regular Expression Denial of Service (ReDoS) via crafted Markdown input In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial of Service) vulnerability in `LINK_TITLE_RE` that allows an attacker who can supply Markdown for parsing to cause deni…
VulnCve 2026 33079
high System graph security Trivy conf 1.00 CVE-2026-33231: nltk 3.9.1 — v1/poetry.lock
nltk: NLTK: Denial of Service via unauthenticated remote shutdown NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, `nltk.app.wordnet_app` allows unauth…
VulnCve 2026 33231
high System graph security Trivy conf 1.00 CVE-2026-33236: nltk 3.9.1 — v1/poetry.lock
nltk: NLTK: Arbitrary file overwrite and creation via path traversal in XML index files NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, the NLTK downl…
VulnCve 2026 33236
high System graph security Trivy conf 1.00 CVE-2026-35397: jupyter-server 2.15.0 — v1/poetry.lock
Jupyter Server is the backend for Jupyter web applications. In version ... Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the REST API allows an authenticated user to escape the configured root_dir and access sibling di…
VulnCve 2026 35397
high System graph security Trivy conf 1.00 CVE-2026-35536: tornado 6.4.2 — v1/poetry.lock
tornado: Tornado: Cookie attribute injection due to improper handling of cookie arguments In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for crafted characters. Package: tornado Instal…
VulnCve 2026 35536
high System graph security Trivy conf 1.00 CVE-2026-40110: jupyter-server 2.15.0 — v1/poetry.lock
jupyter-server: Jupyter Server: Cross-Origin Resource Sharing (CORS) bypass via improper Origin header validation Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Python's re.match() to check incoming origins against the …
VulnCve 2026 40110
high System graph security Trivy conf 1.00 CVE-2026-40171: jupyterlab 4.3.4 — v1/poetry.lock
In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions ... In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-…
VulnCve 2026 40171
high System graph security Trivy conf 1.00 CVE-2026-40171: notebook 7.3.2 — v1/poetry.lock
In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions ... In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-…
VulnCve 2026 40171
high System graph security Trivy conf 1.00 CVE-2026-40192: pillow 11.0.0 — v1/poetry.lock
Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks. A specially c…
VulnCve 2026 40192
high System graph security Trivy conf 1.00 CVE-2026-40934: jupyter-server 2.15.0 — v1/poetry.lock
jupyter-server: Jupyter Server: Authentication bypass due to unrotated cookie secret Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the secret used to sign authentication cookies is persisted to a static file at ~/.local/share/jupyter/runtime/jupyter_co…
VulnCve 2026 40934
high System graph security Trivy conf 1.00 CVE-2026-41066: lxml 5.3.0 — v1/poetry.lock
lxml: python: lxml: Information disclosure via untrusted XML input leading to local file read lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input t…
VulnCve 2026 41066
high System graph security Trivy conf 1.00 CVE-2026-42215: gitpython 3.1.43 — v1/poetry.lock
GitPython is a python library used to interact with Git repositories. ... GitPython is a python library used to interact with Git repositories. From version 3.1.30 to before version 3.1.47, GitPython blocks dangerous Git options such as --upload-pack and --receive-pack by default, but the equival…
VulnCve 2026 42215
high System graph security Trivy conf 1.00 CVE-2026-42266: jupyterlab 4.3.4 — v1/poetry.lock
JupyterLab is an extensible environment for interactive and reproducib ... JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Man…
VulnCve 2026 42266
high System graph security Trivy conf 1.00 CVE-2026-42284: gitpython 3.1.43 — v1/poetry.lock
GitPython is a python library used to interact with Git repositories. ... GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes shlex.split(" ".join(multi_options)). A string like "--bran…
VulnCve 2026 42284
high System graph security Trivy conf 1.00 CVE-2026-42311: pillow 11.0.0 — v1/poetry.lock
Pillow is a Python imaging library. From version 10.3.0 to before vers ... Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. This issue has…
VulnCve 2026 42311
high System graph security Trivy conf 1.00 CVE-2026-42557: jupyterlab 4.3.4 — v1/poetry.lock
jupyterlab: JupyterLab: Arbitrary code execution via deceptive button in HTML output jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and…
VulnCve 2026 42557
high System graph security Trivy conf 1.00 CVE-2026-42557: notebook 7.3.2 — v1/poetry.lock
jupyterlab: JupyterLab: Arbitrary code execution via deceptive button in HTML output jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and…
VulnCve 2026 42557
high System graph security Trivy conf 1.00 CVE-2026-44243: gitpython 3.1.43 — v1/poetry.lock
GitPython is a python library used to interact with Git repositories. ... GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path to an application using GitPython to write…
VulnCve 2026 44243
high System graph security Trivy conf 1.00 CVE-2026-44244: gitpython 3.1.43 — v1/poetry.lock
GitPython is a python library used to interact with Git repositories. ... GitPython is a python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.set_value() passes values to Python's configparser without validating for newlines. GitPython's own _write() con…
VulnCve 2026 44244
high System graph security Trivy conf 1.00 CVE-2026-44431: urllib3 2.3.0 — v1/poetry.lock
urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=Fals…
VulnCve 2026 44431
high System graph security Trivy conf 1.00 CVE-2026-49853: tornado 6.4.2 — v1/poetry.lock
Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient ## Summary When SimpleAsyncHTTPClient follows a 3xx redirect, it shallow-copies the original HTTPRequest, rewrites the URL, decrements max_redirects, and removes only the Host header. It does not clear …
VulnCve 2026 49853
high System graph security Trivy conf 1.00 CVE-2026-49855: tornado 6.4.2 — v1/poetry.lock
tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb) Tornado's gzip decompression routines work in limited-size chunks, but have no overall limit for the total size of decompressed chunks that they will accumulate (There has always been a limit for the total *comp…
VulnCve 2026 49855
high System graph security Trivy conf 1.00 CVE-2026-54293: nltk 3.9.1 — v1/poetry.lock
Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read ### Summary nltk.data.load() in NLTK is vulnerable to path traversal via URL-encoded path separators and traversal segments when using the nltk: URL scheme. The unsafe-path regex check …
VulnCve 2026 54293
high System graph security Trivy conf 1.00 GHSA-mv93-w799-cj2w: gitpython 3.1.43 — v1/poetry.lock
GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath Summary The patch for CVE-2026-42215 (GitPython 3.1.49) validates newlines only in the value parameter of set_value(). The section and option parameters are passed to c…
VulnGhsa mv93 w799 cj2w
high System graph security Skillspector conf 0.95 2 occurrences SkillSpector OH1 (output-handling) in timesfm-forecasting/scripts/check_system.py
subprocess.run( ["sysctl", "-n", "hw.memsize"], capture_output Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution. Skill: timesfm-fo…
lines 138, 186
timesfm-forecasting/scripts/check_system.py:138, 186 (2 hits)
Mcp skillOutput handlingOh1
high System graph security Skillspector conf 0.70 SkillSpector SC6 (supply-chain) in timesfm-forecasting/references/system_requirements.md
import Package name closely resembles a popular package, suggesting possible typosquatting. Attackers publish malicious packages with similar names to trick developers into installing them. Skill: timesfm-forecasting Rule: SC6 Category: supply-chain Severity: HIGH Confidence: 0.70 Remediation:…
timesfm-forecasting/references/system_requirements.md:210 Mcp skillSupply chainSc6
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in timesfm-forecasting/examples/anomaly-detection/output/anomaly_detection.png
rM\0\0\0\0\0\0\0FFF�>�������=��\0���f\+ ���-����P���\0\0\0\0\0\0\0(Ev�]˗/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: timesfm-forecasting Rule: TM1 Categor…
timesfm-forecasting/examples/anomaly-detection/output/anomaly_detection.png:1433 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 2 occurrences SkillSpector TM1 (tool-misuse) in timesfm-forecasting/examples/covariates-forecasting/output/covariates_data.png
rM������s�������}��X�h���/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: timesfm-forecasting Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.85 …
lines 170, 1225
timesfm-forecasting/examples/covariates-forecasting/output/covariates_data.png:170, 1225 (2 hits)
Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 5 occurrences SkillSpector TM1 (tool-misuse) in timesfm-forecasting/examples/global-temperature/output/forecast_animation.gif
RM�G�%�\1�I�d�����,��/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: timesfm-forecasting Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.85 Remedia…
lines 416, 520, 801, 1081, 4495
timesfm-forecasting/examples/global-temperature/output/forecast_animation.gif:416, 520, 801, 1081, 4495 (5 hits)
Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in timesfm-forecasting/examples/global-temperature/output/forecast_visualization.png
Rmڴ����%I�������޽{�ɓ'��ӦM����/�;�ȳ��!C��c�E��T����Z�n��_=��/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: timesfm-forecasting Rule: TM1 Category: tool-misu…
timesfm-forecasting/examples/global-temperature/output/forecast_visualization.png:1051 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.80 2 occurrences SkillSpector TM1 (tool-misuse) in timesfm-forecasting/scripts/forecast_csv.py
--skip-check Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: timesfm-forecasting Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.80 Remediation: Vali…
lines 225, 247
timesfm-forecasting/scripts/forecast_csv.py:225, 247 (2 hits)
Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.75 SkillSpector TM2 (tool-misuse) in timesfm-forecasting/examples/covariates-forecasting/output/covariates_data.png
|Su Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow. Skill: timesfm-forecasting Rule: TM2 Category: tool-misuse Severity: HIGH Confidence: 0.75 Remediation: Limit tool chaining depth and validate the output of each…
timesfm-forecasting/examples/covariates-forecasting/output/covariates_data.png:1045 Mcp skillTool misuseTm2
low Security checks quality Error handling conf 1.00 [ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level.
Log the error: `except Exception: logger.debug('cleanup failed', exc_info=True)`. Or handle specific exception types.
timesfm-forecasting/scripts/forecast_csv.py:164
medium Security checks security path traversal conf 1.00 [SEC012] ZipSlip — Archive Path Traversal: Archive extraction without path validation allows writing files outside the target directory.
Validate extracted paths with os.path.realpath() and ensure they stay within the target directory.
v1/experiments/extended_benchmarks/utils.py:121
medium Security checks software dependencies conf 0.88 bleach: GHSA-gj48-438w-jh9v
Bleach clean() / Cleaner() fails to sanitize dangerous URI schemes in allowed formaction attributes
v1/poetry.lock
low Security checks quality Error handling conf 0.55 ✓ Repobility Broad exception handler needs review
This handler catches Exception/BaseException. It is actionable when it swallows errors without logging, re-raising, or returning a structured error. Handlers that intentionally convert exceptions into typed error results should not be treated as high risk.
v1/src/finetuning/finetuning_example.py:395 Error handlingquality
low Security checks quality Error handling conf 0.55 ✓ Repobility Broad exception handler needs review
This handler catches Exception/BaseException. It is actionable when it swallows errors without logging, re-raising, or returning a structured error. Handlers that intentionally convert exceptions into typed error results should not be treated as high risk.
v1/src/timesfm/__init__.py:32 Error handlingquality
medium Security checks software dependencies conf 0.88 2 occurrences filelock: GHSA-qmgc-5h2g-mvrw
filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
2 files, 2 locations
requirements.txt
v1/poetry.lock
medium Security checks software dependencies conf 0.88 2 occurrences filelock: GHSA-w853-jp5j-5j7f
filelock has a TOCTOU race condition which allows symlink attacks during lock file creation
2 files, 2 locations
requirements.txt
v1/poetry.lock
medium Security checks software dependencies conf 0.88 fonttools: GHSA-768j-98cg-p3fv
fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib
v1/poetry.lock
medium Security checks software dependencies conf 0.88 jinja2: GHSA-cpwx-vrp4-4pq7
Jinja2 vulnerable to sandbox breakout through attr filter selecting format method
v1/poetry.lock
medium Security checks software dependencies conf 0.88 jupyterlab: GHSA-vmhf-c436-hxj4
JupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocol
v1/poetry.lock
medium Security checks software dependencies conf 0.88 keras: GHSA-mq84-hjqx-cwf2
Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery
v1/poetry.lock
medium Security checks software dependencies conf 0.88 mistune: GHSA-8g87-j6q8-g93x
Mistune Math Plugin has an XSS Escape Bypass
v1/poetry.lock
medium Security checks software dependencies conf 0.88 mistune: GHSA-v87v-83h2-53w7
Mistune Heading ID Attribute has Injection XSS
v1/poetry.lock
medium Security checks quality Quality conf 1.00 ✓ Repobility Mutable default argument in `finetune` (list)
`def finetune(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too.
v1/peft/finetune.py:63
medium Security checks quality Quality conf 1.00 ✓ Repobility Mutable default argument in `forecast` (list)
`def forecast(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too.
v1/experiments/baselines/timegpt_pipeline.py:184
medium Security checks software dependencies conf 0.88 nbconvert: GHSA-4c99-qj7h-p3vg
nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames
v1/poetry.lock
medium Security checks software dependencies conf 0.88 nbconvert: GHSA-7jqv-fw35-gmx9
nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
v1/poetry.lock
medium Security checks software dependencies conf 0.88 nltk: GHSA-gfwx-w7gr-fvh7
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk
v1/poetry.lock
medium Security checks software dependencies conf 0.88 nltk: GHSA-rf74-v2fm-23pw
Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS
v1/poetry.lock
medium Security checks software dependencies conf 0.88 pillow: GHSA-r73j-pqj5-w3x7
Pillow has a PDF Parsing Trailer Infinite Loop (DoS)
v1/poetry.lock
medium Security checks software dependencies conf 0.88 pytest: GHSA-6w46-j5rx-g56g
pytest has vulnerable tmpdir handling
v1/poetry.lock
medium Security checks software dependencies conf 0.90 Python package `absl-py` is 1 major version(s) behind (1.4.0 -> 2.4.0)
poetry.lock pins `absl-py` at 1.4.0 but the latest stable release on PyPI is 2.4.0 (1 major version(s) behind).
v1/poetry.lock
medium Security checks software dependencies conf 0.90 Python package `argon2-cffi-bindings` is 4 major version(s) behind (21.2.0 -> 25.1.0)
poetry.lock pins `argon2-cffi-bindings` at 21.2.0 but the latest stable release on PyPI is 25.1.0 (4 major version(s) behind).
v1/poetry.lock
medium Security checks software dependencies conf 0.90 Python package `argon2-cffi` is 2 major version(s) behind (23.1.0 -> 25.1.0)
poetry.lock pins `argon2-cffi` at 23.1.0 but the latest stable release on PyPI is 25.1.0 (2 major version(s) behind).
v1/poetry.lock
medium Security checks software dependencies conf 0.90 Python package `attrs` is 2 major version(s) behind (24.3.0 -> 26.1.0)
poetry.lock pins `attrs` at 24.3.0 but the latest stable release on PyPI is 26.1.0 (2 major version(s) behind).
v1/poetry.lock
medium Security checks software dependencies conf 0.90 Python package `cachetools` is 2 major version(s) behind (5.5.0 -> 7.1.4)
poetry.lock pins `cachetools` at 5.5.0 but the latest stable release on PyPI is 7.1.4 (2 major version(s) behind).
v1/poetry.lock
medium Security checks software dependencies conf 0.90 Python package `certifi` is 1 major version(s) behind (2025.10.5 -> 2026.6.17)
`certifi==2025.10.5` is 1 major version(s) behind the latest stable release on PyPI (2026.6.17). Pinned-but-stale Python dependencies drift away from upstream security and bugfix releases. This is the version-currency signal Dependabot raises.
requirements.txt:5
medium Security checks software dependencies conf 0.90 Python package `fsspec` is 1 major version(s) behind (2025.9.0 -> 2026.6.0)
`fsspec==2025.9.0` is 1 major version(s) behind the latest stable release on PyPI (2026.6.0). Pinned-but-stale Python dependencies drift away from upstream security and bugfix releases. This is the version-currency signal Dependabot raises.
requirements.txt:13
medium Security checks software dependencies conf 0.90 Python package `packaging` is 1 major version(s) behind (25.0 -> 26.2)
`packaging==25.0` is 1 major version(s) behind the latest stable release on PyPI (26.2). Pinned-but-stale Python dependencies drift away from upstream security and bugfix releases. This is the version-currency signal Dependabot raises.
requirements.txt:31
high Security checks software dependencies conf 0.70 Remote install command pipes network code directly to a shell
Agent helper projects often publish one-line installers. `curl | sh` style commands are convenient, but they bypass review unless the script is pinned, signed, or checksum-verified.
.github/workflows/manual_publish.yml:17
high Security checks software dependencies conf 0.70 Remote install command pipes network code directly to a shell
Agent helper projects often publish one-line installers. `curl | sh` style commands are convenient, but they bypass review unless the script is pinned, signed, or checksum-verified.
.github/workflows/main.yml:20
medium Security checks software dependencies conf 0.88 requests: GHSA-9hjg-9r4m-mvj7
Requests vulnerable to .netrc credentials leak via malicious URLs
v1/poetry.lock
medium Security checks software dependencies conf 0.88 requests: GHSA-gc5v-m9x4-r6x2
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
v1/poetry.lock
medium Security checks software dependencies conf 0.88 tensorflow: GHSA-fqm2-gh8w-gr68
TensorFlow vulnerable to segfault when opening multiframe gif
v1/poetry.lock
medium Security checks software dependencies conf 0.88 tensorflow: GHSA-fxgc-95xx-grvq
TensorFlow Denial of Service vulnerability
v1/poetry.lock
medium Security checks software dependencies conf 0.88 torch: GHSA-887c-mr87-cxwp
PyTorch Improper Resource Shutdown or Release vulnerability
v1/poetry.lock
medium Security checks software dependencies conf 0.88 torch: GHSA-f4hp-rmr7-r7v8
PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function
v1/poetry.lock
medium Security checks software dependencies conf 0.88 torch: GHSA-vgrw-7cvw-pwgx
PyTorch is vulnerable to memory corruption through its unpack_sequence function
v1/poetry.lock
medium Security checks software dependencies conf 0.88 tornado: GHSA-78cv-mqj4-43f7
Tornado has incomplete validation of cookie attributes
v1/poetry.lock
medium Security checks software dependencies conf 0.88 tornado: GHSA-pw6j-qg29-8w7f
Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse
v1/poetry.lock
medium Security checks software dependencies conf 0.88 transformers: GHSA-37mw-44qp-f5jm
Transformers is vulnerable to ReDoS attack through its DonutProcessor class
v1/poetry.lock
medium Security checks software dependencies conf 0.88 transformers: GHSA-4w7r-h757-3r74
Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer
v1/poetry.lock
medium Security checks software dependencies conf 0.88 transformers: GHSA-59p9-h35m-wg4g
Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer
v1/poetry.lock
medium Security checks software dependencies conf 0.88 transformers: GHSA-69w3-r845-3855
HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class
v1/poetry.lock
medium Security checks software dependencies conf 0.88 transformers: GHSA-6rvg-6v2m-4j46
Transformers Regular Expression Denial of Service (ReDoS) vulnerability
v1/poetry.lock
medium Security checks software dependencies conf 0.88 transformers: GHSA-9356-575x-2w9m
Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability
v1/poetry.lock
medium Security checks software dependencies conf 0.88 transformers: GHSA-fpwr-67px-3qhx
Transformers Regular Expression Denial of Service (ReDoS) vulnerability
v1/poetry.lock
medium Security checks software dependencies conf 0.88 transformers: GHSA-jjph-296x-mrcr
Transformers vulnerable to ReDoS attack through its get_imports() function
v1/poetry.lock
medium Security checks software dependencies conf 0.88 transformers: GHSA-q2wp-rjmx-x6x9
Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking
v1/poetry.lock
medium Security checks software dependencies conf 0.88 transformers: GHSA-rcv9-qm8p-9p6j
Hugging Face Transformers library has Regular Expression Denial of Service
v1/poetry.lock
medium Security checks software dependencies conf 0.88 urllib3: GHSA-48p4-8xcf-vxj5
urllib3 does not control redirects in browsers and Node.js
v1/poetry.lock
medium Security checks software dependencies conf 0.88 urllib3: GHSA-pq67-6m6q-mj2v
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
v1/poetry.lock
medium Security checks software dependencies conf 0.88 werkzeug: GHSA-29vq-49wr-vm6x
Werkzeug safe_join() allows Windows special device names
v1/poetry.lock
medium Security checks software dependencies conf 0.88 werkzeug: GHSA-87hc-h4r5-73f7
Werkzeug safe_join() allows Windows special device names with compound extensions
v1/poetry.lock
medium Security checks software dependencies conf 0.88 werkzeug: GHSA-hgf8-39gv-g3f2
Werkzeug safe_join() allows Windows special device names
v1/poetry.lock
medium System graph security Trivy conf 1.00 CVE-2023-25661: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25661 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an Open Source Machine Learning Framework. In versions prior to 2.11.1 a malicious invalid input crashes a tensorflow model (Check Failed) and can be used to trigger a denial of service attack. A proof of con…
VulnCve 2023 25661
medium System graph security Trivy conf 1.00 CVE-2023-25667: tensorflow 2.9.3 — v1/poetry.lock
CVE-2023-25667 affecting package tensorflow for versions less than 2.11.1-1 TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when `2^31 <= num_frames * height * width * channels < 2^32`, for example Full HD screencast of at le…
VulnCve 2023 25667
medium System graph security Trivy conf 1.00 CVE-2024-12720: transformers 4.47.1 — v1/poetry.lock
Transformers Regular Expression Denial of Service (ReDoS) vulnerability A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file tokenization_nougat_fast.py. The vulnerability occurs in the post_process_single() f…
VulnCve 2024 12720
medium System graph security Trivy conf 1.00 CVE-2024-47081: requests 2.32.3 — v1/poetry.lock
requests: Requests vulnerable to .netrc credentials leak via malicious URLs Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receiv…
VulnCve 2024 47081
medium System graph security Trivy conf 1.00 CVE-2024-55459: keras 2.9.0 — v1/poetry.lock
keras: arbitrary file write via get_file function An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function. Package: keras Installed: 2.9.0 Fixed in: — Severity: MEDIUM Fix: No fix version published yet
VulnCve 2024 55459
medium System graph security Trivy conf 1.00 CVE-2025-1194: transformers 4.47.1 — v1/poetry.lock
Transformers Regular Expression Denial of Service (ReDoS) vulnerability A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file `tokenization_gpt_neox_japanese.py` of the GPT-NeoX-Japanese model. The vulnerabilit…
VulnCve 2025 1194
medium System graph security Trivy conf 1.00 CVE-2025-12058: keras 2.9.0 — v1/poetry.lock
keras: Keras Model.load_model Arbitrary Local File Loading and SSRF The Keras.Model.load_model method, including when executed with the intended security mitigation safe_mode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery (SSRF). This vulnerability stems from…
VulnCve 2025 12058
medium System graph security Trivy conf 1.00 CVE-2025-2099: transformers 4.47.1 — v1/poetry.lock
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) attack. The …
VulnCve 2025 2099
medium System graph security Trivy conf 1.00 CVE-2025-27516: jinja2 3.1.5 — v1/poetry.lock
jinja2: Jinja sandbox breakout through attr filter selecting format method Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary P…
VulnCve 2025 27516
medium System graph security Trivy conf 1.00 CVE-2025-2998: torch 2.3.1 — v1/poetry.lock
A vulnerability was found in PyTorch 2.6.0. It has been declared as cr ... A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulation leads to memory corruption. Local access …
VulnCve 2025 2998
medium System graph security Trivy conf 1.00 CVE-2025-2999: torch 2.3.1 — v1/poetry.lock
A vulnerability was found in PyTorch 2.6.0. It has been rated as criti ... A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.nn.utils.rnn.unpack_sequence. The manipulation leads to memory corruption. Attacking locally is a requi…
VulnCve 2025 2999
medium System graph security Trivy conf 1.00 CVE-2025-3263: transformers 4.47.1 — v1/poetry.lock
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_configuration_file()` function within the `transformers.configuratio…
VulnCve 2025 3263
medium System graph security Trivy conf 1.00 CVE-2025-3264: transformers 4.47.1 — v1/poetry.lock
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_imports()` function within `dynamic_module_utils.py`. This vulnerabi…
VulnCve 2025 3264
medium System graph security Trivy conf 1.00 CVE-2025-3730: torch 2.3.1 — v1/poetry.lock
A vulnerability, which was classified as problematic, was found in PyT ... A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0. Affected is the function torch.nn.functional.ctc_loss of the file aten/src/ATen/native/LossCTC.cpp. The manipulation leads to denial of servi…
VulnCve 2025 3730
medium System graph security Trivy conf 1.00 CVE-2025-3933: transformers 4.47.1 — v1/poetry.lock
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's `token2json()` method. This vulnerability affe…
VulnCve 2025 3933
medium System graph security Trivy conf 1.00 CVE-2025-50181: urllib3 2.3.0 — v1/poetry.lock
urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that dis…
VulnCve 2025 50181
medium System graph security Trivy conf 1.00 CVE-2025-50182: urllib3 2.3.0 — v1/poetry.lock
urllib3: urllib3 does not control redirects in browsers and Node.js urllib3 is a user-friendly HTTP client library for Python. Starting in version 2.2.0 and prior to 2.5.0, urllib3 does not control redirects in browsers and Node.js. urllib3 supports being used in a Pyodide runtime utilizing the Ja…
VulnCve 2025 50182
medium System graph security Trivy conf 1.00 CVE-2025-5197: transformers 4.47.1 — v1/poetry.lock
transformers: Transformers ReDoS Vulnerability A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library, specifically in the `convert_tf_weight_name_to_pt_weight_name()` function. This function, responsible for converting TensorFlow weight names …
VulnCve 2025 5197
medium System graph security Trivy conf 1.00 CVE-2025-6051: transformers 4.47.1 — v1/poetry.lock
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the `normalize_numbers()` method of the `EnglishNormalizer` class. This v…
VulnCve 2025 6051
medium System graph security Trivy conf 1.00 CVE-2025-61669: jupyter-server 2.15.0 — v1/poetry.lock
jupyter_server: Jupyter Server: Redirects to arbitrary external domains via insufficient validation of login parameter Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17.0, the next query parameter in the login flow is insufficiently validated in `L…
VulnCve 2025 61669
medium System graph security Trivy conf 1.00 CVE-2025-66034: fonttools 4.55.3 — v1/poetry.lock
fonttools: fontTools: Arbitrary file write leading to remote code execution via malicious .designspace file fontTools is a library for manipulating fonts, written in Python. In versions from 4.33.0 to before 4.60.2, the fonttools varLib (or python3 -m fontTools.varLib) script has an arbitrary file…
VulnCve 2025 66034
medium System graph security Trivy conf 1.00 CVE-2025-66221: werkzeug 3.1.3 — v1/poetry.lock
Werkzeug: Werkzeug: Denial of service via Windows device names in path segments Werkzeug is a comprehensive WSGI web application library. Prior to version 3.1.4, Werkzeug's safe_join function allows path segments with Windows device names. On Windows, there are special device names such as CON, AU…
VulnCve 2025 66221
medium System graph security Trivy conf 1.00 CVE-2025-6638: transformers 4.47.1 — v1/poetry.lock
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically affecting the MarianTokenizer's `remove_language_code()` method. This vulnerabil…
VulnCve 2025 6638
medium System graph security Trivy conf 1.00 CVE-2025-68146: filelock 3.16.1 — v1/poetry.lock
filelock: filelock: Time-of-Check-Time-of-Use (TOCTOU) race condition and symlink attack allows arbitrary file corruption or truncation filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTOU) race condition allows local attackers t…
VulnCve 2025 68146
medium System graph security Trivy conf 1.00 CVE-2025-68146: filelock 3.19.1 — requirements.txt
filelock: filelock: Time-of-Check-Time-of-Use (TOCTOU) race condition and symlink attack allows arbitrary file corruption or truncation filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTOU) race condition allows local attackers t…
VulnCve 2025 68146
medium System graph security Trivy conf 1.00 CVE-2025-6921: transformers 4.47.1 — v1/poetry.lock
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer. The vulnerability arises from the _do_use_weight_de…
VulnCve 2025 6921
medium System graph security Trivy conf 1.00 CVE-2025-69534: markdown 3.7 — v1/poetry.lock
python-markdown: denial of service via malformed HTML-like sequences Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Because Python-Markdown does not catch this ex…
VulnCve 2025 69534
medium System graph security Trivy conf 1.00 CVE-2026-1839: transformers 4.47.1 — v1/poetry.lock
transformers: HuggingFace Transformers: Arbitrary code execution via malicious checkpoint file A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbitrary code execution. The `_load_rng_state()` method in `src/transformers/trainer.py` at line …
VulnCve 2026 1839
medium System graph security Trivy conf 1.00 CVE-2026-21860: werkzeug 3.1.3 — v1/poetry.lock
Werkzeug safe_join() allows Windows special device names with compound extensions Werkzeug is a comprehensive WSGI web application library. Prior to version 3.1.5, Werkzeug's safe_join function allows path segments with Windows device names that have file extensions or trailing spaces. On Windows…
VulnCve 2026 21860
medium System graph security Trivy conf 1.00 CVE-2026-22701: filelock 3.16.1 — v1/poetry.lock
filelock: filelock Time-of-Check-Time-of-Use (TOCTOU) in SoftFileLock filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access …
VulnCve 2026 22701
medium System graph security Trivy conf 1.00 CVE-2026-22701: filelock 3.19.1 — requirements.txt
filelock: filelock Time-of-Check-Time-of-Use (TOCTOU) in SoftFileLock filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access …
VulnCve 2026 22701
medium System graph security Trivy conf 1.00 CVE-2026-25645: requests 2.32.3 — v1/poetry.lock
requests: Requests: Security bypass due to predictable temporary file creation Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. …
VulnCve 2026 25645
medium System graph security Trivy conf 1.00 CVE-2026-27199: werkzeug 3.1.3 — v1/poetry.lock
Werkzeug safe_join() allows Windows special device names Werkzeug is a comprehensive WSGI web application library. Versions 3.1.5 and below, the safe_join function allows Windows device names as filenames if preceded by other path segments. This was previously reported as GHSA-hgf8-39gv-g3f2, but…
VulnCve 2026 27199
medium System graph security Trivy conf 1.00 CVE-2026-33230: nltk 3.9.1 — v1/poetry.lock
nltk: NLTK: Script execution via reflected cross-site scripting in WordNet Browser NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, `nltk.app.wordnet_a…
VulnCve 2026 33230
medium System graph security Trivy conf 1.00 CVE-2026-39377: nbconvert 7.16.4 — v1/poetry.lock
nbconvert: nbconvert: Arbitrary file write via crafted Jupyter notebook cell attachment filenames The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions 6.5 through 7.17.0 allow arbitrary file writes to locations outside the intende…
VulnCve 2026 39377
medium System graph security Trivy conf 1.00 CVE-2026-39378: nbconvert 7.16.4 — v1/poetry.lock
nbconvert: nbconvert: Sensitive file exfiltration via path traversal in image references The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when `HTMLExporter.embed_images=True`, nbconvert's markdown rende…
VulnCve 2026 39378
medium System graph security Trivy conf 1.00 CVE-2026-42308: pillow 11.0.0 — v1/poetry.lock
Pillow: python: Pillow: Denial of Service via integer overflow in font processing Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This i…
VulnCve 2026 42308
medium System graph security Trivy conf 1.00 CVE-2026-42310: pillow 11.0.0 — v1/poetry.lock
Pillow: Pillow: Denial of Service via malicious PDF processing Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. This issu…
VulnCve 2026 42310
medium System graph security Trivy conf 1.00 CVE-2026-44708: mistune 3.1.0 — v1/poetry.lock
python-mistune: Mistune: Cross-Site Scripting via improper HTML escaping in math plugin Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, the mistune math plugin renders inline math ($...$) and block math ($$...$$) by concatenating the raw user-supplied content direct…
VulnCve 2026 44708
medium System graph security Trivy conf 1.00 CVE-2026-44896: mistune 3.1.0 — v1/poetry.lock
Mistune is a Python Markdown parser with renderers and plugins. In 3.2 ... Mistune is a Python Markdown parser with renderers and plugins. In 3.2.0 and earlier, in src/mistune/directives/image.py, the render_figure() function concatenates figclass and figwidth options directly into HTML attributes…
VulnCve 2026 44896
medium System graph security Trivy conf 1.00 CVE-2026-44897: mistune 3.1.0 — v1/poetry.lock
mistune: Mistune: Cross-site scripting (XSS) via improper sanitization of HTML heading ID attribute Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, HTMLRenderer.heading() builds the opening <hN> tag by string-concatenating the id attribute value directly into the HT…
VulnCve 2026 44897
medium System graph security Trivy conf 1.00 CVE-2026-45409: idna 3.10 — requirements.txt
Internationalized Domain Names in Applications (IDNA) for Python provi ... Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such…
VulnCve 2026 45409
medium System graph security Trivy conf 1.00 CVE-2026-45409: idna 3.10 — v1/poetry.lock
Internationalized Domain Names in Applications (IDNA) for Python provi ... Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such…
VulnCve 2026 45409
medium System graph security Semgrep conf 1.00 eval detected — v1/experiments/long_horizon_benchmarks/run_eval.py:238
Detected the use of eval(). eval() can be dangerous if used to evaluate dynamic content. If this content can be input from outside the program, this may be a code injection vulnerability. Ensure evaluated content is not definable by external sources. Rule: python.lang.security.audit.eval-detected.…
SecurityPython
medium System graph security Trivy conf 1.00 GHSA-78cv-mqj4-43f7: tornado 6.4.2 — v1/poetry.lock
Tornado has incomplete validation of cookie attributes Values passed to the `domain`, `path`, and `samesite` arguments of `RequestHandler.set_cookie` were not completely validated in versions of Tornado prior to 6.5.5. In particular, semicolons would be allowed, which could be used to inject attac…
VulnGhsa 78cv mqj4 43f7
medium System graph security Trivy conf 1.00 GHSA-gj48-438w-jh9v: bleach 6.2.0 — v1/poetry.lock
Bleach clean() / Cleaner() fails to sanitize dangerous URI schemes in allowed formaction attributes ### Summary Bleach `clean()` / `Cleaner()` fails to sanitize dangerous URI schemes in allowed `formaction` attributes. Bleach applies URI protocol sanitization only to attributes listed in `attr_v…
VulnGhsa gj48 438w jh9v
medium System graph security Trivy conf 1.00 GHSA-pw6j-qg29-8w7f: tornado 6.4.2 — v1/poetry.lock
Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse # CurlAsyncHTTPClient leaks per-request credentials on handle reuse ## Summary `CurlAsyncHTTPClient` pools and reuses `pycurl` handles across requests but does not reset them between requests, and several per-request opti…
VulnGhsa pw6j qg29 8w7f
medium System graph security Trivy conf 1.00 GHSA-rf74-v2fm-23pw: nltk 3.9.1 — v1/poetry.lock
Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS ### Summary `JSONTaggedDecoder.decode_obj()` in `nltk/jsontags.py` calls itself recursively without any depth limit. A deeply nested JSON structure exceeding `sys.getrecursionlimit()` (default…
VulnGhsa rf74 v2fm 23pw
medium System graph security Trivy conf 1.00 GHSA-vmhf-c436-hxj4: jupyterlab 4.3.4 — v1/poetry.lock
JupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocol A malicious PyPI package can place a `javascript:` URL in its `[project.urls]` metadata. JupyterLab's Extension Manager renders this as the extension's home-page link without validating the protocol, so a…
VulnGhsa vmhf c436 hxj4
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — timesfm-forecasting/examples/covariates-forecasting/demo_covariates.py:22
`urllib.request.urlretrieve(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — timesfm-forecasting/scripts/check_system.py:138
`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph security Coverage conf 1.00 No auth library detected
The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing.
auth
medium System graph security Skillspector conf 0.60 SkillSpector AST3 (behavioral-ast) in timesfm-forecasting/scripts/check_system.py
mod = __import__(import_name) Dynamic __import__() can load arbitrary modules at runtime, bypassing static analysis and potentially importing malicious code. Skill: timesfm-forecasting Rule: AST3 Category: behavioral-ast Severity: MEDIUM Confidence: 0.60 Remediation: Use standard import statem…
timesfm-forecasting/scripts/check_system.py:362 Mcp skillBehavioral astAst3
medium System graph security Skillspector conf 0.60 2 occurrences SkillSpector AST4 (behavioral-ast) in timesfm-forecasting/scripts/check_system.py
result = subprocess.run( ["sysctl", "-n", "hw.memsize"], capture_output=True, text=True, check=True, ) subprocess module calls execute external commands. Without careful input validation, this enables command injection. S…
lines 138, 186
timesfm-forecasting/scripts/check_system.py:138, 186 (2 hits)
Mcp skillBehavioral astAst4
medium System graph security Skillspector conf 0.75 SkillSpector EA4 (excessive-agency) in timesfm-forecasting/examples/global-temperature/generate_gif.py
Loop forever Skill allows unbounded resource consumption (API calls, storage, compute). Without rate limits or quotas, a compromised or misbehaving agent can cause denial-of-service or cost overruns. Skill: timesfm-forecasting Rule: EA4 Category: excessive-agency Severity: MEDIUM Confidence: 0.…
timesfm-forecasting/examples/global-temperature/generate_gif.py:238 Mcp skillExcessive agencyEa4
medium System graph security Skillspector conf 0.70 SkillSpector LP3 (mcp-least-priv) in timesfm-forecasting/SKILL.md
MCP Least Privilege Without declared permissions the skill's intent is opaque and cannot be validated. Skill: timesfm-forecasting Rule: LP3 Category: mcp-least-priv Severity: MEDIUM Confidence: 0.70 Remediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires.
timesfm-forecasting/SKILL.md:1 Mcp skillMcp least privLp3
low Security checks software dependencies conf 0.88 bleach: GHSA-8rfp-98v4-mmr6
Bleach: URI sanitization allows disallowed URI schemes with Unicode > U+00A0 in output
v1/poetry.lock
low Security checks quality Quality conf 0.60 9 occurrences Duplicated implementation block across source files
Duplicate implementation blocks are maintenance debt. Keep them visible, but they are not a high-severity defect unless the duplicated logic is security-sensitive or drifting.
8 files, 9 locations
v1/src/timesfm/timesfm_torch.py:49, 59 (2 hits)
src/timesfm/timesfm_2p5/timesfm_2p5_torch.py:304
v1/experiments/extended_benchmarks/run_timesfm.py:9
v1/src/adapter/lora_layers.py:48
v1/src/timesfm/pytorch_patched_decoder.py:541
v1/src/timesfm/timesfm_base.py:65
v1/src/timesfm/timesfm_jax.py:200
v1/src/timesfm/xreg_lib.py:31
duplicationquality
low Security checks cicd CI/CD security conf 0.90 ✓ Repobility 6 occurrences GitHub Action is tag-pinned rather than SHA-pinned
Action `actions/checkout` pinned to mutable ref `@v6` uses a mutable tag or branch. Pin external actions to a reviewed full commit SHA when the workflow is security-sensitive.
2 files, 6 locations
.github/workflows/main.yml:13, 15 (3 hits)
.github/workflows/manual_publish.yml:10, 12 (3 hits)
CI/CD securitySupply chainGitHub Actions
low Security checks software dependencies conf 0.88 jupyterlab: GHSA-vvfj-2jqx-52jm
JupyterLab LaTeX typesetter links did not enforce `noopener` attribute
v1/poetry.lock
low Security checks software dependencies conf 0.88 pygments: GHSA-5239-wwwm-4pmq
Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching
v1/poetry.lock

Showing first 300 of 358. Refine filters or use the findings page for deep search.

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/da5d58d3-85f2-4a83-a867-74a096ca8de4/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/da5d58d3-85f2-4a83-a867-74a096ca8de4/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.