← Back to scan
File as GitHub Issue repo: aws/deep-learning-containers

Push this scan report to aws/deep-learning-containers

Click the green button below to open GitHub’s new-issue form, pre-filled with the report title, summary table, top findings, and an embedded score-card image. No authentication needed — you review on GitHub before submitting. Repobility is credited as the scanner.

Embedded score card image

This image will render at the top of the issue body. Hosted on Repobility, refreshes automatically after re-scans.

Repobility score card

Issue title

LDAP injection — non-constant search filter

Curate findings to include

Pick exactly which findings appear in the issue body. By default the top 5 are included. Uncheck noise, check what matters.

Top 5 (default)
Severity Rule Title File:line
HIGH SEC135 [SEC135] Auth/permission check missing on AI-generated endpoint: Mutating HTTP endpoint g… scripts/ray/sagemaker_serve.py:118
HIGH SEC114 [SEC114] path.join / Path() on user-controlled segment without containment check: filepat… examples/ray/tabular-model/deployment.py:34
HIGH SEC103 [SEC103] LDAP injection — non-constant search filter: User input concatenated into an LDA… scripts/vllm/sagemaker_serve.py:28
HIGH SEC103 [SEC103] LDAP injection — non-constant search filter: User input concatenated into an LDA… scripts/vllm/omni_sagemaker_serve.py:40
HIGH SEC103 [SEC103] LDAP injection — non-constant search filter: User input concatenated into an LDA… docs/src/sorter.py:31
HIGH SEC029 [SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTT… docs/src/image_config.py:119
HIGH DKR006 Dockerfile pipes a remote script into a shell docker/vllm_omni/Dockerfile.amzn2023:266
HIGH DKR006 Dockerfile pipes a remote script into a shell docker/vllm_omni/Dockerfile.amzn2023:182
HIGH DKR006 Dockerfile pipes a remote script into a shell docker/vllm_omni/Dockerfile.amzn2023:57
HIGH DKR006 Dockerfile pipes a remote script into a shell docker/vllm/Dockerfile.amzn2023:272
HIGH DKR006 Dockerfile pipes a remote script into a shell docker/vllm/Dockerfile.amzn2023:176
HIGH DKR006 Dockerfile pipes a remote script into a shell docker/vllm/Dockerfile.amzn2023:57
HIGH DKR006 Dockerfile pipes a remote script into a shell docker/sglang/Dockerfile.amzn2023:215
HIGH DKR006 Dockerfile pipes a remote script into a shell docker/sglang/Dockerfile.amzn2023:81
HIGH DKR006 Dockerfile pipes a remote script into a shell docker/sglang/Dockerfile.amzn2023:51
HIGH MINED134 Binary file `docker/xgboost/resources/mms/endpoints-1.0.jar` committed in source repo docker/xgboost/resources/mms/endpoints-…:1
HIGH MINED115 Action `actions/checkout` pinned to mutable ref `@v5` .github/workflows/pr-ray-ec2-cpu.yml:108
HIGH GHSA-wjvx-jhpj-r54r sagemaker: GHSA-wjvx-jhpj-r54r test/xgboost/requirements.txt
HIGH GHSA-7pc3-pr3q-58vg sagemaker: GHSA-7pc3-pr3q-58vg test/xgboost/requirements.txt
HIGH PYSEC-2023-74 requests: PYSEC-2023-74 test/ray/ec2/requirements.txt
HIGH PYSEC-2018-28 requests: PYSEC-2018-28 test/ray/ec2/requirements.txt
HIGH GHSA-rjrp-m2jw-pv9c sagemaker: GHSA-rjrp-m2jw-pv9c test/pytorch/integration/sagemaker/requ…
HIGH GHSA-7hh5-prp2-mfh5 sagemaker: GHSA-7hh5-prp2-mfh5 test/pytorch/integration/sagemaker/requ…
HIGH GHSA-62rc-f4v9-h543 sagemaker: GHSA-62rc-f4v9-h543 test/pytorch/integration/sagemaker/requ…
HIGH GHSA-5r2p-pjr8-7fh7 sagemaker: GHSA-5r2p-pjr8-7fh7 test/pytorch/integration/sagemaker/requ…
HIGH PYSEC-2026-113 pyarrow: PYSEC-2026-113 docker/xgboost/uv.lock
HIGH GHSA-8qvm-5x2c-j2w7 protobuf: GHSA-8qvm-5x2c-j2w7 docker/xgboost/uv.lock
HIGH GHSA-7gcm-g887-7qv7 protobuf: GHSA-7gcm-g887-7qv7 docker/xgboost/uv.lock
HIGH PYSEC-2026-196 pip: PYSEC-2026-196 docker/xgboost/uv.lock
HIGH GHSA-8rrh-rw8j-w5fx wheel: GHSA-8rrh-rw8j-w5fx docker/xgboost/3.0-5/requirements.txt
HIGH GHSA-gm62-xv2j-4w53 urllib3: GHSA-gm62-xv2j-4w53 docker/xgboost/3.0-5/requirements.txt
HIGH GHSA-38jv-5279-wg99 urllib3: GHSA-38jv-5279-wg99 docker/xgboost/3.0-5/requirements.txt
HIGH GHSA-2xpw-w6gg-jr37 urllib3: GHSA-2xpw-w6gg-jr37 docker/xgboost/3.0-5/requirements.txt
HIGH PYSEC-2026-141 urllib3: PYSEC-2026-141 docker/xgboost/3.0-5/requirements.txt
HIGH GHSA-2g68-c3qc-8985 werkzeug: GHSA-2g68-c3qc-8985 docker/xgboost/3.0-5/requirements.txt
HIGH PYSEC-2023-58 werkzeug: PYSEC-2023-58 docker/xgboost/3.0-5/requirements.txt
HIGH PYSEC-2023-57 werkzeug: PYSEC-2023-57 docker/xgboost/3.0-5/requirements.txt
HIGH PYSEC-2023-221 werkzeug: PYSEC-2023-221 docker/xgboost/3.0-5/requirements.txt
HIGH PYSEC-2022-203 werkzeug: PYSEC-2022-203 docker/xgboost/3.0-5/requirements.txt
HIGH PYSEC-2023-62 flask: PYSEC-2023-62 docker/xgboost/3.0-5/requirements.txt
HIGH PYSEC-2026-139 torch: PYSEC-2026-139 docker/ray/uv.lock
HIGH PYSEC-2026-161 starlette: PYSEC-2026-161 docker/ray/uv.lock
HIGH PYSEC-2026-196 pip: PYSEC-2026-196 docker/ray/uv.lock
HIGH PYSEC-2026-161 starlette: PYSEC-2026-161 docker/pytorch/2.11/cpu/uv.lock
HIGH PYSEC-2026-196 pip: PYSEC-2026-196 docker/pytorch/2.11/cpu/uv.lock
HIGH SEC013 [SEC013] Path Traversal — User Input in File Path: User-controlled input used in file pat… examples/ray/tabular-model/deployment.py:34
MED SEC034 [SEC034] Log Injection / Log Forging — unsanitized user input in log: User input is logge… scripts/ray/sagemaker_serve.py:47
MED SEC115 [SEC115] Decompression without size cap (zip/gzip bomb): Decompressing untrusted archives… scripts/common/setup_oss_compliance.sh:14
MED SEC012 [SEC012] ZipSlip — Archive Path Traversal: Archive extraction without path validation all… scripts/common/setup_oss_compliance.sh:14
MED SEC011 [SEC011] Unsafe PyTorch Model Loading: torch.load() uses pickle internally and can execut… examples/ray/tabular-model/deployment.py:29
MED MINED111 Bare except continues silently scripts/autocurrency/agent-fix.py:174
MED MINED111 Bare except continues silently scripts/autocurrency/agent-fix.py:96
MED MINED109 Mutable default argument in `on_startup` (list) docs/src/hooks.py:29
MED MINED111 Bare except continues silently docs/src/utils.py:69
MED MINED111 Bare except continues silently test/xgboost/container/container_helper…:208
MED MINED111 Bare except continues silently test/vllm-omni/scripts/benchmark/image_…:75
MED MINED111 Bare except continues silently test/vllm-omni/scripts/benchmark/image_…:85
MED MINED111 Bare except continues silently test/vllm-omni/scripts/benchmark/chat_o…:117
MED MINED111 Bare except continues silently test/vllm-omni/scripts/benchmark/tts_be…:105
MED MINED111 Bare except continues silently test/vllm-omni/scripts/benchmark/audio_…:107
MED MINED111 Bare except continues silently test/vllm-omni/scripts/benchmark/video_…:114
MED MINED111 Bare except continues silently test/test_utils/aws.py:182
MED COMP001 [COMP001] High cognitive complexity: Function `main` has cognitive complexity 23 (SonarSo… .github/scripts/upload_ecr_allowlists.py:149
MED DKR002 Dockerfile base image has no explicit tag docker/vllm_omni/Dockerfile.amzn2023:10
MED DKR002 Dockerfile base image has no explicit tag docker/vllm/Dockerfile.amzn2023:10
MED DEPCUR-PY Python package `Werkzeug` is 3 major version(s) behind (0.15.6 -> 3.1.8) docker/xgboost/3.0-5/requirements.txt:32
MED DEPCUR-PY Python package `urllib3` is 1 major version(s) behind (1.26.20 -> 2.7.0) docker/xgboost/3.0-5/requirements.txt:31
MED DEPCUR-PY Python package `pynvml` is 2 major version(s) behind (11.4.1 -> 13.0.1) docker/xgboost/3.0-5/requirements.txt:21
MED DEPCUR-PY Python package `psutil` is 2 major version(s) behind (5.8.0 -> 7.2.2) docker/xgboost/3.0-5/requirements.txt:20
MED DEPCUR-PY Python package `pandas` is 1 major version(s) behind (2.2.3 -> 3.0.3) docker/xgboost/3.0-5/requirements.txt:18
MED DEPCUR-PY Python package `MarkupSafe` is 2 major version(s) behind (1.1.1 -> 3.0.3) docker/xgboost/3.0-5/requirements.txt:13
MED DEPCUR-PY Python package `jinja2` is 1 major version(s) behind (2.11.3 -> 3.1.6) docker/xgboost/3.0-5/requirements.txt:12
MED DEPCUR-PY Python package `gunicorn` is 3 major version(s) behind (23.0.0 -> 26.0.0) docker/xgboost/3.0-5/requirements.txt:10
MED DEPCUR-PY Python package `gevent` is 3 major version(s) behind (23.9.1 -> 26.5.0) docker/xgboost/3.0-5/requirements.txt:9
MED DEPCUR-PY Python package `Flask` is 2 major version(s) behind (1.1.1 -> 3.1.3) docker/xgboost/3.0-5/requirements.txt:8
MED DEPCUR-PY Python package `dask` is 2 major version(s) behind (2024.11.2 -> 2026.3.0) docker/xgboost/3.0-5/requirements.txt:7
MED DEPCUR-PY Python package `cuda-python` is 1 major version(s) behind (12.6.0 -> 13.3.1) docker/xgboost/3.0-5/requirements.txt:5
MED DEPCUR-PY Python package `certifi` is 1 major version(s) behind (2025.4.26 -> 2026.5.20) docker/xgboost/3.0-5/requirements.txt:3
MED MINED124 requirements.txt: `requests` has no version pin test/ray/ec2/requirements.txt:1
MED MINED124 requirements.txt: `pytest` has no version pin test/pytorch/integration/sagemaker/requ…:2
MED MINED124 requirements.txt: `boto3` has no version pin test/pytorch/integration/sagemaker/requ…:1
MED MINED124 requirements.txt: `starlette` has no version pin test/vllm-omni/sagemaker/requirements.t…:2
MED MINED124 requirements.txt: `requests` has no version pin test/telemetry/requirements.txt:1
MED MINED124 requirements.txt: `setuptools<81` has no version pin docker/xgboost/3.0-5/requirements.txt:30
MED MINED124 requirements.txt: `pytest` has no version pin test/requirements.txt:4
MED MINED124 requirements.txt: `fabric` has no version pin test/requirements.txt:3
MED MINED124 requirements.txt: `botocore` has no version pin test/requirements.txt:2
MED MINED124 requirements.txt: `boto3` has no version pin test/requirements.txt:1
MED MINED124 requirements.txt: `omegaconf` has no version pin docs/requirements.txt:6
MED MINED124 requirements.txt: `mkdocs-macros-plugin` has no version pin docs/requirements.txt:4
MED MINED124 requirements.txt: `mkdocs-awesome-nav` has no version pin docs/requirements.txt:3
MED MINED124 requirements.txt: `mkdocs-autorefs` has no version pin docs/requirements.txt:2
MED MINED124 requirements.txt: `jinja2` has no version pin docs/requirements.txt:1
MED MINED124 requirements.txt: `pre-commit` has no version pin requirements.txt:1
MED GHSA-32g6-mg92-ghm2 sagemaker: GHSA-32g6-mg92-ghm2 test/xgboost/requirements.txt
MED GHSA-9wx4-h78v-vm56 requests: GHSA-9wx4-h78v-vm56 test/ray/ec2/requirements.txt
MED GHSA-rq6v-x3j8-7qgf sagemaker: GHSA-rq6v-x3j8-7qgf test/pytorch/integration/sagemaker/requ…
MED GHSA-gc5v-m9x4-r6x2 requests: GHSA-gc5v-m9x4-r6x2 docker/xgboost/uv.lock
MED GHSA-9hjg-9r4m-mvj7 requests: GHSA-9hjg-9r4m-mvj7 docker/xgboost/uv.lock
MED GHSA-65pc-fj4g-8rjx idna: GHSA-65pc-fj4g-8rjx docker/xgboost/uv.lock
MED GHSA-pq67-6m6q-mj2v urllib3: GHSA-pq67-6m6q-mj2v docker/xgboost/3.0-5/requirements.txt
MED GHSA-9hjg-9r4m-mvj7 requests: GHSA-9hjg-9r4m-mvj7 docker/xgboost/3.0-5/requirements.txt
MED GHSA-q2x7-8rv6-6q7h jinja2: GHSA-q2x7-8rv6-6q7h docker/xgboost/3.0-5/requirements.txt
MED GHSA-h75v-3vvj-5mfj jinja2: GHSA-h75v-3vvj-5mfj docker/xgboost/3.0-5/requirements.txt
MED GHSA-h5c8-rqwp-cp95 jinja2: GHSA-h5c8-rqwp-cp95 docker/xgboost/3.0-5/requirements.txt
MED GHSA-cpwx-vrp4-4pq7 jinja2: GHSA-cpwx-vrp4-4pq7 docker/xgboost/3.0-5/requirements.txt
MED GHSA-hgf8-39gv-g3f2 werkzeug: GHSA-hgf8-39gv-g3f2 docker/xgboost/3.0-5/requirements.txt
MED GHSA-f9vj-2wh5-fj8j werkzeug: GHSA-f9vj-2wh5-fj8j docker/xgboost/3.0-5/requirements.txt
MED GHSA-87hc-h4r5-73f7 werkzeug: GHSA-87hc-h4r5-73f7 docker/xgboost/3.0-5/requirements.txt
MED GHSA-29vq-49wr-vm6x werkzeug: GHSA-29vq-49wr-vm6x docker/xgboost/3.0-5/requirements.txt
MED GHSA-jp4c-xjxw-mgf9 pip: GHSA-jp4c-xjxw-mgf9 docker/ray/uv.lock
MED GHSA-58qw-9mgm-455v pip: GHSA-58qw-9mgm-455v docker/ray/uv.lock
MED GHSA-65pc-fj4g-8rjx idna: GHSA-65pc-fj4g-8rjx docker/ray/uv.lock
MED GHSA-jg22-mg44-37j8 aiohttp: GHSA-jg22-mg44-37j8 docker/ray/uv.lock
MED GHSA-hg6j-4rv6-33pg aiohttp: GHSA-hg6j-4rv6-33pg docker/ray/uv.lock
MED GHSA-gc5v-m9x4-r6x2 requests: GHSA-gc5v-m9x4-r6x2 docker/pytorch/2.11/cuda/uv.lock
MED GHSA-jp4c-xjxw-mgf9 pip: GHSA-jp4c-xjxw-mgf9 docker/pytorch/2.11/cpu/uv.lock
MED GHSA-58qw-9mgm-455v pip: GHSA-58qw-9mgm-455v docker/pytorch/2.11/cpu/uv.lock
MED GHSA-65pc-fj4g-8rjx idna: GHSA-65pc-fj4g-8rjx docker/pytorch/2.11/cpu/uv.lock
MED GHSA-jg22-mg44-37j8 aiohttp: GHSA-jg22-mg44-37j8 docker/pytorch/2.11/cpu/uv.lock
MED GHSA-hg6j-4rv6-33pg aiohttp: GHSA-hg6j-4rv6-33pg docker/pytorch/2.11/cpu/uv.lock
MED GHSA-65pc-fj4g-8rjx idna: GHSA-65pc-fj4g-8rjx docker/base/v2/uv.lock
MED GHSA-65pc-fj4g-8rjx idna: GHSA-65pc-fj4g-8rjx docker/base/v1/uv.lock
MED DKR009 Dockerfile separates apt update from install docker/vllm/Dockerfile:102
MED DKR009 Dockerfile separates apt update from install docker/vllm/Dockerfile:87
MED DKR009 Dockerfile separates apt update from install docker/sglang/Dockerfile:140
MED DKR009 Dockerfile separates apt update from install docker/sglang/Dockerfile:121
MED DKR001 Docker final stage has no non-root USER docker/xgboost/Dockerfile:40
MED DKR001 Docker final stage has no non-root USER docker/xgboost/3.0-5/Dockerfile:168
MED DKR001 Docker final stage has no non-root USER docker/vllm_omni/Dockerfile.amzn2023:441
MED DKR001 Docker final stage has no non-root USER docker/vllm/Dockerfile.amzn2023:392
MED DKR001 Docker final stage has no non-root USER docker/vllm/Dockerfile:99
MED DKR001 Docker final stage has no non-root USER docker/sglang/Dockerfile.amzn2023:386
MED DKR001 Docker final stage has no non-root USER docker/sglang/Dockerfile:137
MED DKR001 Docker final stage has no non-root USER docker/ray/Dockerfile.gpu:174
MED DKR001 Docker final stage has no non-root USER docker/ray/Dockerfile.cpu:137
MED DKR001 Docker final stage has no non-root USER docker/pytorch/2.11/Dockerfile.cpu:154
MED DKR001 Docker final stage has no non-root USER docker/base/v2/Dockerfile:77
MED DKR001 Docker final stage has no non-root USER docker/base/v1/Dockerfile:75
LOW COMP001 [COMP001] High cognitive complexity: Function `load_framework_allowlist` has cognitive co… .github/scripts/upload_ecr_allowlists.py:77
LOW COMP001 [COMP001] High cognitive complexity: Function `evict_models` has cognitive complexity 9 (… .github/actions/download-model/evict_mo…:45
LOW DEPCUR-PY Python package `wheel` is minor version(s) behind (0.45.1 -> 0.47.0) docker/xgboost/3.0-5/requirements.txt:33
LOW DEPCUR-PY Python package `scipy` is minor version(s) behind (1.15.0 -> 1.17.1) docker/xgboost/3.0-5/requirements.txt:29
LOW DEPCUR-PY Python package `scikit-learn` is minor version(s) behind (1.5.2 -> 1.9.0) docker/xgboost/3.0-5/requirements.txt:28
LOW DEPCUR-PY Python package `sagemaker-inference` is minor version(s) behind (1.5.5 -> 1.10.1) docker/xgboost/3.0-5/requirements.txt:27
LOW DEPCUR-PY Python package `retrying` is minor version(s) behind (1.3.3 -> 1.4.2) docker/xgboost/3.0-5/requirements.txt:25
LOW DEPCUR-PY Python package `requests` is minor version(s) behind (2.32.3 -> 2.34.2) docker/xgboost/3.0-5/requirements.txt:24
LOW DEPCUR-PY Python package `python-dateutil` is minor version(s) behind (2.8.2 -> 2.9.0.post0) docker/xgboost/3.0-5/requirements.txt:22
LOW DEPCUR-PY Python package `numba` is minor version(s) behind (0.61.0 -> 0.65.1) docker/xgboost/3.0-5/requirements.txt:16
LOW DEPCUR-PY Python package `itsdangerous` is minor version(s) behind (2.0.1 -> 2.2.0) docker/xgboost/3.0-5/requirements.txt:11
LOW GHSA-r374-rxx8-8654 paramiko: GHSA-r374-rxx8-8654 docker/xgboost/uv.lock
LOW GHSA-68rp-wp8r-4726 flask: GHSA-68rp-wp8r-4726 docker/xgboost/3.0-5/requirements.txt
LOW GHSA-r374-rxx8-8654 paramiko: GHSA-r374-rxx8-8654 docker/pytorch/2.11/cpu/uv.lock
LOW AIC003 Duplicated implementation block across source files test/ray/sagemaker/common.py:163
LOW AIC003 Duplicated implementation block across source files scripts/vllm/sagemaker_serve.py:16
LOW DKR012 Dockerfile keeps pip download cache docker/xgboost/Dockerfile:103
LOW DKR012 Dockerfile keeps pip download cache docker/xgboost/3.0-5/Dockerfile:217
LOW DKR012 Dockerfile keeps pip download cache docker/xgboost/3.0-5/Dockerfile:162
LOW DKR012 Dockerfile keeps pip download cache docker/xgboost/3.0-5/Dockerfile:118
LOW DKR012 Dockerfile keeps pip download cache docker/xgboost/3.0-5/Dockerfile:66
LOW DKR012 Dockerfile keeps pip download cache docker/vllm_omni/Dockerfile.amzn2023:331
LOW DKR012 Dockerfile keeps pip download cache docker/vllm_omni/Dockerfile.amzn2023:317
LOW DKR012 Dockerfile keeps pip download cache docker/vllm_omni/Dockerfile.amzn2023:227
LOW DKR012 Dockerfile keeps pip download cache docker/vllm_omni/Dockerfile.amzn2023:217
LOW DKR012 Dockerfile keeps pip download cache docker/vllm_omni/Dockerfile.amzn2023:212
LOW DKR012 Dockerfile keeps pip download cache docker/vllm_omni/Dockerfile.amzn2023:208
LOW DKR012 Dockerfile keeps pip download cache docker/vllm_omni/Dockerfile.amzn2023:196
LOW DKR012 Dockerfile keeps pip download cache docker/vllm_omni/Dockerfile.amzn2023:191
LOW DKR012 Dockerfile keeps pip download cache docker/vllm_omni/Dockerfile.amzn2023:75
LOW DKR012 Dockerfile keeps pip download cache docker/vllm_omni/Dockerfile.amzn2023:72
LOW DKR012 Dockerfile keeps pip download cache docker/vllm/Dockerfile.amzn2023:225
LOW DKR012 Dockerfile keeps pip download cache docker/vllm/Dockerfile.amzn2023:215
LOW DKR012 Dockerfile keeps pip download cache docker/vllm/Dockerfile.amzn2023:210
LOW DKR012 Dockerfile keeps pip download cache docker/vllm/Dockerfile.amzn2023:205
LOW DKR012 Dockerfile keeps pip download cache docker/vllm/Dockerfile.amzn2023:200
LOW DKR012 Dockerfile keeps pip download cache docker/vllm/Dockerfile.amzn2023:190
LOW DKR012 Dockerfile keeps pip download cache docker/vllm/Dockerfile.amzn2023:185
LOW DKR012 Dockerfile keeps pip download cache docker/vllm/Dockerfile.amzn2023:69
LOW DKR012 Dockerfile keeps pip download cache docker/vllm/Dockerfile:35
LOW DKR012 Dockerfile keeps pip download cache docker/vllm/Dockerfile:29
LOW DKR012 Dockerfile keeps pip download cache docker/sglang/Dockerfile.amzn2023:263
LOW DKR012 Dockerfile keeps pip download cache docker/sglang/Dockerfile.amzn2023:260
LOW DKR012 Dockerfile keeps pip download cache docker/sglang/Dockerfile.amzn2023:215
LOW DKR012 Dockerfile keeps pip download cache docker/sglang/Dockerfile.amzn2023:158
LOW DKR012 Dockerfile keeps pip download cache docker/sglang/Dockerfile.amzn2023:145
LOW DKR012 Dockerfile keeps pip download cache docker/sglang/Dockerfile.amzn2023:140
LOW DKR012 Dockerfile keeps pip download cache docker/sglang/Dockerfile.amzn2023:130
LOW DKR012 Dockerfile keeps pip download cache docker/sglang/Dockerfile.amzn2023:63
LOW DKR012 Dockerfile keeps pip download cache docker/sglang/Dockerfile:38
LOW DKR012 Dockerfile keeps pip download cache docker/sglang/Dockerfile:34
LOW DKR012 Dockerfile keeps pip download cache docker/pytorch/2.11/Dockerfile.cuda:89
LOW DKR012 Dockerfile keeps pip download cache docker/pytorch/2.11/Dockerfile.cuda:59
LOW DKR008 .dockerignore misses sensitive defaults .dockerignore
LOW AIC005 Duplicate top-level symbol appears in a patch-style file scripts/autocurrency/agent-fix.py:1
LOW AIC002 Source file name looks like an AI patch artifact scripts/autocurrency/agent-fix.py:1
INFO MINED055 [MINED055] Npm Install No Lockfile: Production image runs npm install (resolves new versi… scripts/ray/dockerd_entrypoint.sh:21
INFO MINED073 [MINED073] Redos Greedy Quantifier: Pattern with nested quantifiers like (a+)+ applied to… docs/src/sorter.py:31
INFO MINED077 [MINED077] Python Open No Context: fp = open(path) outside with-block leaks file handles. .github/actions/download-model/download…:46
INFO DEPCUR-PY Python package `PyYAML` is patch version(s) behind (6.0.1 -> 6.0.3) docker/xgboost/3.0-5/requirements.txt:23
INFO DEPCUR-PY Python package `multi-model-server` is patch version(s) behind (1.1.2 -> 1.1.11) docker/xgboost/3.0-5/requirements.txt:15
Reset to top 5 200 findings available (after auto-suppression of test files + won't-fix)

Issue body (markdown)

## Code-quality scan: `aws/deep-learning-containers`

**Score: 56/100 (C+)**  ·  318 findings  ·  scanned 2026-06-05 21:30 UTC  ·  16,087 LOC

| Severity | Count |
|---|---|
| CRITICAL | 2 |
| HIGH | 113 |
| MEDIUM | 93 |
| LOW | 56 |

📊 [Full filterable report](https://repobility.com/scan/ef7e74e6-7da3-4a12-9d46-e87eac765138/)  ·  ![scorecard](https://repobility.com/scan/ef7e74e6-7da3-4a12-9d46-e87eac765138/report.png?v=1780695007-s2)

### Top findings

1. **HIGH** `SEC135` — Auth/permission check missing on AI-generated endpoint
   `scripts/ray/sagemaker_serve.py:118` · CWE-862
2. **HIGH** `SEC114` — path.join / Path() on user-controlled segment without containment check
   `examples/ray/tabular-model/deployment.py:34` · A01:2021 Broken Access Control (path traversal)
3. **HIGH** `SEC103` — LDAP injection — non-constant search filter
   `scripts/vllm/sagemaker_serve.py:28` · A03:2021 Injection
4. **HIGH** `SEC103` — LDAP injection — non-constant search filter
   `scripts/vllm/omni_sagemaker_serve.py:40` · A03:2021 Injection
5. **HIGH** `SEC103` — LDAP injection — non-constant search filter
   `docs/src/sorter.py:31` · A03:2021 Injection

---

**Security note**: this issue is public. If any flagged finding is a real, exploitable vulnerability, please redirect to your `SECURITY.md` policy or open a [private security advisory](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability) instead. We're happy to close this and re-submit privately.

---

_Filed automatically. Close this issue if not useful — we won't refile. Full report: https://repobility.com/scan/ef7e74e6-7da3-4a12-9d46-e87eac765138/_
Already filed
'aws' is on the known-megaproject org list. These projects use auto-triage bots and established security disclosure channels. Unsolicited automated issues from Repobility would be perceived as AI-generated spam. For security findings, follow the project's SECURITY.md policy. For non-security findings, open a focused PR or community discussion instead.
Megaproject â high spam risk
Could not determine 'aws/deep-learning-containers' star count (GitHub API rate-limited or unreachable). When in doubt about repo size, prefer opening a focused PR or a discussion rather than an issue.
Already filed
180/340 findings (53%) on this scan are already flagged as test-file, won't-fix, or suppressed. The scan is too noisy to file as a single issue. Curate down to specific actionable findings, or address the FP source first.
I read the warnings â override Cancel

The button opens GitHubâs new-issue page in a new tab. You will see the title + body pre-filled â review, edit if you want, then click GitHubâs "Submit new issue" button. Repobility never posts anything on your behalf.

For real security findings on big repos: use the project's SECURITY.md or private advisory flow instead of a public issue.