txtai
v9.5.0All-in-one open-source AI framework for semantic search, LLM orchestration and language model workflows
10
Total
0
Critical
6
High
4
Medium
Findings
unknownDynamic code evaluation via eval()
Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.
144:
145: # Put model in eval mode to disable weight updates and return (model, tokenizer)
>>> 146: return (model.eval(), tokenizer)
147:
148: def parse(self, updates):Report false positiveDecoded base64 content: �h2�^�Z+ ��jR�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �h2�^�Z+1�$y��
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �h2�^�Z+ ��jR�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �h2�^�Z+1�$y��
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �h2�^�Z+1�$y��
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
86: response = requests.get(self.url, params=params)
87: else:
>>> 88: response = requests.post(self.url, json=params)
89:
90: # Parse data based on content-typeReport false positivePython urllib network request
Detected by automated pattern matching (rule NS-002) with medium confidence. May be a false positive.
8:
9: from urllib.parse import urlparse
>>> 10: from urllib.request import urlopen, Request
11:
12: from .filetohtml import FileToHTMLReport false positivePython urllib network request
Detected by automated pattern matching (rule NS-002) with medium confidence. May be a false positive.
6: import tempfile
7:
>>> 8: from urllib.request import urlretrieve
9: from urllib.parse import urlparse
10: Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
84: # Run request
85: if self.method and self.method.lower() == "get":
>>> 86: response = requests.get(self.url, params=params)
87: else:
88: response = requests.post(self.url, json=params)Report false positiveScan History
| Date | Risk | Findings | Files | Duration |
|---|---|---|---|---|
| Feb 25, 2026 | low | 10 | 261 | 0.00s |
| Feb 23, 2026 | low | 10 | 261 | 0.00s |
| Feb 22, 2026 | low | 10 | 261 | 0.00s |