15
Total
0
Critical
5
High
10
Medium
Findings
unknownDynamic code evaluation via eval()
Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.
23: return api()
24: if self is ScoreSource.EVAL:
>>> 25: return eval()Report false positiveDecoded base64 content: =��y�v&�y��zw
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: =��y�v&�y��zw
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: =��y�v&�y��zw
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: =��y�v&�y��zw
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positivePossible Base64-encoded payload (long encoded string)
Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.
4:
5: [](https://opensource.org/licenses/MIT)
>>> 6: [](https://github.com/langfuse/langfuse-python/actions/workflows/ci.yml?query=branch%3Amain)
7: [](https://pypi.python.org/pypi/langfuse)
8: [](https://github.com/langfuse/langfuse)Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
177: ):
178: # Make HTTP request to Service B
>>> 179: response = requests.get("https://service-b.example.com/api")
180: # user_id and session_id are now in HTTP headers
181: Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.5 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.5 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
294: parsed_media_reference["media_id"]
295: )
>>> 296: media_content = requests.get(
297: media_data.url, timeout=content_fetch_timeout_seconds
298: )Report false positiveHigh-entropy string (4.5 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positivePossible Base64-encoded payload (long encoded string)
Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.
30:
31: [](https://opensource.org/licenses/MIT)
>>> 32: [](https://github.com/langfuse/langfuse-python/actions/workflows/ci.yml?query=branch%3Amain)
33: [](https://pypi.python.org/pypi/langfuse)
34: [](https://github.com/langfuse/langfuse)Report false positiveScan History
| Date | Risk | Findings | Files | Duration |
|---|---|---|---|---|
| Feb 23, 2026 | low | 15 | 346 | 0.00s |
| Feb 22, 2026 | low | 15 | 346 | 0.00s |