E2E FPS benchmark tests #203
Open
Annotations
4 errors
|
Add PR Annotations for Semgrep Findings:
modelconverter/utils/subprocess.py#L175
the `encoding` argument to Popen is only available on Python 3.6+
|
|
Add PR Annotations for Semgrep Findings:
modelconverter/utils/subprocess.py#L175
the `errors` argument to Popen is only available on Python 3.6+
|
|
Add PR Annotations for Semgrep Findings:
modelconverter/utils/docker_utils.py#L220
Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.
|
|
Add PR Annotations for Semgrep Findings:
modelconverter/packages/multistage_exporter.py#L116
Detected the use of exec(). exec() can be dangerous if used to evaluate dynamic content. If this content can be input from outside the program, this may be a code injection vulnerability. Ensure evaluated content is not definable by external sources.
|
Loading