<< Back to security report
Repositoryluongnv89/claude-howto →
Commit1e16914 →
VerdictPASS
Score90
DateSep 2, 2026
| Severity | Rule | Message | File:Line |
|---|---|---|---|
| MEDIUM | python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected | Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. | luongnv89/claude-howto/brand-voice-6044cff9/scripts/check_links.py:73 → |
| MEDIUM | python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected | Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. | luongnv89/claude-howto/brand-voice-6044cff9/scripts/vendor_assets.py:73 → |