Scan report
openmediavault / openmediavault
Could an attacker exploit mistakes in this code?
Real issues worth reviewing before you rely on this code.
- High
- 3
- Medium
- 10
- Low
- 39
Sources: Bandit, Semgrep, pip-audit
Does this code look like it is trying to cause harm?
No issues of this kind were found.
- High
- 20
- Medium
- 0
- Low
- 6
Sources: YARA, ClamAV, GuardDog, dependency checker
- Likely real
- 8
- Uncertain
- 5
- Likely noise
- 65
The risk classifier rates every finding for how likely it is to be a real issue. Likely noise still counts, just much less.
What we found, in plain English
The repository has a medium vulnerability score of 38.0, which indicates that an attacker could easily exploit insecure coding patterns to steal data or crash the system. However, the scan reports that there are no signs of malicious intent, meaning the code is not trying to harm users intentionally but rather contains known security risks. Most of these issues stem from common mistakes in how developers write code, such as using unsafe libraries or handling user input incorrectly, rather than deliberate attacks. While some files contain sensitive keys and dangerous download links that need immediate attention, the overall codebase does not appear to be maliciously designed.
Written by a local language model from the findings below. The risk scores come from the classifier, not from this summary.
Detections by engine
Score over time
Overall score each time this repository was scanned.
Findings
Highest severity first. Select a finding to see the code and what it means.
-
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/productinfo.py line 41
- Likely real
- Yes, 85% confidence
The native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. Do not use this library to parse untrusted input. Instead the Python documentation recommends using `defusedxml`.
tree = xml.etree.ElementTree.parse(prod_file) -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/etc/ssl/private/openmediavault.key line 1
- Likely real
- Uncertain, 45% confidence
Private Key detected. This is a sensitive credential and should not be hardcoded here. Instead, store this in a separate, private file.
-----BEGIN RSA PRIVATE KEY----- MIICWwIBAAKBgQCkLeCH2BMLWFZgBrulrXgrA+qaAsrQlEgHNf9N76tqWfemMyhg -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/mkrrdgraph.py line 47
- Likely real
- Uncertain, 35% confidence
Starting a process with a shell, possible injection detected, security issue.
46 # return openmediavault.subprocess.check_output(['rrdtool', 'graph', *args]) 47 return os.system(' '.join(['rrdtool', 'graph', *args, '>/dev/null'])) 48 -
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /README.md
- Likely real
- Probably noise, 1% confidence
YARA rule matched: detect_download_and_execute — Downloads a remote resource AND executes it - the actually dangerous combination, not just downloading alone
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /vagrant/debian/install.sh
- Likely real
- Probably noise, 1% confidence
YARA rule matched: detect_download_and_execute — Downloads a remote resource AND executes it - the actually dangerous combination, not just downloading alone
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault.mk
- Likely real
- Probably noise, 1% confidence
YARA rule matched: detect_download_and_execute — Downloads a remote resource AND executes it - the actually dangerous combination, not just downloading alone
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault/srv/salt/omv/deploy/collectd/05stop.sls
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault/srv/salt/omv/deploy/postfix/90cron.sls
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault/srv/salt/omv/deploy/apticron/20cron.sls
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /.git/index
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault-md/srv/salt/omv/deploy/mdadm/files/etc-default-mdadm.j2
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault-md/srv/salt/omv/deploy/mdadm/10cron.sls
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault-clamav/srv/salt/omv/deploy/clamav/default.sls
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault/debian/changelog
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault/srv/salt/omv/deploy/cron/20userdefined.sls
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault/srv/salt/omv/deploy/cron/10powermanagement.sls
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault/srv/salt/omv/deploy/rsync/default.sls
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault/srv/salt/omv/deploy/collectd/95start.sls
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault/srv/salt/omv/deploy/samba/40recyclebin.sls
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault/srv/salt/omv/setup/shell/10root_bashrc.sls
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault/srv/salt/_states/omv_dpkg.py
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault/debian/openmediavault.postinst
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault/usr/sbin/omv-env
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this
-
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/workbench/src/app/shared/services/constraint.service.ts line 179
- Likely real
- Yes, 100% confidence
RegExp() called with a `data` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled input, consider performing input validation or use a regex checking/sanitization library such as https://www.npmjs.com/package/recheck to verify that the regex does not appear vulnerable to ReDoS.
result = RegExp(arg1 as string).exec(arg0) !== null; -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/workbench/src/app/shared/services/constraint.service.ts line 179
- Likely real
- Yes, 100% confidence
RegExp() called with a `node` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled input, consider performing input validation or use a regex checking/sanitization library such as https://www.npmjs.com/package/recheck to verify that the regex does not appear vulnerable to ReDoS.
result = RegExp(arg1 as string).exec(arg0) !== null; -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/workbench/src/app/core/pages/about-page/about-page.component.html line 42
- Likely real
- Yes, 81% confidence
Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks.
<form action="https://www.paypal.com/cgi-bin/webscr" method="post" target="_blank"> <input type="hidden" name="cmd" value="_s-xclick"> <input type="hidden" name="hosted_button_id" value="95MF5UQ66PW2E"> <input class="omv-text-center" type="image" src="./assets/images/donate.gif" name="submit" alt="PayPal - The safer, easier way to pay online!"> </form> -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/workbench/src/app/core/components/welcome-panel/welcome-panel.component.html line 8
- Likely real
- Yes, 80% confidence
Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks.
<form action="https://www.paypal.com/cgi-bin/webscr" method="post" target="_blank"> <input type="hidden" name="cmd" value="_s-xclick"> <input type="hidden" name="hosted_button_id" value="95MF5UQ66PW2E"> <input class="omv-text-center" type="image" src="./assets/images/donate.gif" name="submit" alt="PayPal - The safer, easier way to pay online!"> </form> -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/workbench/src/app/shared/forms/custom-validators.ts line 222
- Likely real
- Yes, 69% confidence
RegExp() called with a `pattern` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled input, consider performing input validation or use a regex checking/sanitization library such as https://www.npmjs.com/package/recheck to verify that the regex does not appear vulnerable to ReDoS.
test = (value: any) => new RegExp(pattern as string).test(value); -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/productinfo.py line 41
- Likely real
- Yes, 56% confidence
Using xml.etree.ElementTree.parse to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.etree.ElementTree.parse with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called
40 ) 41 tree = xml.etree.ElementTree.parse(prod_file) 42 for child in tree.iter(): -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /deb/openmediavault-md/usr/sbin/omv-rmraid line 31
- Likely real
- Uncertain, 49% confidence
The special variable IFS affects how splitting takes place when expanding unquoted variables. Don't set it globally. Prefer a dedicated utility such as 'cut' or 'awk' if you need to split input data. If you must use 'read', set IFS locally using e.g. 'IFS="," read -a my_array'.
IFS="," -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/device/storage.py line 276
- Likely real
- Uncertain, 49% confidence
Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code.
mod = importlib.import_module( '..plugins.{}'.format(module_name), __name__ ) -
- Engine
- Semgrep · Pattern-based code analysis
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/workbench/src/app/core/pages/about-page/about-page.component.html line 38
- Likely real
- Uncertain, 45% confidence
This link points to a plaintext HTTP URL. Prefer an encrypted HTTPS URL if possible.
openmediavault is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the <a href="http://www.gnu.org/licenses">GNU General Public License</a> for more details. -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/srv/salt/_states/omv_dpkg.py line 44
- Likely real
- Probably noise, 25% confidence
Probable insecure usage of temp file/directory.
43 try: 44 divert_to = os.path.join('/tmp', name.replace(os.path.sep, '_')) 45 ret['comment'] = openmediavault.procutils.check_output( -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/productinfo.py line 24
- Likely real
- Yes, 51% confidence
Using xml.etree.ElementTree to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.etree.ElementTree with the equivalent defusedxml package, or make sure defusedxml.defuse_stdlib() is called.
23 import subprocess 24 import xml.etree.ElementTree 25 -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/fs/__init__.py line 22
- Likely real
- Probably noise, 14% confidence
Consider possible security implications associated with the subprocess module.
21 import os 22 import subprocess 23 from typing import List, Optional -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/productinfo.py line 23
- Likely real
- Probably noise, 13% confidence
Consider possible security implications associated with the subprocess module.
22 23 import subprocess 24 import xml.etree.ElementTree -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/procutils.py line 36
- Likely real
- Probably noise, 13% confidence
Consider possible security implications associated with the subprocess module.
35 import os 36 import subprocess 37 -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/srv/salt/_states/omv_dpkg.py line 22
- Likely real
- Probably noise, 13% confidence
Consider possible security implications associated with the subprocess module.
21 import os.path 22 import subprocess 23 -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/monit.py line 24
- Likely real
- Probably noise, 13% confidence
Consider possible security implications associated with the subprocess module.
23 import re 24 import subprocess 25 -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/share/openmediavault/firstaid/modules.d/40restore_config_backup.py line 22
- Likely real
- Probably noise, 13% confidence
Consider possible security implications associated with the subprocess module.
21 import glob 22 import subprocess 23 import sys -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/share/openmediavault/firstaid/modules.d/50fix_rrd_database.py line 24
- Likely real
- Probably noise, 13% confidence
Consider possible security implications associated with the subprocess module.
23 import os 24 import subprocess 25 import sys -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/procutils.py line 53
- Likely real
- Probably noise, 3% confidence
subprocess call - check for execution of untrusted input.
52 _modify_kwargs(kwargs) 53 return subprocess.call(*popenargs, **kwargs) 54 -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/procutils.py line 58
- Likely real
- Probably noise, 3% confidence
subprocess call - check for execution of untrusted input.
57 _modify_kwargs(kwargs) 58 return subprocess.check_call(*popenargs, **kwargs) 59 -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/procutils.py line 63
- Likely real
- Probably noise, 3% confidence
subprocess call - check for execution of untrusted input.
62 _modify_kwargs(kwargs) 63 return subprocess.check_output(*popenargs, **kwargs) 64 -
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /README.md
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault-k8s/srv/salt/omv/deploy/k3s/default.sls
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /pbuilder/Makefile
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /vagrant/debian/install.sh
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /deb/openmediavault.mk
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /install.sh
- Likely real
- Probably noise, 0% confidence
YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version
-
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/config/database.py line 474
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
473 """ 474 assert isinstance(elements, list) 475 if self.model.is_iterable: -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/srv/salt/_modules/omv_utils.py line 276
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
275 """ 276 assert isinstance(value, str) 277 return value.strip(chars) -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/srv/salt/_modules/omv_utils.py line 293
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
292 """ 293 assert isinstance(value, str) 294 return value.lstrip(chars) -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/srv/salt/_modules/omv_utils.py line 310
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
309 """ 310 assert isinstance(value, str) 311 return value.rstrip(chars) -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/srv/salt/_modules/omv_utils.py line 398
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
397 """ 398 assert isinstance(value, str) 399 return openmediavault.stringutils.escape_blank(value, octal) -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/srv/salt/_modules/omv_utils.py line 470
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
469 """ 470 assert isinstance(value, bool) 471 return not value -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/srv/salt/_modules/omv_utils.py line 481
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
480 """ 481 assert isinstance(obj, dict) 482 dd = openmediavault.collectiontools.DotDict(obj) -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/collectiontools.py line 54
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
53 """ 54 assert isinstance(d, dict) 55 result = {} -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/config/database.py line 194
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
193 """ 194 assert isinstance(obj, openmediavault.config.Object) 195 return self.is_unique_by_filter( -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/config/database.py line 226
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
225 """ 226 assert isinstance(obj, openmediavault.config.Object) 227 assert isinstance(filter, DatabaseFilter) -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/config/database.py line 227
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
226 assert isinstance(obj, openmediavault.config.Object) 227 assert isinstance(filter, DatabaseFilter) 228 # If the object is iterable and not new, then we need to modify the -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/config/database.py line 254
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
253 """ 254 assert isinstance(obj, openmediavault.config.Object) 255 query = openmediavault.config.DatabaseDeleteQuery(obj) -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/config/database.py line 300
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
299 """ 300 assert isinstance(obj, openmediavault.config.Object) 301 query = openmediavault.config.DatabaseSetQuery(obj) -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/config/database.py line 431
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
430 """ 431 assert lxml.etree.iselement(element) 432 result = {} -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/stringutils.py line 230
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
229 assert isinstance(value, bool) 230 assert isinstance(answers, str) 231 parts = answers.split(',') -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/config/database.py line 511
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
510 def _process_value(element, value): 511 assert lxml.etree.iselement(element) 512 if isinstance(value, list): -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/config/database.py line 535
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
534 535 assert isinstance(dictionary, dict) 536 assert lxml.etree.iselement(element) -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/config/database.py line 536
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
535 assert isinstance(dictionary, dict) 536 assert lxml.etree.iselement(element) 537 for sub_key, sub_value in dictionary.items(): -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/config/database.py line 633
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
632 """ 633 assert isinstance(filter, DatabaseFilter) 634 if not "operator" in filter: -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/config/database.py line 728
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
727 if not filter is None: 728 assert isinstance(filter, DatabaseFilter) 729 self._filter = filter -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/config/database.py line 794
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
793 def __init__(self, obj): 794 assert isinstance(obj, openmediavault.config.Object) 795 self._obj = obj -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/config/database.py line 824
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
823 def __init__(self, obj): 824 assert isinstance(obj, openmediavault.config.Object) 825 self._obj = obj -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/config/database.py line 861
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
860 parent_element = root_element.find(xpath) 861 assert lxml.etree.iselement(parent_element) 862 # Create and append the child element to the parent element. -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/config/database.py line 900
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
899 parent = element.getparent() 900 assert lxml.etree.iselement(parent) 901 # Create the clone of the element and set the new values. -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/config/database.py line 911
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
910 def __init__(self, obj): 911 assert isinstance(obj, openmediavault.config.Object) 912 self._obj = obj -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/stringutils.py line 199
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
198 """ 199 assert isinstance(path, str) 200 return '{}/'.format(path.rstrip('/')) -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/stringutils.py line 218
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
217 """ 218 assert isinstance(value, str) 219 for i in ['\\', '\'', '"', '$', '`']: -
- Engine
- Bandit · Python security linter
- Counts towards
- Vulnerability
- File
- /deb/openmediavault/usr/lib/python3/dist-packages/openmediavault/stringutils.py line 229
- Likely real
- Probably noise, 0% confidence
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
228 """ 229 assert isinstance(value, bool) 230 assert isinstance(answers, str)
No findings match these filters.