GitHubSecurityLab / seclab-taskflow-agent

1. high Semgrep Found 'importlib.resources', which is a module only available on Python 3.7+. This does not work in lower versions, and therefore is not backwards compatible. Use importlib_resources instead for older Python versions. /src/seclab_taskflow_agent/available_tools.py:14 99%
2. high Semgrep the `encoding` argument to Popen is only available on Python 3.6+ /src/seclab_taskflow_agent/shell_utils.py:22 99%
3. high Dependency checker CVE found: GHSA-7xgj-8392-5q4r in fastmcp==3.2.0 — ## Maintainer assessment and remediation This report is accepted as a FastMCP authorization vulnera pyproject.toml 99%
4. high Dependency checker CVE found: CVE-2026-96760 in authlib==1.6.12 — Authlib (prior to 1.9.0) contains a signature verification bypass vulnerability. The JsonWebSignatur pyproject.toml 99%
5. high Dependency checker CVE found: CVE-2026-114605 in dnspython==2.8.0 — ### Impact A maliciously crafted DNS message may cause dns.name.from_wire_parser() to use excessive pyproject.toml 98%
6. high Dependency checker CVE found: CVE-2026-114615 in authlib==1.6.12 — ## Summary `OctKey.import_key()` carries the only guard that stops an asymmetric public key from be pyproject.toml 98%
7. high Dependency checker CVE found: CVE-2026-114616 in authlib==1.6.12 — Reporter: Cavan Loughran, Celvex Group Inc. Summary Authlib's symmetric (oct) key handling accepts pyproject.toml 98%
8. high Dependency checker CVE found: CVE-2026-114618 in authlib==1.6.12 — ## Description ### Summary Authlib's default RFC 7523 JWT bearer grant leaves `get_audiences()` em pyproject.toml 97%
9. high Dependency checker CVE found: CVE-2026-114614 in authlib==1.6.12 — ### Summary `authlib.common.security.is_secure_transport()` is used throughout Authlib to enforce th pyproject.toml 95%
10. high Dependency checker CVE found: PYSEC-2026-4320 in certifi==2025.6.15 — Certifi versions before 2026.10.18 include the `emSign ECC Root CA - G3` root certificate in their b pyproject.toml 95%
11. high Dependency checker CVE found: CVE-2026-114620 in authlib==1.6.12 — ### Summary Authlib's RFC 9101 (JAR) extension passes the attacker-controlled `request_uri` authori pyproject.toml 94%
12. high Dependency checker CVE found: CVE-2026-114617 in authlib==1.6.12 — ### Summary `OpenIDMixin.parse_id_token()` reads the `nonce_supported` claim from the ID token it i pyproject.toml 94%
13. high Semgrep Using variable interpolation `${{...}}` with `github` context data in a `run:` step could allow an attacker to inject their own code into the runner. This would allow them to steal secrets and code. `github` context data can have arbitrary user input and should be treated as untrusted. Instead, use an intermediate environment variable with `env:` to store the data and use the environment variable in the `run:` script. Be sure to use double-quotes the environment variable, like this: "$ENVVAR". /.github/workflows/release.yml:52 57%
14. high Semgrep Using variable interpolation `${{...}}` with `github` context data in a `run:` step could allow an attacker to inject their own code into the runner. This would allow them to steal secrets and code. `github` context data can have arbitrary user input and should be treated as untrusted. Instead, use an intermediate environment variable with `env:` to store the data and use the environment variable in the `run:` script. Be sure to use double-quotes the environment variable, like this: "$ENVVAR". /.github/workflows/release.yml:36 57%
15. high Semgrep By not specifying a USER, a program in the container may run as 'root'. This is a security hazard. If an attacker can control a process running as root, they may have control over the container. Ensure that the last USER in a Dockerfile is a USER other than 'root'. /docker/Dockerfile:48 22%
16. medium Semgrep Detected a python logger call with a potential hardcoded secret "token usage model=%s input=%d output=%d " "cache_write=%d cache_read=%d" being logged. This may lead to secret credentials being exposed. Make sure that the logger is not logging sensitive information. /src/seclab_taskflow_agent/_stream.py:134 99%
17. medium Semgrep GitHub Actions step uses a mutable tag or branch reference. Tags and branch names can be silently repointed by the action owner, enabling supply-chain attacks — as seen in the trivy-action and kics-github-action compromises. Pin the reference to a full 40-character commit SHA instead, e.g. `uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608`. /.github/workflows/release.yml:43 52%
18. medium Semgrep GitHub Actions step uses a mutable tag or branch reference. Tags and branch names can be silently repointed by the action owner, enabling supply-chain attacks — as seen in the trivy-action and kics-github-action compromises. Pin the reference to a full 40-character commit SHA instead, e.g. `uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608`. /.github/workflows/publish-to-pypi.yaml:71 52%
19. medium Semgrep GitHub Actions step uses a mutable tag or branch reference. Tags and branch names can be silently repointed by the action owner, enabling supply-chain attacks — as seen in the trivy-action and kics-github-action compromises. Pin the reference to a full 40-character commit SHA instead, e.g. `uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608`. /.github/workflows/publish-to-testpypi.yaml:84 52%
20. medium Semgrep GitHub Actions step uses a mutable tag or branch reference. Tags and branch names can be silently repointed by the action owner, enabling supply-chain attacks — as seen in the trivy-action and kics-github-action compromises. Pin the reference to a full 40-character commit SHA instead, e.g. `uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608`. /.github/workflows/publish-to-testpypi.yaml:79 52%
21. medium Semgrep GitHub Actions step uses a mutable tag or branch reference. Tags and branch names can be silently repointed by the action owner, enabling supply-chain attacks — as seen in the trivy-action and kics-github-action compromises. Pin the reference to a full 40-character commit SHA instead, e.g. `uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608`. /.github/workflows/codeql.yml:35 52%
22. medium Semgrep GitHub Actions step uses a mutable tag or branch reference. Tags and branch names can be silently repointed by the action owner, enabling supply-chain attacks — as seen in the trivy-action and kics-github-action compromises. Pin the reference to a full 40-character commit SHA instead, e.g. `uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608`. /.github/workflows/codeql.yml:42 52%
23. medium Semgrep GitHub Actions step uses a mutable tag or branch reference. Tags and branch names can be silently repointed by the action owner, enabling supply-chain attacks — as seen in the trivy-action and kics-github-action compromises. Pin the reference to a full 40-character commit SHA instead, e.g. `uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608`. /.github/workflows/publish-to-pypi.yaml:66 52%
24. medium Bandit Probable insecure usage of temp file/directory. /release_tools/publish_docker.py:31 25%
25. low GuardDog Detects reading of environment variables (credential access, often contains secrets) [threat-runtime-environment-read] /src/seclab_taskflow_agent/capi.py:173 93%
26. low GuardDog Detects reading of environment variables (credential access, often contains secrets) [threat-runtime-environment-read] /src/seclab_taskflow_agent/capi.py:176 93%
27. low Bandit Consider possible security implications associated with the subprocess module. /src/seclab_taskflow_agent/shell_utils.py:7 13%
28. low Bandit Consider possible security implications associated with the subprocess module. /release_tools/copy_files.py:6 13%
29. low Bandit Consider possible security implications associated with the subprocess module. /release_tools/publish_docker.py:4 13%
30. low Bandit Consider possible security implications associated with the subprocess module. /src/seclab_taskflow_agent/mcp_servers/codeql/client.py:9 13%
31. low Bandit Consider possible security implications associated with the subprocess module. /src/seclab_taskflow_agent/mcp_transport.py:29 13%
32. low Bandit Starting a process with a partial executable path /release_tools/copy_files.py:43 12%
33. low Bandit Starting a process with a partial executable path /release_tools/copy_files.py:51 12%
34. low Bandit Starting a process with a partial executable path /release_tools/copy_files.py:53 12%
35. low Bandit Starting a process with a partial executable path /release_tools/copy_files.py:56 12%
36. low Bandit Starting a process with a partial executable path /release_tools/copy_files.py:72 12%
37. low Bandit Starting a process with a partial executable path /release_tools/publish_docker.py:27 12%
38. low Bandit Starting a process with a partial executable path /release_tools/publish_docker.py:9 12%
39. low Bandit Starting a process with a partial executable path /release_tools/publish_docker.py:23 12%
40. low Bandit subprocess call - check for execution of untrusted input. /src/seclab_taskflow_agent/mcp_transport.py:156 3%
41. low Bandit subprocess call - check for execution of untrusted input. /release_tools/copy_files.py:43 3%
42. low Bandit subprocess call - check for execution of untrusted input. /release_tools/copy_files.py:51 3%
43. low Bandit subprocess call - check for execution of untrusted input. /release_tools/copy_files.py:53 3%
44. low Bandit subprocess call - check for execution of untrusted input. /release_tools/copy_files.py:56 3%
45. low Bandit subprocess call - check for execution of untrusted input. /release_tools/copy_files.py:72 3%
46. low Bandit subprocess call - check for execution of untrusted input. /release_tools/publish_docker.py:9 3%
47. low Bandit subprocess call - check for execution of untrusted input. /release_tools/publish_docker.py:23 3%
48. low Bandit subprocess call - check for execution of untrusted input. /release_tools/publish_docker.py:27 3%
49. low Bandit subprocess call - check for execution of untrusted input. /src/seclab_taskflow_agent/mcp_servers/codeql/client.py:34 3%
50. low Bandit subprocess call - check for execution of untrusted input. /src/seclab_taskflow_agent/shell_utils.py:22 3%
51. low Bandit subprocess call - check for execution of untrusted input. /src/seclab_taskflow_agent/mcp_servers/codeql/client.py:79 3%
52. low Dependency checker Loose version constraint: 'Jinja2>=3.1.0' — attacker could push malicious update pyproject.toml 2%
53. low Dependency checker Loose version constraint: 'github-copilot-sdk>=0.2.2,<0.3' — attacker could push malicious update pyproject.toml 2%
54. low Dependency checker Loose version constraint: 'anthropic>=0.50,<1' — attacker could push malicious update pyproject.toml 2%

No findings match these filters. Clear filters