Search results

B704 false negative for local Markup subclasses (CVE-2025-54384)

bugSomething isn't workingSomething isn't working

Status: Open.

#1405 In PyCQA/bandit;

· invoke1442 opened on Apr 28, 2026

B701: Extend Jinja2 checks to cover dynamic template source execution

enhancementNew feature or requestNew feature or request

Status: Open.

#1404 In PyCQA/bandit;

· invoke1442 opened on Apr 28, 2026

Proposal: Detecting Flask file-serving API misuse

enhancementNew feature or requestNew feature or request

Status: Open.

#1403 In PyCQA/bandit;

· invoke1442 opened on Apr 28, 2026

Feature request (with my own implementation): add a plugin which detects common SSRF cases where user-controlled URLs flow into outbound HTTP requests

enhancementNew feature or requestNew feature or request

Status: Open.

#1401 In PyCQA/bandit;

· invoke1442 opened on Apr 27, 2026

Methods to Bypass Bandit Detection

bugSomething isn't workingSomething isn't working

Status: Open.

#1399 In PyCQA/bandit;

· aT0ngMu opened on Apr 20, 2026

False negative: narrow argument-shape checks in B508/B509

bugSomething isn't workingSomething isn't working

Status: Open.

#1397 In PyCQA/bandit;

· 9iang22 opened on Apr 19, 2026

False negative: B104 misses bind(("", port)) wildcard host

bugSomething isn't workingSomething isn't working

Status: Open.

#1395 In PyCQA/bandit;

· 9iang22 opened on Apr 19, 2026

False negative: B501 misses verify=False on requests.Session / httpx.Client instance methods

bugSomething isn't workingSomething isn't working

Status: Open.

#1394 In PyCQA/bandit;

· 9iang22 opened on Apr 17, 2026

False negative: B202 unsafe tarfile.extract() not detected

bugSomething isn't workingSomething isn't working

Status: Open.

#1392 In PyCQA/bandit;

· 9iang22 opened on Apr 17, 2026

False negative: B103 fails to detect dangerous permissions set via stat module constants

bugSomething isn't workingSomething isn't working

Status: Open.

#1390 In PyCQA/bandit;

· 9iang22 opened on Apr 15, 2026

False Negatives in B105/B106/B107 Hardcoded Password Detection

bugSomething isn't workingSomething isn't working

Status: Open.

#1383 In PyCQA/bandit;

· sarr424 opened on Apr 7, 2026

Follow-up on GHSA-ggq6-wv5j-cpfg

bugSomething isn't workingSomething isn't working

Status: Open.

#1381 In PyCQA/bandit;

· rise0311 opened on Apr 1, 2026