Skip to content

Pull requests: PyCQA/bandit

Pull request creation is restricted
69 Open 597 Closed
69 Open 597 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Bump docker/login-action from 4.5.1 to 4.6.0 dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
#1466 opened Aug 3, 2026 by dependabot Bot Loading…
Detect requests.request() calls without a timeout in B113
#1463 opened Jul 24, 2026 by arpitjain099 Loading…
Add cloudpickle to pickle blacklists (B403/B301)
#1462 opened Jul 23, 2026 by rayair250-droid Loading…
1
feat: add B905 plugin for Flask send_file() with request-controlled path
#1459 opened Jul 19, 2026 by Varshith-Kali Loading…
1
Detect unsafe tarfile extract calls
#1457 opened Jul 8, 2026 by 0xTaoZ Loading…
1
Honor quiet flag for early startup log messages
#1452 opened Jul 5, 2026 by citizen204 Loading…
1
1
Recognize safe extraction filters and fix member call handling in B202
#1451 opened Jul 5, 2026 by citizen204 Loading…
1
Detect local subclasses of Markup in B704
#1446 opened Jul 1, 2026 by ChihebBENCHEIKH1 Loading…
1
fix(cli): clamp severity/confidence counts to valid ranking range
#1443 opened Jun 26, 2026 by itxsamad1 Loading…
1
B202: detect tarfile extractall imported via a from-import
#1442 opened Jun 24, 2026 by arpitjain099 Loading…
1
fix(B614): suppress false positive on non-literal weights_only; add torch.jit.load regression coverage
#1441 opened Jun 22, 2026 by DevamShah Loading…
Fixes #1397
#1439 opened Jun 15, 2026 by parasraju Loading…
Detect empty string socket binds in B104
#1438 opened Jun 15, 2026 by Kurrisua Loading…
1
Clarify Bandit Python version guidance
#1436 opened Jun 12, 2026 by Himanshuagrawal4 Loading…
1
Add README installation guidance
#1437 opened Jun 12, 2026 by Himanshuagrawal4 Loading…
1
fix(B104): detect empty string '' as wildcard bind address
#1434 opened Jun 9, 2026 by nilavra17ghosh Loading…
1
4
Avoid full report when all files are skipped
#1430 opened Jun 1, 2026 by Himanshuagrawal4 Loading…
1
fix: clamp severity/confidence index to prevent IndexError (closes #1423)
#1429 opened May 28, 2026 by botbikamordehai2-sketch Loading…
1
Add B203: zipfile.extractall without path validation (Zip Slip / CWE-22)
#1416 opened May 16, 2026 by gugacyber Loading…
Detect empty-string wildcard host in B104 bind() calls
#1415 opened May 13, 2026 by mokashang Loading…
1
fix: detect unsafe tarfile.extract() in B202
#1414 opened May 12, 2026 by dashitongzhi Loading…
1
3
Detect verify=False on Session/Client instance methods in B501
#1411 opened May 10, 2026 by jonasboos Loading…
1
4
Detect dangerous chmod with stat module constants in B103
#1410 opened May 10, 2026 by jonasboos Loading…
1
5
Detect unsafe tarfile.extract() in B202 plugin
#1409 opened May 10, 2026 by jonasboos Loading…
1
8
Fix #nosec with test ID not counted in Total lines skipped
#1408 opened May 10, 2026 by jonasboos Loading…
1
3
ProTip! Updated in the last three days: updated:>2026-07-31.