bandit · Issues· 258 open

f-strings marked with a `# nosec BXXX` show an incorrect warning about no failed tests appears

Methods to Bypass Bandit Detection

[Security] tarfile.extractall without member validation in examples/tarfile_extractall.py

Sarif formatter physicalLocation calculation error

Add report formatter for Github Actions annotations

yaml_load should not be B5xx cryptography group

Add check for decompression bomb vulnerabilities

Baseline matching ignores line number and uses set membership, not count

pre-commit hook can't read version --> wrong URL generated

`bandit -ii -ll -ii -ll` raises an `IndexError`

Test issue

Unable to exclude directories when running the CLI

B501 and B113 skip requests.request(), while httpx.request() is checked

pysnmp under new ownership with breaking compatilbility

Troubles with conflicting cryptography and cffi