Skip to content

Pull requests: PyCQA/bandit

New pull request New
63 Open 594 Closed
63 Open 594 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Detect local subclasses of Markup in B704
#1446 opened Jul 1, 2026 by ChihebBENCHEIKH1 Loading…
1
fix(B202): avoid AttributeError crash when extractall members= callable is not a bare name
#1445 opened Jul 1, 2026 by Synvoya Loading…
fix(cli): clamp severity/confidence counts to valid ranking range
#1443 opened Jun 26, 2026 by itxsamad1 Loading…
1
B202: detect tarfile extractall imported via a from-import
#1442 opened Jun 24, 2026 by arpitjain099 Loading…
1
fix(B614): suppress false positive on non-literal weights_only; add torch.jit.load regression coverage
#1441 opened Jun 22, 2026 by DevamShah Loading…
Fixes #1397
#1439 opened Jun 15, 2026 by parasraju Loading…
Detect empty string socket binds in B104
#1438 opened Jun 15, 2026 by Kurrisua Loading…
1
Clarify Bandit Python version guidance
#1436 opened Jun 12, 2026 by Himanshuagrawal4 Loading…
1
Add README installation guidance
#1437 opened Jun 12, 2026 by Himanshuagrawal4 Loading…
1
fix(B104): detect empty string '' as wildcard bind address
#1434 opened Jun 9, 2026 by nilavra17ghosh Loading…
1
4
Avoid full report when all files are skipped
#1430 opened Jun 1, 2026 by Himanshuagrawal4 Loading…
1
fix: clamp severity/confidence index to prevent IndexError (closes #1423)
#1429 opened May 28, 2026 by botbikamordehai2-sketch Loading…
1
Add B203: zipfile.extractall without path validation (Zip Slip / CWE-22)
#1416 opened May 16, 2026 by gugacyber Loading…
Detect empty-string wildcard host in B104 bind() calls
#1415 opened May 13, 2026 by mokashang Loading…
1
fix: detect unsafe tarfile.extract() in B202
#1414 opened May 12, 2026 by dashitongzhi Loading…
1
3
Detect verify=False on Session/Client instance methods in B501
#1411 opened May 10, 2026 by jonasboos Loading…
1
4
Detect dangerous chmod with stat module constants in B103
#1410 opened May 10, 2026 by jonasboos Loading…
1
5
Detect unsafe tarfile.extract() in B202 plugin
#1409 opened May 10, 2026 by jonasboos Loading…
1
8
Fix #nosec with test ID not counted in Total lines skipped
#1408 opened May 10, 2026 by jonasboos Loading…
1
3
Fix B501 false negative: detect verify=False on Session/Client instances
#1407 opened May 9, 2026 by kimjune01 Loading…
1
Avoid UnicodeEncodeError on narrow-encoding output streams (#1251)
#1406 opened May 2, 2026 by DotChas Loading…
1
Fix exit code for invalid scan targets (#1326)
#1402 opened Apr 28, 2026 by soh2970 Loading…
1
Fix false negatives in hardcoded password detection (B105/B106)
#1385 opened Apr 10, 2026 by GhostbyteX-740 Loading…
1
5
[pre-commit.ci] pre-commit autoupdate
#1370 opened Mar 9, 2026 by pre-commit-ci Bot Loading…
Update B313/B314 XML warning message for Python 3.11+
#1365 opened Mar 2, 2026 by vishnudathks Loading…
1
ProTip! What’s not been updated in a month: updated:<2026-06-01.