Tainted flow: 'url' from os.environ.get (line 91, credential/environment) → requests.post (network output)
Critical
- Category
- Data Flow
- Content
'file': open(f"{filepath}",'rb') } res = rq.post(url, files = files, data = args, headers = headers) return res.json() except Exception as e: return {- Confidence
- 94% confidence
- Finding
- res = rq.post(url, files = files, data = args, headers = headers)
