Tainted flow: 'req' from os.environ.get (line 276, credential/environment) → urllib.request.urlopen (network output)
Critical
- Category
- Data Flow
- Content
"Authorization": f"Bearer {BLUEAI_API_KEY}"}, ) try: with urllib.request.urlopen(req, timeout=30) as resp: result = json.loads(resp.read().decode("utf-8")) return json.loads(result["choices"][0]["message"]["content"]) except urllib.error.HTTPError as e:- Confidence
- 96% confidence
- Finding
- with urllib.request.urlopen(req, timeout=30) as resp:
