Tainted flow: 'req' from os.environ.get (line 61, credential/environment) → urllib.request.urlopen (network output)
Critical
- Category
- Data Flow
- Content
try: import urllib.request req = urllib.request.Request(f"{OLLAMA_HOST}/api/tags") with urllib.request.urlopen(req, timeout=5) as resp: data = json.loads(resp.read()) return len(data.get("models", [])) > 0 except:- Confidence
- 95% confidence
- Finding
- with urllib.request.urlopen(req, timeout=5) as resp:
