Tainted flow: 'OUTPUT_DIR' from os.environ.get (line 19, credential/environment) → open (file write)
Medium
- Category
- Data Flow
- Content
ensure_output_dir() # report.json with open(OUTPUT_DIR / "report.json", 'w') as f: json.dump(report.to_dict(), f, indent=2) # report.md- Confidence
- 93% confidence
- Finding
- with open(OUTPUT_DIR / "report.json", 'w') as f:
