Tainted flow: 'req' from os.environ.get (line 219, credential/environment) → urllib.request.urlopen (network output)
Critical
- Category
- Data Flow
- Content
"https://openrouter.ai/api/v1/models", headers={"Authorization": f"Bearer {api_key}"}, ) with urllib.request.urlopen(req, timeout=10) as r: catalog = json.loads(r.read().decode()) by_id = {m["id"]: m for m in catalog.get("data", [])} available = []- Confidence
- 90% confidence
- Finding
- with urllib.request.urlopen(req, timeout=10) as r:
