Tainted flow: 'API_BASE' from os.getenv (line 18, credential/environment) → httpx.post (network output)
Critical
- Category
- Data Flow
- Content
"owner": owner } response = httpx.post(f"{API_BASE}/api/auth/register", json=data, timeout=30) response.raise_for_status() result = response.json()- Confidence
- 96% confidence
- Finding
- response = httpx.post(f"{API_BASE}/api/auth/register", json=data, timeout=30)
