Findings

Audit findings.

Real bugs, not vibes — the security regressions Sebastion catches in live open-source code. Every finding maps to a CWE and is ranked by severity, then published in the open so you can see exactly what a security-first review surfaces before code ships.

1001 findings across 288 repositories — 80 critical, 364 high, 522 medium, 35 low.

Findings come from automated audit runs across public repositories, grouped by scanner severity. They have not all been individually triaged or acknowledged by maintainers; CVE numbers are assigned only after coordinated disclosure where applicable.

High

50 on this page

st-tech/ppf-contact-solver

Shell command injection via MCP `execute_shell_command` debug handler

CWE-78blender_addon/mcp/handlers/debug.py

2026-05-27

CadQuery/cadquery

Arbitrary code execution via CQGI script execution

CWE-94cadquery/cqgi.py

2026-05-26

Datalux/Osintgram

Path traversal via unsanitized target username in file operations

CWE-22src/Osintgram.py

2026-05-26

SylphAI-Inc/AdalFlow

Arbitrary code execution via eval() in ToolManager.execute_func_expr_via_eval

CWE-95adalflow/adalflow/core/tool_manager.py

2026-05-26

areal-project/AReaL

SSRF via /register_model and /chat/completions: attacker-controlled URL is fetched server-side

CWE-918areal/experimental/inference_service/data_proxy/app.py

2026-05-26

areal-project/AReaL

Unauthenticated /set_env allows arbitrary environment variable injection

CWE-94areal/experimental/openai/proxy/proxy_rollout_server.py

2026-05-26

areal-project/AReaL

Deserialization of untrusted data via ray.cloudpickle.loads in SerializedRayObjectRef

CWE-502areal/infra/rpc/serialization.py

2026-05-26

eosphoros-ai/DB-GPT

SQL injection in DuckDB via excel_reader.run()

CWE-89packages/dbgpt-app/src/dbgpt_app/scene/chat_data/chat_excel/excel_reader.py

2026-05-26

eosphoros-ai/DB-GPT

SQL injection in editor_sql_run via parameterization bypass

CWE-89packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/editor/api_editor_v1.py

2026-05-26

eosphoros-ai/DB-GPT

Unsanitized LLM-generated SQL executed against user databases

CWE-89packages/dbgpt-app/src/dbgpt_app/scene/chat_db/auto_execute/out_parser.py

2026-05-26

lsdefine/GenericAgent

Unauthenticated OS command execution via /path/open endpoint

CWE-78frontends/desktop_bridge.py

2026-05-26

lsdefine/GenericAgent

Arbitrary Python code execution via /session.* slash command with inline_eval

CWE-94agentmain.py

2026-05-26

outsourc-e/hermes-workspace

SSRF via claude-proxy splat route

CWE-918src/routes/api/claude-proxy/$.ts

2026-05-26

sgoudelis/ground-station

SQL injection via restore_table with regex bypass

CWE-89backend/handlers/entities/databasebackup.py

2026-05-26

sgoudelis/ground-station

SSRF via user-controlled source_url in WebRTC offer endpoint

CWE-918backend/video/webrtc.py

2026-05-26

sgoudelis/ground-station

Path traversal in serve_spa catch-all route

CWE-22backend/server/startup.py

2026-05-26

zarazhangrui/follow-builders

GitHub Actions command injection via workflow_dispatch input interpolated into shell

CWE-78.github/workflows/generate-feed.yml

2026-05-26