apunkt/nyx
1
0
Fork 0
mirror of https://github.com/elicpeter/nyx.git synced 2026-06-18 20:15:14 +02:00
Code Issues Projects Releases Packages Wiki Activity

Critical bug fixes and recall improvements (#68)

Browse source
This commit is contained in:
Eli Peter 2026-05-11 12:42:39 -04:00 • committed by GitHub
parent 7d0e7320e2
commit 55247b7fcd
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
352 changed files with 60069 additions and 900 deletions
Download patch file Download diff file Expand all files Collapse all files

7148
tests/recall_targets/xlang/python/airflow.json Normal file
View file

File diff suppressed because it is too large Load diff

236
tests/recall_targets/xlang/python/flask.json Normal file
View file

@ -0,0 +1,236 @@
{
"_doc": "Phase 17 cross-lang recall-validation baseline for pallets/flask (Python). Re-capture by running scripts/validate_recall.sh --lang python flask <clone_path> --capture. Phase 17 ships airflow as the captured Python target; flask remains a placeholder for future cross-validation against a smaller-surface Python framework codebase.",
"target": "flask",
"lang": "python",
"clone_url": "https://github.com/pallets/flask",
"exercises_recall_items": [],
"captured_against": "real-scan @ 7374c85ddefc3f4b177a698ab9f0cbb6a5c0b392",
"captured_on": "2026-05-10",
"pinned_commit": "7374c85ddefc3f4b177a698ab9f0cbb6a5c0b392",
"findings": [
{
"rule_id": "taint-unsanitised-flow",
"path_suffix": "src/flask/cli.py",
"line": 1022,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-unsanitised-flow",
"path_suffix": "src/flask/cli.py",
"line": 1023,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "py.code_exec.eval",
"path_suffix": "src/flask/cli.py",
"line": 1023,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "py.code_exec.exec",
"path_suffix": "src/flask/config.py",
"line": 209,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-unsanitised-flow",
"path_suffix": "examples/tutorial/flaskr/auth.py",
"line": 92,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-unsanitised-flow",
"path_suffix": "tests/test_templating.py",
"line": 58,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "src/flask/app.py",
"line": 443,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "src/flask/app.py",
"line": 445,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "src/flask/app.py",
"line": 465,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "src/flask/app.py",
"line": 467,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "src/flask/blueprints.py",
"line": 126,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "src/flask/blueprints.py",
"line": 128,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "src/flask/testing.py",
"line": 235,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "src/flask/config.py",
"line": 209,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "py.code_exec.compile",
"path_suffix": "src/flask/cli.py",
"line": 1023,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "py.code_exec.compile",
"path_suffix": "src/flask/config.py",
"line": 209,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "py.xss.jinja_from_string",
"path_suffix": "src/flask/templating.py",
"line": 159,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "py.xss.jinja_from_string",
"path_suffix": "src/flask/templating.py",
"line": 211,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "tests/test_basic.py",
"line": 37,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "tests/test_testing.py",
"line": 80,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "tests/test_views.py",
"line": 14,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "examples/tutorial/flaskr/db.py",
"line": 15,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "tests/test_signals.py",
"line": 14,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "examples/tutorial/flaskr/blog.py",
"line": 20,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "tests/test_appctx.py",
"line": 169,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "tests/test_json.py",
"line": 213,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "tests/test_templating.py",
"line": 27,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "py.crypto.sha1",
"path_suffix": "src/flask/sessions.py",
"line": 281,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
}
]
}