[Security] MEDIUM: 13 Python security issue(s) #40

New issue

Closed

opened 2026-05-17 10:08:23 +00:00 by Mark · 1 comment

Mark commented

2026-05-17 10:08:23 +00:00

Owner

Bandit Security Linter Findings

HIGH B324: [B324] Use of weak MD5 hash for security. Consider usedforsecurity=False
File: /home/b/Projects/devforge/services/api/app/docker_manager.py (line 382)
MEDIUM B104: [B104] Possible binding to all interfaces.
File: /home/b/Projects/devforge/services/api/app/main.py (line 1289)
MEDIUM B104: [B104] Possible binding to all interfaces.
File: /home/b/Projects/devforge/services/api/app/routes/ports.py (line 51)
MEDIUM B104: [B104] Possible binding to all interfaces.
File: /home/b/Projects/devforge/services/api/app/routes/ports.py (line 108)
MEDIUM B113: [B113] Call to requests without timeout
File: /home/b/Projects/devforge/services/mcp/client.py (line 12)
MEDIUM B113: [B113] Call to requests without timeout
File: /home/b/Projects/devforge/services/mcp/client.py (line 43)
MEDIUM B113: [B113] Call to requests without timeout
File: /home/b/Projects/devforge/services/mcp/client.py (line 48)
MEDIUM B108: [B108] Probable insecure usage of temp file/directory.
File: /home/b/Projects/devforge/services/mcp/server.py (line 88)
MEDIUM B104: [B104] Possible binding to all interfaces.
File: /home/b/Projects/devforge/services/mcp/server.py (line 191)
MEDIUM B108: [B108] Probable insecure usage of temp file/directory.
File: /home/b/Projects/devforge/templates/gui/mcp-server.py (line 88)
MEDIUM B104: [B104] Possible binding to all interfaces.
File: /home/b/Projects/devforge/templates/gui/mcp-server.py (line 191)
HIGH B602: [B602] subprocess call with shell=True identified, security issue.
File: /home/b/Projects/devforge/templates/web/mcp-server.py (line 233)
MEDIUM B104: [B104] Possible binding to all interfaces.
File: /home/b/Projects/devforge/templates/web/mcp-server.py (line 310)

Auto-filed by security-sweep.py on 2026-05-17 03:08 UTC

## Bandit Security Linter Findings - **HIGH** `B324`: [B324] Use of weak MD5 hash for security. Consider usedforsecurity=False *File: `/home/b/Projects/devforge/services/api/app/docker_manager.py` (line 382)* - **MEDIUM** `B104`: [B104] Possible binding to all interfaces. *File: `/home/b/Projects/devforge/services/api/app/main.py` (line 1289)* - **MEDIUM** `B104`: [B104] Possible binding to all interfaces. *File: `/home/b/Projects/devforge/services/api/app/routes/ports.py` (line 51)* - **MEDIUM** `B104`: [B104] Possible binding to all interfaces. *File: `/home/b/Projects/devforge/services/api/app/routes/ports.py` (line 108)* - **MEDIUM** `B113`: [B113] Call to requests without timeout *File: `/home/b/Projects/devforge/services/mcp/client.py` (line 12)* - **MEDIUM** `B113`: [B113] Call to requests without timeout *File: `/home/b/Projects/devforge/services/mcp/client.py` (line 43)* - **MEDIUM** `B113`: [B113] Call to requests without timeout *File: `/home/b/Projects/devforge/services/mcp/client.py` (line 48)* - **MEDIUM** `B108`: [B108] Probable insecure usage of temp file/directory. *File: `/home/b/Projects/devforge/services/mcp/server.py` (line 88)* - **MEDIUM** `B104`: [B104] Possible binding to all interfaces. *File: `/home/b/Projects/devforge/services/mcp/server.py` (line 191)* - **MEDIUM** `B108`: [B108] Probable insecure usage of temp file/directory. *File: `/home/b/Projects/devforge/templates/gui/mcp-server.py` (line 88)* - **MEDIUM** `B104`: [B104] Possible binding to all interfaces. *File: `/home/b/Projects/devforge/templates/gui/mcp-server.py` (line 191)* - **HIGH** `B602`: [B602] subprocess call with shell=True identified, security issue. *File: `/home/b/Projects/devforge/templates/web/mcp-server.py` (line 233)* - **MEDIUM** `B104`: [B104] Possible binding to all interfaces. *File: `/home/b/Projects/devforge/templates/web/mcp-server.py` (line 310)* --- *Auto-filed by security-sweep.py on 2026-05-17 03:08 UTC*