[Security] MEDIUM: 5 Python security issue(s) #32

New issue

Closed

opened 2026-05-17 10:16:29 +00:00 by Mark · 1 comment

Mark commented

2026-05-17 10:16:29 +00:00

Owner

Bandit Security Linter Findings

MEDIUM B104: [B104] Possible binding to all interfaces.
File: /home/b/Projects/vllm_mm/backend/app/config.py (line 24)
MEDIUM B104: [B104] Possible binding to all interfaces.
File: /home/b/Projects/vllm_mm/backend/app/routers/metrics.py (line 55)
HIGH B701: [B701] By default, jinja2 sets autoescape to False. Consider using autoescape=True or use the select_autoescape function to mitigate XSS vulnerabilities.
File: /home/b/Projects/vllm_mm/backend/app/services/chat_template_registry.py (line 45)
MEDIUM B104: [B104] Possible binding to all interfaces.
File: /home/b/Projects/vllm_mm/backend/app/services/process_manager.py (line 87)
MEDIUM B615: [B615] Unsafe Hugging Face Hub download without revision pinning in hf_hub_download()
File: /home/b/Projects/vllm_mm/backend/app/services/process_manager.py (line 297)

Auto-filed by security-sweep.py on 2026-05-17 03:16 UTC

## Bandit Security Linter Findings - **MEDIUM** `B104`: [B104] Possible binding to all interfaces. *File: `/home/b/Projects/vllm_mm/backend/app/config.py` (line 24)* - **MEDIUM** `B104`: [B104] Possible binding to all interfaces. *File: `/home/b/Projects/vllm_mm/backend/app/routers/metrics.py` (line 55)* - **HIGH** `B701`: [B701] By default, jinja2 sets autoescape to False. Consider using autoescape=True or use the select_autoescape function to mitigate XSS vulnerabilities. *File: `/home/b/Projects/vllm_mm/backend/app/services/chat_template_registry.py` (line 45)* - **MEDIUM** `B104`: [B104] Possible binding to all interfaces. *File: `/home/b/Projects/vllm_mm/backend/app/services/process_manager.py` (line 87)* - **MEDIUM** `B615`: [B615] Unsafe Hugging Face Hub download without revision pinning in hf_hub_download() *File: `/home/b/Projects/vllm_mm/backend/app/services/process_manager.py` (line 297)* --- *Auto-filed by security-sweep.py on 2026-05-17 03:16 UTC*