Support for pytest-xdist #164
Annotations
7 errors and 1 warning
|
Semgrep Issue:
tools/yolov7/yolov7_exporter.py#L32
Functions reliant on pickle can result in arbitrary code execution. Consider loading from `state_dict`, using fickling, or switching to a safer serialization method like ONNX
|
|
Semgrep Issue:
tools/yolov6r3/yolov6_r3_exporter.py#L40
Functions reliant on pickle can result in arbitrary code execution. Consider loading from `state_dict`, using fickling, or switching to a safer serialization method like ONNX
|
|
Semgrep Issue:
tools/yolov6r3/gold_yolo_exporter.py#L33
Functions reliant on pickle can result in arbitrary code execution. Consider loading from `state_dict`, using fickling, or switching to a safer serialization method like ONNX
|
|
Semgrep Issue:
tools/yolov6r1/yolov6_r1_exporter.py#L28
Functions reliant on pickle can result in arbitrary code execution. Consider loading from `state_dict`, using fickling, or switching to a safer serialization method like ONNX
|
|
Semgrep Issue:
tools/yolo/yolov6_exporter.py#L29
Functions reliant on pickle can result in arbitrary code execution. Consider loading from `state_dict`, using fickling, or switching to a safer serialization method like ONNX
|
|
Semgrep Issue:
tools/yolo/yolov5_exporter.py#L40
Functions reliant on pickle can result in arbitrary code execution. Consider loading from `state_dict`, using fickling, or switching to a safer serialization method like ONNX
|
|
Semgrep Issue:
tools/version_detection/version_detection.py#L38
Possible path traversal through `tarfile.open($PATH).extractall()` if the source tar is controlled by an attacker
|
|
semgrep/ci
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|