gitsafehub
github.com/carperai/trlx ↗

carperai/trlx

scanned 2026-08-03 · git 3340c2f
2 of 6 checks flagged a security issue
🔴 Needs attention
Only 4 of 6 checks finished — treat this as provisional. Re-check ↻

Informational scan, not a security audit. How this is computed.

Leaked secrets✓Vulnerable dependencies122Known OSS vulnerabilities211Risky code patterns✓Malicious dependencies—Project health—

Security checks

Leaked secrets — Gitleaksⓘ none found ✓

API keys, passwords or tokens committed into the repo.

Nothing found by this check. ✓

via Gitleaks v8.21.2 · MIT

Vulnerable dependencies — Trivyⓘ 122 found · 7 serious

Packages you depend on that have known security holes (CVEs).

  • Serious CVE-2023-47248 PyArrow: Arbitrary code execution when loading a malicious data file
    requirements.txt
    A package you depend on has a known security hole (CVE-2023-47248). Fix: Update that package to its patched version.
  • Serious CVE-2023-6019 ray: Ray Dashboard Command Injection
    requirements.txt
    A package you depend on has a known security hole (CVE-2023-6019). Fix: Update that package to its patched version.
  • Serious CVE-2023-6020 Ray Missing Authorization vulnerability
    requirements.txt
    A package you depend on has a known security hole (CVE-2023-6020). Fix: Update that package to its patched version.
  • Serious CVE-2023-6021 Ray Path Traversal vulnerability
    requirements.txt
    A package you depend on has a known security hole (CVE-2023-6021). Fix: Update that package to its patched version.
  • Serious CVE-2025-62593 ray: Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack
    requirements.txt
    A package you depend on has a known security hole (CVE-2025-62593). Fix: Update that package to its patched version.
  • Serious CVE-2025-32434 PyTorch is a Python package that provides tensor computation with stro ...
    requirements.txt
    A package you depend on has a known security hole (CVE-2025-32434). Fix: Update that package to its patched version.
  • Serious CVE-2023-6730 transformers has a Deserialization of Untrusted Data vulnerability
    requirements.txt
    A package you depend on has a known security hole (CVE-2023-6730). Fix: Update that package to its patched version.
  • Worth fixing CVE-2023-40590 gitpython: improper executable lookup on windows
    requirements.txt
    A package you depend on has a known security hole (CVE-2023-40590). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-22190 Untrusted search path under some conditions on Windows allows arbitrary code execution
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-22190). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-42215 GitPython is a python library used to interact with Git repositories. ...
    requirements.txt
    A package you depend on has a known security hole (CVE-2026-42215). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-42284 GitPython is a python library used to interact with Git repositories. ...
    requirements.txt
    A package you depend on has a known security hole (CVE-2026-42284). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-44243 GitPython: GitPython: Arbitrary file write via crafted reference paths
    requirements.txt
    A package you depend on has a known security hole (CVE-2026-44243). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-44244 GitPython is a python library used to interact with Git repositories. ...
    requirements.txt
    A package you depend on has a known security hole (CVE-2026-44244). Fix: Update that package to its patched version.
  • Worth fixing GHSA-2f96-g7mh-g2hx GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist
    requirements.txt
    A package you depend on has a known security hole (GHSA-2f96-g7mh-g2hx). Fix: Update that package to its patched version.
  • Worth fixing GHSA-3rp5-jjmw-4wv2 GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)
    requirements.txt
    A package you depend on has a known security hole (GHSA-3rp5-jjmw-4wv2). Fix: Update that package to its patched version.
  • Worth fixing GHSA-6p8h-3wgx-97gf GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks
    requirements.txt
    A package you depend on has a known security hole (GHSA-6p8h-3wgx-97gf). Fix: Update that package to its patched version.
  • Worth fixing GHSA-94p4-4cq8-9g67 GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)
    requirements.txt
    A package you depend on has a known security hole (GHSA-94p4-4cq8-9g67). Fix: Update that package to its patched version.
  • Worth fixing GHSA-956x-8gvw-wg5v GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()`
    requirements.txt
    A package you depend on has a known security hole (GHSA-956x-8gvw-wg5v). Fix: Update that package to its patched version.
  • Worth fixing GHSA-fjr4-x663-mwxc GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)
    requirements.txt
    A package you depend on has a known security hole (GHSA-fjr4-x663-mwxc). Fix: Update that package to its patched version.
  • Worth fixing GHSA-mv93-w799-cj2w GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath
    requirements.txt
    A package you depend on has a known security hole (GHSA-mv93-w799-cj2w). Fix: Update that package to its patched version.
  • Worth fixing GHSA-r9mr-m37c-5fr3 GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution
    requirements.txt
    A package you depend on has a known security hole (GHSA-r9mr-m37c-5fr3). Fix: Update that package to its patched version.
  • Worth fixing GHSA-rwj8-pgh3-r573 GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL
    requirements.txt
    A package you depend on has a known security hole (GHSA-rwj8-pgh3-r573). Fix: Update that package to its patched version.
  • Worth fixing CVE-2023-41040 GitPython: Blind local file inclusion
    requirements.txt
    A package you depend on has a known security hole (CVE-2023-41040). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-22195 jinja2: HTML attribute injection when passing user input as keys to xmlattr filter
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-22195). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-34064 jinja2: accepts keys containing non-attribute characters
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-34064). Fix: Update that package to its patched version.
… 97 more not shown

via Trivy v0.70.0 · Apache-2.0

Known OSS vulnerabilities — OSV-Scannerⓘ 211 found · 14 serious

Your dependencies cross-checked against the OSV vulnerability database.

  • Serious PYSEC-2026-2102 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, the C parser (the default for most installs) accepted null bytes and control characters in resp
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/examples/summarize_rlhf/requirements.txt
    A package you depend on has a known security hole (CVE-2026-34520). Fix: Update that package to its patched version.
  • Serious PYSEC-2026-2161 GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes shlex.split(" ".join(multi_options))
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/requirements.txt
    A package you depend on has a known security hole (CVE-2026-42284). Fix: Update that package to its patched version.
  • Serious PYSEC-2026-2102 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, the C parser (the default for most installs) accepted null bytes and control characters in resp
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/requirements.txt
    A package you depend on has a known security hole (CVE-2026-34520). Fix: Update that package to its patched version.
  • Serious PYSEC-2023-238 Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parque
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/requirements.txt
    A package you depend on has a known security hole (CVE-2023-47248). Fix: Update that package to its patched version.
  • Serious PYSEC-2026-515 Ray Path Traversal vulnerability
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/requirements.txt
    A package you depend on has a known security hole (CVE-2023-6021). Fix: Update that package to its patched version.
  • Serious PYSEC-2026-516 Ray Missing Authorization vulnerability
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/requirements.txt
    A package you depend on has a known security hole (CVE-2023-6020). Fix: Update that package to its patched version.
  • Serious PYSEC-2026-517 Ray has arbitrary code execution via jobs submission API
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/requirements.txt
    A package you depend on has a known security hole (CVE-2023-48022). Fix: Update that package to its patched version.
  • Serious PYSEC-2026-518 Ray's New Token Authentication is Disabled By Default
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/requirements.txt
    A package you depend on has a known security hole (CVE-2025-34351). Fix: Update that package to its patched version.
  • Serious PYSEC-2026-519 Ray OS Command Injection vulnerability
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/requirements.txt
    A package you depend on has a known security hole (CVE-2023-6019). Fix: Update that package to its patched version.
  • Serious PYSEC-2026-520 Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/requirements.txt
    A package you depend on has a known security hole (CVE-2025-62593). Fix: Update that package to its patched version.
  • Serious PYSEC-2024-259 In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this is intended behavior in PyTorch distributed computing.
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/requirements.txt
    A package you depend on has a known security hole (CVE-2024-48063). Fix: Update that package to its patched version.
  • Serious PYSEC-2025-41 PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command E
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/requirements.txt
    A package you depend on has a known security hole (CVE-2025-32434). Fix: Update that package to its patched version.
  • Serious PYSEC-2023-300 Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/requirements.txt
    A package you depend on has a known security hole (CVE-2023-6730). Fix: Update that package to its patched version.
  • Serious PYSEC-2026-2290 A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/requirements.txt
    A package you depend on has a known security hole (CVE-2026-5241). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-139 A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be pe
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/docs/requirements.txt
    A package you depend on has a known security hole (CVE-2026-4538). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2286 PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's `weights_only` unpickler allows an attacker to craft a malicious checkpoint file (`.
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/docs/requirements.txt
    A package you depend on has a known security hole (CVE-2026-24747). Fix: Update that package to its patched version.
  • Worth fixing GHSA-qfhq-4f3w-5fph PyTorch is vulnerable to memory corruption through its torch.lstm_cell function
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/docs/requirements.txt
    A package you depend on has a known security hole (CVE-2025-3001). Fix: Update that package to its patched version.
  • Worth fixing GHSA-rrmf-rvhw-rf47 PyTorch is vulnerable to memory corruption through its torch.jit.script function
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/docs/requirements.txt
    A package you depend on has a known security hole (CVE-2025-3000). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-1374 filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/docs/requirements.txt
    A package you depend on has a known security hole (CVE-2026-22701). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-1375 filelock has a TOCTOU race condition which allows symlink attacks during lock file creation
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/docs/requirements.txt
    A package you depend on has a known security hole (CVE-2025-68146). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2019-217 In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/docs/requirements.txt
    A package you depend on has a known security hole (CVE-2019-10906). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2021-66 This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the `_punctuation_re regex` operator and its use of multiple wildcards. The last wildcard is the
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/docs/requirements.txt
    A package you depend on has a known security hole (CVE-2020-28493). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-1471 Jinja2 vulnerable to sandbox breakout through attr filter selecting format method
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/docs/requirements.txt
    A package you depend on has a known security hole (CVE-2025-27516). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-1473 Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/docs/requirements.txt
    A package you depend on has a known security hole (CVE-2024-22195). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-1474 Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
    /workdirs/scan-2a744449-0d1c-4b57-bf72-863cca13950a/docs/requirements.txt
    A package you depend on has a known security hole (CVE-2024-34064). Fix: Update that package to its patched version.
… 186 more not shown

via OSV-Scanner v1.9.2 · Apache-2.0

Risky code patterns — Semgrepⓘ none found ✓

Code that can be exploited: injection, hardcoded credentials and similar.

Nothing found by this check. ✓

via Semgrep v1.147.0 · LGPL-2.1

Malicious dependencies — Guarddogⓘ timed out

Packages that look intentionally malicious: typosquats, sneaky install scripts.

This check didn’t finish — that’s not the same as “clean.” Try Check again above.

via Guarddog v2.10.0 · Apache-2.0

error: pypi:timeout

Project health

A signal about how the project is maintained — not a vulnerability in your code. It doesn’t affect the verdict above.

Project health — OpenSSF Scorecardⓘ didn’t run

Maintenance & supply-chain hygiene. A signal about the project, not a vulnerability in your code.

This check didn’t finish — that’s not the same as “clean.” Try Check again above.

via OpenSSF Scorecard · Apache-2.0

About these results. Six open-source checks ran in parallel; every finding is tagged with the tool that produced it. The verdict follows a published rule. False positives and false negatives are normal — a clean scan does not mean the code is secure, and a red verdict does not mean the project is compromised.