datawhalechina/llm-cookbook

API keys, passwords or tokens committed into the repo.

• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  docs/C3/2. 模型、提示和解析器 Models, Prompts and Output Parsers.md:122
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  content/LangChain for LLM Application Development/2.模型、提示和解析器 Models, Prompts and Output Parsers.ipynb:1
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  pdf-code/notebook/C3 LangChain for LLM Application Development/2.模型、提示和解析器 Models, Prompts and Output Parsers.ipynb:225
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  content/Functions, Tools and Agents with LangChain/3. LangChain表达式语言 LCEL.ipynb:184
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  content/LangChain for LLM Application Development/2.模型、提示和解析器 Models, Prompts and Output Parsers.ipynb:1
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  docs/C3/2. 模型、提示和解析器 Models, Prompts and Output Parsers.md:122
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  pdf-code/notebook/C3 LangChain for LLM Application Development/2.模型、提示和解析器 Models, Prompts and Output Parsers.ipynb:225
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  content/LangChain for LLM Application Development/2.模型、提示和解析器 Models, Prompts and Output Parsers.ipynb:1
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  docs/C3/2. 模型、提示和解析器 Models, Prompts and Output Parsers.md:122
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  pdf-code/notebook/C3 LangChain for LLM Application Development/2.模型、提示和解析器 Models, Prompts and Output Parsers.ipynb:225
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  content/LangChain for LLM Application Development/2.模型、提示和解析器 Models, Prompts and Output Parsers.ipynb:1
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  docs/C3/2. 模型、提示和解析器 Models, Prompts and Output Parsers.md:122
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  pdf-code/notebook/C3 LangChain for LLM Application Development/2.模型、提示和解析器 Models, Prompts and Output Parsers.ipynb:225
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  content/LangChain for LLM Application Development/2.模型、提示和解析器 Models, Prompts and Output Parsers.ipynb:1
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  docs/C3/2. 模型、提示和解析器 Models, Prompts and Output Parsers.md:122
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious square-access-token Detected a Square Access Token, risking unauthorized payment processing and financial transaction exposure.
  content/Evaluating and Debugging Generative AI/2.测量权重和偏差 W&B.ipynb:521
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  pdf-code/notebook/C3 LangChain for LLM Application Development/2.模型、提示和解析器 Models, Prompts and Output Parsers.ipynb:225
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious square-access-token Detected a Square Access Token, risking unauthorized payment processing and financial transaction exposure.
  content/Evaluating and Debugging Generative AI/2.测量权重和偏差 W&B.ipynb:521
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  content/LangChain for LLM Application Development/2.模型、提示和解析器 Models, Prompts and Output Parsers.ipynb:1
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious square-access-token Detected a Square Access Token, risking unauthorized payment processing and financial transaction exposure.
  content/Evaluating and Debugging Generative AI/2.测量权重和偏差 W&B.ipynb:521
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  docs/C3/2. 模型、提示和解析器 Models, Prompts and Output Parsers.md:122
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  pdf-code/notebook/C3 LangChain for LLM Application Development/2.模型、提示和解析器 Models, Prompts and Output Parsers.ipynb:225
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious square-access-token Detected a Square Access Token, risking unauthorized payment processing and financial transaction exposure.
  content/Evaluating and Debugging Generative AI/2.测量权重和偏差 W&B.ipynb:521
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  content/LangChain for LLM Application Development/2.模型、提示和解析器 Models, Prompts and Output Parsers.ipynb:1
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
• Serious openai-api-key Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
  docs/C3/2. 模型、提示和解析器 Models, Prompts and Output Parsers.md:122
  A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.

via Gitleaks v8.21.2 · MIT

Packages you depend on that have known security holes (CVEs).

• Serious CVE-2025-43859 h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a ...
  content/选修-Building and Evaluating Advanced RAG Applications/requirements.txt
  A package you depend on has a known security hole (CVE-2025-43859). Fix: Update that package to its patched version.
• Serious CVE-2025-68664 LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
  content/选修-Building and Evaluating Advanced RAG Applications/requirements.txt
  A package you depend on has a known security hole (CVE-2025-68664). Fix: Update that package to its patched version.
• Serious CVE-2023-39662 llama-index vulnerable to arbitrary code execution
  content/选修-Building and Evaluating Advanced RAG Applications/requirements.txt
  A package you depend on has a known security hole (CVE-2023-39662). Fix: Update that package to its patched version.
• Serious CVE-2024-23751 SQL injection in llama-index
  content/选修-Building and Evaluating Advanced RAG Applications/requirements.txt
  A package you depend on has a known security hole (CVE-2024-23751). Fix: Update that package to its patched version.
• Serious CVE-2025-1793 llama_index vulnerable to SQL Injection
  content/选修-Building and Evaluating Advanced RAG Applications/requirements.txt
  A package you depend on has a known security hole (CVE-2025-1793). Fix: Update that package to its patched version.
• Serious CVE-2025-14009 nltk: Zip Slip Vulnerability in nltk Leading to Code Execution
  content/选修-Building and Evaluating Advanced RAG Applications/requirements.txt
  A package you depend on has a known security hole (CVE-2025-14009). Fix: Update that package to its patched version.
• Serious CVE-2025-32434 PyTorch is a Python package that provides tensor computation with stro ...
  content/选修-Building and Evaluating Advanced RAG Applications/requirements.txt
  A package you depend on has a known security hole (CVE-2025-32434). Fix: Update that package to its patched version.
• Serious CVE-2023-6730 transformers has a Deserialization of Untrusted Data vulnerability
  content/选修-Building and Evaluating Advanced RAG Applications/requirements.txt
  A package you depend on has a known security hole (CVE-2023-6730). Fix: Update that package to its patched version.
• Serious CVE-2023-6730 transformers has a Deserialization of Untrusted Data vulnerability
  content/选修-Finetuning Large Language Models/requirements.txt
  A package you depend on has a known security hole (CVE-2023-6730). Fix: Update that package to its patched version.
• Serious CVE-2025-68664 LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
  uv.lock
  A package you depend on has a known security hole (CVE-2025-68664). Fix: Update that package to its patched version.
• Serious CVE-2025-14009 nltk: Zip Slip Vulnerability in nltk Leading to Code Execution
  uv.lock
  A package you depend on has a known security hole (CVE-2025-14009). Fix: Update that package to its patched version.
• Worth fixing CVE-2025-5150 docarray prototype pollution
  content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole (CVE-2025-5150). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-45134 LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
  content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole (CVE-2026-45134). Fix: Update that package to its patched version.
• Worth fixing CVE-2024-2965 Denial of service in langchain-community
  content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole (CVE-2024-2965). Fix: Update that package to its patched version.
• Worth fixing CVE-2025-6984 Langchain Community Vulnerable to XML External Entity (XXE) Attacks
  content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole (CVE-2025-6984). Fix: Update that package to its patched version.
• Worth fixing CVE-2024-2965 Denial of service in langchain-community
  content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole (CVE-2024-2965). Fix: Update that package to its patched version.
• Worth fixing CVE-2024-3095 Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever
  content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole (CVE-2024-3095). Fix: Update that package to its patched version.
• Worth fixing CVE-2024-38459 langchain_experimental Code Execution via Python REPL access
  content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole (CVE-2024-38459). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-28684 python-dotenv: python-dotenv: Arbitrary file overwrite via symbolic link following
  content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole (CVE-2026-28684). Fix: Update that package to its patched version.
• Worth fixing CVE-2025-5150 docarray prototype pollution
  content/必修四-LangChain Chat with Your Data/requirements.txt
  A package you depend on has a known security hole (CVE-2025-5150). Fix: Update that package to its patched version.
• Worth fixing CVE-2026-45134 LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
  content/必修四-LangChain Chat with Your Data/requirements.txt
  A package you depend on has a known security hole (CVE-2026-45134). Fix: Update that package to its patched version.
• Worth fixing CVE-2024-2965 Denial of service in langchain-community
  content/必修四-LangChain Chat with Your Data/requirements.txt
  A package you depend on has a known security hole (CVE-2024-2965). Fix: Update that package to its patched version.
• Worth fixing CVE-2025-6984 Langchain Community Vulnerable to XML External Entity (XXE) Attacks
  content/必修四-LangChain Chat with Your Data/requirements.txt
  A package you depend on has a known security hole (CVE-2025-6984). Fix: Update that package to its patched version.
• Worth fixing CVE-2024-2965 Denial of service in langchain-community
  content/必修四-LangChain Chat with Your Data/requirements.txt
  A package you depend on has a known security hole (CVE-2024-2965). Fix: Update that package to its patched version.
• Worth fixing CVE-2024-3095 Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever
  content/必修四-LangChain Chat with Your Data/requirements.txt
  A package you depend on has a known security hole (CVE-2024-3095). Fix: Update that package to its patched version.

via Trivy v0.70.0 · Apache-2.0

Your dependencies cross-checked against the OSV vulnerability database.

• Serious GHSA-c67j-w6g6-q2cm LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Serious GHSA-vqfr-h8mv-ghfj h11 accepts some malformed Chunked-Encoding bodies
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/选修-Building and Evaluating Advanced RAG Applications/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Serious GHSA-c67j-w6g6-q2cm LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/选修-Building and Evaluating Advanced RAG Applications/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Serious GHSA-2jxw-4hm4-6w87 SQL injection in llama-index
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/选修-Building and Evaluating Advanced RAG Applications/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Serious GHSA-2xxc-73fv-36f7 llama-index vulnerable to arbitrary code execution
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/选修-Building and Evaluating Advanced RAG Applications/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Serious GHSA-v3c8-3pr6-gr7p llama_index vulnerable to SQL Injection
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/选修-Building and Evaluating Advanced RAG Applications/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Serious GHSA-7p94-766c-hgjp NLTK has a Zip Slip Vulnerability
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/选修-Building and Evaluating Advanced RAG Applications/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Serious GHSA-53q9-r3pm-6pq6 PyTorch: `torch.load` with `weights_only=True` leads to remote code execution
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/选修-Building and Evaluating Advanced RAG Applications/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Serious GHSA-3863-2447-669p transformers has a Deserialization of Untrusted Data vulnerability
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/选修-Building and Evaluating Advanced RAG Applications/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Serious GHSA-3863-2447-669p transformers has a Deserialization of Untrusted Data vulnerability
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/选修-Finetuning Large Language Models/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Serious GHSA-5wvp-7f3h-6wmm PyArrow: Arbitrary code execution when loading a malicious data file
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/选修-Finetuning Large Language Models/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Serious GHSA-c67j-w6g6-q2cm LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/uv.lock
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Serious GHSA-7p94-766c-hgjp NLTK has a Zip Slip Vulnerability
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/uv.lock
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Worth fixing GHSA-3644-q5cj-c5c7 LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Worth fixing GHSA-pc6w-59fv-rh23 Langchain Community Vulnerable to XML External Entity (XXE) Attacks
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Worth fixing GHSA-wmvm-9vqv-5qpp langchain_experimental Code Execution via Python REPL access
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Worth fixing GHSA-6mq8-rvhq-8wgg AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Worth fixing GHSA-6qv9-48xg-fc7f LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Worth fixing GHSA-pjwx-r37v-7724 LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Worth fixing GHSA-qh6h-p6c9-ff54 LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Worth fixing GHSA-wmvm-9vqv-5qpp langchain_experimental Code Execution via Python REPL access
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Worth fixing GHSA-m42m-m8cr-8m58 LangChain Text Splitters is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Worth fixing GHSA-3644-q5cj-c5c7 LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Worth fixing GHSA-hx9q-6w63-j58v orjson does not limit recursion for deeply nested JSON documents
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.
• Worth fixing GHSA-r7q7-xcjw-qx8q TDQM Arbitrary Code Execution
  /workdirs/scan-e30ae2f3-2faf-43f7-a79c-7602f3e4b7f5/content/必修三-LangChain for LLM Application Development/requirements.txt
  A package you depend on has a known security hole. Fix: Update that package to its patched version.

via OSV-Scanner v1.9.2 · Apache-2.0

Code that can be exploited — injection, hardcoded credentials and similar.

Nothing found by this check. ✓

via Semgrep v1.147.0 · LGPL-2.1

Packages that look intentionally malicious — typosquats, sneaky install scripts.

This check didn’t finish — that’s not the same as “clean.” Try Check again above.

via Guarddog v2.10.0 · Apache-2.0

error: pypi:timeout