gitsafehub
github.com/ibm/ado ↗

ibm/ado

scanned 2026-08-13 · git 3b7392d
3 of 6 checks flagged a security issue
🔴 Needs attention
Only 4 of 6 checks finished — treat this as provisional. Re-check ↻

Informational scan, not a security audit. How this is computed.

Leaked secrets44Vulnerable dependencies2Known OSS vulnerabilities24Risky code patterns✓Malicious dependencies—Project health—

Security checks

Leaked secrets — Gitleaksⓘ 44 found

API keys, passwords or tokens committed into the repo.

  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:82
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:92
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:102
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:112
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:122
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:132
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:140
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:148
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:156
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:164
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:172
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:180
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:188
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:196
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:204
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:212
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:220
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:228
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:236
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:246
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:256
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:264
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:272
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:280
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
  • Worth fixing generic-api-key Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    .secrets.baseline:288
    A credential (key, password or token) appears in your code. Fix: Remove it, rotate the key, and load it from an environment variable instead.
… 19 more not shown

via Gitleaks v8.21.2 · MIT

Vulnerable dependencies — Trivyⓘ 2 found

Packages you depend on that have known security holes (CVEs).

  • Worth fixing CVE-2026-71554 h2 is a pure-Python implementation of a HTTP/2 protocol stack. Version ...
    uv.lock
    A package you depend on has a known security hole (CVE-2026-71554). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-25087 apache-arrow: Apache Arrow C++: Denial of Service via Use After Free vulnerability when reading IPC files
    uv.lock
    A package you depend on has a known security hole (CVE-2026-25087). Fix: Update that package to its patched version.

via Trivy v0.70.0 · Apache-2.0

Known OSS vulnerabilities — OSV-Scannerⓘ 24 found · 1 serious

Your dependencies cross-checked against the OSV vulnerability database.

  • Serious PYSEC-2026-226 vLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's trust on those web servers enables an authenticat
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-48746). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-1087 Aim vulnerable to Cross-site Scripting
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2025-51464). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-1088 Aim Vulnerable to Sandbox Escape Leading to Remote Code Execution
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2025-5321). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2447 DiskCache has unsafe pickle deserialization
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2025-69872). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-3628 h2: Duplicate Host header could facilitate request smuggling
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-71554). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-113 Use After Free vulnerability in Apache Arrow C++. This issue affects Apache Arrow C++ from 15.0.0 through 23.0.0. It can be triggered when reading an Arrow IPC file (but not an IPC stream) with pre-b
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-25087). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-3447 setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude, recursive-exclude,
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-59890). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-139 A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be pe
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-4538). Fix: Update that package to its patched version.
  • Worth fixing GHSA-rrmf-rvhw-rf47 PyTorch is vulnerable to memory corruption through its torch.jit.script function
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2025-3000). Fix: Update that package to its patched version.
  • Worth fixing GHSA-rrmf-rvhw-rf47 PyTorch is vulnerable to memory corruption through its torch.jit.script function
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2025-3000). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-145 vLLM is an inference and serving engine for large language models (LLMs). From to before 0.20.0, the extract_hidden_states speculative decoding proposer in vLLM returns a tensor with an incorrect sha
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-44223). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-227 vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the flashinfer-jit-cache package.
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-54232). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2300 vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, an assert-based security check in vLLM's activation function loading allows any unauthenticated attacker to a
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-41523). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2301 vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, vLLM's revision pinning controls do not consistently apply to all artifacts loaded for a model. A deployment
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-47155). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2303 vLLM is a library for LLM inference and serving. From 0.12.0 to before 0.24.0, sending a pure prompt embeds payload in a /v1/completions request with a model using M-RoPE causes EngineCore to fail an
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-55514). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2304 vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Prior to 0.24.0, the structured_outputs.regex API parameter passes a user-supplied regular expression string direc
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-55574). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-3403 vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-53923). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-3404 vLLM: OOM Denial of Service via Audio Decompression Bomb
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-54233). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-3405 vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-54235). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-3406 vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-12491). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-3408 vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-54236). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-3409 vLLM Vulnerable to Remote DoS via Special-Token Placeholders
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-44222). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-3542 vLLM has Remote DoS via Invalid Recovered Token Reinjection
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-54234). Fix: Update that package to its patched version.
  • Worth fixing GHSA-87x5-vmc3-756j vLLM: Completion prompt lists fan out into unbounded engine requests
    /workdirs/scan-9bbc9d68-e7f9-4549-856d-ebab6462f9e6/uv.lock
    A package you depend on has a known security hole (CVE-2026-73559). Fix: Update that package to its patched version.

via OSV-Scanner v1.9.2 · Apache-2.0

Risky code patterns — Semgrepⓘ none found ✓

Code that can be exploited: injection, hardcoded credentials and similar.

Nothing found by this check. ✓

via Semgrep v1.147.0 · LGPL-2.1

Malicious dependencies — Guarddogⓘ timed out

Packages that look intentionally malicious: typosquats, sneaky install scripts.

This check didn’t finish — that’s not the same as “clean.” Try Check again above.

via Guarddog v2.10.0 · Apache-2.0

error: pypi:timeout

Project health

A signal about how the project is maintained — not a vulnerability in your code. It doesn’t affect the verdict above.

Project health — OpenSSF Scorecardⓘ didn’t run

Maintenance & supply-chain hygiene. A signal about the project, not a vulnerability in your code.

This check didn’t finish — that’s not the same as “clean.” Try Check again above.

via OpenSSF Scorecard · Apache-2.0

About these results. Six open-source checks ran in parallel; every finding is tagged with the tool that produced it. The verdict follows a published rule. False positives and false negatives are normal — a clean scan does not mean the code is secure, and a red verdict does not mean the project is compromised.