thealgorithms/python

scanned 2026-07-23 · git 25bcced

2 of 6 checks flagged a security issue

🔴 Needs attention

Only 4 of 6 checks finished — treat this as provisional. Re-check ↻

Informational scan, not a security audit. How this is computed.

Leaked secrets—Vulnerable dependencies41Known OSS vulnerabilities43Risky code patterns✓Malicious dependencies✓Project health—

Security checks

Leaked secrets — Gitleaksⓘ timed out

API keys, passwords or tokens committed into the repo.

This check didn’t finish — that’s not the same as “clean.” Try Check again above.

via Gitleaks v8.21.2 · MIT

error: timeout after 120s

Vulnerable dependencies — Trivyⓘ 41 found

Packages you depend on that have known security holes (CVEs).

Worth fixing CVE-2025-66034 fonttools: fontTools: Arbitrary file write leading to remote code execution via malicious .designspace file

uv.lock

A package you depend on has a known security hole (CVE-2025-66034). Fix: Update that package to its patched version.
Worth fixing CVE-2026-45409 python-idna: idna: Denial of Service via specially crafted long inputs

uv.lock

A package you depend on has a known security hole (CVE-2026-45409). Fix: Update that package to its patched version.
Worth fixing CVE-2025-12060 keras: Keras Path Traversal Vulnerability

uv.lock

A package you depend on has a known security hole (CVE-2025-12060). Fix: Update that package to its patched version.
Worth fixing CVE-2025-8747 CVE-2025-8747 affecting package keras for versions less than 3.3.3-3

uv.lock

A package you depend on has a known security hole (CVE-2025-8747). Fix: Update that package to its patched version.
Worth fixing CVE-2025-9905 keras: Arbitary Code execution in Keras load_model()

uv.lock

A package you depend on has a known security hole (CVE-2025-9905). Fix: Update that package to its patched version.
Worth fixing CVE-2025-9906 keras: Arbitrary Code execution in Keras Safe Mode

uv.lock

A package you depend on has a known security hole (CVE-2025-9906). Fix: Update that package to its patched version.
Worth fixing CVE-2026-0897 Keras: Keras: Denial of Service via crafted HDF5 weight loading file

uv.lock

A package you depend on has a known security hole (CVE-2026-0897). Fix: Update that package to its patched version.
Worth fixing CVE-2026-1462 keras: Keras: Arbitrary Code Execution Vulnerability Bypassing Safe Mode

uv.lock

A package you depend on has a known security hole (CVE-2026-1462). Fix: Update that package to its patched version.
Worth fixing CVE-2026-1669 keras: Keras: Information disclosure via arbitrary file read in model loading mechanism

uv.lock

A package you depend on has a known security hole (CVE-2026-1669). Fix: Update that package to its patched version.
Worth fixing CVE-2025-12058 keras: Keras Model.load_model Arbitrary Local File Loading and SSRF

uv.lock

A package you depend on has a known security hole (CVE-2025-12058). Fix: Update that package to its patched version.
Worth fixing CVE-2026-41066 lxml: python: lxml: Information disclosure via untrusted XML input leading to local file read

uv.lock

A package you depend on has a known security hole (CVE-2026-41066). Fix: Update that package to its patched version.
Worth fixing CVE-2025-48379 python-pillow: pillow: Pillow DDS Heap Buffer Overflow

uv.lock

A package you depend on has a known security hole (CVE-2025-48379). Fix: Update that package to its patched version.
Worth fixing CVE-2026-25990 pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image

uv.lock

A package you depend on has a known security hole (CVE-2026-25990). Fix: Update that package to its patched version.
Worth fixing CVE-2026-40192 Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing

uv.lock

A package you depend on has a known security hole (CVE-2026-40192). Fix: Update that package to its patched version.
Worth fixing CVE-2026-42311 Pillow: python-pillow: Pillow: Arbitrary code execution via malicious PSD file processing

uv.lock

A package you depend on has a known security hole (CVE-2026-42311). Fix: Update that package to its patched version.
Worth fixing CVE-2026-54058 Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image

uv.lock

A package you depend on has a known security hole (CVE-2026-54058). Fix: Update that package to its patched version.
Worth fixing CVE-2026-54059 python-pillow: Pillow: Denial of Service via crafted PCF font data

uv.lock

A package you depend on has a known security hole (CVE-2026-54059). Fix: Update that package to its patched version.
Worth fixing CVE-2026-54060 python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files

uv.lock

A package you depend on has a known security hole (CVE-2026-54060). Fix: Update that package to its patched version.
Worth fixing CVE-2026-55379 python-pillow: Pillow: Denial of Service via crafted BDF font file

uv.lock

A package you depend on has a known security hole (CVE-2026-55379). Fix: Update that package to its patched version.
Worth fixing CVE-2026-55380 python-pillow: Pillow: Denial of Service via crafted GD 2.x image file

uv.lock

A package you depend on has a known security hole (CVE-2026-55380). Fix: Update that package to its patched version.
Worth fixing CVE-2026-59197 Pillow: Pillow: Native heap out-of-bounds write

uv.lock

A package you depend on has a known security hole (CVE-2026-59197). Fix: Update that package to its patched version.
Worth fixing CVE-2026-59199 Pillow: Pillow: Denial of Service via out-of-bounds write in image processing

uv.lock

A package you depend on has a known security hole (CVE-2026-59199). Fix: Update that package to its patched version.
Worth fixing CVE-2026-59200 Pillow: Pillow: Denial of service via crafted PDF stream

uv.lock

A package you depend on has a known security hole (CVE-2026-59200). Fix: Update that package to its patched version.
Worth fixing CVE-2026-59204 Pillow: Pillow: Denial of Service via crafted JPEG2000 image

uv.lock

A package you depend on has a known security hole (CVE-2026-59204). Fix: Update that package to its patched version.
Worth fixing CVE-2026-59205 Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API

uv.lock

A package you depend on has a known security hole (CVE-2026-59205). Fix: Update that package to its patched version.

… 16 more not shown

via Trivy v0.70.0 · Apache-2.0

Known OSS vulnerabilities — OSV-Scannerⓘ 43 found · 1 serious

Your dependencies cross-checked against the OSV vulnerability database.

Serious PYSEC-2026-1486 Keras Directory Traversal Vulnerability

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2025-12060). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-1389 fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2025-66034). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-215 Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-45409). Fix: Update that package to its patched version.
Worth fixing PYSEC-2025-123 The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True. One can create a specially crafted .h5/.hdf5 model archive that, when loaded via Mode

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2025-9905). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-1487 Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2025-12058). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-2324 Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/file_utils.py`. The functions `filter_safe_tarinfos()` and `filt

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-11816). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-2546 Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-1669). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-2547 Keras has an untrusted deserialization vulnerability

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-1462). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-73 Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (D

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-0897). Fix: Update that package to its patched version.
Worth fixing GHSA-36fq-jgmw-4r9c Keras is vulnerable to Deserialization of Untrusted Data

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2025-9906). Fix: Update that package to its patched version.
Worth fixing GHSA-c9rc-mg46-23w3 Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2025-8747). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-87 lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default configuration (with resolve_entities=True) allows untrusted XML inp

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-41066). Fix: Update that package to its patched version.
Worth fixing PYSEC-2025-61 Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2025-48379). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-165 Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-42308). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-2249 Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-25990). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-2250 Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attack

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-40192). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-2251 Pillow is a Python imaging library. From version 11.2.1 to before version 12.2.0, passing nested lists as coordinates to APIs that accept coordinates such as ImagePath.Path, ImageDraw.ImageDraw.polygo

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-42309). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-2252 Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code ex

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-42311). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-2253 Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombytes() without calling

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-54059). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-2254 Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into a combined bitmap with Image.new("1", (xsize, ysize)) without calling Image._dec

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-54060). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-2255 Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a BDF font file and passed attacker-controlled dimensions to Image.new() wit

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-55379). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-2256 Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self._size without calling Image._decompress

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-55380). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-2257 Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command() constructed a cmd.exe shell command by directly embedding a file path into an f-string without escaping and passed the

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-55798). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-2874 Pillow has a PDF Parsing Trailer Infinite Loop (DoS)

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-42310). Fix: Update that package to its patched version.
Worth fixing PYSEC-2026-3451 Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates near the signed 32-bit integer limits in I

/workdirs/scan-4237cd8a-895c-48e7-a015-a12363ad3cab/uv.lock

A package you depend on has a known security hole (CVE-2026-59199). Fix: Update that package to its patched version.

… 18 more not shown

via OSV-Scanner v1.9.2 · Apache-2.0

Risky code patterns — Semgrepⓘ none found ✓

Code that can be exploited: injection, hardcoded credentials and similar.

Nothing found by this check. ✓

via Semgrep v1.147.0 · LGPL-2.1

Malicious dependencies — Guarddogⓘ none found ✓

Packages that look intentionally malicious: typosquats, sneaky install scripts.

Nothing found by this check. ✓

via Guarddog v2.10.0 · Apache-2.0

Project health

A signal about how the project is maintained — not a vulnerability in your code. It doesn’t affect the verdict above.

Project health — OpenSSF Scorecardⓘ didn’t run

Maintenance & supply-chain hygiene. A signal about the project, not a vulnerability in your code.

This check didn’t finish — that’s not the same as “clean.” Try Check again above.

via OpenSSF Scorecard · Apache-2.0

About these results. Six open-source checks ran in parallel; every finding is tagged with the tool that produced it. The verdict follows a published rule. False positives and false negatives are normal — a clean scan does not mean the code is secure, and a red verdict does not mean the project is compromised.