gitsafehub
github.com/yujincheng08/codes-for-lane-detection ↗

yujincheng08/codes-for-lane-detection

scanned 2026-08-08 · git c484d94
2 of 6 checks flagged a security issue
🔴 Needs attention
Only 5 of 6 checks finished — treat this as provisional. Re-check ↻

Informational scan, not a security audit. How this is computed.

Leaked secrets✓Vulnerable dependencies36Known OSS vulnerabilities41Risky code patterns✓Malicious dependencies✓Project health—

Security checks

Leaked secrets — Gitleaksⓘ none found ✓

API keys, passwords or tokens committed into the repo.

Nothing found by this check. ✓

via Gitleaks v8.21.2 · MIT

Vulnerable dependencies — Trivyⓘ 36 found · 1 serious

Packages you depend on that have known security holes (CVEs).

  • Serious CVE-2019-6446 numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2019-6446). Fix: Update that package to its patched version.
  • Worth fixing CVE-2017-12852 numpy: Missing input validation on empty list or ndarray in numpy.pad function
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12852). Fix: Update that package to its patched version.
  • Worth fixing CVE-2021-41495 numpy: NULL pointer dereference in numpy.sort in in the PyArray_DescrNew() due to missing return-value validation
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2021-41495). Fix: Update that package to its patched version.
  • Worth fixing CVE-2021-33430 numpy: buffer overflow in the PyArray_NewFromDescr_int() in ctors.c
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2021-33430). Fix: Update that package to its patched version.
  • Worth fixing CVE-2021-34141 numpy: incomplete string comparison in the numpy.core component
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2021-34141). Fix: Update that package to its patched version.
  • Worth fixing CVE-2021-41496 numpy: buffer overflow in the array_from_pyobj() in fortranobject.c
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2021-41496). Fix: Update that package to its patched version.
  • Worth fixing CVE-2016-1516 opencv: Double free vulnerability on crafted image
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2016-1516). Fix: Update that package to its patched version.
  • Worth fixing CVE-2017-1000450 opencv: out of bounds write in functions FillUniColor and FillUniGray in opencv/modules/imgcodecs/src/utils.cpp
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-1000450). Fix: Update that package to its patched version.
  • Worth fixing CVE-2017-12597 opencv: out-of-bounds write error in the function FillColorRow1
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12597). Fix: Update that package to its patched version.
  • Worth fixing CVE-2017-12598 opencv: out-of-bounds read error in the cv::RBaseStream::readBlock function
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12598). Fix: Update that package to its patched version.
  • Worth fixing CVE-2017-12599 opencv: out-of-bounds read error in the function icvCvt_BGRA2BGR_8u_C4C3R
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12599). Fix: Update that package to its patched version.
  • Worth fixing CVE-2017-12600 opencv: CPU exhaustion causing DoS
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12600). Fix: Update that package to its patched version.
  • Worth fixing CVE-2017-12601 opencv: buffer overflow in the cv::BmpDecoder::readData function
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12601). Fix: Update that package to its patched version.
  • Worth fixing CVE-2017-12602 opencv: Memory exhaustion causing DoS
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12602). Fix: Update that package to its patched version.
  • Worth fixing CVE-2017-12603 opencv: invalid write in the cv::RLByteStream::getBytes function
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12603). Fix: Update that package to its patched version.
  • Worth fixing CVE-2017-12604 opencv: out-of-bounds write error in the function FillUniColor
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12604). Fix: Update that package to its patched version.
  • Worth fixing CVE-2017-12605 opencv: out-of-bounds write error in the function FillColorRow8
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12605). Fix: Update that package to its patched version.
  • Worth fixing CVE-2017-12606 opencv: out-of-bounds write error in the function FillColorRow4
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12606). Fix: Update that package to its patched version.
  • Worth fixing CVE-2017-12862 opencv: Heap-based buffer over-write in modules/imgcodecs/src/grfmt_pxm.cpp
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12862). Fix: Update that package to its patched version.
  • Worth fixing CVE-2017-12863 opencv: Integer overflow in PxMDecoder::readData function in imgcodecs/src/grfmt_pxm.cpp
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12863). Fix: Update that package to its patched version.
  • Worth fixing CVE-2017-12864 opencv: Integer overflow in ReadNumber function in opencv/modules/imgcodecs/src/grfmt_pxm.cpp
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12864). Fix: Update that package to its patched version.
  • Worth fixing CVE-2017-18009 opencv: heap-based buffer over-read in function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-18009). Fix: Update that package to its patched version.
  • Worth fixing CVE-2019-14491 opencv: out-of-bounds read in function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp leads to dos
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2019-14491). Fix: Update that package to its patched version.
  • Worth fixing CVE-2019-14492 opencv: out-of-bounds read in function HaarEvaluator::OptFeature::calc() in cascadedetect.hpp leading to DoS
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2019-14492). Fix: Update that package to its patched version.
  • Worth fixing CVE-2019-14493 opencv: NULL pointer dereference in function cv::XMLParser::parse() in persistence_xml.cpp leading to DoS
    SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2019-14493). Fix: Update that package to its patched version.
… 11 more not shown

via Trivy v0.70.0 · Apache-2.0

Known OSS vulnerabilities — OSV-Scannerⓘ 41 found · 2 serious

Your dependencies cross-checked against the OSV vulnerability database.

  • Serious PYSEC-2019-108 ** DISPUTED ** An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2019-6446). Fix: Update that package to its patched version.
  • Serious PYSEC-2020-107 ** DISPUTED ** scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2020-13092). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2017-1 The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12852). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2021-856 Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2021-41495). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2021-857 Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative valu
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2021-41496). Fix: Update that package to its patched version.
  • Worth fixing GHSA-6p56-wp2h-9hxr NumPy Buffer Overflow (Disputed)
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2021-33430). Fix: Update that package to its patched version.
  • Worth fixing GHSA-fpfv-jqm9-f5jm Incorrect Comparison in NumPy
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2021-34141). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2804 Integer Overflow or Wraparound in OpenCV
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12864). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2805 Out-of-bounds Read in OpenCV
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12598). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2806 NULL Pointer Dereference in OpenCV.
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2019-14493). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2807 Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12862). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2808 Out-of-bounds Write in OpenCV
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-14136). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2809 Out-of-bounds Write in OpenCV
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12603). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2810 Out-of-bounds Read in OpenCV
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-18009). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2811 Out-of-bounds Write in OpenCV
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2019-9423). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2812 Reachable Assertion in OpenCV.
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2018-5269). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2813 Out-of-bounds Write in OpenCV
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12597). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2814 Out-of-bounds Write in OpenCV.
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2018-5268). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2815 Out-of-bounds Write in OpenCV
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12604). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2816 Double Free in OpenCV
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2016-1516). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2817 Improper Input Validation in OpenCV
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2016-1517). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2818 Out-of-bounds Read in OpenCV
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2019-14491). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2819 Denial of Service in OpenCV
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12600). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2820 Out-of-bounds Read in OpenCV
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2017-12599). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-2821 Out-of-bounds Read and Out-of-bounds Write in OpenCV
    /workdirs/scan-c6b90715-d946-441d-8141-32db96d51f7f/SCNN-Tensorflow/lane-detection-model/requirements.txt
    A package you depend on has a known security hole (CVE-2019-14492). Fix: Update that package to its patched version.
… 16 more not shown

via OSV-Scanner v1.9.2 · Apache-2.0

Risky code patterns — Semgrepⓘ none found ✓

Code that can be exploited: injection, hardcoded credentials and similar.

Nothing found by this check. ✓

via Semgrep v1.147.0 · LGPL-2.1

Malicious dependencies — Guarddogⓘ none found ✓

Packages that look intentionally malicious: typosquats, sneaky install scripts.

Nothing found by this check. ✓

via Guarddog v2.10.0 · Apache-2.0

Project health

A signal about how the project is maintained — not a vulnerability in your code. It doesn’t affect the verdict above.

Project health — OpenSSF Scorecardⓘ didn’t run

Maintenance & supply-chain hygiene. A signal about the project, not a vulnerability in your code.

This check didn’t finish — that’s not the same as “clean.” Try Check again above.

via OpenSSF Scorecard · Apache-2.0

About these results. Six open-source checks ran in parallel; every finding is tagged with the tool that produced it. The verdict follows a published rule. False positives and false negatives are normal — a clean scan does not mean the code is secure, and a red verdict does not mean the project is compromised.