MalDet

Scan report

opnsense / core

Report Rescan
Vulnerability Critical

Could an attacker exploit mistakes in this code?

560 risk score

Strong warning signs. Do not run or install this without a careful review.

High
76
Medium
139
Low
253

Sources: Bandit, Semgrep, pip-audit

Malicious pattern Low

Does this code look like it is trying to cause harm?

4 risk score

Minor issues. Worth a glance, unlikely to be urgent.

High
16
Medium
0
Low
9

Sources: YARA, ClamAV, GuardDog, dependency checker

Findings overview
493 total findings
Likely real
68
Uncertain
94
Likely noise
331

The risk classifier rates every finding for how likely it is to be a real issue. Likely noise still counts, just much less.

What we found, in plain English

This repository has two distinct security issues that require immediate attention before it can be used in production. The most serious problem is the high vulnerability risk score of 560, which indicates that the code contains dangerous patterns like untrusted input being passed directly to shell commands and SQL queries without proper protection. These findings are not signs of malicious intent but rather examples of common insecure coding practices that an attacker could exploit to compromise the system. While there are some lower-priority alerts about potential obfuscation or credential reading, they do not match the severity of the critical vulnerabilities found elsewhere in the codebase.

Written by a local language model from the findings below. The risk scores come from the classifier, not from this summary.

Detections by engine

  • Bandit 310

    Python security linter · Vulnerability

  • Semgrep 158

    Pattern-based code analysis · Vulnerability

  • YARA 22

    Malware signature rules · Malicious pattern

  • GuardDog 3

    Supply-chain attack heuristics · Malicious pattern

Score over time

Overall score each time this repository was scanned.

Findings

Highest severity first. Select a finding to see the code and what it means.

Large result: showing the top 383 of 493 findings (up to 200 per engine, most severe and most likely real first). Totals above include everything.