Repository Issue Activity (beta)

#1399 Methods to Bypass Bandit Detection

#1311 Sarif formatter physicalLocation calculation error

#1301 Add report formatter for Github Actions annotations

#1373 [Security] tarfile.extractall without member validation in examples/tarfile_extractall.py

#306 yaml_load should not be B5xx cryptography group

#1339 Add check for decompression bomb vulnerabilities

#1467 Baseline matching ignores line number and uses set membership, not count

#1202 pre-commit hook can't read version --> wrong URL generated

#1423 `bandit -ii -ll -ii -ll` raises an `IndexError`

#1468 Test issue

#966 Unable to exclude directories when running the CLI

#1465 B501 and B113 skip requests.request(), while httpx.request() is checked

#1264 pysnmp under new ownership with breaking compatilbility

#1461 Troubles with conflicting cryptography and cffi

#1403 Proposal: Detecting Flask file-serving API misuse

#1219 Redo support for Python 3.14

#1350 B105 (hardcoded password) false positive for the string `NextToken`

#1397 False negative: narrow argument-shape checks in B508/B509

#1322 Add support for per-file rule ignores in configuration

#1432 Feature request: Adding Canary Credentials to detect supply chain compromise

#1404 B701: Extend Jinja2 checks to cover dynamic template source execution

#1405 B704 false negative for local Markup subclasses (CVE-2025-54384)

#1401 Feature request (with my own implementation): add a plugin which detects common SSRF cases where user-controlled URLs flow into outbound HTTP requests

#1395 False negative: B104 misses `bind(("", port))` wildcard host

#1394 False negative: B501 misses `verify=False` on `requests.Session` / `httpx.Client` instance methods