{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:08.295386Z","repo":{"ref":{"host":"github.com","owner":"viebvo","name":"llm-probe"},"default_branch":"main","clone_url":"https://github.com/viebvo/llm-probe.git","html_url":"https://github.com/viebvo/llm-probe","description":"Speed, accuracy and capabilities of LLM endpoints: benchmark and compare Ollama, vLLM and Open WebUI models","stars":0,"forks":0,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":14574,"primary_language":"Python","license_spdx":"MIT","created_at":"2026-10-26T21:28:39Z","pushed_at":"2026-11-13T23:34:38Z","security_policy_url":"https://github.com/viebvo/llm-probe/security/policy","distribution":{"owner_created_at":"2019-03-17T16:14:23Z","owner_type":"User","release_assets":[{"name":"llm-probe-0.20.0.zip","size":9847899,"download_count":2,"release_tag":"v0.20.0","url":"https://github.com/viebvo/llm-probe/releases/download/v0.20.0/llm-probe-0.20.0.zip"},{"name":"llm-probe-0.19.0.zip","size":9782391,"download_count":1,"release_tag":"v0.19.0","url":"https://github.com/viebvo/llm-probe/releases/download/v0.19.0/llm-probe-0.19.0.zip"},{"name":"llm-probe-0.18.0.zip","size":9898822,"download_count":2,"release_tag":"v0.18.0","url":"https://github.com/viebvo/llm-probe/releases/download/v0.18.0/llm-probe-0.18.0.zip"},{"name":"llm-probe-0.17.2.zip","size":9883062,"download_count":1,"release_tag":"v0.17.2","url":"https://github.com/viebvo/llm-probe/releases/download/v0.17.2/llm-probe-0.17.2.zip"}]}},"commit_sha":"4e172bfd708b1b4659b1f00da36b33f825678102","profile":{"lines_by_language":{"Python":10491,"JavaScript":3755,"Shell":38},"files_by_category":{"source":39,"binary":21,"docs":7,"other":7,"config":4,"oversized":2},"source_lines":14284,"test_lines":0},"pillars":{"ai_provenance":{"score":100.0,"confidence":0.73,"coverage":1.0,"label":"explicit","breakdown":{"attributed_share":1.0,"suspected_share":0.0,"estimated_share":1.0,"ai_artifacts":0.0,"flagged_work_units":1.0,"flagged_releases":0.0,"style_index":0.0},"summary":"Explicit AI attribution on 100% of first-party code added; an estimated 100% including velocity signals."},"quality":{"score":40.9,"confidence":0.9,"coverage":1.0,"label":"poor","breakdown":{"complexity":45.9,"duplication":93.3,"lint":34.1,"testing":0.0,"docs":65.0,"type_safety":40.0,"process":null},"summary":"Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 26% of function code in complex or long functions; 1% duplicated lines. Weakest area: testing."},"security":{"score":57.8,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":3.4,"dependencies":68.2,"ci_actions":null,"posture":40.0,"scorecard":null},"summary":"Security posture is weak: 52 known vulnerabilities in 2 dependencies; 79 high-severity SAST findings. Weakest area: sast."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":4.0,"checked":4.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":12.0,"attributed_commits":12.0,"attributed_commit_share":1.0,"effective_loc":14438.0,"attributed_loc":14438.0,"attributed_loc_share":1.0,"tools_detected":1.0},"findings":[],"evidence":[{"kind":"attribution-summary","description":"Claude Code: 12 attributed commits, 14,438 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"4e172bfd708b1b4659b1f00da36b33f825678102","url":"https://github.com/viebvo/llm-probe/commit/4e172bfd708b1b4659b1f00da36b33f825678102","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"8c8f47e8be96cac36f9fef588e1933e2e509fcc5","url":"https://github.com/viebvo/llm-probe/commit/8c8f47e8be96cac36f9fef588e1933e2e509fcc5","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"9487904b1b974c3c2d4507c0efa84037814d7d0f","url":"https://github.com/viebvo/llm-probe/commit/9487904b1b974c3c2d4507c0efa84037814d7d0f","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"7a096d2419b79661cd48e94f6f79b6c950e9c53f","url":"https://github.com/viebvo/llm-probe/commit/7a096d2419b79661cd48e94f6f79b6c950e9c53f","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"6aa8703edb7ad071364a9dc4c4494bd68a42897e","url":"https://github.com/viebvo/llm-probe/commit/6aa8703edb7ad071364a9dc4c4494bd68a42897e","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"924b3c3a2e65735508853c8f6b79bd182abe7240","url":"https://github.com/viebvo/llm-probe/commit/924b3c3a2e65735508853c8f6b79bd182abe7240","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"6e3c91cfdf95e6bd6b9794a8bc3dc4e4e117aa30","url":"https://github.com/viebvo/llm-probe/commit/6e3c91cfdf95e6bd6b9794a8bc3dc4e4e117aa30","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"7fe927ccac7a134fd71636c926bae933af315d2b","url":"https://github.com/viebvo/llm-probe/commit/7fe927ccac7a134fd71636c926bae933af315d2b","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"17fe3fe396c09bd09c2110377bc6b5c2b02fdcd3","url":"https://github.com/viebvo/llm-probe/commit/17fe3fe396c09bd09c2110377bc6b5c2b02fdcd3","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"72e9c2f18d3569c72eb84c11ee3b6b8e84d6415a","url":"https://github.com/viebvo/llm-probe/commit/72e9c2f18d3569c72eb84c11ee3b6b8e84d6415a","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"20795fab2dcf5e3a2367e8a48d6660e9da750b80","url":"https://github.com/viebvo/llm-probe/commit/20795fab2dcf5e3a2367e8a48d6660e9da750b80","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"6328c968278b33057a3f36b0bcae0a75ffd57f06","url":"https://github.com/viebvo/llm-probe/commit/6328c968278b33057a3f36b0bcae0a75ffd57f06","weight":0.9}],"data":{"attributed_loc_by_commit":{"6328c968278b33057a3f36b0bcae0a75ffd57f06":9362,"20795fab2dcf5e3a2367e8a48d6660e9da750b80":0,"72e9c2f18d3569c72eb84c11ee3b6b8e84d6415a":0,"17fe3fe396c09bd09c2110377bc6b5c2b02fdcd3":31,"7fe927ccac7a134fd71636c926bae933af315d2b":61,"6e3c91cfdf95e6bd6b9794a8bc3dc4e4e117aa30":3815,"924b3c3a2e65735508853c8f6b79bd182abe7240":55,"6aa8703edb7ad071364a9dc4c4494bd68a42897e":213,"7a096d2419b79661cd48e94f6f79b6c950e9c53f":115,"9487904b1b974c3c2d4507c0efa84037814d7d0f":144,"8c8f47e8be96cac36f9fef588e1933e2e509fcc5":642,"4e172bfd708b1b4659b1f00da36b33f825678102":0},"tools":{"claude-code":{"name":"Claude Code","commits":12,"loc":14438,"first_seen":1793050515,"last_seen":1794612876}},"monthly":{"2026-10":{"loc":13652,"attributed_loc":13652},"2026-11":{"loc":786,"attributed_loc":786}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":5.0,"flagged_units":1.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":5076.0,"flagged_loc":3870.0,"flagged_loc_share":0.7624113475177305,"max_loc_per_hour":2150.9958314034275,"median_loc_per_hour":120.73867362684167,"pr_timed_units":0.0,"excluded_import_loc":9362.0},"findings":[],"evidence":[{"kind":"velocity-burst","description":"3,870 lines of first-party code in ~1.8h (2,151 lines/hour, 2 commit session)","ref":"924b3c3a2e65735508853c8f6b79bd182abe7240","url":"https://github.com/viebvo/llm-probe/commit/924b3c3a2e65735508853c8f6b79bd182abe7240","weight":0.6}],"data":{"flagged_loc_by_commit":{"6e3c91cfdf95e6bd6b9794a8bc3dc4e4e117aa30":3815,"924b3c3a2e65735508853c8f6b79bd182abe7240":55},"excluded_import_commits":["6328c968278b33057a3f36b0bcae0a75ffd57f06"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"releases":3.0,"flagged_releases":0.0,"max_loc_per_day":3905.8},"findings":[],"evidence":[],"data":{"releases":[{"from":"v0.17.2","to":"v0.18.0","loc":3907,"days":1.0,"loc_per_day":3905.8,"flagged":false},{"from":"v0.18.0","to":"v0.19.0","loc":383,"days":1.02,"loc_per_day":376.9,"flagged":false},{"from":"v0.19.0","to":"v0.20.0","loc":786,"days":15.94,"loc_per_day":49.3,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":14284.0,"index":0.0,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":392.0,"findings_high":79.0,"findings_medium":313.0,"findings_low":0.0,"weighted_findings":137.85,"scanned_lines":14284.0,"parse_errors":1.0},"findings":[{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"llm_probe/sandbox.py","line":193,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:llm_probe/sandbox.py:193"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/compare.js","line":20,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/compare.js:20"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `el.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/compare.js","line":20,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/compare.js:20"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/compare.js","line":102,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/compare.js:102"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `bar.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/compare.js","line":102,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/compare.js:102"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/compare.js","line":126,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/compare.js:126"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$(\"cmp-out\").innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/compare.js","line":126,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/compare.js:126"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/core.js","line":192,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/core.js:192"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `sel.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/core.js","line":192,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/core.js:192"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/core.js","line":198,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/core.js:198"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `plainEl.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/core.js","line":198,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/core.js:198"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/endpoints.js","line":6,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/endpoints.js:6"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$(\"home-ep\").innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/endpoints.js","line":6,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/endpoints.js:6"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/endpoints.js","line":9,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/endpoints.js:9"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$(\"home-runs\").innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/endpoints.js","line":9,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/endpoints.js:9"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/endpoints.js","line":46,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/endpoints.js:46"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `tb.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/endpoints.js","line":46,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/endpoints.js:46"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/init.js","line":7,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/init.js:7"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `document.querySelector(\"main\").innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/init.js","line":7,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/init.js:7"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/prompts.js","line":14,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/prompts.js:14"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$(\"pr-promptset\").innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/prompts.js","line":14,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/prompts.js:14"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/prompts.js","line":44,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/prompts.js:44"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `tb.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/prompts.js","line":44,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/prompts.js:44"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/prompts.js","line":69,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/prompts.js:69"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$(\"dlg-body\").innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/prompts.js","line":69,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/prompts.js:69"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/prompts.js","line":71,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/prompts.js:71"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$(\"dlg-buttons\").innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/prompts.js","line":71,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/prompts.js:71"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/responses.js","line":19,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/responses.js:19"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$(\"ans-runs\").innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/responses.js","line":19,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/responses.js:19"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/responses.js","line":48,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/responses.js:48"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `list.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/responses.js","line":48,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/responses.js:48"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/responses.js","line":89,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/responses.js:89"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$(\"ans-question\").innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/responses.js","line":89,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/responses.js:89"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/responses.js","line":90,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/responses.js:90"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$(\"ans-images\").innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/responses.js","line":90,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/responses.js:90"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/responses.js","line":130,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/responses.js:130"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `grid.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/responses.js","line":130,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/responses.js:130"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/results.js","line":158,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/results.js:158"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `tb.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/results.js","line":158,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/results.js:158"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/results.js","line":292,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/results.js:292"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$(\"run-detail\").innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/results.js","line":292,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/results.js:292"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/sessions.js","line":21,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/sessions.js:21"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `el.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/sessions.js","line":21,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/sessions.js:21"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/sessions.js","line":265,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/sessions.js:265"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$(key).innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/sessions.js","line":265,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/sessions.js:265"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test-models.js","line":9,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/test-models.js:9"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `box.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test-models.js","line":9,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/test-models.js:9"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test-models.js","line":20,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/test-models.js:20"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `box.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test-models.js","line":20,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/test-models.js:20"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test-models.js","line":101,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/test-models.js:101"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `el.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test-models.js","line":101,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/test-models.js:101"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test.js","line":166,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/test.js:166"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$(\"t-think\").querySelector(\".tlist\").innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test.js","line":166,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/test.js:166"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test.js","line":177,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/test.js:177"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$(\"pr-images\").innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test.js","line":177,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/test.js:177"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test.js","line":256,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/test.js:256"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `box.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test.js","line":256,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/test.js:256"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test.js","line":298,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/test.js:298"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$(\"t-selcount\").innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test.js","line":298,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/test.js:298"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test.js","line":333,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/test.js:333"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `box.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test.js","line":333,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/test.js:333"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test.js","line":646,"fingerprint":"javascript.browser.security.insecure-document-method:llm_probe/static/test.js:646"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$(\"live\").innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/test.js","line":646,"fingerprint":"javascript.browser.security.insecure-innerhtml:llm_probe/static/test.js:646"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"llm_probe/storage.py","line":93,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:llm_probe/storage.py:93"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"llm_probe/storage.py","line":321,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:llm_probe/storage.py:321"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"llm_probe/storage.py","line":1023,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:llm_probe/storage.py:1023"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"llm_probe/storage.py","line":1050,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:llm_probe/storage.py:1050"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"llm_probe/storage.py","line":1383,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:llm_probe/storage.py:1383"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"llm_probe/storage.py","line":1449,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:llm_probe/storage.py:1449"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"tools/gui_tests/run.py","line":490,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:tools/gui_tests/run.py:490"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"tools/gui_tests/run.py","line":537,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:tools/gui_tests/run.py:537"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"tools/gui_tests/run.py","line":591,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:tools/gui_tests/run.py:591"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"tools/gui_tests/run.py","line":603,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:tools/gui_tests/run.py:603"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"tools/gui_tests/run.py","line":633,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:tools/gui_tests/run.py:633"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"tools/gui_tests/run.py","line":635,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:tools/gui_tests/run.py:635"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"tools/gui_tests/run.py","line":642,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:tools/gui_tests/run.py:642"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"tools/gui_tests/run.py","line":763,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:tools/gui_tests/run.py:763"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"tools/gui_tests/run.py","line":815,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:tools/gui_tests/run.py:815"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"tools/make_screenshots.py","line":79,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:tools/make_screenshots.py:79"},{"rule_id":"opengrep/python.lang.security.insecure-hash-algorithm-sha1","severity":"medium","message":"Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead. [confidence medium]","path":"llm_probe/bench.py","line":150,"fingerprint":"python.lang.security.insecure-hash-algorithm-sha1:llm_probe/bench.py:150"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"llm_probe/server.py","line":1282,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:llm_probe/server.py:1282"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":30,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:30"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":35,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:35"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":46,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:46"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":47,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:47"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":48,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:48"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":64,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:64"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":65,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:65"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":114,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:114"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":115,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:115"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":116,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:116"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":116,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:116"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":124,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:124"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":128,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:128"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":132,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:132"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":138,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:138"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":140,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:140"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":149,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:149"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":152,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:152"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":155,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:155"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":156,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:156"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":173,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:173"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":174,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:174"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":191,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:191"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":197,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:197"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":199,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:199"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":200,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:200"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":201,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:201"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":203,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:203"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":204,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:204"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":205,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:205"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":206,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:206"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":208,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:208"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":209,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:209"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":211,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:211"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":214,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:214"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/charts.js","line":219,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/charts.js:219"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/compare.js","line":19,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/compare.js:19"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/compare.js","line":21,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/compare.js:21"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/compare.js","line":22,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/compare.js:22"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/compare.js","line":23,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/compare.js:23"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/compare.js","line":25,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/compare.js:25"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/compare.js","line":102,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/compare.js:102"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/compare.js","line":103,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/compare.js:103"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/compare.js","line":171,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/compare.js:171"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/compare.js","line":176,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/compare.js:176"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/compare.js","line":177,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/compare.js:177"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/compare.js","line":178,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/compare.js:178"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/compare.js","line":181,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/compare.js:181"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/compare.js","line":183,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/compare.js:183"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/compare.js","line":186,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/compare.js:186"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/compare.js","line":209,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/compare.js:209"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/compare.js","line":210,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/compare.js:210"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/compare.js","line":237,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/compare.js:237"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":38,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:38"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":192,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:192"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":193,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:193"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":218,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:218"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":219,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:219"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":221,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:221"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":221,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:221"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":223,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:223"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":224,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:224"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":230,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:230"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":236,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:236"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":237,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:237"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":253,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:253"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":262,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:262"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":264,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:264"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":285,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:285"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":288,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:288"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":289,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:289"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":290,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:290"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":301,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:301"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":302,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:302"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":320,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:320"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/core.js","line":332,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/core.js:332"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/endpoints.js","line":7,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/endpoints.js:7"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/endpoints.js","line":47,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/endpoints.js:47"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/endpoints.js","line":48,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/endpoints.js:48"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/endpoints.js","line":49,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/endpoints.js:49"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/endpoints.js","line":50,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/endpoints.js:50"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/endpoints.js","line":51,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/endpoints.js:51"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/endpoints.js","line":52,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/endpoints.js:52"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/init.js","line":11,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/init.js:11"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/prompts.js","line":14,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/prompts.js:14"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/prompts.js","line":45,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/prompts.js:45"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/prompts.js","line":46,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/prompts.js:46"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/prompts.js","line":47,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/prompts.js:47"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/prompts.js","line":48,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/prompts.js:48"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/prompts.js","line":49,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/prompts.js:49"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/prompts.js","line":71,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/prompts.js:71"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/prompts.js","line":106,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/prompts.js:106"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/prompts.js","line":107,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/prompts.js:107"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/prompts.js","line":119,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/prompts.js:119"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/prompts.js","line":120,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/prompts.js:120"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/prompts.js","line":146,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:llm_probe/static/prompts.js:146"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/prompts.js","line":146,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:llm_probe/static/prompts.js:146"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/prompts.js","line":149,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:llm_probe/static/prompts.js:149"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"llm_probe/static/prompts.js","line":149,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:llm_probe/static/prompts.js:149"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":19,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:19"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":20,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:20"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"llm_probe/static/responses.js","line":34,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:llm_probe/static/responses.js:34"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":48,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:48"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":49,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:49"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":90,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:90"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":91,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:91"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":112,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:112"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":113,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:113"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":119,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:119"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":122,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:122"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":125,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:125"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":126,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:126"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":127,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:127"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":140,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:140"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":173,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:173"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":176,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:176"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":177,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:177"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":178,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:178"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":179,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:179"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":180,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:180"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":187,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:187"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":190,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:190"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":191,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:191"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/responses.js","line":194,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/responses.js:194"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"llm_probe/static/results.js","line":11,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:llm_probe/static/results.js:11"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":107,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:107"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":114,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:114"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":115,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:115"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":116,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:116"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":122,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:122"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":123,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:123"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":143,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:143"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":144,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:144"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":161,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:161"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":162,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:162"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":163,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:163"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":164,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:164"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":165,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:165"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":166,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:166"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":168,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:168"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":169,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:169"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":170,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:170"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":171,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:171"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":172,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:172"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":173,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:173"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":174,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:174"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":175,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:175"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":176,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:176"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":177,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:177"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":178,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:178"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":179,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:179"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":180,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:180"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":181,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:181"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":182,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:182"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":183,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:183"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":184,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:184"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":185,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:185"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":186,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:186"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":187,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:187"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":224,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:224"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":316,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:316"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":318,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:318"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":327,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:327"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":332,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:332"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":332,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:332"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":333,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:333"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":334,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:334"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":351,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:351"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":353,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:353"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":354,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:354"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":355,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:355"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":362,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:362"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":368,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:368"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":371,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:371"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":371,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:371"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":374,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:374"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":376,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:376"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":377,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:377"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":378,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:378"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/results.js","line":391,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/results.js:391"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":17,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:17"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":35,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:35"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":37,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:37"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":39,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:39"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":40,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:40"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":43,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:43"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":44,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:44"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":52,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:52"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":53,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:53"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":56,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:56"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":64,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:64"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":72,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:72"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":79,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:79"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":80,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:80"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":81,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:81"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":88,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:88"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":89,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:89"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":90,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:90"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":91,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:91"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":92,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:92"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":93,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:93"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":112,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:112"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":128,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:128"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":129,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:129"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":130,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:130"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":131,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:131"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":132,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:132"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":133,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:133"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":138,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:138"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":140,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:140"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":141,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:141"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":142,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:142"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":148,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:148"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":150,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:150"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":151,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:151"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":154,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:154"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":154,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:154"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":218,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:218"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"llm_probe/static/sessions.js","line":222,"fingerprint":"javascript.lang.security.html-in-template-string:llm_probe/static/sessions.js:222"}],"evidence":[],"data":{"rulesets":["python","javascript","bash"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":2.0,"vulnerabilities":52.0,"vulns_critical":1.0,"vulns_high":22.0,"vulns_medium":23.0,"vulns_low":6.0,"vulns_unknown":0.0,"penalty":23.0},"findings":[{"rule_id":"osv/GHSA-63hf-3vf5-4wqf","severity":"critical","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2102, GHSA-63hf-3vf5-4wqf","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-63hf-3vf5-4wqf"},{"rule_id":"osv/GHSA-5m98-qgg9-wh84","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-1098, GHSA-5m98-qgg9-wh84","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-5m98-qgg9-wh84"},{"rule_id":"osv/GHSA-6mq8-rvhq-8wgg","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-1101, GHSA-6mq8-rvhq-8wgg","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-6mq8-rvhq-8wgg"},{"rule_id":"osv/GHSA-hcc4-c3v8-rx92","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2095, GHSA-hcc4-c3v8-rx92","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-hcc4-c3v8-rx92"},{"rule_id":"osv/GHSA-p998-jp59-783m","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2097, GHSA-p998-jp59-783m","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-p998-jp59-783m"},{"rule_id":"osv/GHSA-m5qp-6w8w-w647","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2098, GHSA-m5qp-6w8w-w647","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-m5qp-6w8w-w647"},{"rule_id":"osv/GHSA-jg22-mg44-37j8","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2104, GHSA-jg22-mg44-37j8","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-jg22-mg44-37j8"},{"rule_id":"osv/GHSA-hg6j-4rv6-33pg","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2105, GHSA-hg6j-4rv6-33pg","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-hg6j-4rv6-33pg"},{"rule_id":"osv/GHSA-m6qw-4cw2-hm4m","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2106, GHSA-m6qw-4cw2-hm4m","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-m6qw-4cw2-hm4m"},{"rule_id":"osv/GHSA-4fvr-rgm6-gqmc","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2107, GHSA-4fvr-rgm6-gqmc","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-4fvr-rgm6-gqmc"},{"rule_id":"osv/GHSA-xcgm-r5h9-7989","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2108, GHSA-xcgm-r5h9-7989","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-xcgm-r5h9-7989"},{"rule_id":"osv/GHSA-63hw-fmq6-xxg2","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2110, GHSA-63hw-fmq6-xxg2","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-63hw-fmq6-xxg2"},{"rule_id":"osv/GHSA-g3cq-j2xw-wf74","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2111, GHSA-g3cq-j2xw-wf74","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-g3cq-j2xw-wf74"},{"rule_id":"osv/GHSA-2fqr-mr3j-6wp8","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2112, GHSA-2fqr-mr3j-6wp8","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-2fqr-mr3j-6wp8"},{"rule_id":"osv/GHSA-9x8q-7h8h-wcw9","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2113, GHSA-9x8q-7h8h-wcw9","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-9x8q-7h8h-wcw9"},{"rule_id":"osv/GHSA-4m7w-qmgq-4wj5","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-237, GHSA-4m7w-qmgq-4wj5","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-4m7w-qmgq-4wj5"},{"rule_id":"osv/GHSA-cq5v-8q36-5273","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-3545, GHSA-cq5v-8q36-5273","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-cq5v-8q36-5273"},{"rule_id":"osv/GHSA-2g87-pp6c-29x5","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by GHSA-2g87-pp6c-29x5","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-2g87-pp6c-29x5"},{"rule_id":"osv/GHSA-5h86-8mv2-jq9f","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by GHSA-5h86-8mv2-jq9f","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-5h86-8mv2-jq9f"},{"rule_id":"osv/GHSA-5wr8-gcqf-gqf3","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by GHSA-5wr8-gcqf-gqf3","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-5wr8-gcqf-gqf3"},{"rule_id":"osv/GHSA-9xw5-w5jj-pvcg","severity":"high","message":"aiohttp@3.9 (PyPI) is affected by GHSA-9xw5-w5jj-pvcg","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-9xw5-w5jj-pvcg"},{"rule_id":"osv/GHSA-c35q-ffpf-5qpm","severity":"high","message":"asyncssh@2.14 (PyPI) is affected by PYSEC-2023-239, GHSA-c35q-ffpf-5qpm","path":"requirements.txt","line":null,"fingerprint":"asyncssh@2.14 (PyPI):GHSA-c35q-ffpf-5qpm"},{"rule_id":"osv/GHSA-2wxc-x7rj-hg8f","severity":"high","message":"asyncssh@2.14 (PyPI) is affected by PYSEC-2026-3808, GHSA-2wxc-x7rj-hg8f","path":"requirements.txt","line":null,"fingerprint":"asyncssh@2.14 (PyPI):GHSA-2wxc-x7rj-hg8f"},{"rule_id":"osv/GHSA-6jhg-hg63-jvvf","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-1100, GHSA-6jhg-hg63-jvvf","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-6jhg-hg63-jvvf"},{"rule_id":"osv/GHSA-7gpw-8wmc-pm8g","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-1102, GHSA-7gpw-8wmc-pm8g","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-7gpw-8wmc-pm8g"},{"rule_id":"osv/GHSA-8495-4g3g-x7pr","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-1103, GHSA-8495-4g3g-x7pr","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-8495-4g3g-x7pr"},{"rule_id":"osv/GHSA-g84x-mcqj-x9qq","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-1106, GHSA-g84x-mcqj-x9qq","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-g84x-mcqj-x9qq"},{"rule_id":"osv/GHSA-jj3x-wxrx-4x23","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-1107, GHSA-jj3x-wxrx-4x23","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-jj3x-wxrx-4x23"},{"rule_id":"osv/GHSA-w2fm-2cpv-w7v5","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2094, GHSA-w2fm-2cpv-w7v5","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-w2fm-2cpv-w7v5"},{"rule_id":"osv/GHSA-2vrm-gr82-f7m5","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2096, GHSA-2vrm-gr82-f7m5","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-2vrm-gr82-f7m5"},{"rule_id":"osv/GHSA-3wq7-rqq7-wx6j","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2099, GHSA-3wq7-rqq7-wx6j","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-3wq7-rqq7-wx6j"},{"rule_id":"osv/GHSA-966j-vmvw-g2g9","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2100, GHSA-966j-vmvw-g2g9","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-966j-vmvw-g2g9"},{"rule_id":"osv/GHSA-mwh4-6h8g-pg8w","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2101, GHSA-mwh4-6h8g-pg8w","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-mwh4-6h8g-pg8w"},{"rule_id":"osv/GHSA-c427-h43c-vf67","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2103, GHSA-c427-h43c-vf67","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-c427-h43c-vf67"},{"rule_id":"osv/GHSA-hpj7-wq8m-9hgp","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-2109, GHSA-hpj7-wq8m-9hgp","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-hpj7-wq8m-9hgp"},{"rule_id":"osv/GHSA-mfx4-hv73-q22v","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-3546, GHSA-mfx4-hv73-q22v","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-mfx4-hv73-q22v"},{"rule_id":"osv/GHSA-mq44-7p77-q5h7","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-3547, GHSA-mq44-7p77-q5h7","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-mq44-7p77-q5h7"},{"rule_id":"osv/GHSA-494j-54xm-rwp3","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by GHSA-494j-54xm-rwp3","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-494j-54xm-rwp3"},{"rule_id":"osv/GHSA-6cjc-53gc-5rqm","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by GHSA-6cjc-53gc-5rqm","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-6cjc-53gc-5rqm"},{"rule_id":"osv/GHSA-8qpw-xqxj-h4r2","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by GHSA-8qpw-xqxj-h4r2","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-8qpw-xqxj-h4r2"},{"rule_id":"osv/GHSA-f9xw-jh8m-3mwq","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by GHSA-f9xw-jh8m-3mwq","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-f9xw-jh8m-3mwq"},{"rule_id":"osv/GHSA-pqxq-w44r-73xw","severity":"medium","message":"aiohttp@3.9 (PyPI) is affected by GHSA-pqxq-w44r-73xw","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-pqxq-w44r-73xw"},{"rule_id":"osv/GHSA-cfc2-wr2v-gxm5","severity":"medium","message":"asyncssh@2.14 (PyPI) is affected by PYSEC-2023-237, GHSA-cfc2-wr2v-gxm5","path":"requirements.txt","line":null,"fingerprint":"asyncssh@2.14 (PyPI):GHSA-cfc2-wr2v-gxm5"},{"rule_id":"osv/GHSA-qr67-gv47-xwwh","severity":"medium","message":"asyncssh@2.14 (PyPI) is affected by PYSEC-2026-3809, GHSA-qr67-gv47-xwwh","path":"requirements.txt","line":null,"fingerprint":"asyncssh@2.14 (PyPI):GHSA-qr67-gv47-xwwh"},{"rule_id":"osv/GHSA-rw4j-r22c-9gc3","severity":"medium","message":"asyncssh@2.14 (PyPI) is affected by PYSEC-2026-4026, GHSA-rw4j-r22c-9gc3","path":"requirements.txt","line":null,"fingerprint":"asyncssh@2.14 (PyPI):GHSA-rw4j-r22c-9gc3"},{"rule_id":"osv/GHSA-hfmc-7525-mj55","severity":"medium","message":"asyncssh@2.14 (PyPI) is affected by GHSA-hfmc-7525-mj55","path":"requirements.txt","line":null,"fingerprint":"asyncssh@2.14 (PyPI):GHSA-hfmc-7525-mj55"},{"rule_id":"osv/GHSA-54jq-c3m8-4m76","severity":"low","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-1097, GHSA-54jq-c3m8-4m76","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-54jq-c3m8-4m76"},{"rule_id":"osv/GHSA-69f9-5gxw-wvc2","severity":"low","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-1099, GHSA-69f9-5gxw-wvc2","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-69f9-5gxw-wvc2"},{"rule_id":"osv/GHSA-9548-qrrj-x5pj","severity":"low","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-1104, GHSA-9548-qrrj-x5pj","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-9548-qrrj-x5pj"},{"rule_id":"osv/GHSA-fh55-r93g-j68g","severity":"low","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-1105, GHSA-fh55-r93g-j68g","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-fh55-r93g-j68g"},{"rule_id":"osv/GHSA-mqqc-3gqh-h2x8","severity":"low","message":"aiohttp@3.9 (PyPI) is affected by PYSEC-2026-1109, GHSA-mqqc-3gqh-h2x8","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-mqqc-3gqh-h2x8"},{"rule_id":"osv/GHSA-gx76-c99x-2c96","severity":"low","message":"aiohttp@3.9 (PyPI) is affected by GHSA-gx76-c99x-2c96","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.9 (PyPI):GHSA-gx76-c99x-2c96"}],"evidence":[],"data":{"ecosystems":["PyPI"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":1.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.0,"unpinned_manifests":0.0},"findings":[],"evidence":[{"kind":"posture","description":"Security policy: SECURITY.md","ref":"SECURITY.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":2.0,"binary_assets":4.0,"suspicious":0.0},"findings":[],"evidence":[{"kind":"binary-release-asset","description":"release v0.20.0 ships llm-probe-0.20.0.zip (2 downloads)","ref":"llm-probe-0.20.0.zip","url":"https://github.com/viebvo/llm-probe/releases/download/v0.20.0/llm-probe-0.20.0.zip","weight":0.0},{"kind":"binary-release-asset","description":"release v0.19.0 ships llm-probe-0.19.0.zip (1 downloads)","ref":"llm-probe-0.19.0.zip","url":"https://github.com/viebvo/llm-probe/releases/download/v0.19.0/llm-probe-0.19.0.zip","weight":0.0},{"kind":"binary-release-asset","description":"release v0.18.0 ships llm-probe-0.18.0.zip (2 downloads)","ref":"llm-probe-0.18.0.zip","url":"https://github.com/viebvo/llm-probe/releases/download/v0.18.0/llm-probe-0.18.0.zip","weight":0.0},{"kind":"binary-release-asset","description":"release v0.17.2 ships llm-probe-0.17.2.zip (1 downloads)","ref":"llm-probe-0.17.2.zip","url":"https://github.com/viebvo/llm-probe/releases/download/v0.17.2/llm-probe-0.17.2.zip","weight":0.0},{"kind":"readme-download-lure","description":"gives an archive password","ref":"README.md","url":null,"weight":0.0}],"data":{"signals":["binary-release-assets","readme-download-lure"],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":1538.0,"function_nloc":9959.0,"mean_ccn":3.99,"p90_ccn":9.0,"complex_functions":67.0,"long_functions":3.0,"many_param_functions":6.0,"risky_nloc_share":0.2593},"findings":[],"evidence":[{"kind":"complex-function","description":"run in llm_probe/bench.py: complexity 80, 194 lines","ref":"llm_probe/bench.py","url":"https://github.com/viebvo/llm-probe/blob/4e172bfd708b1b4659b1f00da36b33f825678102/llm_probe/bench.py#L477","weight":1.0},{"kind":"complex-function","description":"run_scores in llm_probe/storage.py: complexity 78, 120 lines","ref":"llm_probe/storage.py","url":"https://github.com/viebvo/llm-probe/blob/4e172bfd708b1b4659b1f00da36b33f825678102/llm_probe/storage.py#L896","weight":1.0},{"kind":"complex-function","description":"chat_stream in llm_probe/client.py: complexity 45, 108 lines","ref":"llm_probe/client.py","url":"https://github.com/viebvo/llm-probe/blob/4e172bfd708b1b4659b1f00da36b33f825678102/llm_probe/client.py#L367","weight":0.75},{"kind":"complex-function","description":"import_prompts in llm_probe/server.py: complexity 42, 64 lines","ref":"llm_probe/server.py","url":"https://github.com/viebvo/llm-probe/blob/4e172bfd708b1b4659b1f00da36b33f825678102/llm_probe/server.py#L739","weight":0.7},{"kind":"complex-function","description":"_ssh in llm_probe/placement.py: complexity 38, 46 lines","ref":"llm_probe/placement.py","url":"https://github.com/viebvo/llm-probe/blob/4e172bfd708b1b4659b1f00da36b33f825678102/llm_probe/placement.py#L129","weight":0.6333333333333333},{"kind":"complex-function","description":"token_usage in llm_probe/storage.py: complexity 36, 43 lines","ref":"llm_probe/storage.py","url":"https://github.com/viebvo/llm-probe/blob/4e172bfd708b1b4659b1f00da36b33f825678102/llm_probe/storage.py#L1508","weight":0.6},{"kind":"complex-function","description":"rule_violations in llm_probe/deviation.py: complexity 35, 23 lines","ref":"llm_probe/deviation.py","url":"https://github.com/viebvo/llm-probe/blob/4e172bfd708b1b4659b1f00da36b33f825678102/llm_probe/deviation.py#L61","weight":0.5833333333333334},{"kind":"complex-function","description":"_import_problem in llm_probe/storage.py: complexity 35, 37 lines","ref":"llm_probe/storage.py","url":"https://github.com/viebvo/llm-probe/blob/4e172bfd708b1b4659b1f00da36b33f825678102/llm_probe/storage.py#L1393","weight":0.5833333333333334},{"kind":"complex-function","description":"check in llm_probe/check.py: complexity 34, 39 lines","ref":"llm_probe/check.py","url":"https://github.com/viebvo/llm-probe/blob/4e172bfd708b1b4659b1f00da36b33f825678102/llm_probe/check.py#L185","weight":0.5666666666666667},{"kind":"complex-function","description":"settings_from_args in llm_probe/cli.py: complexity 34, 49 lines","ref":"llm_probe/cli.py","url":"https://github.com/viebvo/llm-probe/blob/4e172bfd708b1b4659b1f00da36b33f825678102/llm_probe/cli.py#L233","weight":0.5666666666666667}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":12052.0,"duplicated_lines":140.0,"duplicated_share":0.0116,"files":39.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: llm_probe/client.py:368 and llm_probe/client.py:484","ref":"llm_probe/client.py","url":"https://github.com/viebvo/llm-probe/blob/4e172bfd708b1b4659b1f00da36b33f825678102/llm_probe/client.py#L368","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: llm_probe/deviation.py:235 and llm_probe/deviation.py:480","ref":"llm_probe/deviation.py","url":"https://github.com/viebvo/llm-probe/blob/4e172bfd708b1b4659b1f00da36b33f825678102/llm_probe/deviation.py#L235","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: tools/gui_tests/run.py:812 and tools/make_screenshots.py:76","ref":"tools/gui_tests/run.py","url":"https://github.com/viebvo/llm-probe/blob/4e172bfd708b1b4659b1f00da36b33f825678102/tools/gui_tests/run.py#L812","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":68.0,"weighted_findings":61.5,"scanned_lines":14284.0,"category:best-practice":18.0,"category:correctness":48.0,"category:maintainability":2.0},"findings":[{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"tools/gui_tests/run.py","line":769,"fingerprint":"python.lang.best-practice.arbitrary-sleep:tools/gui_tests/run.py:769"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"tools/gui_tests/run.py","line":814,"fingerprint":"python.lang.best-practice.open-never-closed:tools/gui_tests/run.py:814"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"tools/gui_tests/run.py","line":822,"fingerprint":"python.lang.best-practice.arbitrary-sleep:tools/gui_tests/run.py:822"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"tools/make_screenshots.py","line":78,"fingerprint":"python.lang.best-practice.open-never-closed:tools/make_screenshots.py:78"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"tools/make_screenshots.py","line":86,"fingerprint":"python.lang.best-practice.arbitrary-sleep:tools/make_screenshots.py:86"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"llm_probe/config.py","line":110,"fingerprint":"python.lang.maintainability.return-not-in-function:llm_probe/config.py:110"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/deviation.py","line":244,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/deviation.py:244"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/deviation.py","line":250,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/deviation.py:250"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/deviation.py","line":256,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/deviation.py:256"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/deviation.py","line":264,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/deviation.py:264"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/deviation.py","line":272,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/deviation.py:272"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/deviation.py","line":274,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/deviation.py:274"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/deviation.py","line":286,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/deviation.py:286"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/deviation.py","line":302,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/deviation.py:302"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/deviation.py","line":310,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/deviation.py:310"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/deviation.py","line":489,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/deviation.py:489"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/deviation.py","line":498,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/deviation.py:498"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/deviation.py","line":519,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/deviation.py:519"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/deviation.py","line":523,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/deviation.py:523"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/deviation.py","line":532,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/deviation.py:532"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/deviation.py","line":541,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/deviation.py:541"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_global\" a function or an attribute? If it is a function, you may have meant ipaddress.ip_address(a.split(\"%\")[0]).is_global() because ipaddress.ip_address(a.split(\"%\")[0]).is_global is always true.","path":"llm_probe/overlap.py","line":48,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:llm_probe/overlap.py:48"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/prompts.py","line":431,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/prompts.py:431"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/prompts.py","line":459,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/prompts.py:459"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/prompts.py","line":462,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/prompts.py:462"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/prompts.py","line":528,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/prompts.py:528"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/prompts.py","line":533,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/prompts.py:533"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/prompts.py","line":539,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/prompts.py:539"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/prompts.py","line":1198,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/prompts.py:1198"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/prompts.py","line":1201,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/prompts.py:1201"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/prompts.py","line":1205,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/prompts.py:1205"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/prompts.py","line":1207,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/prompts.py:1207"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"llm_probe/static/endpoints.js","line":107,"fingerprint":"javascript.lang.best-practice.javascript-confirm:llm_probe/static/endpoints.js:107"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"llm_probe/static/prompts.js","line":191,"fingerprint":"javascript.lang.best-practice.javascript-confirm:llm_probe/static/prompts.js:191"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"llm_probe/static/results.js","line":586,"fingerprint":"javascript.lang.best-practice.javascript-confirm:llm_probe/static/results.js:586"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"llm_probe/static/results.js","line":601,"fingerprint":"javascript.lang.best-practice.javascript-alert:llm_probe/static/results.js:601"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"llm_probe/static/test.js","line":356,"fingerprint":"javascript.lang.best-practice.javascript-confirm:llm_probe/static/test.js:356"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"llm_probe/static/test.js","line":370,"fingerprint":"javascript.lang.best-practice.javascript-confirm:llm_probe/static/test.js:370"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"llm_probe/static/test.js","line":377,"fingerprint":"javascript.lang.best-practice.javascript-confirm:llm_probe/static/test.js:377"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"llm_probe/static/test.js","line":437,"fingerprint":"javascript.lang.best-practice.javascript-confirm:llm_probe/static/test.js:437"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"llm_probe/static/test.js","line":468,"fingerprint":"javascript.lang.best-practice.javascript-confirm:llm_probe/static/test.js:468"},{"rule_id":"opengrep/python.lang.best-practice.manual-defaultdict-list-create","severity":"medium","message":"manually creating a defaultdict - use collections.defaultdict(list)","path":"llm_probe/storage.py","line":269,"fingerprint":"python.lang.best-practice.manual-defaultdict-list-create:llm_probe/storage.py:269"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"llm_probe/storage.py","line":471,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:llm_probe/storage.py:471"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"tools/gui_tests/run.py","line":517,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:tools/gui_tests/run.py:517"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"tools/gui_tests/run.py","line":814,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:tools/gui_tests/run.py:814"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"tools/make_screenshots.py","line":78,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:tools/make_screenshots.py:78"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":176,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:176"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":176,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:176"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":176,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:176"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":176,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:176"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":176,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:176"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":176,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:176"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":176,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:176"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":176,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:176"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":176,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:176"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":176,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:176"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":176,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:176"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":182,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:182"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":182,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:182"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":182,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:182"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":182,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:182"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":362,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:362"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":362,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:362"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/results.js","line":362,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/results.js:362"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/sessions.js","line":349,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/sessions.js:349"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/sessions.js","line":349,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/sessions.js:349"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/sessions.js","line":349,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/sessions.js:349"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"llm_probe/static/sessions.js","line":349,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:llm_probe/static/sessions.js:349"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":0.0,"check:test_ratio":0.0,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.0,"test_lines":0.0,"source_lines":14284.0,"test_ratio":0.0,"ci_files":0.0,"cochange_share":0.0,"cochange_commits":9.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":1062.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.0,"check:low_escape_density":1.0,"escapes":1.0,"escapes_per_kloc":0.095},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"x-blame","pillar":"ai_provenance","status":"ok","tool_version":"git-blame","metrics":{"ai_lines":14284.0,"other_lines":0.0,"files_blamed":39.0,"blame_failures":0.0,"quality:ai_findings":68.0,"quality:ai_per_kloc":4.761,"quality:other_findings":0.0,"security:ai_findings":300.0,"security:ai_per_kloc":21.003,"security:other_findings":0.0},"findings":[],"evidence":[],"data":{"sampled":false,"comparable":false},"error":null}],"flags":["unreviewed-ai-risk"]}