gitlab.bandit.B102

385
Download Count*
MIT
License

The use of exec is risky.

Run Locally

Run in CI

Semgrep CI docs

Defintion

Edit RuleView Source
Open in Playground 
rules:
  - id: bandit.B102
    pattern-either:
      - pattern: exec(...)
      - pattern: exec("...")
    message: |
      The use of `exec` is risky.
    metadata:
      cwe: "CWE-78: Improper Neutralization of Special Elements used in an OS Command
        ('OS Command Injection')"
      owasp: "A1: Injection"
      primary_identifier: bandit.B102
      secondary_identifiers:
        - name: Bandit Test ID B102
          type: bandit_test_id
          value: B102
      license: MIT
    severity: WARNING
    languages:
      - python