Index/python
python register.
654 exact model facts. These entries retain their Atropos IDs and source paths so the language slice can be audited independently.
SymbolPackageRoleKind
openaiofilessinkpath-traversalrequestaiohttpsinkssrfgetmembersstdlibsourcearchive-entrynameliststdlibsourcearchive-entryparse_argsargparse.ArgumentParsersourceweb-inputliteral_evalastsanitizercode-injectioncreate_subprocess_execasynciosinkcommand-injectioncreate_subprocess_execasynciosinkcommand-injectioncreate_subprocess_shellasynciosinkcode-injectionsubprocess_execasyncio.events.AbstractEventLoopsinkcommand-injectionsubprocess_execasyncio.events.AbstractEventLoopsinkcommand-injectionsubprocess_shellasyncio.events.AbstractEventLoopsinkcode-injectionsubprocess_shellasyncio.events.AbstractEventLoopsinkcommand-injectioncreate_subprocess_execasyncio.subprocesssinkcommand-injectioncreate_subprocess_execasyncio.subprocesssinkcommand-injectioncreate_subprocess_shellasyncio.subprocesssinkcode-injectionexecutestdlibsinksql-injectionfetchstdlibsinksql-injectionb64decodebase64summarytransformb64encodebase64summarytransformstandard_b64decodebase64summarytransformstandard_b64encodebase64summarytransformurlsafe_b64decodebase64summarytransformurlsafe_b64encodebase64summarytransformget_jsonstdlibsourceweb-inputcleanbleachsanitizerxssredirectbottlesinkopen-redirectSimpleTemplatebottlesinktemplate-injectiontemplatebottlesinktemplate-injectioncompilebuiltinssinkcode-injectionevalbuiltinssinkcode-injectionexecbuiltinssinkcode-injectionfloatbuiltinssanitizersql-injectiongetattrbuiltinssinkunsafe-reflection__import__builtinssinkcode-injectioninputbuiltinssourceuntrusted-inputintbuiltinssanitizersql-injectionopenbuiltinssinkpath-traversalsetattrbuiltinssinkunsafe-reflectioncapitalizestdlibsummarytransformcenterstdlibsummarytransformdecodestdlibsummarytransformexpandtabsstdlibsummarytransformhexstdlibsummarytransformjoinstdlibsummaryconcatjoinstdlibsummaryconcatljuststdlibsummarytransformlowerstdlibsummarytransformlstripstdlibsummarytransformpartitionstdlibsummarytransformreplacestdlibsummarytransformrjuststdlibsummarytransformrpartitionstdlibsummarytransformrsplitstdlibsummarytransformrstripstdlibsummarytransformsplitstdlibsummarytransformsplitlinesstdlibsummarytransformstripstdlibsummarytransformswapcasestdlibsummarytransformtitlestdlibsummarytransformtranslatestdlibsummarytransformupperstdlibsummarytransformzfillstdlibsummarytransformopenbz2sinkpath-traversalFieldStoragecgisourceweb-inputPageTemplatechameleonsinktemplate-injectiongetstdlibsinkssrfpoststdlibsinkssrfrequeststdlibsinkssrfgetstdlibsinkssrfpoststdlibsinkssrfrequeststdlibsinkssrfloadcloudpicklesinkdeserializationloadscloudpicklesinkdeserializationcompile_commandcodesinkcode-injectioncompile_commandcodesinkcode-injectionopencodecssinkpath-traversalpushcode.InteractiveConsolesinkcode-injectionruncodecode.InteractiveInterpretersinkcode-injectionrunsourcecode.InteractiveInterpretersinkcode-injectionrunsourcecode.InteractiveInterpretersinkcode-injectioncompile_commandcodeopsinkcode-injectioncompile_commandcodeopsinkcode-injectionaggregatestdlibsinknosql-injectiondelete_manystdlibsinknosql-injectiondelete_onestdlibsinknosql-injectionfindstdlibsinknosql-injectionfind_onestdlibsinknosql-injectionfind_one_and_updatestdlibsinknosql-injectionupdate_manystdlibsinknosql-injectionupdate_onestdlibsinknosql-injectionreadstdlibsinkpath-traversalsearchstdlibsinkldap-injectionnewCrypto.Cipher.DES3sinkweak-cryptonewCrypto.Cipher.ARC2sinkweak-cryptonewCrypto.Cipher.ARC4sinkweak-cryptonewCrypto.Cipher.Blowfishsinkweak-cryptonewCrypto.Cipher.DESsinkweak-cryptonewCrypto.Cipher.XORsinkweak-cryptonewCryptodome.Cipher.DES3sinkweak-cryptonewCryptodome.Cipher.ARC2sinkweak-cryptonewCryptodome.Cipher.ARC4sinkweak-cryptonewCryptodome.Cipher.Blowfishsinkweak-cryptonewCryptodome.Cipher.DESsinkweak-cryptonewCryptodome.Cipher.XORsinkweak-cryptonewCryptodome.Hash.MD2sinkweak-cryptonewCryptodome.Hash.MD4sinkweak-cryptonewCryptodome.Hash.MD5sinkweak-cryptonewCryptodome.Hash.SHAsinkweak-cryptoARC4cryptography.hazmat.primitives.ciphers.algorithmssinkweak-cryptoBlowfishcryptography.hazmat.primitives.ciphers.algorithmssinkweak-cryptoCAST5cryptography.hazmat.primitives.ciphers.algorithmssinkweak-cryptoIDEAcryptography.hazmat.primitives.ciphers.algorithmssinkweak-cryptoSEEDcryptography.hazmat.primitives.ciphers.algorithmssinkweak-cryptoTripleDEScryptography.hazmat.primitives.ciphers.algorithmssinkweak-cryptonewCrypto.Hash.MD2sinkweak-cryptonewCrypto.Hash.MD4sinkweak-cryptonewCrypto.Hash.MD5sinkweak-cryptonewCrypto.Hash.SHAsinkweak-cryptoexecutestdlibsinksql-injectionexecutemanystdlibsinksql-injectionexecutescriptstdlibsinksql-injectionopendbmsinkpath-traversalfromstringdefusedxml.ElementTreesanitizerxxeparsedefusedxml.ElementTreesanitizerxxeloaddillsinkdeserializationloadsdillsinkdeserializationUnpicklerdillsinkdeserializationescapedjango.utils.htmlsanitizerxssescapejsdjango.utils.htmlsanitizerxssstrip_tagsdjango.utils.htmlsanitizerxssSafeStringdjango.utils.safestringsinkxssservedjango.views.staticsinkpath-traversalexecutedjango.db.backends.mysql.base.CursorWrappersinksql-injectionexecutemanydjango.db.backends.mysql.base.CursorWrappersinksql-injectionexecutedjango.db.backends.utils.CursorWrappersinksql-injectionexecutemanydjango.db.backends.utils.CursorWrappersinksql-injectionRawSQLdjango.db.models.expressionssinksql-injectionrawdjango.db.models.manager.Managersinksql-injectionextradjango.db.models.query.QuerySetsinksql-injectionextradjango.db.models.query.QuerySetsinksql-injectionextradjango.db.models.query.QuerySetsinksql-injectionbuild_request_reprdjango.http.requestsourceweb-inputbuild_absolute_uridjango.http.request.HttpRequestsourceweb-inputget_full_pathdjango.http.request.HttpRequestsourceweb-inputget_signed_cookiedjango.http.request.HttpRequestsourceweb-inputis_securedjango.http.request.HttpRequestsourceweb-inputHttpResponsedjango.http.responsesinkxssHttpResponseRedirectdjango.http.responsesinkopen-redirectcontentdjango.http.response.HttpResponsesinkxssserializedjango.http.response.HttpResponsesourceweb-inputgetdjango.http.response.HttpResponseBasesourceweb-inputitemsdjango.http.response.HttpResponseBasesourceweb-inputserialize_headersdjango.http.response.HttpResponseBasesourceweb-inputredirectdjango.shortcutssinkopen-redirectrenderdjango.shortcutssinkpath-traversalrenderdjango.shortcutssinkxssTemplatedjango.templatesinktemplate-injectionTemplatedjango.template.basesinktemplate-injectionfrom_stringdjango.template.engine.Enginesinktemplate-injectionformat_htmldjango.utils.htmlsinkxssformat_html_joindjango.utils.htmlsinkxssmark_safedjango.utils.safestringsinkxssexecutestdlibsinksql-injectionrunstdlibsinkcommand-injectionHTMLResponsefastapi.responsessinkxssRedirectResponsefastapi.responsessinkopen-redirectinputfileinputsinkpath-traversalMarkupflasksinkxssredirectflasksinkopen-redirectrender_template_stringflasksinktemplate-injectionsend_fileflasksinkpath-traversalsend_from_directoryflasksinkpath-traversalFTPftplibsinkssrfgetpassgetpasssourceuntrusted-inputGzipFilegzipsinkpath-traversalopengzipsinkpath-traversalmd5hashlibsinkweak-cryptonewhashlibsinkweak-cryptosha1hashlibsinkweak-cryptoescapehtmlsanitizerxssHTTPConnectionhttp.clientsinkssrfHTTPSConnectionhttp.clientsinkssrfgetresponsehttp.client.HTTPConnectionsourceweb-inputputrequesthttp.client.HTTPConnectionsinkssrfrequesthttp.client.HTTPConnectionsinkssrfset_tunnelhttp.client.HTTPConnectionsinkssrfrequeststdlibsinkssrfbodystdlibsourceweb-inputCOOKIESstdlibsourceweb-inputFILESstdlibsourceweb-inputGETstdlibsourceweb-inputget_hoststdlibsourceweb-inputMETAstdlibsourceweb-inputPOSTstdlibsourceweb-inputreadstdlibsourceweb-inputdeletehttpxsinkssrfgethttpxsinkssrfheadhttpxsinkssrfpatchhttpxsinkssrfposthttpxsinkssrfputhttpxsinkssrfrequesthttpxsinkssrfstreamhttpxsinkssrfimport_moduleimportlibsinkcode-injectionspec_from_file_locationimportlib.utilsinkunsafe-reflectionrunstdlibsinkcommand-injectionopeniosinkpath-traversalfrom_stringjinja2sinktemplate-injectionMarkupjinja2sinkxssTemplatejinja2sinktemplate-injectionloadjoblibsinkdeserializationdumpsjsonsummarytransformloadsjsonsanitizerdeserializationdecodejsonpicklesinkdeserializationdecodejsonpickle.unpicklersinkdeserializationUnpicklerjsonpickle.unpicklersinkdeserializationload_modelkeras.modelssinkdeserializationescape_filter_charsldap.filtersanitizerldap-injectionsearchldapsinkldap-injectionsearch_ext_sldapsinkldap-injectionsearch_sldapsinkldap-injectionescape_filter_charsldap3.utils.convsanitizerldap-injectiongetlinelinecachesinkpath-traversallazycachelinecachesinkpath-traversalXPathlxml.etreesinkxpath-injectionfromstringlxml.objectifysinkxxeparselxml.objectifysinkxxefromstringlxml.etreesinkxxeparselxml.etreesinkxxexpathlxml.etreesinkxpath-injectionLZMAFilelzmasinkpath-traversalopenlzmasinkpath-traversalTemplatemako.templatesinktemplate-injectionescapemarkupsafesanitizerxssMarkupmarkupsafesinkxssdumpmarshalsinkpath-traversalloadmarshalsinkdeserializationloadsmarshalsinkdeserializationgetstdlibsourceweb-inputcleannh3sanitizerxssevaluatenumexprsinkcode-injectionloadnumpysinkdeserializationattrgetteroperatorsinkunsafe-reflectionaccessossinkpath-traversalchdirossinkpath-traversalchflagsossinkpath-traversalchmodossinkpath-traversalchownossinkpath-traversalchrootossinkpath-traversalexeclossinkcommand-injectionexeclossinkcommand-injectionexecleossinkcommand-injectionexeclpossinkcommand-injectionexeclpeossinkcommand-injectionexecvossinkcommand-injectionexecvossinkcommand-injectionexecveossinkcommand-injectionexecveossinkcommand-injectionexecveossinkcommand-injectionexecvpossinkcommand-injectionexecvpossinkcommand-injectionexecvpeossinkcommand-injectionexecvpeossinkcommand-injectionexecvpeossinkcommand-injectionfwalkossinkpath-traversalgetenvossourceuntrusted-inputlchflagsossinkpath-traversallchownossinkpath-traversallinkossinkpath-traversallinkossinkpath-traversallinkossinkpath-traversallistdirossinkpath-traversalmakedirsossinkpath-traversalmkdirossinkpath-traversalopenossinkpath-traversalpopenossinkcommand-injectionposix_spawnossinkcommand-injectionposix_spawnpossinkcommand-injectionputenvossinkpath-traversalputenvossinkpath-traversalreadlinkossinkpath-traversalremoveossinkpath-traversalremovedirsossinkpath-traversalremovexattrossinkpath-traversalrenameossinkpath-traversalrenameossinkpath-traversalrenamesossinkpath-traversalrenamesossinkpath-traversalreplaceossinkpath-traversalreplaceossinkpath-traversalrmdirossinkpath-traversalscandirossinkpath-traversalsetxattrossinkpath-traversalspawnlossinkcommand-injectionspawnlossinkcommand-injectionspawnlossinkcommand-injectionspawnleossinkcommand-injectionspawnleossinkcommand-injectionspawnleossinkcommand-injectionspawnlpossinkcommand-injectionspawnlpossinkcommand-injectionspawnlpossinkcommand-injectionspawnlpeossinkcommand-injectionspawnlpeossinkcommand-injectionspawnlpeossinkcommand-injectionspawnvossinkcommand-injectionspawnvossinkcommand-injectionspawnvossinkcommand-injectionspawnveossinkcommand-injectionspawnveossinkcommand-injectionspawnveossinkcommand-injectionspawnveossinkcommand-injectionspawnvpossinkcommand-injectionspawnvpossinkcommand-injectionspawnvpeossinkcommand-injectionspawnvpeossinkcommand-injectionspawnvpeossinkcommand-injectionstartfileossinkcommand-injectionsymlinkossinkpath-traversalsystemossinkcommand-injectiontruncateossinkpath-traversalunlinkossinkpath-traversalunsetenvossinkpath-traversalutimeossinkpath-traversalwalkossinkpath-traversalgetos.environsourceuntrusted-inputabspathos.pathsummarytransformbasenameos.pathsummarytransformbasenameos.pathsanitizerpath-traversaldirnameos.pathsummarytransformexpanduseros.pathsummarytransformjoinos.pathsummaryconcatjoinos.pathsummaryconcatnormpathos.pathsummarytransformrealpathos.pathsummarytransformevalstdlibsinkcode-injectionquerystdlibsinkcode-injectionevalpandassinkcode-injectionread_picklepandassinkdeserializationread_sqlpandassinksql-injectionread_sql_querypandassinksql-injectionexec_commandstdlibsinkcommand-injectionexec_commandstdlibsinkcommand-injectionPathpathlibsinkpath-traversalmkdirstdlibsinkpath-traversalopenstdlibsinkpath-traversalread_bytesstdlibsinkpath-traversalread_textstdlibsinkpath-traversaltouchstdlibsinkpath-traversalunlinkstdlibsinkpath-traversalwrite_bytesstdlibsinkpath-traversalwrite_textstdlibsinkpath-traversalPurePathpathlibsinkpath-traversalrenamepathlib.Pathsinkpath-traversalreplacepathlib.Pathsinkpath-traversalrglobpathlib.Pathsinkpath-traversalsymlink_topathlib.Pathsinkpath-traversalexecute_sqlstdlibsinksql-injectionRawQuerypeeweesinksql-injectionrunpexpectsinkcommand-injectionspawnpexpectsinkcommand-injectionloadpicklesinkdeserializationloadspicklesinkdeserializationUnpicklerpicklesinkdeserializationload_picklesinkdeserializationloads_picklesinkdeserializationrequeststdlibsinkssrfurlopenstdlibsinkssrfIdentifierpsycopg2.sqlsanitizersql-injectionLiteralpsycopg2.sqlsanitizersql-injectionspawnptysinkcommand-injectionsetoptpycurl.Curlsinkssrflocatepydocsinkunsafe-reflectioncount_documentsstdlibsinknosql-injectiondistinctstdlibsinknosql-injectionmap_reducestdlibsinknosql-injectionreplace_onestdlibsinknosql-injectionextrastdlibsinksql-injectionrawstdlibsinksql-injectionchoicerandomsourceweak-randomchoicesrandomsourceweak-randomgetrandbitsrandomsourceweak-randomrandbytesrandomsourceweak-randomrandintrandomsourceweak-randomrandomrandomsourceweak-randomrandrangerandomsourceweak-randomsamplerandomsourceweak-randomtriangularrandomsourceweak-randomuniformrandomsourceweak-randomcompileresinkredosescaperesanitizerregexfindallresinkredosfinditerresinkredosfullmatchresinkredosmatchresinkredossearchresinkredossplitresinkredossubresinkredossubnresinkredosevalstdlibsinkcode-injectioncompileregexsinkredosfindallregexsinkredosmatchregexsinkredossearchregexsinkredossubregexsinkredosargsstdlibsourceweb-inputbodystdlibsourceweb-inputcookiesstdlibsourceweb-inputdatastdlibsourceweb-inputfilesstdlibsourceweb-inputformstdlibsourceweb-inputget_datastdlibsourceweb-inputheadersstdlibsourceweb-inputjsonstdlibsourceweb-inputmatch_infostdlibsourceweb-inputpath_paramsstdlibsourceweb-inputpoststdlibsourceweb-inputquerystdlibsourceweb-inputquery_paramsstdlibsourceweb-inputquery_stringstdlibsourceweb-inputreadstdlibsourceweb-inputtextstdlibsourceweb-inputvaluesstdlibsourceweb-inputget_argumentstdlibsourceweb-inputget_body_argumentstdlibsourceweb-inputget_cookiestdlibsourceweb-inputget_query_argumentstdlibsourceweb-inputdeleterequestssinkssrfgetrequestssinkssrfheadrequestssinkssrfpatchrequestssinkssrfpostrequestssinkssrfputrequestssinkssrfrequestrequestssinkssrfdeleterequests.apisinkssrfdeleterequests.apisourceweb-inputgetrequests.apisinkssrfgetrequests.apisourceweb-inputheadrequests.apisinkssrfheadrequests.apisourceweb-inputoptionsrequests.apisinkssrfoptionsrequests.apisourceweb-inputpatchrequests.apisinkssrfpatchrequests.apisourceweb-inputpostrequests.apisinkssrfpostrequests.apisourceweb-inputputrequests.apisinkssrfputrequests.apisourceweb-inputrequestrequests.apisinkssrfrequestrequests.apisourceweb-inputdeleterequests.sessions.Sessionsinkssrfdeleterequests.sessions.Sessionsourceweb-inputgetrequests.sessions.Sessionsinkssrfgetrequests.sessions.Sessionsourceweb-inputheadrequests.sessions.Sessionsinkssrfheadrequests.sessions.Sessionsourceweb-inputoptionsrequests.sessions.Sessionsinkssrfoptionsrequests.sessions.Sessionsourceweb-inputpatchrequests.sessions.Sessionsinkssrfpatchrequests.sessions.Sessionsourceweb-inputpostrequests.sessions.Sessionsinkssrfpostrequests.sessions.Sessionsourceweb-inputputrequests.sessions.Sessionsinkssrfputrequests.sessions.Sessionsourceweb-inputrequestrequests.sessions.Sessionsinkssrfrequestrequests.sessions.Sessionsourceweb-inputcontent_typerest_framework.request.Requestsourceweb-inputDATArest_framework.request.Requestsourceweb-inputFILESrest_framework.request.Requestsourceweb-inputPOSTrest_framework.request.Requestsourceweb-inputQUERY_PARAMSrest_framework.request.Requestsourceweb-inputstreamrest_framework.request.Requestsourceweb-inputloadstdlibsinkdeserializationrun_modulerunpysinkcode-injectionrun_pathrunpysinkcode-injectionDbfilenameShelfshelvesinkdeserializationopenshelvesinkdeserializationquoteshlexsanitizercommand-injectionchownshutilsinkpath-traversalcopyshutilsinkpath-traversalcopyshutilsinkpath-traversalcopy2shutilsinkpath-traversalcopy2shutilsinkpath-traversalcopyfileshutilsinkpath-traversalcopyfileshutilsinkpath-traversalcopymodeshutilsinkpath-traversalcopymodeshutilsinkpath-traversalcopystatshutilsinkpath-traversalcopystatshutilsinkpath-traversalcopytreeshutilsinkpath-traversalcopytreeshutilsinkpath-traversalmake_archiveshutilsinkpath-traversalmake_archiveshutilsinkpath-traversalmoveshutilsinkpath-traversalmoveshutilsinkpath-traversalrmtreeshutilsinkpath-traversal_RmtreeTypeshutilsinkpath-traversalunpack_archiveshutilsinkpath-traversalunpack_archiveshutilsinkpath-traversalurlopensix.moves.urllib.requestsinkssrfurlretrievesix.moves.urllib.requestsinkssrfSMTPsmtplibsinkssrfcreate_connectionsocketsinkssrfrecvstdlibsourceuntrusted-inputrecvfromstdlibsourceuntrusted-inputrecvmsgstdlibsourceuntrusted-inputconnect_socket.socketsinkssrfconnect_ex_socket.socketsinkssrfexec_driver_sqlstdlibsinksql-injectionexecutestdlibsinksql-injectiontextsqlalchemysinksql-injectionconnectsqlite3sinkpath-traversalexecutesqlite3.Connectionsinksql-injectionexecutemanysqlite3.Connectionsinksql-injectionexecutescriptsqlite3.Connectionsinksql-injectionexecutesqlite3.Cursorsinksql-injectionexecutemanysqlite3.Cursorsinksql-injectionexecutescriptsqlite3.Cursorsinksql-injection_create_unverified_contextsslsinkinsecure-tlsFileResponsestarlette.responsessinkpath-traversalHTMLResponsestarlette.responsessinkxssRedirectResponsestarlette.responsessinkopen-redirectbytearraystdlibsummarytransformbytesstdlibsummarytransformstrstdlibsummarytransformcapitalizestdlibsummarytransformcenterstdlibsummarytransformencodestdlibsummarytransformexpandtabsstdlibsummarytransformformatstdlibsummarytransformformat_mapstdlibsummarytransformjoinstdlibsummaryconcatjoinstdlibsummaryconcatljuststdlibsummarytransformlowerstdlibsummarytransformlstripstdlibsummarytransformpartitionstdlibsummarytransformreplacestdlibsummarytransformreplacestdlibsummarytransformrjuststdlibsummarytransformrpartitionstdlibsummarytransformrsplitstdlibsummarytransformrstripstdlibsummarytransformsplitstdlibsummarytransformsplitlinesstdlibsummarytransformstripstdlibsummarytransformswapcasestdlibsummarytransformtitlestdlibsummarytransformtranslatestdlibsummarytransformupperstdlibsummarytransformzfillstdlibsummarytransformcallsubprocesssinkcommand-injectioncallsubprocesssinkcommand-injectioncallsubprocesssinkcommand-injectioncheck_callsubprocesssinkcommand-injectioncheck_callsubprocesssinkcommand-injectioncheck_callsubprocesssinkcommand-injectioncheck_outputsubprocesssinkcommand-injectioncheck_outputsubprocesssinkcommand-injectioncheck_outputsubprocesssinkcommand-injectiongetoutputsubprocesssinkcommand-injectiongetstatusoutputsubprocesssinkcommand-injectionPopensubprocesssinkcommand-injectionPopensubprocesssinkcommand-injectionPopensubprocesssinkcommand-injectionrunsubprocesssinkcommand-injectionrunsubprocesssinkcommand-injectionrunsubprocesssinkcommand-injectionsympifysympysinkcode-injectionargvsyssourceuntrusted-inputextractalltarfilesinkpath-traversalTarFiletarfilesinkpath-traversalextractstdlibsinkpath-traversalopentarfile.TarFilesinkpath-traversalTelnettelnetlibsinkssrfmkdtemptempfilesinkpath-traversalmkdtemptempfilesinkpath-traversalmkdtemptempfilesinkpath-traversalmkstemptempfilesinkpath-traversalmkstemptempfilesinkpath-traversalmkstemptempfilesinkpath-traversalmktemptempfilesinkinsecure-temp-fileNamedTemporaryFiletempfilesinkpath-traversalNamedTemporaryFiletempfilesinkpath-traversalSpooledTemporaryFiletempfilesinkpath-traversalSpooledTemporaryFiletempfilesinkpath-traversalTemporaryDirectorytempfilesinkpath-traversalTemporaryDirectorytempfilesinkpath-traversalTemporaryDirectorytempfilesinkpath-traversalTemporaryFiletempfilesinkpath-traversalTemporaryFiletempfilesinkpath-traversalloadtorchsinkdeserializationfetchstdlibsinkssrfwritestdlibsinkxssTemplatetornado.templatesinktemplate-injectionquoteurllib.parsesanitizerpath-traversalquote_plusurllib.parsesanitizerxssunquoteurllib.parsesummarytransformunquote_plusurllib.parsesummarytransformurljoinurllib.parsesummarytransformurljoinurllib.parsesummarytransformRequesturllib.requestsinkssrfurlopenurllib.requestsinkssrfurlopenurllib.requestsourceweb-inputurlretrieveurllib.requestsinkssrfurlretrieveurllib.requestsinkpath-traversalurlretrieveurllib.requestsourceweb-inputopenurllib.request.URLopenersinkssrfopenurllib.request.URLopenersourceweb-inputopen_unknownurllib.request.URLopenersinkssrfopen_unknownurllib.request.URLopenersourceweb-inputretrieveurllib.request.URLopenersinkssrfretrieveurllib.request.URLopenersourceweb-inputredirectwerkzeug.utilssinkopen-redirectsecure_filenamewerkzeug.utilssanitizerpath-traversalsend_filewerkzeug.utilssinkpath-traversalsend_from_directorywerkzeug.utilssinkpath-traversalread_environwsgiref.handlerssourceweb-inputget_stderrwsgiref.handlers.SimpleHandlersourceweb-inputget_stdinwsgiref.handlers.SimpleHandlersourceweb-inputgetwsgiref.headers.Headerssourceweb-inputget_allwsgiref.headers.Headerssourceweb-inputitemswsgiref.headers.Headerssourceweb-inputvalueswsgiref.headers.Headerssourceweb-inputget_environwsgiref.simple_server.WSGIRequestHandlersourceweb-inputapplication_uriwsgiref.utilsourceweb-inputrequest_uriwsgiref.utilsourceweb-inputshift_path_infowsgiref.utilsourceweb-inputfindstdlibsinkxpath-injectionfindallstdlibsinkxpath-injectioniterfindstdlibsinkxpath-injectionparseStringxml.saxsinkxxeparsexml.dom.minidomsinkxxeparseStringxml.dom.minidomsinkxxeparsexml.dom.pulldomsinkxxeparseStringxml.dom.pulldomsinkxxefromstringxml.etree.ElementTreesinkxxeiterparsexml.etree.ElementTreesinkxxeparsexml.etree.ElementTreesinkxxeXMLxml.etree.ElementTreesinkxxefeedxml.etree.ElementTree.XMLParsersinkxxeloadsxmlrpc.clientsinkxxeServerProxyxmlrpc.clientsinkssrfparsexml.saxsinkxxeescapexml.sax.saxutilssanitizerxssquoteattrxml.sax.saxutilssanitizerxssfull_loadyamlsinkdeserializationloadyamlsinkdeserializationload_allyamlsinkdeserializationunsafe_loadyamlsinkdeserializationextractallzipfilesinkpath-traversalZipFilezipfilesinkpath-traversalextractstdlibsinkpath-traversal