{"data":{"slug":"minimaxir-automl-gs","name":"automl-gs","trust":{"provenance":{"is_fork":false,"github_id":165542441,"owner_type":"User","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-08-04T00:02:06.525Z","maintenance":{"label":"Dormant","score":18,"methodology":"github_public_v1","releases_90d":0,"days_since_push":2477,"last_release_at":"2019-04-05T06:51:04Z"},"security_summary":{"status":"findings","scanner":"osv@v1","low_count":7,"high_count":2,"last_scan_at":"2026-07-11T23:33:05.073Z","medium_count":5,"scan_profile":"deps","critical_count":0}},"findings":[{"id":"GHSA-462w-v97r-4m45","severity":"high","title":"Jinja2 sandbox escape via string formatting","package":"jinja2@2.8","cve":"CVE-2019-10906","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-hj2j-77xm-mc5v","severity":"high","title":"Jinja2 sandbox escape vulnerability","package":"jinja2@2.8","cve":"CVE-2016-10745","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-cpwx-vrp4-4pq7","severity":"medium","title":"Jinja2 vulnerable to sandbox breakout through attr filter selecting format method","package":"jinja2@2.8","cve":"CVE-2025-27516","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-g3rq-g295-4j3m","severity":"medium","title":"Regular Expression Denial of Service (ReDoS) in Jinja2","package":"jinja2@2.8","cve":"CVE-2020-28493","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-h5c8-rqwp-cp95","severity":"medium","title":"Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter","package":"jinja2@2.8","cve":"CVE-2024-22195","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-h75v-3vvj-5mfj","severity":"medium","title":"Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter","package":"jinja2@2.8","cve":"CVE-2024-34064","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-q2x7-8rv6-6q7h","severity":"medium","title":"Jinja has a sandbox breakout through indirect reference to format method","package":"jinja2@2.8","cve":"CVE-2024-56326","location":"requirements.txt","sources":["osv@v1"]}],"security_intelligence":{"sources":[{"profile":"deps","scanner":"osv@v1","label":"OSV dependency advisories","status":"findings","status_label":"Published findings","scanned_at":"2026-07-11T23:33:17.602765+00:00","findings_count":14,"evidence_url":"https://osv.dev/","error":null,"caveat":null},{"profile":"deps_dev","scanner":"deps.dev@v1","label":"deps.dev advisories","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://deps.dev/","error":null,"caveat":null},{"profile":"openssf_scorecard","scanner":"openssf-scorecard@v1","label":"OpenSSF Scorecard","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://api.securityscorecards.dev/projects/github.com/minimaxir/automl-gs","error":null,"caveat":"Weekly public scans omit some checks at scale."}],"dependency_findings":[{"id":"GHSA-462w-v97r-4m45","severity":"high","title":"Jinja2 sandbox escape via string formatting","package":"jinja2@2.8","cve":"CVE-2019-10906","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-hj2j-77xm-mc5v","severity":"high","title":"Jinja2 sandbox escape vulnerability","package":"jinja2@2.8","cve":"CVE-2016-10745","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-cpwx-vrp4-4pq7","severity":"medium","title":"Jinja2 vulnerable to sandbox breakout through attr filter selecting format method","package":"jinja2@2.8","cve":"CVE-2025-27516","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-g3rq-g295-4j3m","severity":"medium","title":"Regular Expression Denial of Service (ReDoS) in Jinja2","package":"jinja2@2.8","cve":"CVE-2020-28493","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-h5c8-rqwp-cp95","severity":"medium","title":"Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter","package":"jinja2@2.8","cve":"CVE-2024-22195","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-h75v-3vvj-5mfj","severity":"medium","title":"Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter","package":"jinja2@2.8","cve":"CVE-2024-34064","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-q2x7-8rv6-6q7h","severity":"medium","title":"Jinja has a sandbox breakout through indirect reference to format method","package":"jinja2@2.8","cve":"CVE-2024-56326","location":"requirements.txt","sources":["osv@v1"]}],"scorecard_findings":[]},"methodology":"github_public_v1"}}