0.0

Adjusted Signal

0.0

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

3.2K

Stars

—

Language

83.2M

Lines of Code

417.6K

Files

353

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 0.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 289 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.0/100 · LOW

Are imports declared and package/API names verified? 63 finding(s).

Agent Over-Engineering Ratio 0.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 8 finding(s).

PR Review Velocity Impact 0.1/100 · LOW

Which changes need focused human review? 353 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 57HIGH 11MEDIUM 246LOW 39

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 353 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators57 hits · 655 pts

Severity	File	Line	Snippet	Context
CRITICAL	cves/2022/3xxx/CVE-2022-3323.json	19	"value": "An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists wi	CODE
CRITICAL	cves/2022/3xxx/CVE-2022-3323.json	82	"value": "An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw e	CODE
CRITICAL	cves/2022/38xxx/CVE-2022-38130.json	19	"value": "The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to	CODE
CRITICAL	cves/2022/38xxx/CVE-2022-38130.json	82	"value": "The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is	CODE
CRITICAL	cves/2022/38xxx/CVE-2022-38129.json	19	"value": "A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManage	CODE
CRITICAL	cves/2022/38xxx/CVE-2022-38129.json	82	"value": "A path traversal vulnerability exists in the com.keysight.tentacle.licensing.Licen	CODE
CRITICAL	cves/2025/13xxx/CVE-2025-13473.json	58	"value": "An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.\nTh	CODE
CRITICAL	cves/2025/13xxx/CVE-2025-13473.json	63	"value": "<p>An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before	CODE
CRITICAL	cves/2025/0xxx/CVE-2025-0224.json	190	"name": "Submit #467085 \| Provision-ISR SH-4050A-2, SH-4100A-2L(MM), SH-8100A-2L(MM), SH-16200A-2(1U	CODE
CRITICAL	cves/2025/59xxx/CVE-2025-59355.json	59	"value": "<p>A vulnerability.<br><br>When org.apache.linkis.metadata.util.HiveUtils.decode()	CODE
CRITICAL	cves/2025/59xxx/CVE-2025-59355.json	62	"value": "A vulnerability.\n\nWhen org.apache.linkis.metadata.util.HiveUtils.decode() fails to perfo	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	39	"version": "1.3.3.20657B180918.D06.U2(4A41T)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	43	"version": "1.3.4.22966B181219.D00.U1(4A21S)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	47	"version": "1.3.4.22966B181219.D14.U1(8A41T)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	51	"version": "1.3.4.22966B181219.D44.U1(16A82T)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	55	"version": "1.3.4.24513B190218.D00.U1(8A21S)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	59	"version": "1.3.4.24879B190222.D00.U2(8A21S)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	69	"version": "1.3.3.20657B180918.D06.U2(4A41T)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	73	"version": "1.3.4.22966B181219.D00.U1(4A21S)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	77	"version": "1.3.4.22966B181219.D14.U1(8A41T)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	81	"version": "1.3.4.22966B181219.D44.U1(16A82T)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	85	"version": "1.3.4.24513B190218.D00.U1(8A21S)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	89	"version": "1.3.4.24879B190222.D00.U2(8A21S)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	99	"version": "1.3.3.20657B180918.D06.U2(4A41T)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	103	"version": "1.3.4.22966B181219.D00.U1(4A21S)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	107	"version": "1.3.4.22966B181219.D14.U1(8A41T)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	111	"version": "1.3.4.22966B181219.D44.U1(16A82T)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	115	"version": "1.3.4.24513B190218.D00.U1(8A21S)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	119	"version": "1.3.4.24879B190222.D00.U2(8A21S)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	129	"version": "1.3.3.20657B180918.D06.U2(4A41T)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	133	"version": "1.3.4.22966B181219.D00.U1(4A21S)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	137	"version": "1.3.4.22966B181219.D14.U1(8A41T)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	141	"version": "1.3.4.22966B181219.D44.U1(16A82T)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	145	"version": "1.3.4.24513B190218.D00.U1(8A21S)",	CODE
CRITICAL⚡	cves/2024/7xxx/CVE-2024-7339.json	149	"version": "1.3.4.24879B190222.D00.U2(8A21S)",	CODE
CRITICAL	cves/2024/7xxx/CVE-2024-7339.json	240	"name": "Submit #379373 \| TVT TD-2104TS-CL, TD-2108TS-HP, SH-4050A5-5L(MM), AV108T, ... 1.3.4.22966B	CODE
CRITICAL	cves/2024/39xxx/CVE-2024-39329.json	22	"value": "An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.contr	CODE
CRITICAL	cves/2024/0xxx/CVE-2024-0799.json	43	"value": "An authentication bypass vulnerability exists in Arcserve Unified Data Protection	CODE
CRITICAL	cves/2024/0xxx/CVE-2024-0799.json	46	"value": "An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and	CODE
CRITICAL	cves/2023/3xxx/CVE-2023-3983.json	23	"value": "An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v	CODE
CRITICAL	cves/2023/51xxx/CVE-2023-51928.json	22	"value": "An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUplo	CODE
CRITICAL	cves/2023/51xxx/CVE-2023-51925.json	22	"value": "An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUplo	CODE
CRITICAL	cves/2023/51xxx/CVE-2023-51927.json	22	"value": "YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou	CODE
CRITICAL	cves/2023/42xxx/CVE-2023-42000.json	37	"value": "Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcfla	CODE
CRITICAL	cves/2023/42xxx/CVE-2023-42000.json	40	"value": "Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.se	CODE
CRITICAL	cves/2012/4xxx/CVE-2012-4622.json	20	"value": "Cisco IOS XE 03.02.00.XO.15.0(2)XO on Catalyst 4500E series switches, when a Supervisor En	CODE
CRITICAL	cves/2012/4xxx/CVE-2012-4622.json	117	"value": "Cisco IOS XE 03.02.00.XO.15.0(2)XO on Catalyst 4500E series switches, when a Super	CODE
CRITICAL	cves/2026/106xxx/CVE-2026-106121.json	106	"value": "The RabbitMQ Java client library allows Java and JVM-based applications to connect to and	CODE
CRITICAL	cves/2026/54xxx/CVE-2026-54499.json	106	"value": "Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and	CODE
CRITICAL	cves/2026/71xxx/CVE-2026-71892.json	89	"value": "In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport	CODE
CRITICAL	cves/2026/71xxx/CVE-2026-71892.json	94	"value": "<p>In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS ke	CODE
CRITICAL	cves/2026/67xxx/CVE-2026-67920.json	22	"value": "An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.hal	CODE
CRITICAL	cves/2026/73xxx/CVE-2026-73507.json	107	"value": "Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Fin	CODE
CRITICAL	cves/2026/73xxx/CVE-2026-73508.json	107	"value": "Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Fin	CODE
CRITICAL	cves/2020/8xxx/CVE-2020-8908.json	34	"value": "<p>A temp directory creation vulnerability exists in all versions of Guava, allowi	CODE
CRITICAL	cves/2020/8xxx/CVE-2020-8908.json	37	"value": "A temp directory creation vulnerability exists in all versions of Guava, allowing an attac	CODE
CRITICAL	cves/2020/8xxx/CVE-2020-8908.json	460	"value": "A temp directory creation vulnerability exists in all versions of Guava, allowing	CODE

AI Slop Vocabulary180 hits · 410 pts

Severity	File	Line	Snippet	Context
MEDIUM	cves/2013/3xxx/CVE-2013-3582.json	19	"value": "Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell	CODE
MEDIUM	cves/2013/3xxx/CVE-2013-3582.json	108	"value": "Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices,	CODE
MEDIUM	cves/2014/1xxx/CVE-2014-1972.json	44	"url": "https://tapestry.apache.org/release-notes-536.html"	CODE
MEDIUM⚡	cves/2014/1xxx/CVE-2014-1972.json	90	"url": "https://lists.apache.org/thread.html/84e99dedad2ecb4676de93c3ab73a8a10882951ab6984f514707f3d	CODE
MEDIUM⚡	cves/2014/1xxx/CVE-2014-1972.json	98	"url": "https://lists.apache.org/thread.html/bac8d6f9e1b4059b319d9cba6f33219a99b81623476ec896138f851	CODE
MEDIUM⚡	cves/2014/1xxx/CVE-2014-1972.json	106	"url": "https://lists.apache.org/thread.html/r87523dd07886223aa086edc25fe9b8ddb9c1090f7db25b068dc308	CODE
MEDIUM⚡	cves/2014/1xxx/CVE-2014-1972.json	114	"url": "https://lists.apache.org/thread.html/r7d9c54beb1dc97dcccc58d9b5d31f0f7166f9a25ad1beba5f8091e	CODE
MEDIUM	cves/2014/1xxx/CVE-2014-1972.json	172	"name": "https://tapestry.apache.org/release-notes-536.html",	CODE
MEDIUM	cves/2014/1xxx/CVE-2014-1972.json	174	"url": "https://tapestry.apache.org/release-notes-536.html"	CODE
MEDIUM⚡	cves/2014/1xxx/CVE-2014-1972.json	204	"url": "https://lists.apache.org/thread.html/84e99dedad2ecb4676de93c3ab73a8a10882951ab6984f5	CODE
MEDIUM⚡	cves/2014/1xxx/CVE-2014-1972.json	209	"url": "https://lists.apache.org/thread.html/bac8d6f9e1b4059b319d9cba6f33219a99b81623476ec89	CODE
MEDIUM⚡	cves/2014/1xxx/CVE-2014-1972.json	214	"url": "https://lists.apache.org/thread.html/r87523dd07886223aa086edc25fe9b8ddb9c1090f7db25b	CODE
MEDIUM⚡	cves/2014/1xxx/CVE-2014-1972.json	219	"url": "https://lists.apache.org/thread.html/r7d9c54beb1dc97dcccc58d9b5d31f0f7166f9a25ad1beb	CODE
MEDIUM	cves/2014/1xxx/CVE-2014-1972.json	239	"url": "https://tapestry.apache.org/release-notes-536.html"	CODE
MEDIUM⚡	cves/2014/1xxx/CVE-2014-1972.json	291	"url": "https://lists.apache.org/thread.html/84e99dedad2ecb4676de93c3ab73a8a10882951ab6984f51470	CODE
MEDIUM⚡	cves/2014/1xxx/CVE-2014-1972.json	300	"url": "https://lists.apache.org/thread.html/bac8d6f9e1b4059b319d9cba6f33219a99b81623476ec896138	CODE
MEDIUM⚡	cves/2014/1xxx/CVE-2014-1972.json	309	"url": "https://lists.apache.org/thread.html/r87523dd07886223aa086edc25fe9b8ddb9c1090f7db25b068d	CODE
MEDIUM⚡	cves/2014/1xxx/CVE-2014-1972.json	318	"url": "https://lists.apache.org/thread.html/r7d9c54beb1dc97dcccc58d9b5d31f0f7166f9a25ad1beba5f8	CODE
LOW	cves/2022/50xxx/CVE-2022-50341.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: fix oops duri	CODE
MEDIUM	cves/2022/50xxx/CVE-2022-50315.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nata: ahci: Match EM	CODE
MEDIUM	cves/2022/50xxx/CVE-2022-50231.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: arm64/poly1	CODE
MEDIUM	cves/2022/22xxx/CVE-2022-22984.json	25	"value": "The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package s	CODE
LOW	cves/2022/48xxx/CVE-2022-48901.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: do not start	CODE
MEDIUM	cves/2022/49xxx/CVE-2022-49215.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: Fix race at so	CODE
LOW	cves/2022/49xxx/CVE-2022-49985.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Don't use tnum	CODE
LOW	cves/2022/49xxx/CVE-2022-49898.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix tree mod	CODE
LOW	cves/2025/21xxx/CVE-2025-21866.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/code-patchi	CODE
MEDIUM	cves/2025/30xxx/CVE-2025-30144.json	99	"value": "fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 5.0.6, the fast-jwt l	CODE
MEDIUM	cves/2025/30xxx/CVE-2025-30144.json	99	"value": "fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 5.0.6, the fast-jwt l	CODE
MEDIUM	cves/2025/10xxx/CVE-2025-10657.json	41	"value": "In a hardened Docker environment, with Enhanced Container Isolation (<a target=\"_	CODE
MEDIUM	cves/2025/10xxx/CVE-2025-10657.json	44	"value": "In a hardened Docker environment, with Enhanced Container Isolation ( ECI https://docs.doc	CODE
MEDIUM	cves/2025/10xxx/CVE-2025-10761.json	143	"name": "Submit #646871 \| Harness harness v3.3.0 Login Endpoint Brute-Force",	CODE
MEDIUM	cves/2025/10xxx/CVE-2025-10760.json	131	"name": "Submit #646843 \| Harness harness v3.3.0 SSRF",	CODE
LOW	cves/2025/22xxx/CVE-2025-22034.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/gup: reject FOLL	CODE
MEDIUM	cves/2025/39xxx/CVE-2025-39844.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: move page table	CODE
MEDIUM	cves/2025/39xxx/CVE-2025-39844.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: move page table	CODE
MEDIUM	cves/2025/0xxx/CVE-2025-0123.json	335	"value": "Mitigation: In a Palo Alto Networks firewall, you can configure the decryption pro	CODE
MEDIUM	cves/2025/0xxx/CVE-2025-0123.json	338	"value": "Mitigation: In a Palo Alto Networks firewall, you can configure the decryption profile to	CODE
MEDIUM	cves/2024/2xxx/CVE-2024-2929.json	132	"value": "\n\n<ul><li>Do not open untrusted files from unknown sources.</li><li>For informat	CODE
MEDIUM	cves/2024/6xxx/CVE-2024-6079.json	115	"value": "<p>Customers using the affected software are encouraged to <a target=\"_blank\" re	CODE
MEDIUM	cves/2024/6xxx/CVE-2024-6077.json	204	"value": "<table><tbody><tr><td><p>Affected Family </p><p> </p><p> </p></td><td><p	CODE
MEDIUM	cves/2024/6xxx/CVE-2024-6089.json	116	"value": "\n\n<p>Customers using the affected software are encouraged to apply the risk miti	CODE
MEDIUM	cves/2024/7xxx/CVE-2024-7567.json	116	"value": "<p></p><ul><li>Update to the corrected version: \n\n<span style=\"background-	CODE
MEDIUM	cves/2024/7xxx/CVE-2024-7142.json	148	"value": "<p>To manually fix the issue on a vulnerable system determined by following the st	CODE
MEDIUM	cves/2024/7xxx/CVE-2024-7142.json	151	"value": "To manually fix the issue on a vulnerable system determined by following the steps depicte	CODE
MEDIUM	cves/2024/3xxx/CVE-2024-3393.json	435	"value": "<p><span>This issue is fixed in PAN-OS 10.1.14-h8, PAN-OS 10.2.10-h12, PAN-OS 11.1	CODE
MEDIUM	cves/2024/3xxx/CVE-2024-3393.json	438	"value": "This issue is fixed in PAN-OS 10.1.14-h8, PAN-OS 10.2.10-h12, PAN-OS 11.1.5, PAN-OS 11.2.3	CODE
MEDIUM	cves/2024/8xxx/CVE-2024-8533.json	138	"value": "<table><tbody><tr><td><p><br>Affected Product</p><p> </p><p> </p></td><t	CODE
MEDIUM	cves/2024/11xxx/CVE-2024-11156.json	105	"value": "Corrected in software version <span style=\"background-color: rgb(255, 255, 2	CODE
MEDIUM	cves/2024/11xxx/CVE-2024-11155.json	105	"value": "Corrected in software version <span style=\"background-color: rgb(255, 255, 2	CODE
MEDIUM	cves/2024/11xxx/CVE-2024-11158.json	105	"value": "Corrected in software version <span style=\"background-color: rgb(255, 255, 2	CODE
MEDIUM	cves/2024/21xxx/CVE-2024-21920.json	119	"value": "\n\n<ul><li>Do not open untrusted files from unknown sources.</li><li>For informat	CODE
MEDIUM	cves/2024/10xxx/CVE-2024-10125.json	37	"value": "<p></p><p>The <a target=\"_blank\" rel=\"nofollow\" href=\"https://github.com/awsl	CODE
MEDIUM	cves/2024/10xxx/CVE-2024-10125.json	40	"value": "The Amazon.ApplicationLoadBalancer.Identity.AspNetCore repo https://github.com/awslabs/aw	CODE
LOW	cves/2024/27xxx/CVE-2024-27053.json	22	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wilc1000: fix	CODE
MEDIUM	cves/2024/27xxx/CVE-2024-27301.json	82	"value": "Support App is an opensource application specialized in managing Apple devices. It's possi	CODE
MEDIUM	cves/2024/42xxx/CVE-2024-42110.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ntb_netdev: Mo	CODE
LOW	cves/2024/53xxx/CVE-2024-53187.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: check for	CODE
MEDIUM	cves/2024/12xxx/CVE-2024-12130.json	105	"value": "Corrected in v16.20.06 and later. <br><br>\n\n<p>Customers using the affected	CODE
MEDIUM	cves/2024/47xxx/CVE-2024-47744.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: Use dedicated	CODE
120 more matches not shown…

Modern AI Meta-Vocabulary71 hits · 173 pts

Severity	File	Line	Snippet	Context
MEDIUM	cves/2024/6xxx/CVE-2024-6961.json	90	"url": "https://research.jfrog.com/vulnerabilities/guardrails-rail-xxe-jfsa-2024-001035519/"	CODE
MEDIUM	cves/2024/6xxx/CVE-2024-6961.json	177	"url": "https://research.jfrog.com/vulnerabilities/guardrails-rail-xxe-jfsa-2024-001035519/"	CODE
MEDIUM	cves/2024/45xxx/CVE-2024-45858.json	19	"repo": "https://github.com/guardrails-ai/guardrails",	CODE
MEDIUM	cves/2024/45xxx/CVE-2024-45858.json	99	"url": "https://hiddenlayer.com/sai-security-advisory/2024-09-guardrails/"	CODE
MEDIUM	cves/2023/30xxx/CVE-2023-30559.json	109	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-su	CODE
MEDIUM	cves/2023/30xxx/CVE-2023-30559.json	130	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrail	CODE
MEDIUM	cves/2023/30xxx/CVE-2023-30563.json	99	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-su	CODE
MEDIUM	cves/2023/30xxx/CVE-2023-30563.json	133	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrail	CODE
MEDIUM	cves/2023/30xxx/CVE-2023-30562.json	128	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-su	CODE
MEDIUM	cves/2023/30xxx/CVE-2023-30562.json	149	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrail	CODE
MEDIUM	cves/2023/30xxx/CVE-2023-30565.json	109	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-su	CODE
MEDIUM	cves/2023/30xxx/CVE-2023-30565.json	143	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrail	CODE
MEDIUM	cves/2023/30xxx/CVE-2023-30564.json	99	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-su	CODE
MEDIUM	cves/2023/30xxx/CVE-2023-30564.json	133	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrail	CODE
MEDIUM	cves/2023/30xxx/CVE-2023-30561.json	108	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-su	CODE
MEDIUM	cves/2023/30xxx/CVE-2023-30561.json	129	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrail	CODE
MEDIUM	cves/2023/30xxx/CVE-2023-30560.json	99	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-su	CODE
MEDIUM	cves/2023/30xxx/CVE-2023-30560.json	120	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrail	CODE
MEDIUM	cves/2015/3xxx/CVE-2015-3246.json	230	"url": "https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agent	CODE
MEDIUM	cves/2015/5xxx/CVE-2015-5287.json	225	"url": "https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agent	CODE
MEDIUM	cves/2026/107xxx/CVE-2026-107270.json	115	"url": "https://blog.ostorlab.co/gophish-0121-manual-review-agentic-deep-scan.html",	CODE
MEDIUM	cves/2026/107xxx/CVE-2026-107271.json	115	"url": "https://blog.ostorlab.co/gophish-0121-manual-review-agentic-deep-scan.html",	CODE
MEDIUM	cves/2026/107xxx/CVE-2026-107272.json	115	"url": "https://blog.ostorlab.co/gophish-0121-manual-review-agentic-deep-scan.html",	CODE
MEDIUM	cves/2026/107xxx/CVE-2026-107273.json	116	"url": "https://blog.ostorlab.co/gophish-0121-manual-review-agentic-deep-scan.html",	CODE
MEDIUM	cves/2026/107xxx/CVE-2026-107269.json	133	"url": "https://blog.ostorlab.co/gophish-0121-manual-review-agentic-deep-scan.html",	CODE
MEDIUM	cves/2026/7xxx/CVE-2026-7237.json	242	"name": "Submit #802836 \| AgiFlow @agiflowai/scaffold-mcp 1.0.27 Path Traversal",	CODE
MEDIUM	cves/2026/97xxx/CVE-2026-97869.json	175	"name": "Submit #911825 \| langchain4j langchain4j-agentic 1.18.0 Deserialization",	CODE
MEDIUM	cves/2026/31xxx/CVE-2026-31233.json	39	"url": "https://github.com/guardrails-ai/guardrails"	CODE
MEDIUM	cves/2026/15xxx/CVE-2026-15143.json	61	"collectionURL": "https://github.com/trustyai-explainability/guardrails-detectors",	CODE
MEDIUM	cves/2026/15xxx/CVE-2026-15154.json	61	"collectionURL": "https://github.com/trustyai-explainability/guardrails-detectors",	CODE
MEDIUM	cves/2026/108xxx/CVE-2026-108725.json	104	"url": "https://github.com/cheshire-cat-ai/core/blob/c22731e7009ac89835b1d7b1cabc5989d998ec3e/src/ca	CODE
MEDIUM	cves/2026/14xxx/CVE-2026-14471.json	93	"url": "https://github.com/agentic-community/mcp-gateway-registry/releases/tag/v1.0.13",	CODE
MEDIUM	cves/2026/14xxx/CVE-2026-14471.json	105	"url": "https://github.com/agentic-community/mcp-gateway-registry/security/advisories/GHSA-79qc-vqfr	CODE
MEDIUM⚡	cves/2026/45xxx/CVE-2026-45758.json	48	"name": "https://github.com/guardrails-ai/guardrails/security/advisories/GHSA-xmpw-2vmm-p4p6",	CODE
MEDIUM⚡	cves/2026/45xxx/CVE-2026-45758.json	52	"url": "https://github.com/guardrails-ai/guardrails/security/advisories/GHSA-xmpw-2vmm-p4p6"	CODE
MEDIUM⚡	cves/2026/45xxx/CVE-2026-45758.json	55	"name": "https://github.com/guardrails-ai/guardrails/issues/1473",	CODE
MEDIUM⚡	cves/2026/45xxx/CVE-2026-45758.json	59	"url": "https://github.com/guardrails-ai/guardrails/issues/1473"	CODE
MEDIUM⚡	cves/2026/45xxx/CVE-2026-45758.json	62	"name": "https://github.com/guardrails-ai/guardrails/blob/main/SECURITY_ADVISORY.md",	CODE
MEDIUM⚡	cves/2026/45xxx/CVE-2026-45758.json	66	"url": "https://github.com/guardrails-ai/guardrails/blob/main/SECURITY_ADVISORY.md"	CODE
MEDIUM	cves/2026/41xxx/CVE-2026-41349.json	158	"url": "https://www.vulncheck.com/advisories/openclaw-agentic-consent-bypass-via-config-patch"	CODE
MEDIUM⚡	cves/2026/33xxx/CVE-2026-33873.json	58	"name": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/b	CODE
MEDIUM⚡	cves/2026/33xxx/CVE-2026-33873.json	62	"url": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/ba	CODE
MEDIUM⚡	cves/2026/33xxx/CVE-2026-33873.json	65	"name": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/b	CODE
MEDIUM⚡	cves/2026/33xxx/CVE-2026-33873.json	69	"url": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/ba	CODE
MEDIUM⚡	cves/2026/33xxx/CVE-2026-33873.json	72	"name": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/b	CODE
MEDIUM⚡	cves/2026/33xxx/CVE-2026-33873.json	76	"url": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/ba	CODE
MEDIUM⚡	cves/2026/33xxx/CVE-2026-33873.json	79	"name": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/b	CODE
MEDIUM⚡	cves/2026/33xxx/CVE-2026-33873.json	83	"url": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/ba	CODE
MEDIUM⚡	cves/2026/33xxx/CVE-2026-33873.json	86	"name": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/b	CODE
MEDIUM⚡	cves/2026/33xxx/CVE-2026-33873.json	90	"url": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/ba	CODE
MEDIUM⚡	cves/2026/33xxx/CVE-2026-33873.json	93	"name": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/b	CODE
MEDIUM⚡	cves/2026/33xxx/CVE-2026-33873.json	97	"url": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/ba	CODE
MEDIUM⚡	cves/2026/33xxx/CVE-2026-33873.json	100	"name": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/b	CODE
MEDIUM⚡	cves/2026/33xxx/CVE-2026-33873.json	104	"url": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/ba	CODE
MEDIUM⚡	cves/2026/111xxx/CVE-2026-111323.json	104	"url": "https://github.com/samugit83/redamon/blob/e1dfdff671b7e76d3a002eeba37b01d92cb949e1/agentic/o	CODE
MEDIUM⚡	cves/2026/111xxx/CVE-2026-111323.json	110	"url": "https://github.com/samugit83/redamon/blob/e1dfdff671b7e76d3a002eeba37b01d92cb949e1/agentic/o	CODE
MEDIUM⚡	cves/2026/111xxx/CVE-2026-111323.json	116	"url": "https://github.com/samugit83/redamon/blob/e1dfdff671b7e76d3a002eeba37b01d92cb949e1/agentic/a	CODE
MEDIUM⚡	cves/2026/58xxx/CVE-2026-58195.json	48	"name": "https://github.com/ruvnet/agentic-flow/security/advisories/GHSA-vcv2-r9jh-99m5",	CODE
MEDIUM⚡	cves/2026/58xxx/CVE-2026-58195.json	52	"url": "https://github.com/ruvnet/agentic-flow/security/advisories/GHSA-vcv2-r9jh-99m5"	CODE
MEDIUM⚡	cves/2026/58xxx/CVE-2026-58195.json	55	"name": "https://github.com/ruvnet/agentic-flow/issues/169",	CODE
11 more matches not shown…

Synthetic Comment Markers6 hits · 30 pts

Severity	File	Line	Snippet	Context
HIGH	cves/2026/102xxx/CVE-2026-102730.json	60	"value": "Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbo	CODE
HIGH	cves/2026/102xxx/CVE-2026-102730.json	65	"value": "<p>Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) trigg	CODE
HIGH	cves/2021/21xxx/CVE-2021-21430.json	19	"value": "OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs	CODE
HIGH	cves/2021/21xxx/CVE-2021-21430.json	119	"value": "OpenAPI Generator allows generation of API client libraries (SDK generation), serv	CODE
HIGH	cves/2021/39xxx/CVE-2021-39671.json	19	"value": "In code generated by aidl_const_expressions.cpp, there is a possible out of bounds read du	CODE
HIGH	cves/2021/39xxx/CVE-2021-39671.json	82	"value": "In code generated by aidl_const_expressions.cpp, there is a possible out of bounds	CODE

AI Response Leakage5 hits · 25 pts

Severity	File	Line	Snippet	Context
HIGH	cves/2025/21xxx/CVE-2025-21701.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: avoid race bet	CODE
HIGH	cves/2026/75xxx/CVE-2026-75943.json	103	"value": "<pre><p>In order to be vulnerable to any of the vulnerabilities, the following con	CODE
HIGH	cves/2026/75xxx/CVE-2026-75945.json	86	"value": "<pre><p>In order to be vulnerable to any of the vulnerabilities, the following con	CODE
HIGH	cves/2026/75xxx/CVE-2026-75944.json	86	"value": "<pre><p>In order to be vulnerable to any of the vulnerabilities, the following con	CODE
HIGH	cves/2026/77xxx/CVE-2026-77191.json	98	"value": "<pre><p>In order to be vulnerable to any of the vulnerabilities, the following con	CODE

Slop Phrases13 hits · 20 pts

Severity	File	Line	Snippet	Context
LOW	cves/2022/31xxx/CVE-2022-31127.json	23	"value": "NextAuth.js is a complete open source authentication solution for Next.js applications. An	CODE
LOW	cves/2022/31xxx/CVE-2022-31127.json	138	"value": "NextAuth.js is a complete open source authentication solution for Next.js applicat	CODE
MEDIUM	cves/2022/31xxx/CVE-2022-31022.json	88	"value": "Bleve is a text indexing library for go. Bleve includes HTTP utilities under bleve/http pa	CODE
MEDIUM	cves/2025/3xxx/CVE-2025-3445.json	39	"value": "A Path Traversal \"Zip Slip\" vulnerability has been identified in mholt/archiver	CODE
MEDIUM	cves/2025/3xxx/CVE-2025-3445.json	42	"value": "A Path Traversal \"Zip Slip\" vulnerability has been identified in mholt/archiver in Go. T	CODE
MEDIUM	cves/2025/8xxx/CVE-2025-8385.json	38	"value": "The Zombify plugin for WordPress is vulnerable to Path Traversal in all versions up to, an	CODE
LOW	cves/2025/23xxx/CVE-2025-23130.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to avoid	CODE
LOW	cves/2024/26xxx/CVE-2024-26895.json	22	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wilc1000: pre	CODE
LOW	cves/2024/38xxx/CVE-2024-38610.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers/virt/acrn:	CODE
MEDIUM	cves/2023/52xxx/CVE-2023-52468.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclass: fix use-afte	CODE
MEDIUM	cves/2008/2xxx/CVE-2008-2478.json	20	"value": "scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.23.1 CURRENT and earlier allow	CODE
MEDIUM	cves/2008/2xxx/CVE-2008-2478.json	120	"value": " DISPUTED scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.23.1 C	CODE
LOW	cves/2021/47xxx/CVE-2021-47266.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/ipoib: Fix war	CODE

Hyper-Verbose Identifiers7 hits · 7 pts

Severity	File	Line	Snippet	Context
LOW	cves/2024/52xxx/CVE-2024-52877.json	22	"value": "An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3	CODE
LOW	cves/2017/13xxx/CVE-2017-13727.json	20	"value": "There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibT	CODE
LOW	cves/2017/13xxx/CVE-2017-13727.json	107	"value": "There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd()	CODE
LOW	cves/2026/40xxx/CVE-2026-40585.json	75	"value": "blueprintUE is a tool to help Unreal Engine developers. Prior to 4.2.0, when a password re	CODE
LOW	cves/2026/67xxx/CVE-2026-67857.json	22	"value": "open62541 1.5.5 contains an out-of-bounds read in the client-side function responseReadNam	CODE
LOW	cves/2021/28xxx/CVE-2021-28216.json	27	"description": "A case of CWE-587 occurs in function FpdtStatusCodeListenerPei().",	CODE
LOW	cves/2021/28xxx/CVE-2021-28216.json	94	"value": "A case of CWE-587 occurs in function FpdtStatusCodeListenerPei()."	CODE

Fake / Example Data6 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	cves/2025/69xxx/CVE-2025-69405.json	20	"product": "Lorem Ipsum \| Books & Media Store",	CODE
LOW	cves/2025/69xxx/CVE-2025-69405.json	47	"value": "Deserialization of Untrusted Data vulnerability in ThemeREX Lorem Ipsum \| Books &	CODE
LOW	cves/2025/69xxx/CVE-2025-69405.json	50	"value": "Deserialization of Untrusted Data vulnerability in ThemeREX Lorem Ipsum \| Books & Media St	CODE
LOW	cves/2025/69xxx/CVE-2025-69405.json	114	"title": "WordPress Lorem Ipsum \| Books & Media Store theme <= 1.2.11 - PHP Object Injection vulnerability"	CODE
LOW	cves/2026/4xxx/CVE-2026-4075.json	38	"value": "The BWL Advanced FAQ Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site	CODE
LOW	cves/2026/1xxx/CVE-2026-1853.json	41	"title": "BuddyHolis ListSearch <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'place	CODE

Over-Commented Block3 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	.github/workflows/release.yml	41	CVE_API_USER: ${{secrets.CVE_API_USER}}	COMMENT
LOW	.github/workflows/codeql.yml	1	# For most projects, this workflow file will not need changing; you simply need	COMMENT
LOW	.github/workflows/update.yml	1	# Github Action for updates to this repository	COMMENT

Verbosity Indicators3 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	cves/2024/53xxx/CVE-2024-53056.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Fix p	CODE
LOW	cves/2026/74xxx/CVE-2026-74571.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: skip global	CODE
LOW	cves/2026/23xxx/CVE-2026-23179.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-tcp: fixup ha	CODE

Decorative Section Separators1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	cves/2025/39xxx/CVE-2025-39703.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet, hsr: reject HS	CODE

Self-Referential Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	cves/2026/43xxx/CVE-2026-43361.json	23	"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix transact	CODE

CVEProject/cvelistV5

Open-Source Code Quality, Security and Technical Debt Review