sabnzbd

Warn

Audited by Socket on Oct 7, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/sab-api.sh

This is an ordinary SABnzbd API helper with a significant code-injection flaw: the add command interpolates its URL argument into Python source, permitting local code execution for crafted input. Unescaped API parameters and API keys in URLs also create security risks. The fragment does not show clear malicious intent.

Confidence: 99%Severity: 78%
Audit Metadata
Analyzed At
Oct 7, 2026, 06:27 PM
Package URL
pkg:socket/skills-sh/jmagar%2Fclaude-homelab%2Fsabnzbd%2F@0424267a3681beedc6940f4f264d02780a327aaa18ea3eb6745101a6dfd3f085