sabnzbd
Warn
Audited by Socket on Oct 7, 2026
1 alert found:
SecuritySecurityscripts/sab-api.sh
MEDIUMSecurityMEDIUM
scripts/sab-api.sh
This is an ordinary SABnzbd API helper with a significant code-injection flaw: the add command interpolates its URL argument into Python source, permitting local code execution for crafted input. Unescaped API parameters and API keys in URLs also create security risks. The fragment does not show clear malicious intent.
Confidence: 99%Severity: 78%
Audit Metadata