mathodology-workbench
Warn
Audited by Socket on Nov 4, 2026
1 alert found:
AnomalyAnomalyscripts/workbench/results.py
LOWAnomalyLOW
scripts/workbench/results.py
This module processes workspace JSON results and generates LaTeX files. Untrusted result files can inject LaTeX through display values, unvalidated value names, or raw table alignment strings, potentially affecting compilation when the generated files are included. No network, credential collection, process execution, or destructive behavior is present; severity is conditional on untrusted results being compiled.
Confidence: 98%Severity: 53%
Audit Metadata