Severity: Medium
File: process_email.py:28
Problem
sys.argv[1] used as file path without validation. If the script is invoked with attacker-controlled arguments, arbitrary files can be read or written.
Remediation
Validate the file path argument. Restrict to expected directories.
Source
Finding from security audit (2026-08-31). See .github/SECURITY_AUDIT_TRIAGE.md.
Severity: Medium
File:
process_email.py:28Problem
sys.argv[1]used as file path without validation. If the script is invoked with attacker-controlled arguments, arbitrary files can be read or written.Remediation
Validate the file path argument. Restrict to expected directories.
Source
Finding from security audit (2026-08-31). See
.github/SECURITY_AUDIT_TRIAGE.md.