Bandit Report

blacklist: Consider possible security implications associated with pickle module.
Test ID: B403
Severity: LOW
Confidence: HIGH
CWE: CWE-502
File: /custom_nodes/ComfyUI_MaraScott_Nodes/py/inc/lib/cache.py
Line number: 2
More info: https://bandit.readthedocs.io/en/1.7.9/blacklists/blacklist_imports.html#b403-import-pickle

1	import os
2	import pickle
3	from .... import __CACHE_DIR__
4	from ...utils.log import log
5	
6	class MS_Cache():
7	    
8	    def isset(key):

blacklist: Pickle and modules that wrap it can be unsafe when used to deserialize untrusted data, possible security issue.
Test ID: B301
Severity: MEDIUM
Confidence: HIGH
CWE: CWE-502
File: /custom_nodes/ComfyUI_MaraScott_Nodes/py/inc/lib/cache.py
Line number: 21
More info: https://bandit.readthedocs.io/en/1.7.9/blacklists/blacklist_calls.html#b301-pickle

17	    def get(key, default_value = None):
18	        value = default_value
19	        if MS_Cache.isset(key):
20	            with open(os.path.join(__CACHE_DIR__, key), 'rb') as f:
21	                value = pickle.load(f)
22	        return value
23	    
24	    def cache_delete(key):