aiofiles provides async file I/O. aiofiles.open() is a path-traversal sink when the path is user-controlled (same as built-in open).
.open().open()Sinkaiofiles.open(file, mode='r', buffering=-1, encoding=None, ...) -> AsyncTextIOWrapper
Async file open. Path-traversal sink on user-controlled file path.
0| FQN | Field | |
|---|---|---|
| aiofiles | fqns[0] |
Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.
from codepathfinder.go_rule import PyAiofiles