← Back to Dashboard

snyk

Scanner detail · 25 repositories scored · generated 2026-04-21 13:55 UTC
F3
17.4
F3 Score (strict)
F2
18.2
F2 Score (strict)
↑
16.7%
Recall (strict)
◆
28.2%
Precision (strict)
★
25
Repos Scored
Per-Repository Breakdown TP / FP / FN
Per-Repository Scores click headers to sort
Repository F2 Recall Precision TP FP FN
damn-vulnerable-flask-application 30.3 26.7 66.7 4 2 11
damn-vulnerable-graphql-application 0.0 0.0 0.0 0 5 35
djangoat 19.9 18.0 34.6 9 17 41
dsvpwa 11.1 9.4 42.9 3 4 29
dsvw 28.9 25.9 53.8 7 6 20
dvblab 37.7 36.4 44.4 8 10 14
dvpwa 5.6 4.5 100.0 1 0 21
extremely-vulnerable-flask-app 20.8 17.9 62.5 5 3 23
flask-xss 4.4 3.6 50.0 1 1 27
insecure-web 59.5 55.6 83.3 5 1 4
intentionally-vulnerable-python-application 57.1 57.1 57.1 4 3 3
lets-be-bad-guys 37.7 33.3 80.0 8 2 16
owasp-web-playground 8.5 13.8 3.4 4 114 25
pygoat 31.9 34.3 25.0 24 72 46
python-insecure-app 14.3 12.5 33.3 1 2 7
pythonssti 50.0 50.0 50.0 1 1 1
threatbyte 14.4 12.5 37.5 3 5 21
vampi 0.0 0.0 0.0 0 3 13
vfapi 12.5 11.1 25.0 1 3 8
vulnerable-api 16.9 14.3 66.7 2 1 12
vulnerable-flask-app 26.9 25.0 38.5 5 8 15
vulnerable-python-apps 10.1 9.1 18.2 2 9 20
vulnerable-tornado-app 0.0 0.0 0.0 0 0 14
vulnpy 12.4 10.3 72.7 8 3 70
vulpy 14.8 13.0 35.0 7 13 47
Detection by Severity
critical
37%
TP 30 / FP 0 / FN 52
high
14%
TP 33 / FP 3 / FN 201
medium
17%
TP 46 / FP 1 / FN 229
low
6%
TP 4 / FP 0 / FN 61
CWE Family Heatmap recall by repository
Repository Broken Access Co.. Code Injection /.. Command / OS Inj.. Denial of Service Hardcoded Creden.. HTTP Header Inje.. Insecure Deseria.. Missing Authenti.. Open Redirect Other Path Traversal Security Misconf.. Sensitive Data E.. SQL Injection Server-Side Requ.. XPath Injection Cross-Site Scrip.. XML External Ent..
damn-vulnerable-flask-application — 100% 0% — 0% — — 0% — 0% — — — 0% — — 75% 0%
damn-vulnerable-graphql-application 0% — 0% 0% 0% — — 0% — 0% 0% 0% 0% 0% 0% — 0% —
djangoat 0% 100% 0% — 17% — 100% 0% 100% 0% 0% 0% 0% 50% — — 43% —
dsvpwa — — 50% — 50% — 0% 0% 0% 0% 0% 0% 0% 0% 0% — 33% —
dsvw — 100% 100% 0% 0% 0% 100% — 0% 0% 100% 0% 0% 67% 100% 0% 0% 0%
dvblab 0% — — — 25% — 100% 0% — 12% — 100% 0% 100% — — — —
dvpwa — — — — — — — 0% — 0% — 33% 0% 0% — — 0% —
extremely-vulnerable-flask-app 0% — — 0% 0% — 100% 0% — 0% — 50% 0% 100% 0% — 0% —
flask-xss 0% — — — 0% — — 0% 100% 0% — 0% 0% 0% — — 0% —
insecure-web — — — — 100% — — 0% — 0% — 100% — 100% — — 100% —
intentionally-vulnerable-python-application — — 0% — 100% — 100% — — 50% — — — 0% 0% — 100% —
lets-be-bad-guys 0% 100% — — 0% — — 0% 100% 14% 100% 67% 0% 0% — — 0% —
owasp-web-playground 0% — — — 25% — 0% 0% — 11% — 100% 0% 0% 0% — 100% 0%
pygoat 0% 50% 33% — 56% — 100% 0% — 27% 100% 33% 0% 100% 100% — 14% 100%
python-insecure-app — — — — 0% — — — — 0% — 0% 0% — 0% — 50% —
pythonssti — — — — — — — — — 0% — — — — — — 100% —
threatbyte 0% — — — 0% — — 0% — 11% 100% 0% 0% 100% 0% — 0% —
vampi 0% — — 0% 0% — — 0% — 0% — — 0% 0% — — — —
vfapi — — — — — — — 0% — 100% — — 0% 0% — — — —
vulnerable-api — — — — 0% 0% — 0% — 67% 0% — 0% 0% 0% — 0% —
vulnerable-flask-app 0% — — — 25% — 100% — — 29% 0% — 0% 100% — — 0% 0%
vulnerable-python-apps — — — — 0% — 0% 0% — 0% 100% — 0% 0% 100% — 0% —
vulnerable-tornado-app — — 0% — 0% — — 0% — 0% 0% 0% 0% 0% — — 0% —
vulnpy — 0% 33% 0% — — 0% — — 0% 0% 0% — 0% 0% 0% 42% 67%
vulpy 0% — 0% — 12% — — 0% — 27% 0% 0% 0% 0% — — 0% —
CWE Family Detection aggregate
RealVuln Benchmark · GitHub · kolega.dev