Evidence · DiggingBeagle record
NVIDIA SkillSpector issue 962: requirements.txt UTF-8 BOM coverage
The issue documents a requirements.txt with a UTF-8 BOM whose first package entry is skipped by the scanner, changing the findings versus the same file without the BOM.
- Source role
- primary disclosure
Evidence record
The issue documents a requirements.txt with a UTF-8 BOM whose first package entry is skipped by the scanner, changing the findings versus the same file without the BOM.
Claim-level citations (2)
- supportsSkillSpector could silently skip the first dependency of a UTF-8 BOM requirements file: The issue documents a requirements.txt with a UTF-8 BOM whose first package entry is skipped by the scanner, changing the findings versus the same file without the BOM.
Issue 962, BOM and non-BOM reproduction, SC4/OSV findings
- supportsSkillSpector could silently skip the first dependency of a UTF-8 BOM requirements file: In the reporter's paired BOM reproduction, the first jinja2 requirement went uninspected and the reported risk score changed from 8 with the BOM to 20 without it.
Issue 962, Reproduction table and Root Cause