-
Notifications
You must be signed in to change notification settings - Fork 0
Issues
is:issue state:open
is:issue state:open
Issue creation is restricted in this repository
Search results
[ARCH] Default approval config is fail-open - NullApprovalHook allows everything
architectureArchitecture issueArchitecture issuesecuritySecurity vulnerabilitySecurity vulnerabilityStatus: Open.#28 In Ink-dark/orcha;[HIGH] IPC TCP transport has no authentication or encryption
bugSomething isn't workingSomething isn't workinghighHigh severityHigh severitysecuritySecurity vulnerabilitySecurity vulnerabilityStatus: Open.#26 In Ink-dark/orcha;[HIGH] API error responses expose internal details to clients
bugSomething isn't workingSomething isn't workinghighHigh severityHigh severitysecuritySecurity vulnerabilitySecurity vulnerabilityStatus: Open.#27 In Ink-dark/orcha;[HIGH] Feishu adapter has unbounded memory growth in message Maps
bugSomething isn't workingSomething isn't workinghighHigh severityHigh severityStatus: Open.#24 In Ink-dark/orcha;[ARCH] blocking_serve uses thread::park_timeout(Duration::MAX) hack instead of proper signal handling
architectureArchitecture issueArchitecture issueStatus: Open.#25 In Ink-dark/orcha;[CRITICAL] CORS set to '*' allowing arbitrary cross-origin requests
bugSomething isn't workingSomething isn't workingcriticalCritical severityCritical severitysecuritySecurity vulnerabilitySecurity vulnerabilityStatus: Open.#23 In Ink-dark/orcha;[HIGH] Approval action IDs are predictable (timestamp+counter, not CSPRNG)
bugSomething isn't workingSomething isn't workinghighHigh severityHigh severitysecuritySecurity vulnerabilitySecurity vulnerabilityStatus: Open.#22 In Ink-dark/orcha;[MEDIUM] Cancel tokens may leak on panic/abnormal task termination
bugSomething isn't workingSomething isn't workingmediumMedium severityMedium severityStatus: Open.#21 In Ink-dark/orcha;[CRITICAL] Runtime whitelist matches only basename, not full path (authz bypass)
bugSomething isn't workingSomething isn't workingcriticalCritical severityCritical severitysecuritySecurity vulnerabilitySecurity vulnerabilityStatus: Open.#20 In Ink-dark/orcha;[ARCH] Three duplicate glob matching implementations with inconsistent behavior
architectureArchitecture issueArchitecture issuecode-qualityCode quality issueCode quality issueStatus: Open.#18 In Ink-dark/orcha;[CODE QUALITY] Command whitelist fingerprint joins args with spaces causing ambiguity
code-qualityCode quality issueCode quality issuesecuritySecurity vulnerabilitySecurity vulnerabilityStatus: Open.#19 In Ink-dark/orcha;[HIGH] Unix socket created without restrictive file permissions
bugSomething isn't workingSomething isn't workinghighHigh severityHigh severitysecuritySecurity vulnerabilitySecurity vulnerabilityStatus: Open.#17 In Ink-dark/orcha;