Issues

• Feature request: surface a pay-per-call (x402) step when an external tool answers HTTP 402

  The-Vibe-Company/quivr#3722 · Filter by author dhyabi2 opened on Sep 25, 2026

• [security] Hardcoded Flask secret key enables session cookie forgery

  The-Vibe-Company/quivr#3717 · Filter by author failsafesecurity opened on Sep 6, 2026
  1

• [security] Arbitrary code execution via unsafe FAISS/pickle deserialization when loading a brain

  The-Vibe-Company/quivr#3716 · Filter by author failsafesecurity opened on Sep 6, 2026

• Fix Langfuse dependency incompatibility and upgrade to Python SDK v4

  area: backendbug
  The-Vibe-Company/quivr#3701 · Filter by author hassiebp opened on Jul 15, 2026
  1

• Volunteer for maintainer review

  The-Vibe-Company/quivr#3700 · Filter by author arturict opened on Jul 13, 2026

• Prompt IDOR - any authenticated user can read and overwrite any prompt (system-prompt hijacking)

  area: backendbugStale
  The-Vibe-Company/quivr#3698 · Filter by author geo-chen opened on Jul 3, 2026
  1

• Chat IDOR - unauthenticated-of-ownership read, delete, and message injection on any chat

  area: backendbugStale
  The-Vibe-Company/quivr#3697 · Filter by author geo-chen opened on Jul 3, 2026
  1

• Feature: Prompt compression to reduce LLM token costs in RAG conversations

  enhancement
  The-Vibe-Company/quivr#3695 · Filter by author arjunkshah opened on Jun 29, 2026

• EU AI Act Compliance Scan Results — Sharing Findings for Feedback

  The-Vibe-Company/quivr#3667 · Filter by author shotwellj opened on Mar 17, 2026
  4

• [Bug]:

  area: frontendbugtype: dependencies
  The-Vibe-Company/quivr#2004 · Filter by author zxc985330681 opened on Jan 10, 2024
  31