-
Notifications
You must be signed in to change notification settings - Fork 8
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
[Review] Hardcoded HMAC secret fallback allows license bypass
review-blockingBlocks PR merge until resolvedBlocks PR merge until resolvedStatus: Open.#95 In anombyte93/atlas-session-lifecycle;[Review]
bounty_idinterpolated into URL path without sanitizationreview-blockingBlocks PR merge until resolvedBlocks PR merge until resolvedStatus: Open.#92 In anombyte93/atlas-session-lifecycle;[Review] SSRF via
ATLASCOIN_URLenvironment variablereview-blockingBlocks PR merge until resolvedBlocks PR merge until resolvedStatus: Open.#91 In anombyte93/atlas-session-lifecycle;[Review] GitHub API response interpolated into inline Python in install.sh
review-blockingBlocks PR merge until resolvedBlocks PR merge until resolvedStatus: Open.#90 In anombyte93/atlas-session-lifecycle;[Review] Fixed /tmp path for governance cache — symlink / multi-user attack
review-blockingBlocks PR merge until resolvedBlocks PR merge until resolvedStatus: Open.#89 In anombyte93/atlas-session-lifecycle;[Review] Path traversal in
_run_file_exists— criterionpathnot confined to project_dirreview-blockingBlocks PR merge until resolvedBlocks PR merge until resolvedStatus: Open.#88 In anombyte93/atlas-session-lifecycle;[Review] Shell injection via
shell=Truewith user-supplied commandsreview-blockingBlocks PR merge until resolvedBlocks PR merge until resolvedStatus: Open.#87 In anombyte93/atlas-session-lifecycle;[Review] Code injection via external API response in install.sh
review-blockingBlocks PR merge until resolvedBlocks PR merge until resolvedStatus: Open.#86 In anombyte93/atlas-session-lifecycle;[Review] Shell injection via shell=True with user-supplied commands
review-blockingBlocks PR merge until resolvedBlocks PR merge until resolvedStatus: Open.#85 In anombyte93/atlas-session-lifecycle;[Review] Symlink attack via predictable temp file path for governance cache
review-blockingBlocks PR merge until resolvedBlocks PR merge until resolvedStatus: Open.#84 In anombyte93/atlas-session-lifecycle;[Review] Incomplete shell metacharacter blocklist — parentheses allow
-cinjectionreview-blockingBlocks PR merge until resolvedBlocks PR merge until resolvedStatus: Open.#83 In anombyte93/atlas-session-lifecycle;[Review] Path traversal in contract_create() tool
review-blockingBlocks PR merge until resolvedBlocks PR merge until resolvedStatus: Open.#82 In anombyte93/atlas-session-lifecycle;