All issues

Plan T2.2 missing: JSONC exclude under injected budget

#58

· younna-ai-opencode opened

on Aug 17, 2026

[info] PTY child inherits GitComet's full environment (info, standard for terminal emulators)

#53

· younna-ai-opencode opened

on Aug 16, 2026

[info] Detached-core credential flow: no integration test that catches URL/userinfo leaking through the ful

#52

· younna-ai-opencode opened

on Aug 16, 2026

[info] process.rs shell-script construction interpolates probe_log into unescaped single-quoted sh

#51

· younna-ai-opencode opened

on Aug 16, 2026

[low] format-patch export writes commit data to attacker-influenced dest without verifying symlink safety

#50

· younna-ai-opencode opened

on Aug 16, 2026

[low] wix installer auto-GUID='*' on components + verify-signed-artifact.ps1 only checks Status=Valid with

#49

· younna-ai-opencode opened

on Aug 16, 2026

[low] rustup install via curl pipe sh in cross-platform-tests.yml with no integrity check

#48

· younna-ai-opencode opened

on Aug 16, 2026

[low] build-apt-repo.sh interpolates Package-name from dpkg-deb directly into a filesystem path - maliciou

#47

· younna-ai-opencode opened

on Aug 16, 2026

[low] OSC 52 ClipboardStore handler is unconditional â relies entirely on alacritty_terminal library to ga

#45

· younna-ai-opencode opened

on Aug 16, 2026

[low] Vec::with_capacity sized from attacker-controlled diff line counts can amplify memory pressure

#46

· younna-ai-opencode opened

on Aug 16, 2026

[low] Clipboard write diagnostic file created with default umask on every copy

#44

· younna-ai-opencode opened

on Aug 16, 2026

[low] mergetool_mode.rs write_merged_output: fs::write to MERGED follows symlinks

#43

· younna-ai-opencode opened

on Aug 16, 2026