Search results

OAuth callback (/api/oauth/callback) does not validate 'state' nonce — unauthenticated authorization-code injection / login-CSRF

Status: Open.

#1790 In Osmantic/ODS;

· tg12 opened on Jul 15, 2026

ai-issue-triage: 'Bash(gh issue edit *)' allowlist exceeds label-only policy, allowing cross-issue tampering via prompt-injected issue body

Status: Open.

#1789 In Osmantic/ODS;

· tg12 opened on Jul 15, 2026

issue-to-pr workflow: Claude Code step grants Write + pytest execution alongside ANTHROPIC_API_KEY/GITHUB_TOKEN, enabling secret exfiltration via prompt-injected issue body

Status: Open.

#1788 In Osmantic/ODS;

· tg12 opened on Jul 15, 2026

bug(windows): installer continues past fatal Phase 2 driver check, crashes in Phase 3 on null $tierConfig

Status: Open.

#1771 In Osmantic/ODS;

· patil2001 opened on Jul 14, 2026

bug(windows): 'ods.ps1 enable/disable' crashes via WSL bash without a Linux distro, fallback is dead code, leaves stack half-modified

Status: Open.

#1770 In Osmantic/ODS;

· patil2001 opened on Jul 14, 2026

bug(windows): 'ods.ps1 config show' leaks passwords/salts despite promising masked secrets

Status: Open.

#1769 In Osmantic/ODS;

· patil2001 opened on Jul 14, 2026

ods-preflight.sh ignores custom DASHBOARD_PORT and probes hardcoded 3001

bugSomething isn't workingSomething isn't working

Status: Open.

#1767 In Osmantic/ODS;

· vaibhavsrv opened on Jul 14, 2026

bug(windows): ODS CLI script lacks 'model' subcommand array (Unknown command: model)

bugSomething isn't workingSomething isn't working

Status: Open.

#1757 In Osmantic/ODS;

· deshmukhtarun opened on Jul 13, 2026

bug(windows): Register-ScheduledTask fails with Access is denied on non-admin Windows 11 Home install

bugSomething isn't workingSomething isn't working

Status: Open.

#1756 In Osmantic/ODS;

· deshmukhtarun opened on Jul 13, 2026

preflight-engine skips shared Python command resolver due to incorrect root path

bugSomething isn't workingSomething isn't working

Status: Open.

#1753 In Osmantic/ODS;

· vaibhavsrv opened on Jul 13, 2026

Manual rollback does not resolve layered Compose stack

bugSomething isn't workingSomething isn't working

Status: Open.

#1747 In Osmantic/ODS;

· vaibhavsrv opened on Jul 13, 2026

feat(doctor): add external LLM connectivity check when EXTERNAL_LLM_URL is configured

enhancementNew feature or requestNew feature or request

Status: Open.

#1742 In Osmantic/ODS;

· IronicRayquaza opened on Jul 12, 2026