Issues

• [BUG] storeMemory single-item path still swallows vector insert errors

  LVT382009/noxem#33 · Filter by author ether-btc opened on Jun 10, 2026

• [AUDIT-2026-06-10] Add JS unit tests for security validators

  LVT382009/noxem#32 · Filter by author ether-btc opened on Jun 10, 2026

• [SECURITY] WSL DNS hijack via chattr +i permanently locks resolv.conf (CRITICAL)

  LVT382009/noxem#29 · Filter by author ether-btc opened on Jun 5, 2026

• [SECURITY] npm install --no-audit hides vulnerable dependencies (HIGH)

  LVT382009/noxem#27 · Filter by author ether-btc opened on Jun 5, 2026

• [SECURITY] duck-duck-scrape deprecated with known HTTP header injection CVEs (HIGH)

  LVT382009/noxem#26 · Filter by author ether-btc opened on Jun 5, 2026

• [SECURITY] Rate limit bypassable via X-Forwarded-For IP spoofing (HIGH)

  LVT382009/noxem#25 · Filter by author ether-btc opened on Jun 5, 2026

• [SECURITY] LLM query injection via search query expansion (HIGH)

  LVT382009/noxem#24 · Filter by author ether-btc opened on Jun 5, 2026

• [SECURITY] DuckDuckGo API called over HTTP — MITM injection risk (HIGH)

  LVT382009/noxem#21 · Filter by author ether-btc opened on Jun 5, 2026

• [SECURITY] CORS defaults to allow-all origins when CORS_ORIGIN unset (CRITICAL)

  LVT382009/noxem#20 · Filter by author ether-btc opened on Jun 5, 2026

• [SECURITY] Auth middleware disabled when MEMORY_API_KEY unset (CRITICAL)

  LVT382009/noxem#19 · Filter by author ether-btc opened on Jun 5, 2026