Search results

Document NET_ADMIN capability requirement and container escape implications

Status: Open.

#88 In donbader/agent-sandbox;

· wongtsejian opened on Jun 3, 2026

Security: No SSRF protection in TypeScript OAuth token exchange

Status: Open.

#87 In donbader/agent-sandbox;

· wongtsejian opened on Jun 3, 2026

install.sh version parsing with grep|sed is fragile

Status: Open.

#86 In donbader/agent-sandbox;

· wongtsejian opened on Jun 3, 2026

Performance: New http.Transport created per forwarded request in gateway

Status: Open.

#85 In donbader/agent-sandbox;

· wongtsejian opened on Jun 3, 2026

Telegram ACL permits all users when allowed_users is empty array

Status: Open.

#84 In donbader/agent-sandbox;

· wongtsejian opened on Jun 3, 2026

Security: OAuth access tokens excluded from log redaction

Status: Open.

#83 In donbader/agent-sandbox;

· wongtsejian opened on Jun 3, 2026

Security: Provider name allows path traversal in token file path

Status: Open.

#82 In donbader/agent-sandbox;

· wongtsejian opened on Jun 3, 2026

Security: No binary integrity verification in install.sh and upgrade command

Status: Open.

#81 In donbader/agent-sandbox;

· wongtsejian opened on Jun 3, 2026