All issues

Search results

[P2][BUG] No agent execution timeout — infinite tool-calling loops run indefinitely and drain API credits

Status: Open.

#11 In etairl/Probus;

· pratik-saptarshi opened on May 23, 2026

[P2][BUG] No file count limit on analyst output — unbounded array can exhaust memory and API credits

Status: Open.

#10 In etairl/Probus;

· pratik-saptarshi opened on May 23, 2026

[P2][BUG] TOCTOU race in Bifrost port allocation: free port used between getFreePort() and spawn()

Status: Open.

#9 In etairl/Probus;

· pratik-saptarshi opened on May 23, 2026

[P1][BUG] Chat agent modifies host repo without dirty-worktree preflight check, risking uncommitted code loss

Status: Open.

#8 In etairl/Probus;

· pratik-saptarshi opened on May 23, 2026

[P1][BUG] Analyst-returned file paths used without isInside() boundary check before scan pipeline

Status: Open.

#7 In etairl/Probus;

· pratik-saptarshi opened on May 23, 2026

[P1][SECURITY] Dotenv injection via unescaped newlines in saveKey(): arbitrary env var injection

Status: Open.

#6 In etairl/Probus;

· pratik-saptarshi opened on May 23, 2026

[P0][SECURITY] Path traversal via :slug parameter shifts containment root, bypassing isInside() check

Status: Open.

#5 In etairl/Probus;

· pratik-saptarshi opened on May 23, 2026

[P0][BUG] Express process crash (DoS): async route handlers throw unhandled promise rejections on malformed bodies

Status: Open.

#4 In etairl/Probus;

· pratik-saptarshi opened on May 23, 2026

[P0][BUG] Chat session status corruption: resetTranscript() races with in-flight async runAgent() finally block

Status: Open.

#3 In etairl/Probus;

· pratik-saptarshi opened on May 23, 2026

[P0][BUG] Zombie Bifrost process leak: async shutdown silently dropped in process.on('exit')

Status: Open.

#2 In etairl/Probus;

· pratik-saptarshi opened on May 23, 2026

[P0][SECURITY] Unauthenticated loopback RCE via bypassPermissions + missing CORS/CSRF guards

Status: Open.

#1 In etairl/Probus;

· pratik-saptarshi opened on May 23, 2026