Search results

[Review] Hardcoded HMAC secret fallback allows license bypass

review-blockingBlocks PR merge until resolvedBlocks PR merge until resolved

Status: Open.

#95 In anombyte93/atlas-session-lifecycle;

· github-actions opened on Mar 12, 2026

[Review] bounty_id interpolated into URL path without sanitization

review-blockingBlocks PR merge until resolvedBlocks PR merge until resolved

Status: Open.

#92 In anombyte93/atlas-session-lifecycle;

· github-actions opened on Feb 24, 2026

[Review] SSRF via ATLASCOIN_URL environment variable

review-blockingBlocks PR merge until resolvedBlocks PR merge until resolved

Status: Open.

#91 In anombyte93/atlas-session-lifecycle;

· github-actions opened on Feb 24, 2026

[Review] GitHub API response interpolated into inline Python in install.sh

review-blockingBlocks PR merge until resolvedBlocks PR merge until resolved

Status: Open.

#90 In anombyte93/atlas-session-lifecycle;

· github-actions opened on Feb 24, 2026

[Review] Fixed /tmp path for governance cache — symlink / multi-user attack

review-blockingBlocks PR merge until resolvedBlocks PR merge until resolved

Status: Open.

#89 In anombyte93/atlas-session-lifecycle;

· github-actions opened on Feb 24, 2026

[Review] Path traversal in _run_file_exists — criterion path not confined to project_dir

review-blockingBlocks PR merge until resolvedBlocks PR merge until resolved

Status: Open.

#88 In anombyte93/atlas-session-lifecycle;

· github-actions opened on Feb 24, 2026

[Review] Shell injection via shell=True with user-supplied commands

review-blockingBlocks PR merge until resolvedBlocks PR merge until resolved

Status: Open.

#87 In anombyte93/atlas-session-lifecycle;

· github-actions opened on Feb 24, 2026

[Review] Code injection via external API response in install.sh

review-blockingBlocks PR merge until resolvedBlocks PR merge until resolved

Status: Open.

#86 In anombyte93/atlas-session-lifecycle;

· github-actions opened on Feb 24, 2026

[Review] Shell injection via shell=True with user-supplied commands

review-blockingBlocks PR merge until resolvedBlocks PR merge until resolved

Status: Open.

#85 In anombyte93/atlas-session-lifecycle;

· github-actions opened on Feb 24, 2026

[Review] Symlink attack via predictable temp file path for governance cache

review-blockingBlocks PR merge until resolvedBlocks PR merge until resolved

Status: Open.

#84 In anombyte93/atlas-session-lifecycle;

· github-actions opened on Feb 24, 2026

[Review] Incomplete shell metacharacter blocklist — parentheses allow -c injection

review-blockingBlocks PR merge until resolvedBlocks PR merge until resolved

Status: Open.

#83 In anombyte93/atlas-session-lifecycle;

· github-actions opened on Feb 24, 2026

[Review] Path traversal in contract_create() tool

review-blockingBlocks PR merge until resolvedBlocks PR merge until resolved

Status: Open.

#82 In anombyte93/atlas-session-lifecycle;

· github-actions opened on Feb 24, 2026