Search results

[BUG] [v0.1.0] generate_summary() panics on multi-byte UTF-8 characters due to byte-based string slicing (compaction.rs:202)

Status: Open.

#161 In CortexLM/cortex;

· EnthusiasticTech opened on Feb 18, 2026

[BUG] [v0.0.7] list_files() in api/files.rs has no path validation, allowing traversal to arbitrary filesystem paths

Status: Open.

#160 In CortexLM/cortex;

· katotomoya0105 opened on Feb 18, 2026

[BUG] [v0.0.7] get_shared_session() has TOCTOU race on max_views — concurrent requests can exceed the view limit

Status: Open.

#159 In CortexLM/cortex;

· katotomoya0105 opened on Feb 18, 2026

[BUG] [v0.0.7] fork_session() copies one extra message into forked history due to off-by-one in index check

Status: Open.

#158 In CortexLM/cortex;

· katotomoya0105 opened on Feb 18, 2026

[BUG] [v0.0.7] save_session() in storage.rs unlocks file before BufWriter is flushed, risking partial writes

Status: Open.

#157 In CortexLM/cortex;

· katotomoya0105 opened on Feb 18, 2026

[SECURITY] [v0.0.7] Path traversal vulnerability in workflow_name parameter — arbitrary file write/delete

Status: Open.

#156 In CortexLM/cortex;

· joshme1 opened on Feb 18, 2026

[BUG] [v0.0.7] DynamicCustomCommand::metadata() leaks memory on every call via Box::leak

Status: Open.

#155 In CortexLM/cortex;

· climax-dev-1 opened on Feb 18, 2026

[BUG] [v0.0.7] JsonFileStorage crashes on empty file (serde_json parse error)

Status: Open.

#154 In CortexLM/cortex;

· climax-dev-1 opened on Feb 18, 2026

[BUG] find_hunk_position() silently applies hunk at wrong position when context doesn't match, corrupting files (apply_patch.rs:430)

Status: Open.

#145 In CortexLM/cortex;

· sysprime10001 opened on Feb 16, 2026

[BUG] [v0.0.7] interpolate_brain_pulse and brain_cyan hardcode wrong RGB values — #00FFFF instead of CYAN_PRIMARY #00FFA3 (style.rs:449)

Status: Open.

#144 In CortexLM/cortex;

· anticsdecoded opened on Feb 14, 2026

[BUG] [v0.0.7] BRAIN_WIDTH constant is 37 but all BRAIN_ART lines are 36 characters wide (off-by-one)

Status: Open.

#143 In CortexLM/cortex;

· Antics7777 opened on Feb 13, 2026

[BUG] [v0.1.0] truncate_command() panics on multi-byte UTF-8 characters due to byte-based string slicing

Status: Open.

#141 In CortexLM/cortex;

· virtuoso-max opened on Feb 11, 2026