Search results

Cancellation flag race condition with Relaxed ordering in Node.js bindings

securitySecurity vulnerability or hardeningSecurity vulnerability or hardening

Status: Open.

#992 In everruns/bashkit;

· chaliy opened on Apr 2, 2026

Parallel builtin cartesian product enables exponential memory blowup

securitySecurity vulnerability or hardeningSecurity vulnerability or hardening

Status: Open.

#991 In everruns/bashkit;

· chaliy opened on Apr 2, 2026

AI adapters create dual divergent interpreter instances

securitySecurity vulnerability or hardeningSecurity vulnerability or hardening

Status: Open.

#990 In everruns/bashkit;

· chaliy opened on Apr 2, 2026

Patch builtin path traversal via crafted diff headers

securitySecurity vulnerability or hardeningSecurity vulnerability or hardening

Status: Open.

#989 In everruns/bashkit;

· chaliy opened on Apr 2, 2026

AWK getline allows unbounded file caching in memory

securitySecurity vulnerability or hardeningSecurity vulnerability or hardening

Status: Open.

#988 In everruns/bashkit;

· chaliy opened on Apr 2, 2026

AWK output buffer grows without bound, enabling memory exhaustion

securitySecurity vulnerability or hardeningSecurity vulnerability or hardening

Status: Open.

#987 In everruns/bashkit;

· chaliy opened on Apr 2, 2026

monty_to_py and py_to_monty conversions lack recursion depth limits

securitySecurity vulnerability or hardeningSecurity vulnerability or hardening

Status: Open.

#986 In everruns/bashkit;

· chaliy opened on Apr 2, 2026

Curl multipart header injection via unescaped field names/filenames

securitySecurity vulnerability or hardeningSecurity vulnerability or hardening

Status: Open.

#985 In everruns/bashkit;

· chaliy opened on Apr 2, 2026

No regex size/complexity limit in sed, grep, and awk enables resource exhaustion

securitySecurity vulnerability or hardeningSecurity vulnerability or hardening

Status: Open.

#984 In everruns/bashkit;

· chaliy opened on Apr 2, 2026

AWK printf width specifier allows unbounded memory allocation

securitySecurity vulnerability or hardeningSecurity vulnerability or hardening

Status: Open.

#983 In everruns/bashkit;

· chaliy opened on Apr 2, 2026

Unbounded thread creation in ScriptedTool JS callbacks enables DoS

securitySecurity vulnerability or hardeningSecurity vulnerability or hardening

Status: Open.

#982 In everruns/bashkit;

· chaliy opened on Apr 2, 2026

MCP server ignores CLI execution limits, creates unconstrained interpreters

securitySecurity vulnerability or hardeningSecurity vulnerability or hardening

Status: Open.

#981 In everruns/bashkit;

· chaliy opened on Apr 2, 2026