| #493 |
Race: Approval double-processing
api/blueprints/v1/approvals.py:88-122 - Concurrent approve requests can both succeed, sending duplic...
|
closed |
high |
2025-12-17 02:57 |
- |
|
| #492 |
Performance: Synchronous subprocess blocks event loop
api/blueprints/v1/workflows.py:115-122 - subprocess.run() blocks async handler for up to 10s. Stalls...
|
closed |
high |
2025-12-17 02:57 |
- |
|
| #491 |
Performance: N+1 query in queue analytics
api/blueprints/v1/analytics.py:63-68 - Database query inside loop for each queue. 50 queues = 51 que...
|
closed |
high |
2025-12-17 02:57 |
- |
|
| #490 |
Performance: JWT config fetched from Vault on EVERY request
api/oauth_handlers/oauth2.py:128 - get_oauth2_config() fetches 4 secrets from Vault on every authent...
|
closed |
high |
2025-12-17 02:57 |
- |
|
| #489 |
Memory: Vault cache expired entries never proactively removed
engine/config.py:82 - _vault_cache entries checked on read but expired entries never proactively cle...
|
closed |
medium |
2025-12-17 02:25 |
- |
|
| #488 |
Performance: Sensitive keywords list recreated in loops
engine/apps/executor.py:841 and engine/services/event_gateway_service.py:625 - List literal ['secret...
|
closed |
low |
2025-12-17 02:25 |
- |
|
| #487 |
Performance: len() with list comprehension in agent.py
engine/tools/agent.py:303 - len([h for h in history if ...]) builds list just to count. FIX: sum(1 f...
|
closed |
low |
2025-12-17 02:25 |
- |
|
| #486 |
Performance: Inefficient double iteration in secret_manager cache eviction
engine/services/secret_manager.py:342 - List comprehension extracts keys from already-converted list...
|
closed |
medium |
2025-12-17 02:25 |
- |
|
| #485 |
Performance: Unnecessary list() in activity_worker futures
engine/services/activity_worker.py:605 - list(futures_snapshot.items()) on already-snapshotted dict....
|
closed |
medium |
2025-12-17 02:25 |
- |
|
| #484 |
Performance: Unnecessary list() in db.py singleton cleanup
engine/db.py:532 - list(SingletonMeta._instances.values()) when no modification during iteration. FI...
|
closed |
medium |
2025-12-17 02:25 |
- |
|
| #483 |
Race Condition: SidecarTelemetry __init__ attribute race
engine/sidecar_telemetry.py:74-90 - Singleton __init__ called every time. _initialized check not ato...
|
closed |
medium |
2025-12-17 02:25 |
- |
|
| #482 |
Performance: Regex not pre-compiled in durable_context.py
engine/durable_context.py:1621 - Regex pattern compiled inline. FIX: Pre-compile at module level.
|
closed |
medium |
2025-12-17 02:25 |
- |
|
| #481 |
Performance: Regex not pre-compiled in activity_context.py
engine/activity_context.py:151-160 - resolve_variable_references() compiles regex on every call. Hot...
|
closed |
high |
2025-12-17 02:25 |
- |
|
| #480 |
Race Condition: Circuit breaker storage singleton without lock
engine/config.py:337-365 - _get_circuit_breaker_storage() creates singleton without thread-safe lock...
|
closed |
high |
2025-12-17 02:25 |
- |
|
| #479 |
Performance: Inefficient last-key access with tuple(dict.keys())[-1]
engine/interpreters/inline_executor.py:690,893
Getting last key via tuple conversion is inefficient...
|
closed |
medium |
2025-12-17 01:42 |
- |
|
| #478 |
Race Condition: Tool registry lazy load without lock
engine/tools/registry.py:205-211
_ensure_lazy_tools() has race condition:
```python
if not self._la...
|
closed |
low |
2025-12-17 01:42 |
- |
|
| #477 |
Memory Leak: Tool registry never cleaned
engine/tools/registry.py:103-104
ToolRegistry._tools dict grows unbounded:
- App tools added dynami...
|
closed |
medium |
2025-12-17 01:42 |
- |
|
| #476 |
Race Condition: Cache eviction KeyError in activity_worker and config
engine/services/activity_worker.py:105-126
engine/config.py:632-644
Cache eviction can raise KeyErr...
|
closed |
medium |
2025-12-17 01:42 |
- |
|
| #475 |
Race Condition: File deduplication missing ON CONFLICT
engine/services/storage_service.py:114-131
File store deduplication has TOCTOU race:
1. Store file ...
|
closed |
medium |
2025-12-17 01:42 |
- |
|
| #474 |
Performance: Regex compiled on every call in variable_resolver.py
engine/interpreters/variable_resolver.py lines 196, 207, 240
Hot path compiles regex patterns on ev...
|
closed |
high |
2025-12-17 01:42 |
- |
|