| #453 |
LLM tool asyncio.run() causes worker zombie state via anyio corruption
In llm.py lines 573-577, when no event loop is running:
```python
try:
asyncio.get_running_loop...
|
closed |
critical |
2025-12-16 11:24 |
- |
|
| #452 |
Sandbox wrapper.py JSON quoting vulnerability causes SyntaxError
In sandboxed_executor.py lines 187-188, args/kwargs are embedded in single-quoted strings:
```pytho...
|
closed |
high |
2025-12-16 11:23 |
- |
|
| #451 |
P4: Dynamic Table Name Discovery in Janitor
Issue #16 from review: Hardcoded pattern breaks on schema changes. Location: engine/services/janitor...
|
closed |
low |
2025-12-16 00:57 |
- |
|
| #449 |
P4: Set Real __file__ Path for Artifacts
Issue #13 from review: Libraries fail with virtual path. Location: engine/tools/python_task.py:237. ...
|
closed |
low |
2025-12-16 00:57 |
- |
|
| #448 |
P3: Auto-Join for Parallel Operator
Issue #12 from review: Zombie branches possible. Location: engine/interpreters/operators.py:479-576....
|
closed |
medium |
2025-12-16 00:56 |
- |
|
| #446 |
P3: Default Sandbox Mode to Enabled
Issue #3 from review: Process state leakage risk. Location: engine/tools/python_task.py:61-68. Findi...
|
closed |
medium |
2025-12-16 00:56 |
- |
|
| #445 |
P3: Add TTL to Vault Secret Cache
Issue #7 from review: Stale secrets after rotation. Location: engine/config.py:70,216-244. Finding: ...
|
closed |
medium |
2025-12-16 00:56 |
- |
|
| #444 |
P2: Mark Telemetry as Provisional Until Commit
Issue #8 from review: Phantom success logs. Location: engine/sidecar_telemetry.py. Finding: autocomm...
|
closed |
high |
2025-12-16 00:56 |
- |
|
| #443 |
P2: Encrypt NULL Values in JSONB
Issue #6 from review: NULL leaks information. Location: engine/security/jsonb_encryption.py:119-121....
|
closed |
high |
2025-12-16 00:56 |
- |
|
| #442 |
P2: Fix Chunked Write O(N²) Performance
Issue #9 from review: Write amplification. Location: engine/utils/chunking.py:28. Finding: append() ...
|
closed |
high |
2025-12-16 00:56 |
- |
|
| #441 |
P1: Add ast.Dict to Safe Expression Evaluator
Issue #14 from review: Conditions fail on dict values. Location: engine/interpreters/variable_resolv...
|
closed |
high |
2025-12-16 00:56 |
- |
|
| #440 |
P1: TimeoutService Must Update workflow_run Status
Issue #11 from review: Zombie workflows in UI. Location: engine/services/timeout_service.py. Finding...
|
closed |
critical |
2025-12-16 00:56 |
- |
|
| #439 |
P1: Enforce HIGHWAY_SANDBOX_SECRET in Production
Issue #5 from review: Ephemeral keys break distributed deployments. Location: engine/sandbox/executi...
|
closed |
critical |
2025-12-16 00:56 |
- |
|
| #437 |
Missing oauth2_platform.py module causes startup warning
The api/app.py imports api.oauth_handlers.oauth2_platform.platform_auth_bp but the module was never ...
|
closed |
high |
2025-12-15 09:33 |
- |
|
| #436 |
BUG: durable_cron never fires - last_run variable not persisted before first sleep
## Problem
The durable_cron tool never actually spawns child workflows. It keeps waking up, recalcu...
|
closed |
critical |
2025-12-14 21:04 |
- |
|
| #426 |
App: URL Health Monitor (health_monitor)
## Overview
Monitor website/API uptime with scheduled checks and email alerts on failures.
## App M...
|
closed |
high |
2025-12-14 20:13 |
- |
|
| #422 |
Bug Report
File upload fails silently with large files over 10MB
Reporter: developer@test.com
|
closed |
medium |
2025-12-14 12:19 |
- |
|
| #421 |
Bug Report
Test desc
Reporter: test@example.com
|
closed |
medium |
2025-12-14 12:16 |
- |
|
| #420 |
Bug Report
Test bug: clicking the submit button does nothing
Reporter: test@example.com
|
closed |
medium |
2025-12-14 12:16 |
- |
|
| #419 |
Test Bug Report
Test description
Reporter: test@example.com
|
closed |
medium |
2025-12-14 12:16 |
- |
|