ultanio/cobot
4
1
Fork 4
Code Issues 84 Pull requests 10 Projects Releases Packages Wiki Activity Actions
Labels Milestones
Search syntax
is:open Open
is:closed Closed
is:all All
author:<username> Filter by the author
assignee:<username> Filter by assigned user
review:<username> Filter by user who reviewed
mentions:<username> Filter by mentioned user
sort:<by>:[asc|desc] Sort by: created/comments/updated/deadline
modified:[>|<]<date> Filter by last modified date
New issue
23 Open 3 Closed 26 All
Label
Clear labels
Compat/Breaking
Kind/Bug
Kind/Competitor
Kind/Documentation
Kind/Enhancement
Kind/Epic
Kind/Feature
Kind/Security
Kind/Story
Kind/Testing
Priority
Critical
Priority
High
Priority
Low
Priority
Medium
Reviewed
Confirmed
Reviewed
Duplicate
Reviewed
Invalid
Reviewed
Won't Fix
Scope/Core
Scope/Cross-Plugin
Scope/Plugin-System
Scope/Single-Plugin
Status
Abandoned
Status
Blocked
Status
Need More Info
Milestone
No milestone
Projects
Clear projects
Assignee
Clear assignees
No assignee
Alex
Sam
Zeus
bmad
doxios
k9ert
[Phase 1] Leak Detection: Scan outbound messages for accidental secret exposure [ON HOLD - needs avault integration]
Kind/Feature
Kind/Security
2
#145 opened 2026-02-27 13:49:05 +00:00 by noopsec
Secrets are exposed to plugins and subprocesses via environment variables
Kind/Security
Priority
High
3
#50 opened 2026-02-22 06:36:25 +00:00 by nazim
🟢 [LOW] CB-021: No HTTPS Certificate Pinning for API Calls
Kind/Security
Priority
Low
#30 opened 2026-02-20 08:50:05 +00:00 by Alpha
🟢 [LOW] CB-020: Telegram Bot Token Partially Leaked in Identity
Kind/Security
Priority
Low
#29 opened 2026-02-20 08:50:05 +00:00 by Alpha
🟢 [LOW] CB-019: Config --reveal Exposes All Secrets
Kind/Security
Priority
Low
#28 opened 2026-02-20 08:50:05 +00:00 by Alpha
🟢 [LOW] CB-018: Plugin Discovery Executes Arbitrary Code
Kind/Security
Priority
Low
#27 opened 2026-02-20 08:50:05 +00:00 by Alpha
🟢 [LOW] CB-017: PID File Race Condition (TOCTOU)
Kind/Security
Priority
Low
#26 opened 2026-02-20 08:50:04 +00:00 by Alpha
🟡 [MEDIUM] CB-015: Error Messages Leak Internal State
Kind/Security
Priority
Medium
#24 opened 2026-02-20 08:50:04 +00:00 by Alpha
🟡 [MEDIUM] CB-014: Unbounded Event Deduplication Set
Kind/Security
Priority
Medium
#23 opened 2026-02-20 08:50:04 +00:00 by Alpha
🟡 [MEDIUM] CB-013: CWD-Based Config Loading Allows Config Injection
Kind/Security
Priority
Medium
#22 opened 2026-02-20 08:50:04 +00:00 by Alpha
🟡 [MEDIUM] CB-012: No Rate Limiting on Tool Execution or LLM Calls
Kind/Security
Priority
Medium
#21 opened 2026-02-20 08:50:04 +00:00 by Alpha
🟡 [MEDIUM] CB-011: Memory File Path Injection
Kind/Security
Priority
Medium
#20 opened 2026-02-20 08:50:04 +00:00 by Alpha
🟡 [MEDIUM] CB-010: Trivially Bypassable Exec Blocklist
Kind/Security
Priority
Medium
#19 opened 2026-02-20 08:50:04 +00:00 by Alpha
🟠 [HIGH] CB-009: os.execv Restart Allows Argument Injection
Kind/Security
Priority
High
#18 opened 2026-02-20 08:50:04 +00:00 by Alpha
🟠 [HIGH] CB-008: Environment Variable Leakage via Subprocess
Kind/Security
Priority
High
#17 opened 2026-02-20 08:50:03 +00:00 by Alpha
🟠 [HIGH] CB-007: World-Writable FileDrop Directory
Kind/Security
Priority
High
#16 opened 2026-02-20 08:50:03 +00:00 by Alpha
🟠 [HIGH] CB-006: Nostr Private Key Exposure Risk
Kind/Security
Priority
High
#15 opened 2026-02-20 08:50:03 +00:00 by Alpha
🟠 [HIGH] CB-005: Security Plugin Fails Open
Kind/Security
Priority
High
#14 opened 2026-02-20 08:50:03 +00:00 by Alpha
🔴 [CRITICAL] CB-004: Unauthorized Wallet Drain via LLM Tool Abuse
Kind/Security
Priority
Critical
#13 opened 2026-02-20 08:50:03 +00:00 by Alpha
🔴 [CRITICAL] CB-003: Prompt Injection to Remote Code Execution Chain
Kind/Security
Priority
Critical
#12 opened 2026-02-20 08:50:03 +00:00 by Alpha