nasa/cFS

View on GitHub

The Core Flight System (cFS)

Stars: 1.5k
Forks: 390
Open beginner issues: 0
Indexed issues: 96
Avg merge: 1d 11h
Merged PRs (30d): 19

Dominant language: C
License: Apache-2.0
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue help wanted

Beginner friendly Everything

Open All

96 open issues indexed

[SECURITY] Off-by-one bounds check in SBN HKPeerCmd/HKNetCmd allows access to invalid net/peer slots Open

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

nasa/cFS#1128 · Opened Sep 18, 2026
Workflow warning in add to project Open

nasa/cFS#1126 · 1 comment · 1 assignee · Opened Sep 17, 2026
Workflow warning in CodeQL Open

nasa/cFS#1125 · 1 assignee · Opened Sep 17, 2026
Inconsistent default values for cmd pipe depth across apps Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

nasa/cFS#1122 · Opened Sep 15, 2026
[SECURITY] CFE_TBL_LoadCmd() file descriptor leak causes denial of service via resource exhaustion Open

nasa/cFS#1104 · 3 comments · 1 assignee · Opened Aug 25, 2026
[SECURITY] SBN TCP receive path uses attacker-controlled message size before the boundary check, causing an out-of-bounds write into a fixed static buffer Open

nasa/cFS#1102 · 1 assignee · Opened Aug 25, 2026
Feature: DFA-based structural health monitor app for telemetry channels Open

Difficulty 5/5 Over a week Newbie friendliness 32/100

nasa/cFS#1096 · 8 comments · Opened Aug 22, 2026
Update CS design documentation Open

nasa/cFS#1082 · 1 assignee · Opened Jul 27, 2026
[SECURITY] TO_LAB Remove command desynchronizes ActiveSubCount from actual subscription slot usage causing false capacity exhaustion Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

nasa/cFS#1076 · 1 comment · Opened Jul 15, 2026
[SECURITY] CFDP finished transactions remain re-matchable in holdover allowing resource exhaustion via replayed EOF Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nasa/cFS#1075 · Opened Jul 15, 2026
[SECURITY] SBN subscription/unsubscription parser reads past real network payload due to missing MsgSz boundary check Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

nasa/cFS#1074 · Opened Jul 15, 2026
[SECURITY] CFDP remote metadata dest_filename controls arbitrary receive file path Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nasa/cFS#1073 · Opened Jul 15, 2026
[SECURITY] DS basename field allows path traversal without modifying pathname Open

Difficulty 4/5 3-5 days Newbie friendliness 58/100

nasa/cFS#1072 · Opened Jul 15, 2026
[SECURITY] DS SetDestPath command allows arbitrary telemetry archive path redirection Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nasa/cFS#1071 · Opened Jul 15, 2026
[SECURITY] HS EventMon uses forged event payload identity to trigger processor reset Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

nasa/cFS#1069 · Opened Jul 15, 2026
Add QNX to cFS multi-target build Open

nasa/cFS#1067 · 1 assignee · Opened Jul 14, 2026
Update CS Design Documentation and Requirements Open

nasa/cFS#1065 · 1 assignee · Opened Jul 14, 2026
CFE Table Load command fails due to inability to open the file Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nasa/cFS#1064 · Opened Jul 7, 2026
[SECURITY] SBN UDP Information Disclosure via Truncated Frame Expansion in cFS Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nasa/cFS#1058 · 1 comment · Opened Jun 28, 2026
[SECURITY] Arbitrary Module Execution via ES_StartApp Command and CFDP Ingress in cFS Open

Difficulty 5/5 Over a week Newbie friendliness 28/100

nasa/cFS#1057 · 1 comment · Opened Jun 28, 2026
Abstract POSIX gmtime_r() into OSAL Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

nasa/cFS#1055 · Opened Jun 26, 2026
Update Security file and propagate to all submodules Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nasa/cFS#1048 · Opened Jun 10, 2026
Header guard typo in todimpl.h breaks native build Open

Difficulty 1/5 Under an hour Newbie friendliness 92/100

nasa/cFS#1039 · 1 reaction · Opened May 23, 2026
Shutdown-path memory leak observed during instrumented testing Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nasa/cFS#1037 · Opened May 20, 2026
Runtime startup depends on OS message queue limits Open

Difficulty 4/5 3-5 days Newbie friendliness 50/100

nasa/cFS#1036 · Opened May 20, 2026
Repeated error conditions can trigger EVS squelch behavior Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nasa/cFS#1035 · Opened May 20, 2026
String-formatting and buffer-safety patterns require hardening review Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

nasa/cFS#1034 · Opened May 20, 2026
Event squelch can reduce operator visibility during error floods Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

nasa/cFS#1033 · Opened May 20, 2026
GitHub Actions Shell Injection Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nasa/cFS#1029 · Opened May 19, 2026
Use GitHub Bot to Mark Merged PRs as Ready for Acceptance Open

continuous-integration

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nasa/cFS#1021 · Opened May 14, 2026
Support CodeQL for Tools Open

continuous-integration

Difficulty 3/5 1-2 days Newbie friendliness 48/100

nasa/cFS#1007 · Opened May 11, 2026
Update bundle build supplemental configuration for workflows Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

nasa/cFS#998 · Opened May 7, 2026
Update Workflow README Open

continuous-integration

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

nasa/cFS#997 · Opened May 7, 2026
[SECURITY] Missing length validation for CFE_EVS_SEND_HK_MID in EVS ProcessCommandPacket Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

nasa/cFS#987 · 1 comment · Opened May 2, 2026
[SECURITY] Missing length validation for CFE_ES_SEND_HK_MID in ES TaskPipe Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

nasa/cFS#986 · Opened May 2, 2026
[SECURITY] Missing lower-bound validation in CI_LAB_DecodeInputMessage allows zero-length packets Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

nasa/cFS#985 · Opened May 2, 2026
CFE_FS_ExtractFilenameFromPath() should use OS_MAX_FILE_NAME instead of OS_MAX_PATH_LEN Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

nasa/cFS#983 · 1 comment · Opened May 2, 2026
Add Yocto to cFS Multitarget Build Workflow Open

continuous-integration

nasa/cFS#979 · 1 comment · 1 assignee · Opened May 1, 2026
Add bundle update workflow Open

continuous-integration

nasa/cFS#978 · 1 assignee · Opened May 1, 2026
Ensure Workflow Triggers are Consistent Open

continuous-integration

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nasa/cFS#976 · Opened Apr 29, 2026
Testing Add to Project Open

continuous-integration

Difficulty 1/5 Under an hour Newbie friendliness 10/100

nasa/cFS#972 · Opened Apr 28, 2026
Missing length validation for CFE_TIME_DATA_CMD_MID can cause out-of-bounds read Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 68/100

nasa/cFS#971 · 1 comment · Opened Apr 24, 2026
QThread from PyQt5.Core doesn't seem to be notice on the ground ststem Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

nasa/cFS#960 · 1 comment · Opened Apr 6, 2026
Draco v7.0.0: cfe_mission_cfg & cfe_platform_cfg backward compatibility broken Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nasa/cFS#957 · Opened Apr 3, 2026
RCE in cFS with cf module by .so CFDP upload and CFE_ES_START_APP no check in dl_open Open

bug

Difficulty 5/5 Over a week Newbie friendliness 25/100

nasa/cFS#955 · Opened Mar 20, 2026
[SECURITY] CFE_SB_TransmitMsg memcpy trusts CCSDS header size without source buffer validation Open

bug

Difficulty 5/5 Over a week Newbie friendliness 35/100

nasa/cFS#953 · 1 comment · Opened Mar 18, 2026
[SECURITY] Heap over-read via untrusted CCSDS length in TO_LAB sendto Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

nasa/cFS#952 · Opened Mar 18, 2026
[SECURITY] pickle.load() arbitrary code execution in cFS-GroundSystem Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 52/100

nasa/cFS#951 · 1 comment · Opened Mar 18, 2026
Draco v7.0.0: Add table query support to EDS python libraries Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nasa/cFS#950 · Opened Mar 11, 2026
Draco v7.0.0: Table dump unexpectedly fails and no event message issued Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

nasa/cFS#948 · 1 comment · Opened Mar 11, 2026

nasa/cFS

Get new issues in your inbox