Issue selezionate

Security Good First Issues

Sfoglia issue open source raggruppate sotto Security. Se nei metadati della issue l'argomento compare con nomi più vecchi, vengono abbinate anche quelle.

Security

Segnali del gruppo

Difficoltà media annotata: 4.0/5 su 3,205 issue.
9% di 3,205 stime di tempo sono di un giorno o meno.

Aperta Tutte

process-gap(tdd): security-invariant ACs require mutation verification — a test that still passes when the guard is removed does not test the guard Aperta

BOHICA-LABS/vsdd-factory#676 · 2 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
process-gap(implementer+orchestrator): a code fix that changes a documented call-contract sweeps the changed line + inline comment but not the function godoc header nor the behavioral-contract specs documenting that call — two extra adversarial passes to close Aperta

BOHICA-LABS/vsdd-factory#708 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
bug(hooks): verify-git-push fails open — lease substring disables the force guard, and any flag before the remote defeats the protected-branch guard Aperta

BOHICA-LABS/vsdd-factory#790 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
bug(tooling-guards): destructive-command-guard matches command patterns inside a write payload — a document that merely mentions 'git clean' cannot be written via heredoc Aperta

BOHICA-LABS/vsdd-factory#793 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
bug(destructive-command-guard): sot_delete arm tests deletion and filename independently — blocks read-only commands, and blocked the filing of this report Aperta

BOHICA-LABS/vsdd-factory#812 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
bug(adversary): agent declares read-only tools (Read/Grep/Glob) but can write files, and cannot execute — the reviewer can modify its subject and cannot verify it Aperta

BOHICA-LABS/vsdd-factory#825 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
bug(dispatcher): fuel exhaustion is indistinguishable from successful validation — oversized artifacts silently skip structural gates Aperta

BOHICA-LABS/vsdd-factory#827 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
safety(intake): issue bodies as artifact input put untrusted text upstream of the adversarial cascade Aperta

BOHICA-LABS/vsdd-factory#835 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
Add a SECURITY.md with a vulnerability disclosure policy Aperta

bobluppes/graaf#321 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
Add sanitizer (ASan/UBSan/TSan) and fuzz testing to CI Aperta

bobluppes/graaf#326 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
Add identity provider (SSO) support Aperta

enhancement priority: low

bobbylite/hermes-admin-dashboard#3 · 0 commenti · 1 reazione · 2 assegnatari · Indicizzata il 14/9/2026
Wire SPIFFE/SPIRE workload identity Aperta

enhancement

bobbylite/service-template#1 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
Add auth/authorization middleware Aperta

enhancement

bobbylite/service-template#2 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[BUG] `sandbox.filesystem.denyWrite` silently ignores rules containing a mid-path wildcard (Linux) Aperta

area:sandbox area:security bug has repro platform:linux

anthropics/claude-code#92684 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[FEATURE] Desktop browser preview: auto-allow RFC 6761 reserved TLDs (*.test) that resolve to loopback, like *.localhost Aperta

area:desktop area:permissions enhancement platform:windows

anthropics/claude-code#92698 · 2 commenti · 1 reazione · 0 assegnatari · Indicizzata il 14/9/2026
Worktree-isolation Bash check folds command substitutions in quoted-delimiter heredoc bodies but refuses braces there, though such bodies cannot expand Aperta

area:bash area:sandbox bug platform:macos

anthropics/claude-code#92699 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[BUG] Claude in Chrome: every Google site redirects to "Verify it's you" — Chrome DBSC refuses cookie refresh on extension-initiated navigation; passkey prompt never renders in background tab Aperta

area:chrome area:mcp bug has repro platform:macos

anthropics/claude-code#92703 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
Cloud routines (CCR) egress proxy blocks reaching third-party APIs — no user-configurable allowlist Aperta

area:networking area:routines enhancement platform:web

anthropics/claude-code#92706 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
Supported isolated auth and observable skill-to-agent dispatch for native skill evaluations Aperta

area:permissions area:skills question

anthropics/claude-code#92726 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[Bug] False positive security flags during legitimate cybersecurity testing on OpenPMIx Chiusa

area:model area:security bug needs-repro platform:macos

anthropics/claude-code#92727 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[Bug] DNS configuration changes trigger Claude API safety guardrails Chiusa

area:model bug needs-repro platform:linux

anthropics/claude-code#92728 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
Session opens in Auto Mode despite permissions.defaultMode: "default" set globally in ~/.claude/settings.json Aperta

area:permissions bug

anthropics/claude-code#92731 · 1 commento · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
Claude deleted user's irreplaceable personal photos with rm -rf before verifying files were moved Aperta

area:bash bug data-loss high-priority

anthropics/claude-code#92737 · 1 commento · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
Feature request: store MCP OAuth tokens separately from the Claude account credential (multi-account machines) Aperta

area:auth area:mcp enhancement

anthropics/claude-code#92748 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[Bug] Anthropic API Error: Claude 3.5 Sonnet Cyber Safeguards Blocking Legitimate Requests Aperta

api:anthropic area:model area:security bug duplicate platform:macos platform:vscode

anthropics/claude-code#92765 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
macOS: "access data from other apps" (SystemPolicyAppData) prompt recurs every session on the SAME version — grant stored session-scoped (desktop-bundled worker) Aperta

area:desktop area:packaging bug has repro platform:macos

anthropics/claude-code#92784 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
claude.ai connectors mount under connection UUIDs in Desktop local sessions, so `mcp__claude_ai_<name>__*` permission rules never match there (re-raising #77598, closed as stale) Aperta

area:desktop area:mcp area:permissions bug has repro platform:macos

anthropics/claude-code#92787 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[BUG] Workspace trust not persisted across sessions (Code tab, macOS 15.5) Aperta

area:desktop bug has repro platform:macos

anthropics/claude-code#92801 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[Bug] Overly broad safety filter flags legitimate telecom debugging as "Cyber" Aperta

area:model bug duplicate platform:macos platform:vscode

anthropics/claude-code#92807 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[FEATURE] `.agentsignore`: gitignore-syntax file for paths agents must never access Aperta

area:permissions area:security enhancement

anthropics/claude-code#92816 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[Bug] Bypass all permissions setting not respected during operations Aperta

area:permissions bug platform:macos

anthropics/claude-code#92817 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[Bug] Game design task terminated by safety classifier Aperta

area:model bug needs-repro platform:linux

anthropics/claude-code#92819 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[Cowork] Scheduled task runs deny mcp__workspace__bash and mcp__workspace__web_fetch by permission rule since the Sept 2 desktop update (interactive tasks unaffected) Aperta

area:cowork area:permissions bug has repro platform:windows regression

anthropics/claude-code#92833 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[BUG] MACOS Keychain: argv fallback for oversized OAuth credential payload (>4KB) itself fails silently ("pbt" error) during MCP OAuth login Aperta

area:auth area:mcp bug has repro platform:macos

anthropics/claude-code#92839 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
Auto-mode classifier: hard blocks are indistinguishable from soft blocks, and every remediation requires a keyboard the user may not have Aperta

area:permissions bug platform:linux

anthropics/claude-code#92840 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[Bug] False positive cyber security flag on local inference server connections Aperta

area:security bug needs-info platform:linux

anthropics/claude-code#92846 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[Feature Request] Add configurable session timeout settings for organization accounts Aperta

area:auth enhancement platform:windows

anthropics/claude-code#92852 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[Feature Request] Add passkey and password authentication options to reduce login friction Aperta

area:auth enhancement platform:windows

anthropics/claude-code#92854 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[Bug] Cyber Verification Program: Still flagged for basic tasks despite approval Aperta

api:anthropic area:auth area:model bug needs-info platform:windows

anthropics/claude-code#92876 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[Bug] Security regression false positive during game development Aperta

area:security bug needs-repro platform:macos

anthropics/claude-code#92894 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[BUG] sandbox.credentials.files protection can be bypassed on first access to a not-yet-existing deny-listed path Aperta

area:sandbox area:security bug has repro platform:linux

anthropics/claude-code#92901 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[BUG] Microsoft 365 connector unusable in Claude Code (works in Claude Desktop) Aperta

area:mcp bug platform:macos platform:vscode

anthropics/claude-code#92904 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[BUG] IS_DEMO still suppresses the workspace trust prompt in 2.1.263 — all hooks, statusLine and project permissions silently disabled, and /doctor has no trust check Aperta

area:hooks area:statusline bug has repro platform:macos

anthropics/claude-code#92911 · 1 commento · 3 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[Bug] False positive content moderation flag for legitimate game modding Aperta

area:model bug platform:windows

anthropics/claude-code#92917 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
All routes to claude.ai redirect to onboarding [BUG] Aperta

area:auth duplicate platform:linux

anthropics/claude-code#92923 · 1 commento · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[Bug] Anthropic API Error: Claude Opus 4.8 Cybersecurity Safeguards Blocking Legitimate Requests Aperta

api:anthropic area:model area:security bug duplicate platform:macos

anthropics/claude-code#92935 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
Desktop app: "Add a folder" prompt triggers logout, clears conversation/project list from UI (data confirmed intact on account via claude.ai web) Aperta

area:desktop bug platform:windows

anthropics/claude-code#92944 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
Claude infers permission to touch an explicitly forbidden folder from an unrelated general statement Aperta

area:model bug platform:windows

anthropics/claude-code#92947 · 3 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[Feature Request] Add /nuke command to delete client and server session copies on key compromise Aperta

area:security area:tui enhancement platform:macos platform:vscode

anthropics/claude-code#92955 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026
[Bug] Anthropic API Error: False-positive reasoning_extraction safeguard with Workflow tool plugin agentType Aperta

area:agents area:model area:plugins bug platform:macos

anthropics/claude-code#92956 · 1 commento · 0 reazioni · 0 assegnatari · Indicizzata il 14/9/2026

Vengono mostrati i 100 più recenti

Questa pagina elenca solo ciò che è stato indicizzato di recente. Il filtro avanzato contiene l'inventario completo, ristretto per linguaggio, difficoltà e durata.

Apri il filtro avanzato

Security Good First Issues

Segnali del gruppo

Vengono mostrati i 100 più recenti

Ricevi le nuove issue nella tua casella