Issues

• RUSTSEC-2026-0020: Guest-controlled resource exhaustion in WASI implementations

  CortexLM/cortex-code#220 · Filter by author github-actions opened on Mar 27, 2026

• RUSTSEC-2026-0021: Panic adding excessive fields to a wasi:http/types.fields instance

  CortexLM/cortex-code#221 · Filter by author github-actions opened on Mar 27, 2026

• RUSTSEC-2026-0067: unpack_in can chmod arbitrary directories by following symlinks

  CortexLM/cortex-code#218 · Filter by author github-actions opened on Mar 27, 2026

• RUSTSEC-2026-0022: Panic when dropping a [Typed]Func::call_async future

  CortexLM/cortex-code#219 · Filter by author github-actions opened on Mar 27, 2026

• RUSTSEC-2026-0049: CRLs not considered authoritative by Distribution Point due to faulty matching logic

  CortexLM/cortex-code#216 · Filter by author github-actions opened on Mar 27, 2026

• RUSTSEC-2026-0068: tar-rs incorrectly ignores PAX size headers if header size is nonzero

  CortexLM/cortex-code#217 · Filter by author github-actions opened on Mar 27, 2026

• RUSTSEC-2026-0044: AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN

  CortexLM/cortex-code#214 · Filter by author github-actions opened on Mar 27, 2026

• RUSTSEC-2026-0037: Denial of service in Quinn endpoints

  CortexLM/cortex-code#215 · Filter by author github-actions opened on Mar 27, 2026

• RUSTSEC-2026-0048: CRL Distribution Point Scope Check Logic Error in AWS-LC

  CortexLM/cortex-code#213 · Filter by author github-actions opened on Mar 27, 2026

• RUSTSEC-2026-0047: PKCS7_verify Signature Validation Bypass in AWS-LC

  CortexLM/cortex-code#211 · Filter by author github-actions opened on Mar 27, 2026

• RUSTSEC-2026-0045: Timing Side-Channel in AES-CCM Tag Verification in AWS-LC

  CortexLM/cortex-code#212 · Filter by author github-actions opened on Mar 27, 2026

• RUSTSEC-2026-0046: PKCS7_verify Certificate Chain Validation Bypass in AWS-LC

  CortexLM/cortex-code#210 · Filter by author github-actions opened on Mar 27, 2026

• [BUG] [v0.0.7] resume_picker.rs set_filter(None) does not clear filter - selected_index not reset

  CortexLM/cortex-code#196 · Filter by author ST-Saurabh opened on Feb 20, 2026

• [BUG] [v0.0.7] resume_picker.rs set_filter(None) does not clear filter

  CortexLM/cortex-code#195 · Filter by author saurabhp643 opened on Feb 20, 2026

• [BUG] [v0.0.7] matches_pattern() silently ignores patterns with multiple wildcards in HookDispatcher

  CortexLM/cortex-code#192 · Filter by author saurabhp1801 opened on Feb 19, 2026

• [BUG] [v0.0.7] files/read and files/tree skip allowed-root validation

  CortexLM/cortex-code#191 · Filter by author wltt1004 opened on Feb 19, 2026

• [BUG] [v0.0.7] websocket Auth message marks session authenticated with hardcoded user id

  CortexLM/cortex-code#190 · Filter by author wltt1004 opened on Feb 19, 2026

• [BUG] [v0.0.7] app-server router does not enforce configured auth middleware

  CortexLM/cortex-code#189 · Filter by author wltt1004 opened on Feb 19, 2026

• [BUG] [v0.0.7] \ multi-root mode: \, \, \, and \ all bypass \ — silent no-ops and resource leaks

  CortexLM/cortex-code#187 · Filter by author AnticsDecoded opened on Feb 19, 2026

• [BUG] [v0.0.7] truncate_text() in summarizer.rs panics on multi-byte UTF-8 due to byte-index slicing

  CortexLM/cortex-code#186 · Filter by author saurabhp643 opened on Feb 18, 2026

• [BUG] [v0.0.7] substitute_env() allows env var value injection via String::replace on mutating result

  CortexLM/cortex-code#176 · Filter by author CaptnCompile opened on Feb 18, 2026

• [BUG] [v0.0.7] CORTEX_CONFIG_DIR/DATA_DIR/CACHE_DIR env overrides don't resolve relative paths, unlike CORTEX_HOME

  CortexLM/cortex-code#175 · Filter by author CaptnCompile opened on Feb 18, 2026

• [BUG] [v0.0.7] locked_read_modify_write() loses flock after atomic_write replaces file inode via rename

  CortexLM/cortex-code#174 · Filter by author CaptnCompile opened on Feb 18, 2026

• [BUG] [v0.0.7] --full-auto CLI flag uses AskForApproval::Never instead of OnFailure, bypassing sandbox escalation

  CortexLM/cortex-code#173 · Filter by author CaptnCompile opened on Feb 18, 2026

• [BUG] [v0.0.7] create_client_with_timeout() caps read_timeout at 60s, causing premature timeout for streaming LLM clients

  CortexLM/cortex-code#172 · Filter by author CaptnCompile opened on Feb 18, 2026