Merged PRs | Hinotoi AI Security Notes

2026-05-05 · gadievron/raptor #308 · evidence

ci: run libexec wrapper tests

2026-05-02 · OWASP/APTS #47 · docs standards

docs: add autonomy downgrade matrix template

2026-05-02 · gadievron/raptor #257 · evidence

feat(project): add coverage threshold gate

2026-05-02 · gadievron/raptor #256 · evidence

feat(project): add grouped Markdown findings export

2026-05-02 · bytedance/deer-flow #2623 · security

[security] fix(upload): reject symlinked upload destinations

2026-05-01 · OWASP/APTS #46 · docs standards

docs: add shift handoff template appendix

2026-05-01 · HKUDS/nanobot #3569 · security

[security] fix(dingtalk): block SSRF in outbound media fetches

2026-05-01 · qwibitai/nanoclaw #2001 · security

[security] fix(container): prevent host file read/delete via container-controlled outbox paths

2026-04-30 · bytedance/deer-flow #2633 · security

[security] fix(sandbox): bind local Docker ports to loopback

2026-04-29 · HKUDS/OpenHarness #209 · security

[security] test(gateway): cover bridge spawn repro path

2026-04-28 · OWASP/APTS #42 · docs standards

docs: add authority delegation matrix template

2026-04-28 · labring/FastGPT #6826 · security

[security] fix(app): validate stored MCP tool URLs

2026-04-28 · gadievron/raptor #246 · security

fix(diagram): harden Mermaid sanitizer edge cases

2026-04-28 · HKUDS/OpenHarness #208 · security

[security] fix(commands): keep bridge local-only by default

2026-04-28 · HKUDS/OpenHarness #197 · security

[security] fix(feishu): contain inbound attachment filenames

2026-04-28 · HKUDS/OpenHarness #198 · security

[security] fix(plugins): reject traversal names on uninstall

2026-04-27 · gadievron/raptor #219 · security

[security] fix(web): enforce WebClient target scope across redirects

2026-04-27 · volcengine/OpenViking #1702 · security

[security] fix(bot): prevent image tool from reading host files outside sandbox

2026-04-26 · gadievron/raptor #223 · security

[security] feat(web): make secret redaction operator-configurable

2026-04-26 · OWASP/APTS #32 · docs standards

docs: add quick vendor review checklist

2026-04-26 · OWASP/APTS #30 · docs standards

docs: add conformance claim example

2026-04-26 · OWASP/APTS #29 · docs standards

docs: add reader path flowchart

2026-04-26 · OWASP/APTS #31 · docs standards

docs: add evidence package manifest example

2026-04-25 · berabuddies/agentflow #18 · security

fix: harden web API pipeline loading and request validation

2026-04-24 · gadievron/raptor #213 · security

test: strengthen LLM log secret redaction

2026-04-24 · OWASP/APTS #28 · docs standards

add acknowledgements affiliation disclaimer

2026-04-24 · gadievron/raptor #212 · tests ci

ci: cover remaining Python test files

2026-04-24 · gadievron/raptor #211 · tests ci

ci: expand Python test coverage

2026-04-23 · OWASP/APTS #24 · docs standards

add threshold configuration template appendix

2026-04-23 · OWASP/APTS #21 · docs standards

add human review record template appendix

2026-04-23 · OWASP/APTS #20 · docs standards

add advisory guidance for external tool connectors

2026-04-19 · OWASP/APTS #12 · docs standards

add evidence request checklist appendix

2026-04-19 · OWASP/APTS #11 · docs standards

add machine-readable conformance claim schema appendix

2026-04-19 · OWASP/APTS #10 · docs standards

add evidence package manifest appendix

2026-04-19 · OWASP/APTS #9 · docs standards

add machine-readable Rules of Engagement template appendix

2026-04-19 · OWASP/APTS #5 · security

clarify security professional getting started path

2026-04-18 · bytedance/deer-flow #2332 · engineering

require explicit opt-in for host-side document conversion

2026-04-17 · HKUDS/OpenHarness #156 · engineering

address code execution via untrusted plugin activation

2026-04-17 · HKUDS/OpenHarness #159 · security

isolate shared-chat sessions by sender

2026-04-16 · radareorg/radare2 #25831 · engineering

ignore symlinked imported notes

2026-04-16 · radareorg/radare2 #25830 · engineering

confine project deletion to `dir.projects`

2026-04-16 · volcengine/OpenViking #1447 · security

prevent unauthenticated remote bot control via OpenAPI HTTP routes

2026-04-16 · bytedance/deer-flow #2274 · security

validate bootstrap agent names before filesystem writes

2026-04-15 · HKUDS/OpenHarness #147 · engineering

secure default remote channel allowlists

2026-04-15 · volcengine/OpenViking #1451 · security

block ovpack import writes to forbidden control-plane targets

2026-04-14 · volcengine/OpenViking #1398 · security

isolate temp scope by user within an account

2026-04-13 · volcengine/OpenViking #1396 · engineering

protect global watch-task control files from non-root access

2026-04-13 · HKUDS/OpenHarness #127 · security

harden gateway slash command security

2026-04-13 · nesquena/hermes-webui #351 · security

isolate profile .env secrets on switch

2026-04-13 · bytedance/deer-flow #2161 · engineering