All issues

Search results

ACP never forwards token usage, so no ACP client can show tokens or cost

Status: Open.

#929 In Gitlawb/zero;

· Vasanthdev2004 opened on Aug 19, 2026

security: remediate GO-2026-6115 in github.com/ledongthuc/pdf

Status: Open.

#928 In Gitlawb/zero;

· jatmn opened on Aug 18, 2026

security: MCP stdio dispatcher misdelivers server requests as responses (Z-052)

Status: Open.

#924 In Gitlawb/zero;

· PierrunoYT opened on Aug 17, 2026

security: unbounded ACP frames and per-request goroutines (Z-017)

Status: Open.

#923 In Gitlawb/zero;

· PierrunoYT opened on Aug 17, 2026

security: token-leak bug in canonical redaction package (Z-050)

Status: Open.

#922 In Gitlawb/zero;

· PierrunoYT opened on Aug 17, 2026

security: non-atomic file writes in write_file and edit_file tools (Z-075)

Status: Open.

#921 In Gitlawb/zero;

· PierrunoYT opened on Aug 17, 2026

security: tar extraction can escape through chained symlink sequence (Z-001)

Status: Open.

#920 In Gitlawb/zero;

· PierrunoYT opened on Aug 17, 2026

Flaky: TestPoolDrainKillsStraggler synchronizes on QueueDepth, not on the worker being tracked

bugSomething isn't workingSomething isn't working

Status: Open.

#919 In Gitlawb/zero;

· PierrunoYT opened on Aug 17, 2026

LM Studio models can't be discovered and used.

bugSomething isn't workingSomething isn't working

Status: Open.

#917 In Gitlawb/zero;

· eli-l opened on Aug 17, 2026

no resume after a provider error mid-turn

Status: Open.

#913 In Gitlawb/zero;

· Svector-anu opened on Aug 16, 2026

security: 7 reachable govulncheck findings - 6 stdlib (fixed in go1.26.6) + GO-2026-6222 in golang.org/x/image

Status: Open.

#907 In Gitlawb/zero;

· PierrunoYT opened on Aug 14, 2026

Remove dead code remaining after #706

Status: Open.

#904 In Gitlawb/zero;

· euxaristia opened on Aug 14, 2026