Issues - metona-ai-desktop - Gitea: Git with a cup of tea

MetonaTeam/metona-ai-desktop

Labels Milestones New Issue

[P1/高] openai-format tool 消息 content 可能被赋为 undefined，导致 API 400 ???LLM???

opened 2026-07-21 21:55:53 +08:00 by thzxx

[P1/高] sse-stream flushToolCallBuffer 静默丢弃 JSON 解析失败的工具调用 ???LLM???

opened 2026-07-21 21:55:53 +08:00 by thzxx

[P1/高] BaseAdapter getFetchSignal 每次新建 timer 未清理，导致 timer 泄漏 ???LLM???

opened 2026-07-21 21:55:52 +08:00 by thzxx

[P1/高] BaseAdapter mapError 字符串匹配 401/429，会误匹配 URL 中的数字 ???LLM???

opened 2026-07-21 21:55:51 +08:00 by thzxx

[P1/高] CodeSearchTool ripgrep pattern 未转义，可注入命令行选项 ???????????

opened 2026-07-21 21:55:50 +08:00 by thzxx

[P1/高] SearchFilesTool walkDir 递归无深度限制，可触发栈溢出或长时间阻塞 ???????

opened 2026-07-21 21:55:49 +08:00 by thzxx

[P1/高] DeleteFileTool TOCTOU 竞态，存在检查与删除之间可被替换 ???????????

opened 2026-07-21 21:55:49 +08:00 by thzxx

[P1/高] GitDiffTool pathspec 未校验工作空间内，可读取任意仓库差异 ???????????

opened 2026-07-21 21:55:48 +08:00 by thzxx

[P1/高] ConfirmationHook waitForConfirmation 超时竞态条件 ???IPC??

opened 2026-07-21 21:55:47 +08:00 by thzxx

[P1/高] AuditLogHook 未 try-catch，异常会中断工具执行链 ???????

opened 2026-07-21 21:55:46 +08:00 by thzxx

[P1/高] PromptInjectionDefender 未检测 Unicode 同形字符与零宽字符 ???????Agent??

opened 2026-07-21 21:55:45 +08:00 by thzxx

[P1/高] PromptInjectionDefender 单词边界缺失，关键词易被绕过 ???????Agent??

opened 2026-07-21 21:55:45 +08:00 by thzxx

[P1/高] PolicyEngine JSON.stringify 后正则匹配易被绕过 ???????????

opened 2026-07-21 21:55:44 +08:00 by thzxx

[P1/高] Sandbox scanCode 漏掉 require('fs') 和动态 import，可绕过沙箱 ???????????

opened 2026-07-21 21:55:43 +08:00 by thzxx

[P1/高] ToolRegistry timeoutMs 为 undefined 时导致 0ms 立即触发超时 ???????

opened 2026-07-21 21:55:42 +08:00 by thzxx

[P1/高] ToolRegistry 工具超时后 Promise 未取消，导致资源泄漏 ???????

opened 2026-07-21 21:55:41 +08:00 by thzxx

[P0/严重] HttpRequestTool 未防御 SSRF，可访问内网与云元数据服务 ????????????

opened 2026-07-21 21:55:41 +08:00 by thzxx

[P0/严重] RunCommandTool env 透传 process.env，子进程可读取所有 API keys ????????????

opened 2026-07-21 21:55:40 +08:00 by thzxx

[P0/严重] RunCommandTool 仍使用 exec 而非 execFile，违反硬性约束 ????????????

opened 2026-07-21 21:55:39 +08:00 by thzxx

[P0/严重] preload.ts contextBridge 失败时降级到 globalThis 赋值削弱渲染进程隔离 ????????IPC??

opened 2026-07-21 21:55:38 +08:00 by thzxx

1 2 3