All issues

Search results

tests/test_filter.py: 7 tests assert a preview button the filter deliberately stopped emitting

Status: Open.

#620 In Wide-Moat/open-computer-use;

· Yambr opened on Aug 21, 2026

tests/patches has rotted while unrun: 16 failures from a fixture predating the current patch anchors

Status: Open.

#618 In Wide-Moat/open-computer-use;

· Yambr opened on Aug 21, 2026

settings-wrapper serves both internal routes unauthenticated when API_KEY is unset, and silently

Status: Open.

#612 In Wide-Moat/open-computer-use;

· Yambr opened on Aug 21, 2026

chat_id is substituted into the system prompt unvalidated, so a newline injects instructions

Status: Open.

#609 In Wide-Moat/open-computer-use;

· Yambr opened on Aug 21, 2026

a tokens-URL header sends the deployment's internal key out, and brings a credential back in

Status: Open.

#607 In Wide-Moat/open-computer-use;

· Yambr opened on Aug 21, 2026

a base-URL header redirects upstream calls while the deployment credential is still sent

Status: Open.

#605 In Wide-Moat/open-computer-use;

· Yambr opened on Aug 21, 2026

x-user-email is interpolated into an upstream header value with no validation

Status: Open.

#603 In Wide-Moat/open-computer-use;

· Yambr opened on Aug 21, 2026

chat_id is sanitised for the container name and not for the host mount path

Status: Open.

#601 In Wide-Moat/open-computer-use;

· Yambr opened on Aug 21, 2026

skills: an API-supplied description escapes the <available_skills> block into the system prompt

Status: Open.

#597 In Wide-Moat/open-computer-use;

· Yambr opened on Aug 21, 2026

skills: an API-supplied skill name reaches a Docker mount path unsanitised

Status: Open.

#595 In Wide-Moat/open-computer-use;

· Yambr opened on Aug 20, 2026

preview: model-written HTML renders in an iframe with no sandbox attribute

Status: Open.

#594 In Wide-Moat/open-computer-use;

· Yambr opened on Aug 20, 2026

NFR-SEC-48: the monotonic clock guards caches; the only real TTL is a guest-side sleep

Status: Open.

#572 In Wide-Moat/open-computer-use;

· Yambr opened on Aug 19, 2026