Issues · everruns/bashkit · GitHub

Labels Milestones New issue

feat: implement interceptor hooks system (before/after exec, tool, http, error)

#1235

· chaliy opened

on Apr 12, 2026

sec(network): SSRF via DNS rebinding — allowlist checks hostname string, not resolved IP

#1176

· chaliy opened

on Apr 9, 2026

sec(tool): ScriptedTool callback errors not sanitized — may leak internal state in tool output

#1172

· chaliy opened

on Apr 9, 2026

sec(interpreter): DEBUG trap fires before every simple command with no separate command budget

#1170

· chaliy opened

on Apr 9, 2026

sec(js): `mount()` API accepts arbitrary host paths without validation or warning

#1169

· chaliy opened

on Apr 9, 2026

sec(mcp): no request rate limiting or concurrent execution cap in MCP server

#1168

· chaliy opened

on Apr 9, 2026

sec(snapshot): integrity check uses public tag, not secret key — snapshots are forgeable

#1167

· chaliy opened

on Apr 9, 2026

sec(trace): redaction bypass via non-standard secret passing patterns

#1166

· chaliy opened

on Apr 9, 2026

sec(cli): no safety check when combining `--mount-rw` with MCP mode

#1165

· chaliy opened

on Apr 9, 2026

sec(template): `#each` re-evaluates data values as template directives, enabling variable exfiltration

#1164

· chaliy opened

on Apr 9, 2026

fix(expansion): `${var#./"$other_var"}` fails to strip when pattern mixes literals and quoted vars

#1161

· chaliy opened

on Apr 9, 2026

fix(expansion): `${@/#/prefix}` and `${@/%/suffix}` do not apply to positional params

#1160

· chaliy opened

on Apr 9, 2026