All issues

ChatGPT OAuth succeeds, models list loads, but chat fails with 400

#83

· thenetexperts opened

on Jun 26, 2026

[Security] Mercury Agent `run_command` safe-read shell redirection approval bypass allows unauthorized file writes

#82

· YLChen-007 opened

on Jun 21, 2026

[Security] Mercury `github_api` absolute URL confusion leaks `GITHUB_TOKEN` to attacker-controlled hosts

#81

· YLChen-007 opened

on Jun 21, 2026

[Security] Mercury Agent safe-read shell approval bypass allows environment variable disclosure via `echo $VAR`

#80

· YLChen-007 opened

on Jun 21, 2026

[Security] Mercury Agent `find -exec` bypasses shell approval and allows silent command execution

#77

· YLChen-007 opened

on Jun 18, 2026

[Security] Mercury `run_command` safe-read misclassification leaks environment variables

#76

· YLChen-007 opened

on Jun 18, 2026

[Security] Delegated sub-agents bypass Mercury shell approvals and execute arbitrary commands

#75

· YLChen-007 opened

on Jun 18, 2026

[Security] Restricted Mercury sub-agents can enumerate and halt sibling agents despite `allowedTools` constraints

#74

· YLChen-007 opened

on Jun 18, 2026

[Security] Mercury Agent authenticated `/bg` chat command bypasses Ask Me shell approval and executes arbitrary OS commands

#73

· YLChen-007 opened

on Jun 18, 2026

[Security] Mercury Agent `run_command` safe-read approval bypass allows unauthorized file writes via shell redirection

#72

· YLChen-007 opened

on Jun 18, 2026

[Security] Mercury Agent `run_command` safe-read auto-approval can be bypassed via `find -exec`

#71

· YLChen-007 opened

on Jun 18, 2026

Setup wizard crashes silently after GitHub step on Windows + Node 25

#64

· nspells-cyber opened

on May 23, 2026