odysseus · Issues· 1212 open

SSRF vulnerability in manage_endpoints agent tool — bypasses HTTP route validation

write_file (and bash-fallback writes) report success but produce 0-byte files on NFS-mounted volume

feat(podman): add Podman support with compose overlay, GPU overlay, and setup script

[Feature] Unified audio input and transcription workflow for Chat/Agent

Sandbox agent process execution behind one constrained Linux boundary

install: Fresh install and smoke-test coverage tracker

feat(storage): define first-class attachment references for tools and artifacts

SSRF via model endpoint URL — no scheme/host validation on POST /model-endpoints

SSE and Streamable HTTP MCP connections don't forward env headers — blocks Bearer-auth servers (e.g. Obsidian Local REST API)

Windows compatibility failures in local test suite

Agent prematurely stops during multi-step tool-call tasks

Add configurable tool approval mode

Stale stdio MCP sessions are never recovered for user-configured servers, and fail with an empty error

Static context-window table overrides the endpoint's actual serving context — silent truncation in long agent sessions

All-day events are stored and pushed one day early for users east of UTC