R2R · Issues· 126 open

[Security] Stacked SQL Injection via Unquoted Index Name in Vector Index Creation Endpoint

[Security] SQL Injection via Unparameterized Filter Keys in Search Endpoint

[Security] Cross-user conversation IDOR

Feature: optional freshness verdict between retrieval and the agent's action (chunks + GraphRAG triples)

Feature: Episodic agent memory layer via Dakera alongside R2R document retrieval

Security: request for a private disclosure channel (unpatched authorization issue)

[Security] CRITICAL auth bypass (default admin superuser for unauthenticated requests) + JWT type confusion + password change doesn't revoke tokens

Docs suggestion: add a compact RAG failure mode taxonomy checklist for incident triage

The search fails on huge query

[Security][High] SQL injection in vector index management (create_index / delete_index)

Entity UUID Mismatch After Graph Pul

r2r-docs.sciphi.ai Website Down

R2R Documentation Main Site Is Down

Create a new Document documentation is wrong

OPEN_API_BASE