All issues

Search results

slugify returns empty string for non-ASCII-only input, producing a nameless file

Status: Open.

#20 In tigerless-labs/agent-memory;

· indahma opened on Sep 6, 2026

DecisionLedger.append is a non-atomic read-modify-write

Status: Open.

#19 In tigerless-labs/agent-memory;

· carteriy opened on Sep 6, 2026

import_into writes to attacker-controlled paths outside the store root

Status: Open.

#18 In tigerless-labs/agent-memory;

· laurail opened on Sep 6, 2026

Recall scope filter matches path prefixes without a directory separator

Status: Open.

#17 In tigerless-labs/agent-memory;

· viviyex opened on Sep 6, 2026

Store.correct() has a TOCTOU race between find and write

Status: Open.

#16 In tigerless-labs/agent-memory;

· fayevans opened on Sep 5, 2026