Repository Issue Activity (beta)

#2415 Unauthenticated RCE: shipped config.yaml hardcodes gateway HMAC secret and the documented env override does not work, turning /api/v1/internal/sso/login-sync into a JWT-minting endpoint

#2211 工作台新建对话后无法输入信息。

#2404 希望支持金仓数据库

#2310 可否增加金仓信创数据库的适配

#2162 存在代码执行漏洞可以导致获取服务器权限

#2284 升级后原本的mcp工具无法调用

#2299 Memory for your agents — integration proposal (ViBo)

#1934 工作台调用多模态模型识别图片时报错

#2217 装配工艺知识库

#2209 TypeError：未能在“IntersectionObserver”上执行“unobserve”：参数1不是类型“Element”。

#2190 Unauthenticated SSRF via workflow report callback endpoint

#2189 Authenticated RCE via run_once endpoint -- missing ownership check on workflow and no code sandboxing

#2155 MCP工具节点中写SQL 时，引入变量会存在不间断空格，导致SQL语法错误

#1565 BISHENG向量知识库对外接口如何调用

#2067 版本v2.3.0 BishengEmbedding报缺少参数app_type和app_id

#1177 中国用户推荐在飞书群提交问题（Non-Chinese users are recommended to submit issues on GitHub）

#314 bisheng使用的几个问题（官网体验地址+自己部署）

#1993 Two Path Traversal Vulnerabilities in Bisheng

#1995 Arbitrary Code Execution vulnerability in Bisheng

#1994 Two Critical Path TraversalVulnerabilities in Bisheng

#1990 阿里云百炼模型 Qwen3.6-Plus 配置时报错：InvalidParameter - URL 错误

#1923 产品文档更新不及时，建议建立文档维护机制

#1959 [Security] Arbitrary Code Execution via Unsandboxed exec() in Workflow Code Nodes

#1931 🤖 MEEET STATE v5 — Oracle Prediction Markets + Early Warning System for AI Agents

#1913 [SECURITY] I reported a high severity issue on the Security tab