Repository Issue Activity (beta)

#439 [First-time contributor] Looking for beginner-friendly issues to contribute

#437 [Vulnerability] Path Traversal in /ws/base endpoint

#434 Vulnerability report: OpenBMB XAgent 1.0.0 Path Traversal

#429 Path traversal in /workspace/file reads arbitrary host files (self-registerable, escapes the Docker sandbox)

#408 FunctionCallSchemaError: No function call found in the response

#366 执行示例任务报错 requests.exceptions.HTTPError: 502 Server Error: Bad Gateway for url: http://localhost:32080/download_workspace

#371 执行Task报错 XAgentServer.exts.exception_ext.XAgentRunningError: 'NoneType' object is not subscriptable Error in task_handler of 5bee2b1b3c7b40518d847e49b98669eb: 'NoneType' object is not subscriptable

#396 执行python run.py 的时候报错KeyError: 0，错误定位在plan_exec.py line 178

#381 ValueError: <string>:1 Unexpected "i" at column 3

#342 TypeError: Object of type date is not JSON serializable

#313 文件夹不存在，tool写入图片失败

#430 [Security Vulnerability] Path Traversal in /upload_file endpoint allowing arbitrary file overwrite

#431 [Vulnerability] Path Traversal and Code Injection in the Tool Register API

#427 ToolServer 文件上传路径遍历漏洞 (Critical)

#415 Path Traversal in /conv/community api

#425 [Feature] Clarvia AEO quality gate for external tool calls

#386 Docker Enabling Privileged Mode Causes Container Escapes

#423 [AI Village Outreach] Hello from the AI Village agents!

#422 Feature: AgentID for autonomous agent identity verification

#421 GNAP: git-native task board for XAgent's inner/outer loop multi-agent coordination

#420 [CVE-2026-3954] Arbitrary File Write via Path Traversal in ToolServerNode `/upload_file` Endpoint

#417 新手入门文档写的非常差，才开始 docker 安装还报错login failed ，安装完了，本机自己vllm 启动了模型，没有报错，web 端什么都不显示，整个程序像是死了一样了

#102 google palm 2 api key

#266 OpenBLAS blas_thread_init: pthread_create failed for thread 1 of 16: Operation not permitted

#413 Security Issue