All issues

Search results

SYSTEM_PROMPT collapses all paragraph breaks into a run-on string

Status: Open.

#47 In CopilotKit/openbot;

· arpan7sarkar opened on Aug 20, 2026

Unsafe user message content parsing causes React transcript crashes

Status: Open.

#44 In CopilotKit/openbot;

· arpan7sarkar opened on Aug 20, 2026

Feature request: ChatGPT subscription OAuth for model access

Status: Open.

#41 In CopilotKit/openbot;

· heavensnight0729 opened on Aug 20, 2026

Possible by not specifying a USER, a program in the container may run as 'root' in Dockerfile

Status: Open.

#39 In CopilotKit/openbot;

· begininvoke opened on Aug 20, 2026

An agent endpoint check is bypassed by a redirect, at registration and on every run

Status: Open.

#36 In CopilotKit/openbot;

· beardthelion opened on Aug 20, 2026

Any signed-in user can act as any Bot: canRunAgent is defined, tested, and never called

Status: Open.

#35 In CopilotKit/openbot;

· beardthelion opened on Aug 20, 2026

A bot id from the URL becomes a filesystem path, so any signed-in user can delete directories in the computer container

Status: Open.

#29 In CopilotKit/openbot;

· beardthelion opened on Aug 20, 2026

A deny rule that answers with a non-boolean silently does not deny

Status: Open.

#26 In CopilotKit/openbot;

· beardthelion opened on Aug 20, 2026

Navigation floor misses every IPv6 spelling of a private address, including cloud metadata

Status: Open.

#25 In CopilotKit/openbot;

· beardthelion opened on Aug 20, 2026

Dependency Dashboard

Status: Open.

#2 In CopilotKit/openbot;

· renovate opened on Aug 17, 2026