All issues

Bounty #36: receipt verifier trusts mutable expiry/action fields outside signature

#65

· vagdotdev opened

on Jul 4, 2026

Bounty #36: non-injective scope signing bytes allow receipt scope tuple rewrite

#64

· alan-provable opened

on Jun 29, 2026

Deploy Gate can be bypassed by opening protected-path PR as draft, then marking ready

#63

· stmr opened

on Jun 26, 2026

Bounty claim for #36: Deploy Gate draft PR bypass and scoped receipt signing ambiguity

#62

· snkk2x-collab opened

on Jun 18, 2026

Challenge submission: offline receipt gate trusts PR-controlled public key

#61

· jaxassistant55 opened

on Jun 18, 2026

Bypass #36: authorization token fields are mutable outside the Ed25519 signature

#60

· caydyan opened

on Jun 14, 2026

MCP Guard forwards JSON-RPC batch tools/call without policy enforcement

#59

· keilogic opened

on Jun 10, 2026

Bypass POC for #36: algorithm confusion in local pp verify

#58

· akuraposo opened

on Jun 4, 2026

Bounty claim: non-member GitHub session can approve deploy request by ID via API

#57

· sjj79475067-max opened

on Jun 4, 2026

Reference verifier accepts null required signed fields omitted from signature bytes

#54

· oathis opened

on May 31, 2026

Reference verifier accepts unsupported receiptVersion values as valid

#53

· oathis opened

on May 31, 2026

Reference verifier accepts non-Ed25519 signatures labeled as ed25519

#52

· endscene665 opened

on May 30, 2026