-
Notifications
You must be signed in to change notification settings - Fork 39
All issues
Issue creation is restricted in this repository
- #156 · nooga opened
on Jul 23, 2026
Issues
is:issue state:open
is:issue state:open
Search results
[Bug bounty] Windows fast path preserves stale launch-client attribution
bug-bountyFiled during the July 2026 Monk plugin bug bountyFiled during the July 2026 Monk plugin bug bountyStatus: Open.#272 In monk-io/monk-plugin;[Bug bounty] Custom agent path switch returns success with the old companion still running
bug-bountyFiled during the July 2026 Monk plugin bug bountyFiled during the July 2026 Monk plugin bug bountyver:v0.1.54Reported against Monk plugin v0.1.54Reported against Monk plugin v0.1.54Status: Open.#270 In monk-io/monk-plugin;[Bug bounty] workload.logs returns ok:true with no stopped indicator for a stopped workload, contradicting workload.status
bug-bountyFiled during the July 2026 Monk plugin bug bountyFiled during the July 2026 Monk plugin bug bountydeepDeep-dive bonus: +2pts for testing deploy/CI-CD/cluster/secrets features, not install/scriptingDeep-dive bonus: +2pts for testing deploy/CI-CD/cluster/secrets features, not install/scriptingver:v0.1.54Reported against Monk plugin v0.1.54Reported against Monk plugin v0.1.54Status: Open.#266 In monk-io/monk-plugin;[Bug bounty] [Private security disclosure] node identity private key - reported to security@monk.io
bug-bountyFiled during the July 2026 Monk plugin bug bountyFiled during the July 2026 Monk plugin bug bountyStatus: Open.#264 In monk-io/monk-plugin;[Bug bounty] capsule.schedule.update: invalid schedule inputs are not validated and the approval dialog hides silently-dropped values
bug-bountyFiled during the July 2026 Monk plugin bug bountyFiled during the July 2026 Monk plugin bug bountydeepDeep-dive bonus: +2pts for testing deploy/CI-CD/cluster/secrets features, not install/scriptingDeep-dive bonus: +2pts for testing deploy/CI-CD/cluster/secrets features, not install/scriptingver:v0.1.54Reported against Monk plugin v0.1.54Reported against Monk plugin v0.1.54Status: Open.#262 In monk-io/monk-plugin;[Bug bounty] secret.remove approval outlives its MCP call — destructive deletion executes minutes after the caller is told it timed out
bug-bountyFiled during the July 2026 Monk plugin bug bountyFiled during the July 2026 Monk plugin bug bountydeepDeep-dive bonus: +2pts for testing deploy/CI-CD/cluster/secrets features, not install/scriptingDeep-dive bonus: +2pts for testing deploy/CI-CD/cluster/secrets features, not install/scriptingver:v0.1.52Reported against Monk plugin v0.1.52Reported against Monk plugin v0.1.52Status: Open.#260 In monk-io/monk-plugin;[Bug bounty] unusable Windows bash stub suppresses Antigravity ensure hook
bug-bountyFiled during the July 2026 Monk plugin bug bountyFiled during the July 2026 Monk plugin bug bountyver:v0.1.54Reported against Monk plugin v0.1.54Reported against Monk plugin v0.1.54Status: Open.#258 In monk-io/monk-plugin;[Bug bounty] Antigravity cold-start hook is killed before readiness JSON
bug-bountyFiled during the July 2026 Monk plugin bug bountyFiled during the July 2026 Monk plugin bug bountyver:v0.1.54Reported against Monk plugin v0.1.54Reported against Monk plugin v0.1.54Status: Open.#257 In monk-io/monk-plugin;[Bug bounty] macOS launchd fast path regex-matches drifted auth configuration
bug-bountyFiled during the July 2026 Monk plugin bug bountyFiled during the July 2026 Monk plugin bug bountyver:v0.1.54Reported against Monk plugin v0.1.54Reported against Monk plugin v0.1.54Status: Open.#256 In monk-io/monk-plugin;[Bug bounty] valid non-object Antigravity config aborts a healthy launcher
bug-bountyFiled during the July 2026 Monk plugin bug bountyFiled during the July 2026 Monk plugin bug bountyver:v0.1.54Reported against Monk plugin v0.1.54Reported against Monk plugin v0.1.54Status: Open.#255 In monk-io/monk-plugin;[Bug bounty] Antigravity uninstall silently skips cleanup for apostrophe home paths
bug-bountyFiled during the July 2026 Monk plugin bug bountyFiled during the July 2026 Monk plugin bug bountyver:v0.1.54Reported against Monk plugin v0.1.54Reported against Monk plugin v0.1.54Status: Open.#254 In monk-io/monk-plugin;- Status: Open.#253 In monk-io/monk-plugin;