Issues

• Plan T2.2 missing: JSONC exclude under injected budget

  systemfsoftware/GitComet#58 · Filter by author systemfsoftware-maker opened on Aug 17, 2026
  1

• [info] PTY child inherits GitComet's full environment (info, standard for terminal emulators)

  systemfsoftware/GitComet#53 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [info] Detached-core credential flow: no integration test that catches URL/userinfo leaking through the ful

  systemfsoftware/GitComet#52 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [info] process.rs shell-script construction interpolates probe_log into unescaped single-quoted sh

  systemfsoftware/GitComet#51 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [low] format-patch export writes commit data to attacker-influenced dest without verifying symlink safety

  systemfsoftware/GitComet#50 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [low] wix installer auto-GUID='*' on components + verify-signed-artifact.ps1 only checks Status=Valid with

  systemfsoftware/GitComet#49 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [low] rustup install via curl pipe sh in cross-platform-tests.yml with no integrity check

  systemfsoftware/GitComet#48 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [low] build-apt-repo.sh interpolates Package-name from dpkg-deb directly into a filesystem path - maliciou

  systemfsoftware/GitComet#47 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [low] OSC 52 ClipboardStore handler is unconditional — relies entirely on alacritty_terminal library to ga

  systemfsoftware/GitComet#45 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [low] Vec::with_capacity sized from attacker-controlled diff line counts can amplify memory pressure

  systemfsoftware/GitComet#46 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [low] Clipboard write diagnostic file created with default umask on every copy

  systemfsoftware/GitComet#44 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [low] mergetool_mode.rs write_merged_output: fs::write to MERGED follows symlinks

  systemfsoftware/GitComet#43 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [low] Repo open: TOCTOU between fs::canonicalize and gix::open

  systemfsoftware/GitComet#41 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [low] Update endpoint trusts GitHub API JSON body for latest_version comparison without signature/checksum

  systemfsoftware/GitComet#40 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [low] Debug impl on AuthPromptState / AuthRetryOperation may leak reason/URL to UI/logs (verify)

  systemfsoftware/GitComet#38 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [low] validate_clone_url allows file:// scheme with no path/host validation, then runs `git clone file://.

  systemfsoftware/GitComet#39 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [low] Crash log location custom env override (XDG_STATE_HOME / HOME) inherits attacker-writable parent pat

  systemfsoftware/GitComet#37 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [low] platform_open passes user-reachable path to xdg-open / open / explorer.exe / rundll32.exe without --

  systemfsoftware/GitComet#35 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [low] Windows custom mergetool writes custom_cmd verbatim into .cmd file run via cmd.exe percent expansion

  systemfsoftware/GitComet#36 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [medium] macOS signing is opt-out via missing-secret heuristic, not via release-mode flag — unsigned binaries can publish to the official GitHub release

  systemfsoftware/GitComet#33 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [medium] Release flow accepts arbitrary tag input; no verification that the tag points to a vetted commit

  systemfsoftware/GitComet#32 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [medium] AUR deploy fetches SSH host keys at runtime over DNS and passes the SSH key passphrase in cleartext via expect

  systemfsoftware/GitComet#30 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [medium] AUR PKGBUILD auto-update trusts freshly-computed SHA256 of an unpinned download - no TOFU defense

  systemfsoftware/GitComet#29 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [medium] build-apt-repo.sh uses $repo_url from CLI without scheme allowlist - generates APT sources.list pointing at arbitrary URI

  systemfsoftware/GitComet#27 · Filter by author systemfsoftware-maker opened on Aug 16, 2026

• [medium] .cargo/config.toml forces -Ctarget-cpu=x86-64-v3 rustflag unconditionally for all x86_64 targets, including build scripts and proc-macros

  systemfsoftware/GitComet#26 · Filter by author systemfsoftware-maker opened on Aug 16, 2026