Search results

Security Assessment: 2 CRITICALs, 9 HIGHs in V3 shipped code — Sprint 0-3 fix plan

Status: Open.

#1660 In ruvnet/ruflo;

· proffesor-for-testing opened on Apr 28, 2026

guidance ab-test: default executor cannot swap CLAUDE.md between Config A/B (zero-delta by design)

Status: Open.

#1652 In ruvnet/ruflo;

· ronmikailov opened on Apr 27, 2026

guidance: subcommand short flags (-t, -c) ignored on lazy-registered commands

Status: Open.

#1651 In ruvnet/ruflo;

· ronmikailov opened on Apr 27, 2026

Structured format for coordination rules between agents

Status: Open.

#1627 In ruvnet/ruflo;

· david-steel opened on Apr 18, 2026

memory stats should show which embedding provider is active

Status: Open.

#1622 In ruvnet/ruflo;

· marioja opened on Apr 17, 2026

VSCode GitHub Copilot chat errors on .claude/settings copy.json

Status: Open.

#1616 In ruvnet/ruflo;

· marioja opened on Apr 16, 2026

sec(deps): multiple @claude-flow/* packages ship outdated vitest devDependencies with moderate CVE chain (esbuild → vite)

Status: Open.

#1609 In ruvnet/ruflo;

· JLMA-Agentic-Ai opened on Apr 14, 2026

sec(deps): @claude-flow/security@3.0.0-alpha.1 ships tar <=7.5.10 transitively (6 HIGH CVEs via bcrypt → @mapbox/node-pre-gyp)

Status: Open.

#1608 In ruvnet/ruflo;

· JLMA-Agentic-Ai opened on Apr 14, 2026

Windows Codex: first memory MCP tool call closes stdio transport after successful startup

Status: Open.

#1606 In ruvnet/ruflo;

· Tovli opened on Apr 14, 2026

Bug: browser_* MCP tools registered unconditionally — spawnSync agent-browser ENOENT

Status: Open.

#1605 In ruvnet/ruflo;

· Tovli opened on Apr 14, 2026

CLI and MCP memory tools write to different databases (.swarm/memory.db vs .claude-flow/memory/store.json)

Status: Open.

#1604 In ruvnet/ruflo;

· Tovli opened on Apr 13, 2026

Issues found in github-project-management by skills.sh

Status: Open.

#1574 In ruvnet/ruflo;

· zadigeki opened on Apr 9, 2026