All issues

Search results

[Bug] Dashboard apiCall sends raw delegate private key in x-delegate-key header on every POST

bugSomething isn't workingSomething isn't working

Status: Open.

#941 In MystenLabs/MemWal;

· ShahMeerMurtaza opened on Sep 19, 2026

[Bug] POST /api/remember/bulk has no idempotency_key — retry mints duplicate paid WAL blobs

bugSomething isn't workingSomething isn't working

Status: Open.

#940 In MystenLabs/MemWal;

· ShahMeerMurtaza opened on Sep 19, 2026

OAuth 2.1: Authorization code consumed before validation enables DoS (live-confirmed 5/5 + 3/3)

Status: Open.

#939 In MystenLabs/MemWal;

· kiyeps opened on Sep 19, 2026

PATCH /api/vote lets any user permanently block another user's vote on a message (cross-chat vote row + broken existence check)

bugSomething isn't workingSomething isn't working

Status: Open.

#937 In MystenLabs/MemWal;

· imran8490 opened on Sep 19, 2026

[Bug]: withMemWal middleware violates LLM API schema specs by injecting mid-conversation system roles and non-alternating user turns

bugSomething isn't workingSomething isn't working

Status: Open.

#936 In MystenLabs/MemWal;

· lokopoko9090 opened on Sep 18, 2026

[Bug] Premature Math.floor in truncateToTokenBudget causes character loss and empty results on fractional budgets

Status: Open.

#935 In MystenLabs/MemWal;

· lokopoko9090 opened on Sep 18, 2026

[Security] Incomplete loopback sanitization in redactInternalUrls() leaks internal enclave/sidecar topology

Status: Open.

#934 In MystenLabs/MemWal;

· lokopoko9090 opened on Sep 18, 2026

[Bug] destroy() zeros privateKey in-place causing zero-key Ed25519 signature generation during in-flight async requests

Status: Open.

#933 In MystenLabs/MemWal;

· lokopoko9090 opened on Sep 18, 2026

[Bug] Race Condition & Idempotency Key Collision causing silent data loss on concurrent remember() calls

Status: Open.

#932 In MystenLabs/MemWal;

· lokopoko9090 opened on Sep 18, 2026

0.0.14-dev.0 advertises memwal_remember_status at cold start, but prod/staging relayers do not serve it

Status: Open.

#928 In MystenLabs/MemWal;

· harrymove-ctrl opened on Sep 16, 2026

Release hygiene: 0.0.13's changelog credits work that first ships in 0.0.14, and no package publishes a changelog to npm

Status: Open.

#927 In MystenLabs/MemWal;

· harrymove-ctrl opened on Sep 16, 2026

SDK request deadlines bound the response headers only, not the body read

Status: Open.

#926 In MystenLabs/MemWal;

· harrymove-ctrl opened on Sep 16, 2026