Issues

• [JS/TS] CVE-2024-27980: Model Windows batch spawning despite shell false

  BrokkAi/bifrost-packs#65 · Filter by author DavidBakerEffendi opened on Oct 8, 2026

• [Python] CVE-2023-27043: Model permissive email identity parsing

  BrokkAi/bifrost-packs#64 · Filter by author DavidBakerEffendi opened on Oct 8, 2026

• [Python] CVE-2023-24329: Model URL parsing and downstream authority disagreement

  BrokkAi/bifrost-packs#63 · Filter by author DavidBakerEffendi opened on Oct 8, 2026

• [Python] CVE-2007-4559: Model archive extraction without confinement

  BrokkAi/bifrost-packs#62 · Filter by author DavidBakerEffendi opened on Oct 8, 2026

• [Rust] CVE-2022-36113: Model alternate-registry archive corruption exposure

  BrokkAi/bifrost-packs#61 · Filter by author DavidBakerEffendi opened on Oct 8, 2026

• [Rust] CVE-2022-46176: Model SSH fetch without host-key verification

  BrokkAi/bifrost-packs#60 · Filter by author DavidBakerEffendi opened on Oct 8, 2026

• [Rust] CVE-2024-43402: Model trailing-character bypass of batch escaping

  BrokkAi/bifrost-packs#59 · Filter by author DavidBakerEffendi opened on Oct 8, 2026

• [Rust] CVE-2024-24576: Model Windows batch-file argument escaping

  BrokkAi/bifrost-packs#58 · Filter by author DavidBakerEffendi opened on Oct 8, 2026

• [Go] CVE-2021-33197: Model ReverseProxy header loss through chained proxies

  BrokkAi/bifrost-packs#57 · Filter by author DavidBakerEffendi opened on Oct 8, 2026

• [Go] CVE-2021-41771: Model untrusted dynamic-symbol-table parsing

  BrokkAi/bifrost-packs#56 · Filter by author DavidBakerEffendi opened on Oct 8, 2026

• [Go] CVE-2023-29409: Model large-RSA certificate verification exposure

  BrokkAi/bifrost-packs#55 · Filter by author DavidBakerEffendi opened on Oct 8, 2026

• [Go] CVE-2022-2879: Model unbounded archive-header parsing

  BrokkAi/bifrost-packs#54 · Filter by author DavidBakerEffendi opened on Oct 8, 2026

• [Go] CVE-2023-24538: Model JavaScript-template-literal interpolation

  BrokkAi/bifrost-packs#53 · Filter by author DavidBakerEffendi opened on Oct 8, 2026

• [Go] CVE-2022-30633: Model nested any-field XML recursion

  BrokkAi/bifrost-packs#52 · Filter by author DavidBakerEffendi opened on Oct 8, 2026

• [Go] CVE-2023-29406: Model untrusted Host-header injection

  BrokkAi/bifrost-packs#51 · Filter by author DavidBakerEffendi opened on Oct 8, 2026

• [Go] CVE-2023-39325: Model rapid-reset handler concurrency

  BrokkAi/bifrost-packs#50 · Filter by author DavidBakerEffendi opened on Oct 8, 2026

• Compile and release the reviewed result-use models for code-smells B4/B5

  enhancement
  BrokkAi/bifrost-packs#46 · Filter by author jbellis opened on Oct 8, 2026
  3

• Python stdlib: add constructor and logging.getLogger declarations for exact dispatch (bifrost-dev #4411)

  BrokkAi/bifrost-packs#37 · Filter by author jbellis opened on Oct 6, 2026
  1

• Implement and qualify JNDI LDAP filter-boundary RQL queries

  BrokkAi/bifrost-packs#27 · Filter by author DavidBakerEffendi opened on Oct 1, 2026

• Qualify Ruby runtime execution, reconstruction and descriptor ownership leads

  BrokkAi/bifrost-packs#23 · Filter by author DavidBakerEffendi opened on Oct 1, 2026

• Qualify PHP persistent taint, decode ordering and reconstruction boundaries

  BrokkAi/bifrost-packs#22 · Filter by author DavidBakerEffendi opened on Oct 1, 2026

• Qualify Rust standard-library unsafe initialization and ownership contracts

  BrokkAi/bifrost-packs#21 · Filter by author DavidBakerEffendi opened on Oct 1, 2026

• Qualify Go cryptographic use and concurrency ordering leads from papers

  BrokkAi/bifrost-packs#20 · Filter by author DavidBakerEffendi opened on Oct 1, 2026

• Qualify Python pickle provenance and tarfile extraction-filter state

  BrokkAi/bifrost-packs#19 · Filter by author DavidBakerEffendi opened on Oct 1, 2026
  1

• Qualify deferred Node command execution across JavaScript and TypeScript callers

  BrokkAi/bifrost-packs#18 · Filter by author DavidBakerEffendi opened on Oct 1, 2026