Search results

All AI tools skip permission — can execute arbitrary destructive SQL

bugSomething isn't workingSomething isn't working

Status: Open.

#103 In EVWorth/sqlpilot;

· EVWorth opened on May 26, 2026

copilot-sdk dependency unpinned — non-reproducible builds

bugSomething isn't workingSomething isn't working

Status: Open.

#102 In EVWorth/sqlpilot;

· EVWorth opened on May 26, 2026

Query results export artifact accidentally committed to repo

bugSomething isn't workingSomething isn't working

Status: Open.

#101 In EVWorth/sqlpilot;

· EVWorth opened on May 26, 2026

30+ empty catch blocks silently swallow errors across the frontend

bugSomething isn't workingSomething isn't working

Status: Open.

#100 In EVWorth/sqlpilot;

· EVWorth opened on May 26, 2026

SSH password serialized to frontend — secret exposure risk

bugSomething isn't workingSomething isn't working

Status: Open.

#99 In EVWorth/sqlpilot;

· EVWorth opened on May 26, 2026

Potential deadlock from block_in_place + block_on pattern in AI tools and service

bugSomething isn't workingSomething isn't working

Status: Open.

#98 In EVWorth/sqlpilot;

· EVWorth opened on May 26, 2026

AI tool permission bypass: resolve_permission ignores conversation_id

bugSomething isn't workingSomething isn't working

Status: Open.

#97 In EVWorth/sqlpilot;

· EVWorth opened on May 26, 2026

Arbitrary file read/write with no path validation — path traversal vulnerability

bugSomething isn't workingSomething isn't working

Status: Open.

#96 In EVWorth/sqlpilot;

· EVWorth opened on May 26, 2026

SQL injection via format!() in kill_process and schema inspector

bugSomething isn't workingSomething isn't working

Status: Open.

#95 In EVWorth/sqlpilot;

· EVWorth opened on May 26, 2026

.unwrap() panic in AiService — backend crash on session race condition

bugSomething isn't workingSomething isn't working

Status: Open.

#94 In EVWorth/sqlpilot;

· EVWorth opened on May 26, 2026

Production safety check is completely non-functional — missing field in Rust model

bugSomething isn't workingSomething isn't working

Status: Open.

#93 In EVWorth/sqlpilot;

· EVWorth opened on May 26, 2026

E2E test suite runs zero tests — playwright config points to wrong directory

bugSomething isn't workingSomething isn't working

Status: Open.

#92 In EVWorth/sqlpilot;

· EVWorth opened on May 26, 2026