All issues

Search results

Mapping an agentic control set into OpenCRE: link targets and two scope questions

Status: Open.

#1045 In OWASP/OpenCRE;

· imran-siddique opened on Aug 24, 2026

Deferred from #586: graph-link pruning + ga_standards filtering for per-user resource selection

Status: Open.

#1043 In OWASP/OpenCRE;

· skypank-coder opened on Aug 23, 2026

DiffParser silently drops or misattributes diffs for non-ASCII / space-containing file paths

Status: Open.

#1032 In OWASP/OpenCRE;

· DevPatils opened on Aug 21, 2026

Implement opportunistic local GA fetch from prod (RFC merged)

Status: Open.

#1026 In OWASP/OpenCRE;

· northdpole opened on Aug 19, 2026

Module C DbKnowledgeSource reads knowledge_queue without row locking — unsafe for concurrent consumers

Status: Open.

#1025 In OWASP/OpenCRE;

· manshusainishab opened on Aug 18, 2026

OAuth /rest/v1/callback continues after Flask session state mismatch (missing return)

Status: Open.

#1021 In OWASP/OpenCRE;

· shiwani42 opened on Aug 16, 2026

REST 404s return generic "Resource Not found" and drop abort() descriptions

Status: Open.

#1020 In OWASP/OpenCRE;

· shiwani42 opened on Aug 16, 2026

Add AVE (Agentic Vulnerability Enumeration) mappings — Batch 1 (3 pilot mappings)

Status: Open.

#1017 In OWASP/OpenCRE;

· chaksaray opened on Aug 15, 2026

Add AISVS 1.0 mappings

Status: Open.

#1016 In OWASP/OpenCRE;

· ottosulin opened on Aug 14, 2026

Add OWASP Top 10 for LLM Applications 2026 as a mapped resource

Status: Open.

#1015 In OWASP/OpenCRE;

· rocklambros opened on Aug 14, 2026

Feature: MCP server exposing REST API with identical authz (incl. MyOpenCRE)

good first issueGood for newcomersGood for newcomers

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#1003 In OWASP/OpenCRE;

· northdpole opened on Aug 2, 2026

maintainer: drop SQLite — Postgres-only OpenCRE (Makefile, CI, local cache)

Status: Open.

#982 In OWASP/OpenCRE;

· northdpole opened on Jul 15, 2026