HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted

HKUDS OpenHarness prior to PR #147 remediation contains an insecure default configuration vulnerability where remote channels inhe

HKUDS OpenHarness prior to PR #156 remediation exposes plugin lifecycle commands including /plugin install, /plugin enable, /plugi

HKUDS OpenHarness prior to PR #159 remediation contains a session key derivation vulnerability that allows authenticated participa

OpenHarness before commit bd4df81 contains a server-side request forgery vulnerability in the web_fetch and web_search tools that

OpenHarness before commit bd4df81 contains a permission bypass vulnerability that allows attackers to read sensitive files by exp

OpenHarness prior to commit dd1d235 contains a path traversal vulnerability that allows remote gateway users with chat access to r

OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows remote gateway users with chat access t