Search results

security: [HIGH] Unsafe eval pattern in cloud_headless_env parsing

Status: Open.

#2465 In OpenRouterTeam/spawn;

· louisgv opened on Mar 10, 2026

security: [HIGH] API tokens visible in process list via curl command-line arguments

Status: Open.

#2464 In OpenRouterTeam/spawn;

· louisgv opened on Mar 10, 2026

security: [HIGH] curl|bash pattern without signature verification in install.sh

Status: Open.

#2463 In OpenRouterTeam/spawn;

· louisgv opened on Mar 10, 2026

security: [HIGH] GitHub token exposure via temporary files with race condition

Status: Open.

#2462 In OpenRouterTeam/spawn;

· louisgv opened on Mar 10, 2026

security: [HIGH] Potential command injection via TERM variable terminal escape sequences

Status: Open.

#2461 In OpenRouterTeam/spawn;

· louisgv opened on Mar 10, 2026

security: [HIGH] Command injection via unsanitized model ID in GCP provider

pending-reviewIssue awaiting initial reviewIssue awaiting initial review

security-review-requiredSecurity review found critical/high issues - changes requiredSecurity review found critical/high issues - changes required

Status: Open.

#2460 In OpenRouterTeam/spawn;

· louisgv opened on Mar 10, 2026

Cloud Provider Wishlist: Vote to add your favorite cloud

discovery-teamIssues managed by the discovery teamIssues managed by the discovery team

safe-to-workSecurity triage: safe for automated processingSecurity triage: safe for automated processing

Status: Open.

#1183 In OpenRouterTeam/spawn;

· la14-1 opened on Feb 15, 2026