My reported Bugs and security vulnerabilities. The Activities page has the project-level summary.
| Project | Finding | Status |
|---|---|---|
| zip-rs/zip2CVE-2026-115907 |
Attacker-controlled ZIP64 size causes denial of service in legacy ZIP extraction
|
Fixed |
| qsChangelog |
Repeated strictMerge conflicts can cause excessive nesting
|
Fixed |
| Git LFS#6346 |
Duplicate Batch API objects cause Git LFS to crash
|
Confirmed |
| qs#619 |
Bracket-tail text is silently discarded when parsing query keys
|
Reported |
| python-multipartPR #325 |
Incomplete multipart uploads leave file writers open
|
Reported |
| libyangGHSA-g4fc-jhgv-f3pc |
XPath string conversion of empty anydata or anyxml can cause a NULL-pointer dereference
|
Fixed |
| libyangGHSA-jq97-j23h-2vqw |
Cross-context anydata XML duplication can cause a use-after-free
|
Fixed |
| libarchive#3417 |
ISO9660 cleanup can dereference a NULL path table after allocation failure
|
Fixed |
| Tmux-Rs#144 |
Rust utf8_rpadcstr writes too many leading spaces
|
Reported |
| Tmux-Rs#145 |
Rust cmd_template_replace corrupts multi-byte replacement strings
|
Reported |
| Tmux-Rs#142 |
Rust utf8_strvis processes the final UTF-8 continuation byte twice
|
Reported |
| Tmux-Rs#143 |
Rust colour_byname mishandles mixed-case gray/grey color names
|
Reported |
| Port-Libyaml#5 |
Rust port checks max file size before libyaml EOF early return in yaml_parser_update_buffer
|
Reported |
| Port-Giflib#8 |
Rust port returns early for negative x in GifDrawText8x8
|
Reported |
| Port-Giflib#6 |
Rust port returns early for negative x in GifDrawRectangle
|
Reported |
| Port-Giflib#7 |
Rust port returns early for negative x in GifDrawBox
|
Reported |
| Port-Libjson#5 |
Rust port misses upper-bound length check in json_object_set_string_len function
|
Reported |
| Port-Cjson#6 |
cJSON_ParseWithOpts("1e", ..., 0) differs between C and Rust port
|
Reported |
| Port-Cjson#7 |
64-digit number is accepted by C API but rejected by Rust port
|
Reported |
| Tmux-Rs#141 |
attributes_tostring leaves trailing comma unlike tmux C implementation
|
Confirmed |
| Node.jsPR #61233 |
Incorrect rmSync error messages for non-ASCII paths
|
Fixed |
| SWC#11045 |
ES5 target breaks TDZ semantics: missing ReferenceError for let access before initialization
|
Reported |
| SWC#11046 |
ES5 generator transform produces extra function values when yielding nested object
|
Fixed |
| SWC#11047 |
ES5 destructuring transform drops array hole and shifts default value assignment
|
Fixed |
| SWC#11048 |
Default values in async function array destructuring miscompiled in ES5 target
|
Fixed |
| SWC#11049 |
ES5 async array destructuring awaited value replaced with pending Promise
|
Fixed |
| SWC#11050 |
ES5 async short-circuit assignment and labeled break miscompiled causing wrong control flow
|
Fixed |
| SWC#11051 |
ES5 object destructuring assignment in conditional miscompiled returns wrong property value
|
Fixed |
| SWC#11052 |
ES5 async method transform drops write-back for compound assignment to this property across await
|
Fixed |
| Babel#17502 |
Destructuring ...rest produces subclass instance instead of plain Array
|
Fixed |
| SWC#11039 |
Object rest over Proxy loses properties due to extra getOwnPropertyDescriptor on excluded keys
|
Fixed |
| SWC#11040 |
ES5 target: object assignment with rest evaluates rest before listed properties
|
Fixed |
| Tmux-Rs#64 |
tmux-rs does not expand #(whoami) in status-right
|
Fixed |
| Tmux-Rs#48 |
rename-window and rename-session add trailing garbage bytes
|
Fixed |
| Tmux-Rs#50 |
resize-pane directions -D and -U do not work as expected
|
Fixed |
| Tmux-Rs#51 |
synchronize-panes does not work correctly in tmux-rs
|
Fixed |
| Tmux-Rs#52 |
display-message shows %s-invalid-utf8 for pane index/title expansions
|
Fixed |
| Tmux-Rs#53 |
Parsing Issue: tmux-rs rejects -s but accepts -S for new-session, unlike real tmux
|
Fixed |
| Zig Translate-C#24010 |
translate-c generates Invalid Pointer Cast for (int *)1
|
Confirmed |
| Zig Translate-C#23987 |
translate-c applies bitwise NOT to bool, causing type error in Zig
|
Confirmed |
| Zig Translate-C#23975 |
translate-c incorrectly lowers (expr1, bool_expr) as bool, causing assignment to int to fail
|
Confirmed |
| C2Rust#1236 |
Compound enum array translation fails to build in Rust
|
Fixed |
| C2Rust#1237 |
Pointer decrement on a struct field uses an incorrect offset
|
Fixed |
| C2Rust#1238 |
Array-to-void-pointer cast produces invalid Rust code
|
Fixed |
| C2Rust#1239 |
Packed-field translation emits an unsafe reference (E0793)
|
Fixed |
| C2Rust#1240 |
Volatile pointer compound literal produces an invalid Rust cast
|
Fixed |
| C2Rust#1231 |
Comparing distinct compound literals produces the wrong result
|
Fixed |
| C2Rust#1233 |
Anonymous enum in a union inside a struct crashes transpilation
|
Fixed |
| C2Rust#1234 |
Macro-generated compound literal with anonymous enum crashes transpilation
|
Fixed |
| Zig Translate-C#23827 |
zig translate-c Incorrectly Converts Non-Variadic Function Pointer to Variadic
|
Confirmed |
| CxGo#101 |
cxgo Mistranslates C Function Pointer causing Runtime Crash in Transpiled Go Code
|
Confirmed |
| C2Rust#1217 |
Array-to-pointer decay extends a value's lifetime incorrectly
|
Fixed |
| TinyGo#4819 |
TinyGo Panics on Generic Type Aliases
|
Fixed |
| Babel#17190 |
Babel incorrectly transpiles BigInt exponentiation (**) into Math.pow(), causing a TypeError
|
Reported |
| Zig Translate-C#23283 |
Zig translate-c Incorrectly Converts Function Pointers, Leading to Variadic Mismatch Error
|
Confirmed |
| TinyGo#4816 |
TinyGo Panics on Nil Pointer Dereference in Map Lookup, Unlike Standard Go
|
Reported |
| Go2Hx#230 |
go2hx Incorrectly Iterates Over nil Pointer to Array Instead of Panicking
|
Fixed |
| Go2Hx#231 |
go2hx Fails to Capture and Process Channel Data, Producing Empty Output
|
Fixed |
| Go2Hx#232 |
go2hx Fails to Detect Ambiguous Interface Method Implementation, Allowing Invalid Type Conversion
|
Fixed |
| CxGo#93 |
cxgo Fails to Recognize max_align_t from <stddef.h>
|
Confirmed |
| CxGo#95 |
cxgo Crashes When Translating _Complex int Type
|
Confirmed |
| CxGo#96 |
cxgo Generates Out-of-Bounds Pointer for One-Past-the-End Array Access for C
|
Confirmed |
| CxGo#97 |
cxgo Incorrectly Converts Char Array Initialization, Causing Go Type Mismatch
|
Confirmed |
| CxGo#98 |
cxgo Fails to Preserve const for External Constant Variables
|
Confirmed |
| CxGo#99 |
cxgo Fails to Translate NULL Function Pointer, Causing Invalid Function Conversion and Segmentation Fault
|
Confirmed |
| CxGo#100 |
cxgo Misses Declared Variables Inside switch Blocks in C
|
Confirmed |
| CxGo#90 |
cxgo Generates Invalid Address-Taking Operation for String Literal Array
|
Confirmed |
| CxGo#91 |
cxgo fails to translate switch-based loop unrolling
|
Confirmed |
| CxGo#92 |
cxgo Fails to Print Integer Value with %zu Format Specifier
|
Confirmed |
| C2Rust#1208 |
max_align_t becomes f128, causing a Rust compilation error
|
Fixed |
| Go Compiler#72844 |
len(*f()) fails to panic when f() returns a nil array pointer
|
Fixed |
| TinyGo#4786 |
Inconsistent Behavior with len on Nil Array Pointer in tinygo
|
Reported |
| Go2Hx#225 |
Double Pointer Reassignment Produces Incorrect Output in translated haxe
|
Fixed |
| Go2Hx#226 |
Tuple Assignment with Struct Pointer Yields Incorrect Output in translated haxe
|
Fixed |
| Go2Hx#222 |
Go2Hx incorrectly translates len(*nilPtrToArray) resulting in 0 instead of the expected array length
|
Fixed |
| Zig Translate-C#22964 |
Casting bool to pointer type results in invalid zig
|
Confirmed |
| Zig Translate-C#22148 |
translate-c Fails to Translate Anonymous Enum Usage
|
Confirmed |
| C2Rust#1184 |
Const variable is translated as mutable static storage
|
Fixed |
| Zig Translate-C#22139 |
translate-c Misinterprets Address of Compound Literal for Struct as Immutable
|
Confirmed |
| Zig Translate-C#22136 |
translate-c Runtime Divergence while comparing String Literals and Compound Literals
|
Confirmed |
| C2Rust#1171 |
Struct initialization with expressions fails transpilation
|
Fixed |
| C2Rust#1168 |
Enum compound literals fail to translate
|
Fixed |
| C2Rust#1165 |
Increment and decrement in compound literals fail translation
|
Fixed |
| C2Rust#1166 |
Compound literal pointer mutability produces invalid Rust code
|
Fixed |
| Zig Translate-C#22045 |
zig translate-c Type Propagation Error for Nullable Pointer ([*c]) Dereferencing and Address Calculation in Zig
|
Confirmed |
| Go2Hx#185 |
go2hx Incorrectly Evaluates Function Pointer Comparisons, Leading to Inconsistent Results
|
Fixed |
| Go2Hx#186 |
Incorrect Handling of Nil Pointer Conversion for Array Types in go2hx Translation
|
Fixed |
| Go2Hx#187 |
Inaccurate Recovery from Double-panic in Translated Haxe Code
|
Fixed |
| Go2Hx#188 |
Recover Called Directly in defer Statement Does Not Cause Runtime Error in Translated Haxe Code
|
Fixed |
| Go2Hx#183 |
go2hx Fails to Emit Runtime Error for Uncomparable Types (Slice, Map, Func) within Interfaces
|
Fixed |
| Go2Hx#184 |
go2hx Allows Uncomparable Type Comparisons (invalid in Go), Incorrectly Returning false Instead of Causing a Panic
|
Fixed |
| Zig Translate-C#21876 |
Type Mismatch in Zig Translation of Pointer to 2D Array in C Code
|
Confirmed |
| Zig Translate-C#21855 |
zig translate-c fails to translate compound literals like &(float){0.5}
|
Confirmed |
| CxGo#81 |
cxgo fails to handle compound literals in C code
|
Fixed |
| Go2Hx#178 |
Generic Functions Cause Translation Failure in Go2hx
|
Fixed |
| Go2Hx#179 |
go2hx fails to translate zero-comparison for arrays, resulting in unexpected runtime panic
|
Fixed |
| Go2Hx#177 |
Incorrect type conversion for (int)((uint32)(m))
|
Fixed |
| CxGo#80 |
panic: runtime error: index out of range [-1]
|
Fixed |
| CxGo#78 |
Invalid Pointer Dereference for 3D Arrays; for 2D arrays Pointer Dereference is ok
|
Confirmed |
| CxGo#79 |
Explicit float to int casting for union member variable of int type
|
Confirmed |
| C4Go#517 |
Failure at 2D Array Initialization
|
Confirmed |
| CxGo#75 |
Testing Boolean to Float Conversions in CxGo: Implicit Conversion Success, Explicit Conversion Error
|
Fixed |
| CxGo#76 |
Implicit Bool to Float Conversion Fails When Added with a Float in C
|
Fixed |
| CxGo#77 |
CxGo translated go code giving different output from gcc and clang
|
Fixed |
| C4Go#515 |
Failure at Union Initialization in the converted Go code
|
Confirmed |
| C4Go#516 |
Failure at Converting Boolean Expression to Integer in Struct Initialization
|
Confirmed |
| Latexify_py#200 |
math.pow not working properly on google colab
|
Confirmed |
| Polyglot#9 |
Parser failed to parse 'BuiltinObjFile' directory files
|
Fixed |
No reports match your search.