Security Good First Issues

securityauthenticationauthorization

Open

research: enforce typed cross-request behavioral commitments

area/agentarea/corearea/multi-turnarea/researchenhancementevaluationhelp wantedpriority/P2roadmapsafety

vllm-project/semantic-router #2,549 opened Jul 15, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

research: add fleet-wide caller reputation with cross-agent threat propagation

area/agentarea/corearea/researchenhancementevaluationhelp wantedpriority/P2roadmapsafety

vllm-project/semantic-router #2,548 opened Jul 15, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

feat: enforce request-level tool RBAC across router and execution gateway

area/agentarea/corearea/networkingarea/tool-managementenhancementhelp wantedpriority/P1roadmapsafety

vllm-project/semantic-router #2,547 opened Jul 15, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

[TLS 1.3] Check the Implementation against RFC 9846

good first issue

randombit/botan #5,719 opened Jul 13, 2026 · C++ · 3,283 stars

Why recommendedNo comments yet · Has a beginner-friendly label

No comments yetHas a beginner-friendly label

0 comments1 reaction1 assignee

Open

security: add reproducible dependency and toolchain vulnerability gates

area/test-and-releasearea/testingdependenciesenhancementhelp wantedoperationspriority/P1roadmapsafety

vllm-project/semantic-router #2,476 opened Jul 12, 2026 · Go · 4,293 stars

Why recommendedHas a beginner-friendly label · Contributing guide available

Has a beginner-friendly labelContributing guide available

1 comment0 reactions1 assignee

Open

security: constrain OpenClaw image and skill provisioning inputs

area/agentarea/dashboardbughelp wantedpriority/P1roadmapsafety

vllm-project/semantic-router #2,468 opened Jul 12, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

security: replace ML pipeline filesystem paths with owned job and artifact handles

area/dashboardarea/testingbughelp wantedoperationspriority/P1roadmapsafety

vllm-project/semantic-router #2,467 opened Jul 12, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

security: make router diagnostics content-free by default

area/corearea/observabilitybughelp wantedpriority/P1roadmapsafety

vllm-project/semantic-router #2,464 opened Jul 12, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

security: add continuous fuzzing for URL and path boundaries

backendcihelp wantedsecuritytestsup-for-grabs

duct-tape2/ai-language-partner #105 opened Jul 12, 2026 · TypeScript · 2 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

[Public] Independent security review of the ntt module

help wantedsecurity

NIKX-Tech/numx #68 opened Jul 11, 2026 · C · 4 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

security: upgrade Expo SDK 52 through supported releases

help wantedmobilereleasesecurityup-for-grabs

duct-tape2/ai-language-partner #63 opened Jul 10, 2026 · TypeScript · 2 stars

Why recommendedNo assignee yet · Has a beginner-friendly label

No assignee yetHas a beginner-friendly labelContributing guide available

1 comment0 reactions0 assignees

Open

feat: define shared-resource isolation and diagnostics for multi-tenancy

area/corearea/observabilityenhancementhelp wantedoperationspriority/P1roadmap

vllm-project/semantic-router #2,364 opened Jul 5, 2026 · Go · 4,293 stars

Why recommendedHas a beginner-friendly label · Contributing guide available

Has a beginner-friendly labelContributing guide available

2 comments0 reactions1 assignee

Open

feat: add trusted tenant identity resolution for shared-router multi-tenancy

area/corearea/networkingenhancementhelp wantedoperationspriority/P1roadmap

vllm-project/semantic-router #2,362 opened Jul 5, 2026 · Go · 4,293 stars

Why recommendedHas a beginner-friendly label · Contributing guide available

Has a beginner-friendly labelContributing guide available

2 comments0 reactions1 assignee

Open

security: track H2 router security hardening across auth, feedback, and Looper paths

area/corebughelp wantedpriority/P1roadmapsafety

vllm-project/semantic-router #2,357 opened Jul 5, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

feat: support shared-router multi-tenancy with isolated config scopes

area/corearea/user-experienceenhancementhelp wantedoperationspriority/P1roadmap

vllm-project/semantic-router #2,342 opened Jul 5, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

typescript_scanner: TS AST path silently disabled due to stale `tree_sitter_typescript` language-module API

bughelp wanted

HeadyZhang/agent-audit #12 opened Jul 4, 2026 · Python · 180 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

False positive: AGENT-041 flags agent `.execute()` calls as SQL injection

bughelp wanted

HeadyZhang/agent-audit #10 opened Jul 4, 2026 · Python · 180 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

dynamic_modules/tls: support auto_host_sni for runtime hosts and SNI-scoped session reuse

help wanted

envoyproxy/envoy #45,962 opened Jul 3, 2026 · C++ · 27,997 stars

Why recommendedNo assignee yet · Has a beginner-friendly label

No assignee yetHas a beginner-friendly labelContributing guide available

5 comments0 reactions0 assignees

Open

Envoy `mcp_json_rest_bridge` filter injects unescaped path segments into the upstream request path (unauthenticated)

area/mcpbughelp wanted

envoyproxy/envoy #45,931 opened Jul 2, 2026 · C++ · 27,997 stars

Why recommendedHas a beginner-friendly label · Contributing guide available

Has a beginner-friendly labelContributing guide available

2 comments0 reactions1 assignee

Open

Feature request: Add YARA-X Operations

featurehelp wanted

gchq/CyberChef #2,622 opened Jul 1, 2026 · JavaScript · 34,843 stars

Why recommendedHas a beginner-friendly label · Contributing guide available

Has a beginner-friendly labelContributing guide available

2 comments0 reactions1 assignee

securityauthenticationauthorization

Open

research: enforce typed cross-request behavioral commitments

area/agentarea/corearea/multi-turnarea/researchenhancementevaluationhelp wantedpriority/P2roadmapsafety

vllm-project/semantic-router #2,549 opened Jul 15, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

research: add fleet-wide caller reputation with cross-agent threat propagation

area/agentarea/corearea/researchenhancementevaluationhelp wantedpriority/P2roadmapsafety

vllm-project/semantic-router #2,548 opened Jul 15, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

feat: enforce request-level tool RBAC across router and execution gateway

area/agentarea/corearea/networkingarea/tool-managementenhancementhelp wantedpriority/P1roadmapsafety

vllm-project/semantic-router #2,547 opened Jul 15, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

[TLS 1.3] Check the Implementation against RFC 9846

good first issue

randombit/botan #5,719 opened Jul 13, 2026 · C++ · 3,283 stars

Why recommendedNo comments yet · Has a beginner-friendly label

No comments yetHas a beginner-friendly label

0 comments1 reaction1 assignee

Open

security: add reproducible dependency and toolchain vulnerability gates

area/test-and-releasearea/testingdependenciesenhancementhelp wantedoperationspriority/P1roadmapsafety

vllm-project/semantic-router #2,476 opened Jul 12, 2026 · Go · 4,293 stars

Why recommendedHas a beginner-friendly label · Contributing guide available

Has a beginner-friendly labelContributing guide available

1 comment0 reactions1 assignee

Open

security: constrain OpenClaw image and skill provisioning inputs

area/agentarea/dashboardbughelp wantedpriority/P1roadmapsafety

vllm-project/semantic-router #2,468 opened Jul 12, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

security: replace ML pipeline filesystem paths with owned job and artifact handles

area/dashboardarea/testingbughelp wantedoperationspriority/P1roadmapsafety

vllm-project/semantic-router #2,467 opened Jul 12, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

security: make router diagnostics content-free by default

area/corearea/observabilitybughelp wantedpriority/P1roadmapsafety

vllm-project/semantic-router #2,464 opened Jul 12, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

security: add continuous fuzzing for URL and path boundaries

backendcihelp wantedsecuritytestsup-for-grabs

duct-tape2/ai-language-partner #105 opened Jul 12, 2026 · TypeScript · 2 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

[Public] Independent security review of the ntt module

help wantedsecurity

NIKX-Tech/numx #68 opened Jul 11, 2026 · C · 4 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

security: upgrade Expo SDK 52 through supported releases

help wantedmobilereleasesecurityup-for-grabs

duct-tape2/ai-language-partner #63 opened Jul 10, 2026 · TypeScript · 2 stars

Why recommendedNo assignee yet · Has a beginner-friendly label

No assignee yetHas a beginner-friendly labelContributing guide available

1 comment0 reactions0 assignees

Open

feat: define shared-resource isolation and diagnostics for multi-tenancy

area/corearea/observabilityenhancementhelp wantedoperationspriority/P1roadmap

vllm-project/semantic-router #2,364 opened Jul 5, 2026 · Go · 4,293 stars

Why recommendedHas a beginner-friendly label · Contributing guide available

Has a beginner-friendly labelContributing guide available

2 comments0 reactions1 assignee

Open

feat: add trusted tenant identity resolution for shared-router multi-tenancy

area/corearea/networkingenhancementhelp wantedoperationspriority/P1roadmap

vllm-project/semantic-router #2,362 opened Jul 5, 2026 · Go · 4,293 stars

Why recommendedHas a beginner-friendly label · Contributing guide available

Has a beginner-friendly labelContributing guide available

2 comments0 reactions1 assignee

Open

security: track H2 router security hardening across auth, feedback, and Looper paths

area/corebughelp wantedpriority/P1roadmapsafety

vllm-project/semantic-router #2,357 opened Jul 5, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

feat: support shared-router multi-tenancy with isolated config scopes

area/corearea/user-experienceenhancementhelp wantedoperationspriority/P1roadmap

vllm-project/semantic-router #2,342 opened Jul 5, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

typescript_scanner: TS AST path silently disabled due to stale `tree_sitter_typescript` language-module API

bughelp wanted

HeadyZhang/agent-audit #12 opened Jul 4, 2026 · Python · 180 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

False positive: AGENT-041 flags agent `.execute()` calls as SQL injection

bughelp wanted

HeadyZhang/agent-audit #10 opened Jul 4, 2026 · Python · 180 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

dynamic_modules/tls: support auto_host_sni for runtime hosts and SNI-scoped session reuse

help wanted

envoyproxy/envoy #45,962 opened Jul 3, 2026 · C++ · 27,997 stars

Why recommendedNo assignee yet · Has a beginner-friendly label

No assignee yetHas a beginner-friendly labelContributing guide available

5 comments0 reactions0 assignees

Open

Envoy `mcp_json_rest_bridge` filter injects unescaped path segments into the upstream request path (unauthenticated)

area/mcpbughelp wanted

envoyproxy/envoy #45,931 opened Jul 2, 2026 · C++ · 27,997 stars

Why recommendedHas a beginner-friendly label · Contributing guide available

Has a beginner-friendly labelContributing guide available

2 comments0 reactions1 assignee

Open

Feature request: Add YARA-X Operations

featurehelp wanted

gchq/CyberChef #2,622 opened Jul 1, 2026 · JavaScript · 34,843 stars

Why recommendedHas a beginner-friendly label · Contributing guide available

Has a beginner-friendly labelContributing guide available

2 comments0 reactions1 assignee

securityauthenticationauthorization

Open

research: enforce typed cross-request behavioral commitments

area/agentarea/corearea/multi-turnarea/researchenhancementevaluationhelp wantedpriority/P2roadmapsafety

vllm-project/semantic-router #2,549 opened Jul 15, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

research: add fleet-wide caller reputation with cross-agent threat propagation

area/agentarea/corearea/researchenhancementevaluationhelp wantedpriority/P2roadmapsafety

vllm-project/semantic-router #2,548 opened Jul 15, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

feat: enforce request-level tool RBAC across router and execution gateway

area/agentarea/corearea/networkingarea/tool-managementenhancementhelp wantedpriority/P1roadmapsafety

vllm-project/semantic-router #2,547 opened Jul 15, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

[TLS 1.3] Check the Implementation against RFC 9846

good first issue

randombit/botan #5,719 opened Jul 13, 2026 · C++ · 3,283 stars

Why recommendedNo comments yet · Has a beginner-friendly label

No comments yetHas a beginner-friendly label

0 comments1 reaction1 assignee

Open

security: add reproducible dependency and toolchain vulnerability gates

area/test-and-releasearea/testingdependenciesenhancementhelp wantedoperationspriority/P1roadmapsafety

vllm-project/semantic-router #2,476 opened Jul 12, 2026 · Go · 4,293 stars

Why recommendedHas a beginner-friendly label · Contributing guide available

Has a beginner-friendly labelContributing guide available

1 comment0 reactions1 assignee

Open

security: constrain OpenClaw image and skill provisioning inputs

area/agentarea/dashboardbughelp wantedpriority/P1roadmapsafety

vllm-project/semantic-router #2,468 opened Jul 12, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

security: replace ML pipeline filesystem paths with owned job and artifact handles

area/dashboardarea/testingbughelp wantedoperationspriority/P1roadmapsafety

vllm-project/semantic-router #2,467 opened Jul 12, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

security: make router diagnostics content-free by default

area/corearea/observabilitybughelp wantedpriority/P1roadmapsafety

vllm-project/semantic-router #2,464 opened Jul 12, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

security: add continuous fuzzing for URL and path boundaries

backendcihelp wantedsecuritytestsup-for-grabs

duct-tape2/ai-language-partner #105 opened Jul 12, 2026 · TypeScript · 2 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

[Public] Independent security review of the ntt module

help wantedsecurity

NIKX-Tech/numx #68 opened Jul 11, 2026 · C · 4 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

security: upgrade Expo SDK 52 through supported releases

help wantedmobilereleasesecurityup-for-grabs

duct-tape2/ai-language-partner #63 opened Jul 10, 2026 · TypeScript · 2 stars

Why recommendedNo assignee yet · Has a beginner-friendly label

No assignee yetHas a beginner-friendly labelContributing guide available

1 comment0 reactions0 assignees

Open

feat: define shared-resource isolation and diagnostics for multi-tenancy

area/corearea/observabilityenhancementhelp wantedoperationspriority/P1roadmap

vllm-project/semantic-router #2,364 opened Jul 5, 2026 · Go · 4,293 stars

Why recommendedHas a beginner-friendly label · Contributing guide available

Has a beginner-friendly labelContributing guide available

2 comments0 reactions1 assignee

Open

feat: add trusted tenant identity resolution for shared-router multi-tenancy

area/corearea/networkingenhancementhelp wantedoperationspriority/P1roadmap

vllm-project/semantic-router #2,362 opened Jul 5, 2026 · Go · 4,293 stars

Why recommendedHas a beginner-friendly label · Contributing guide available

Has a beginner-friendly labelContributing guide available

2 comments0 reactions1 assignee

Open

security: track H2 router security hardening across auth, feedback, and Looper paths

area/corebughelp wantedpriority/P1roadmapsafety

vllm-project/semantic-router #2,357 opened Jul 5, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

feat: support shared-router multi-tenancy with isolated config scopes

area/corearea/user-experienceenhancementhelp wantedoperationspriority/P1roadmap

vllm-project/semantic-router #2,342 opened Jul 5, 2026 · Go · 4,293 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

typescript_scanner: TS AST path silently disabled due to stale `tree_sitter_typescript` language-module API

bughelp wanted

HeadyZhang/agent-audit #12 opened Jul 4, 2026 · Python · 180 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

False positive: AGENT-041 flags agent `.execute()` calls as SQL injection

bughelp wanted

HeadyZhang/agent-audit #10 opened Jul 4, 2026 · Python · 180 stars

Why recommendedNo assignee yet · No comments yet

No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available

0 comments0 reactions0 assignees

Open

dynamic_modules/tls: support auto_host_sni for runtime hosts and SNI-scoped session reuse

help wanted

envoyproxy/envoy #45,962 opened Jul 3, 2026 · C++ · 27,997 stars

Why recommendedNo assignee yet · Has a beginner-friendly label

No assignee yetHas a beginner-friendly labelContributing guide available

5 comments0 reactions0 assignees

Open

Envoy `mcp_json_rest_bridge` filter injects unescaped path segments into the upstream request path (unauthenticated)

area/mcpbughelp wanted

envoyproxy/envoy #45,931 opened Jul 2, 2026 · C++ · 27,997 stars

Why recommendedHas a beginner-friendly label · Contributing guide available

Has a beginner-friendly labelContributing guide available

2 comments0 reactions1 assignee

Open

Feature request: Add YARA-X Operations

featurehelp wanted

gchq/CyberChef #2,622 opened Jul 1, 2026 · JavaScript · 34,843 stars

Why recommendedHas a beginner-friendly label · Contributing guide available

Has a beginner-friendly labelContributing guide available

2 comments0 reactions1 assignee

Security Good First Issues

Get fresh easy issues in your inbox.

Security Good First Issues