Issues

• krun/kparse source configVars.sh from a caller-selectable kompiled directory

  runtimeverification/k#4973 · Filter by author docxology opened on Nov 2, 2026

• Docs site: unescaped template/Markdown HTML (stored XSS surface)

  runtimeverification/k#4972 · Filter by author docxology opened on Nov 2, 2026

• Build depends on SNAPSHOT artifacts and non-enforced version locks

  runtimeverification/k#4971 · Filter by author docxology opened on Nov 2, 2026

• pyk: path traversal family (kcfg ids, proof ids, requires, kbuild targets)

  runtimeverification/k#4970 · Filter by author docxology opened on Nov 2, 2026

• pyk: arbitrary Python module import from untrusted kbuild.toml

  runtimeverification/k#4969 · Filter by author docxology opened on Nov 2, 2026

• Java native deserialization of compiled.bin/cache.bin (object-stream RCE)

  runtimeverification/k#4968 · Filter by author docxology opened on Nov 2, 2026

• Unquoted rm -rf trap and temp-dir handling in k-util.sh

  runtimeverification/k#4967 · Filter by author docxology opened on Nov 2, 2026

• Frontend path handling: unvalidated filesystem paths and unchecked path-API null returns

  runtimeverification/k#4966 · Filter by author docxology opened on Nov 2, 2026

• Vulnerable pinned dependencies in maven lock and web lockfile

  runtimeverification/k#4965 · Filter by author docxology opened on Nov 2, 2026

• Unbounded recursion / allocation on crafted inputs (parser, unparser, LSP)

  runtimeverification/k#4964 · Filter by author docxology opened on Nov 2, 2026

• Definition-controlled text interpolated into generated C/Makefile code

  runtimeverification/k#4963 · Filter by author docxology opened on Nov 2, 2026

• kserver/LSP local-service hardening (workspace trust, shutdown semantics, async state)

  runtimeverification/k#4962 · Filter by author docxology opened on Nov 2, 2026

• CI workflow hardening: token handling, unpinned inputs, release-job robustness

  runtimeverification/k#4961 · Filter by author docxology opened on Nov 1, 2026

• Packaging and distribution scripts hardening

  runtimeverification/k#4960 · Filter by author docxology opened on Nov 1, 2026

• PR-triggered workflows run with long-lived repository credentials

  runtimeverification/k#4959 · Filter by author docxology opened on Nov 1, 2026

• Unverified remote installers executed across CI, packaging, and published install scripts

  runtimeverification/k#4958 · Filter by author docxology opened on Nov 1, 2026

• Merges to develop are auto-merged into master with --strategy-option=theirs

  runtimeverification/k#4957 · Filter by author docxology opened on Nov 1, 2026

• Makefile test-harness command injection (ktest/ktest-common/kprofiling)

  runtimeverification/k#4956 · Filter by author docxology opened on Nov 1, 2026

• Profiling helper passes the GitHub token on the command line

  runtimeverification/k#4955 · Filter by author docxology opened on Nov 1, 2026

• Published Nix install script installs kup from a moving ref

  runtimeverification/k#4954 · Filter by author docxology opened on Nov 1, 2026

• pyk runtime robustness: assert-gated protocol checks, escape decoding, telemetry, terminal injection

  runtimeverification/k#4953 · Filter by author docxology opened on Nov 1, 2026

• Docs site build pinned to an end-of-life Node.js release

  runtimeverification/k#4952 · Filter by author docxology opened on Nov 1, 2026

• pyk: persistence/correctness bugs (PR attached)

  runtimeverification/k#4951 · Filter by author docxology opened on Nov 1, 2026

• Token-bearing third-party actions are referenced by mutable tags (PR attached)

  runtimeverification/k#4950 · Filter by author docxology opened on Nov 1, 2026

• Error-reporting robustness: unhandled exceptions, out-of-range reads, and file-descriptor leaks in diagnostics

  runtimeverification/k#4949 · Filter by author docxology opened on Nov 1, 2026