Issues

• Private security disclosure route?

  fawdyinc/shellguard#107 · Filter by author dodge1218 opened on May 2, 2026

• 🎨 PREA was here — discovered shellguard

  fawdyinc/shellguard#82 · Filter by author EpicPollon opened on Feb 15, 2026

• enhancement: Bare subcommand-parent commands (docker, kubectl) allowed with no args

  enhancementpriority: low
  fawdyinc/shellguard#72 · Filter by author jonchun opened on Feb 9, 2026

• bug: validateXargs skips validateFlagValue — AllowedValues not enforced

  bugpriority: low
  fawdyinc/shellguard#71 · Filter by author jonchun opened on Feb 9, 2026

• bug: Error message says "Semicolons" when newlines cause multiple statements

  bugpriority: low
  fawdyinc/shellguard#70 · Filter by author jonchun opened on Feb 9, 2026

• enhancement: Config validation allows MaxOutputBytes=0 and MaxDownloadBytes=0

  enhancementpriority: low
  fawdyinc/shellguard#69 · Filter by author jonchun opened on Feb 9, 2026

• enhancement: WithConnectTimeout/WithHostKeyChecking silently no-op for non-XCryptoDialer

  enhancementpriority: low
  fawdyinc/shellguard#68 · Filter by author jonchun opened on Feb 9, 2026

• enhancement: Only first IdentityFile from SSH config used, rest discarded

  enhancementpriority: low
  fawdyinc/shellguard#67 · Filter by author jonchun opened on Feb 9, 2026

• bug: SQL semicolon check rejects semicolons inside string literals

  bugpriority: low
  fawdyinc/shellguard#66 · Filter by author jonchun opened on Feb 9, 2026

• perf: len([]byte(stdout)) allocates unnecessarily in TruncateOutput

  enhancementpriority: low
  fawdyinc/shellguard#65 · Filter by author jonchun opened on Feb 9, 2026

• bug: os.Setenv instead of t.Setenv in toolkit tests — not parallel-safe

  bugpriority: low
  fawdyinc/shellguard#64 · Filter by author jonchun opened on Feb 9, 2026

• bug: uint64-to-int overflow in intValueFromAny

  bugpriority: low
  fawdyinc/shellguard#63 · Filter by author jonchun opened on Feb 9, 2026

• bug: NewHTTPHandler shares single mcp.Server across all SSE connections

  bugpriority: medium
  fawdyinc/shellguard#62 · Filter by author jonchun opened on Feb 9, 2026

• bug: Manifest Merge shallow-copies pointers — mutation leaks across maps

  bugpriority: medium
  fawdyinc/shellguard#61 · Filter by author jonchun opened on Feb 9, 2026

• bug: validatePsqlRequiresC misses -c inside combined flags like -tc

  bugpriority: medium
  fawdyinc/shellguard#60 · Filter by author jonchun opened on Feb 9, 2026

• bug: Combined short flag with TakesValue at end doesn't consume next arg

  bugpriority: medium
  fawdyinc/shellguard#59 · Filter by author jonchun opened on Feb 9, 2026

• bug: isRetriable "eof" substring match is too broad

  bugpriority: medium
  fawdyinc/shellguard#58 · Filter by author jonchun opened on Feb 9, 2026

• bug: Stmt.Negated (! prefix) silently dropped during parsing

  bugpriority: medium
  fawdyinc/shellguard#57 · Filter by author jonchun opened on Feb 9, 2026

• bug: Empty-quoted command name silently promotes first arg to command

  bugpriority: medium
  fawdyinc/shellguard#56 · Filter by author jonchun opened on Feb 9, 2026

• sec: defaultBool silently treats deny: "true" (string) as false

  bugpriority: mediumsecurity
  fawdyinc/shellguard#55 · Filter by author jonchun opened on Feb 9, 2026

• sec: Operator field in ReconstructCommand not validated against allowlist

  enhancementpriority: mediumsecurity
  fawdyinc/shellguard#54 · Filter by author jonchun opened on Feb 9, 2026

• bug: ResolveConnection TOCTOU — pointer invalidated by concurrent Disconnect

  bugpriority: medium
  fawdyinc/shellguard#53 · Filter by author jonchun opened on Feb 9, 2026

• sec: No hdr.Typeflag check in tar extraction — symlink entries accepted

  bugpriority: highsecurity
  fawdyinc/shellguard#52 · Filter by author jonchun opened on Feb 9, 2026

• sec: Unbounded io.ReadAll in tar extraction enables gzip bomb

  bugpriority: highsecurity
  fawdyinc/shellguard#51 · Filter by author jonchun opened on Feb 9, 2026

• sec: ANSI-C quoting $'...' not rejected by parser checkWordParts

  enhancementpriority: highsecurity
  fawdyinc/shellguard#50 · Filter by author jonchun opened on Feb 9, 2026