Allegro cb0cf51adf security: Fix V-006 MCP OAuth Deserialization (CVSS 8.8 CRITICAL) ...

- Replace pickle with JSON + HMAC-SHA256 state serialization
- Add constant-time signature verification
- Implement replay attack protection with nonce expiration
- Add comprehensive security test suite (54 tests)
- Harden token storage with integrity verification

Resolves: V-006 (CVSS 8.8)

2026-03-31 00:37:14 +00:00

..

__init__.py

test: add unit tests for 8 modules (batch 2)

2026-02-26 13:54:20 +03:00

test_auxiliary_client.py

fix: auxiliary client uses placeholder key for local servers without auth (#3842)

2026-03-29 21:05:36 -07:00

test_context_compressor.py

fix(compression): restore sane defaults and cap summary at 12K tokens

2026-03-24 18:48:47 -07:00

test_display_emoji.py

feat(tools): centralize tool emoji metadata in registry + skin integration

2026-03-15 20:21:21 -07:00

test_external_skills.py

feat(skills): support external skill directories via config (#3678)

2026-03-29 00:33:30 -07:00

test_gemini_adapter.py

security: fix command injection vulnerabilities (CVSS 9.8)

2026-03-30 23:15:11 +00:00

test_model_metadata.py

feat: overhaul context length detection with models.dev and provider-aware resolution (#2158)

2026-03-20 06:04:33 -07:00

test_models_dev.py

feat: overhaul context length detection with models.dev and provider-aware resolution (#2158)

2026-03-20 06:04:33 -07:00

test_prompt_builder.py

fix(tests): align skill/setup and platform mocks with current behavior (#3721)

2026-03-29 07:51:43 -07:00

test_prompt_caching.py

fix(prompt-caching): skip top-level cache_control on role:tool for OpenRouter

2026-03-21 16:54:43 -07:00

test_redact.py

fix(security): extend secret redaction to ElevenLabs, Tavily and Exa API keys (#3920)

2026-03-30 08:13:01 -07:00

test_skill_commands.py

fix(tests): align skill/setup and platform mocks with current behavior (#3721)

2026-03-29 07:51:43 -07:00

test_skill_name_traversal.py

security: Fix V-006 MCP OAuth Deserialization (CVSS 8.8 CRITICAL)

2026-03-31 00:37:14 +00:00

test_skill_security.py

security: Fix V-006 MCP OAuth Deserialization (CVSS 8.8 CRITICAL)

2026-03-31 00:37:14 +00:00

test_smart_model_routing.py

fix: hermes update causes dual gateways on macOS (launchd) (#1567)

2026-03-16 12:36:29 -07:00

test_subagent_progress.py

fix(display): fix subagent progress tree-view visual nits

2026-02-28 23:29:49 -08:00

test_symbolic_memory.py

Merge PR #9: SOTA Sovereign Intersymbolic Knowledge Graph (SIKG)

2026-03-30 22:31:43 +00:00

test_title_generator.py

feat: auto-generate session titles after first exchange

2026-03-17 04:14:40 -07:00

test_usage_pricing.py

feat: use endpoint metadata for custom model context and pricing (#1906)

2026-03-18 03:04:07 -07:00