Issues

• Harvester first run fails when no checkpoint exists

  OWASP/OpenCRE#1128 · Filter by author Adarsh-9182 opened on Oct 3, 2026

• fix(oie): align OWASP LLM Top10 / AIX B2 gold to hub AI CREs

  OWASP/OpenCRE#1124 · Filter by author northdpole opened on Oct 2, 2026
  3

• Information disclosure via filesystem existence oracle in web_main.py catch-all route

  OWASP/OpenCRE#1112 · Filter by author SAI-HARISH2007 opened on Sep 27, 2026
  1

• V2 (maintainers): suggest new CREs when no good match (post-pipeline)

  enhancementexisting-maintainers-onlynot ready for development
  OWASP/OpenCRE#1110 · Filter by author northdpole opened on Sep 22, 2026
  1

• MCP v2: authenticated tools (MyOpenCRE, chat) matching REST authz

  OWASP/OpenCRE#1108 · Filter by author northdpole opened on Sep 16, 2026
  3

  

• Spelling error: ID: 743-237 | Validatie/enforce HTTP inputs (against HTTP parameter pollution attacks)

  OWASP/OpenCRE#1106 · Filter by author 5t00g1t opened on Sep 14, 2026
  1

• /rest/v1/tags and db.get_by_tags() return unbounded results — pagination TODO never implemented

  OWASP/OpenCRE#1087 · Filter by author prajakta128 opened on Sep 9, 2026
  2

• Later: filter chat RAG by saved standards selection

  enhancementnot ready for developmentP3untriaged
  OWASP/OpenCRE#1085 · Filter by author northdpole opened on Sep 8, 2026
  1

• Shareable CRE URLs stay the full graph; filter is session-only

  enhancementnot ready for developmentP2untriaged
  OWASP/OpenCRE#1084 · Filter by author northdpole opened on Sep 8, 2026

• Filter ga_standards by saved selection, with ?all=true bypass

  enhancementnot ready for developmentP2untriaged
  OWASP/OpenCRE#1083 · Filter by author northdpole opened on Sep 8, 2026

• Apply saved standards selection on search and explorer

  enhancementnot ready for developmentP2untriaged
  OWASP/OpenCRE#1082 · Filter by author northdpole opened on Sep 8, 2026

• Apply saved standards selection on CRE and standard pages

  enhancementnot ready for developmentP2untriaged
  OWASP/OpenCRE#1081 · Filter by author northdpole opened on Sep 8, 2026

• Prod: enable CRE_ENABLE_LOGIN and CRE_ENABLE_MYOPENCRE for profiles

  existing-maintainers-onlynot ready for developmentP2untriaged
  OWASP/OpenCRE#1080 · Filter by author northdpole opened on Sep 8, 2026

• Epic: User profiles with persistent standards filter

  enhancementnot ready for developmentP2untriaged
  OWASP/OpenCRE#1079 · Filter by author northdpole opened on Sep 8, 2026
  1

• Spike: RAGAS (or equivalent) eval for cited OpenCRE Chat

  enhancementnot ready for developmentuntriaged
  OWASP/OpenCRE#1078 · Filter by author northdpole opened on Sep 8, 2026

• Spike: Haystack 3 vs in-tree Librarian for chat RAG

  enhancementnot ready for developmentuntriaged
  OWASP/OpenCRE#1077 · Filter by author northdpole opened on Sep 8, 2026

• Chat embeddings: retrieve heading/harvest chunks, not whole-node blobs

  enhancementnot ready for developmentuntriaged
  OWASP/OpenCRE#1076 · Filter by author northdpole opened on Sep 8, 2026

• Chat: retrieve top-k via Librarian seams (implements #962)

  enhancementnot ready for developmentuntriaged
  OWASP/OpenCRE#1075 · Filter by author northdpole opened on Sep 8, 2026
  2

• Cited ask API + MCP tools so NestBot can ground security answers in OpenCRE

  enhancementnot ready for developmentuntriaged
  OWASP/OpenCRE#1074 · Filter by author northdpole opened on Sep 8, 2026
  1

• Chat/agent: route community questions to Nest APIs (do not rebuild chapters/events)

  enhancementnot ready for developmentuntriaged
  OWASP/OpenCRE#1073 · Filter by author northdpole opened on Sep 8, 2026

• Epic: Bidirectional OWASP Agent with Nest (REST first, MCP second)

  enhancementnot ready for developmentuntriaged
  OWASP/OpenCRE#1072 · Filter by author northdpole opened on Sep 8, 2026
  2

• Continuity runbook: Local stack

  existing-maintainers-only
  OWASP/OpenCRE#1071 · Filter by author northdpole opened on Sep 8, 2026

• Continuity runbook: Staging bootstrap

  existing-maintainers-only
  OWASP/OpenCRE#1070 · Filter by author northdpole opened on Sep 8, 2026

• Continuity runbook: Gap analysis ops

  existing-maintainers-only
  OWASP/OpenCRE#1069 · Filter by author northdpole opened on Sep 8, 2026

• Continuity runbook: Catalog import and sync

  existing-maintainers-only
  OWASP/OpenCRE#1068 · Filter by author northdpole opened on Sep 8, 2026