Search results

GPG verification process uses a hardcoded key that could be compromised or replaced

Status: Open.

#63 In manticore-projects/aurscan;

· dennisvanderpool opened on Jul 14, 2026

DLE-001 "Curl pipe to shell" false positive blocks legitimate GPG-verified release download (aurscan-manticore-bin-release-git PKGBUILD)

Status: Open.

#62 In manticore-projects/aurscan;

· ninja-gaijin opened on Jul 14, 2026

Executable comes from an uploader-controlled object-storage path rather than the stated upstream domain.

Status: Open.

#59 In manticore-projects/aurscan;

· HaleTom opened on Jul 5, 2026

Usage line shows "cost n/a" for codex and OpenAI-compatible backends

bugSomething isn't workingSomething isn't working

enhancementNew feature or requestNew feature or request

Status: Open.

#52 In manticore-projects/aurscan;

· HaleTom opened on Jul 3, 2026

AUR packages available: aurscan-manticore-release-git, aurscan-manticore-bin-release-git

enhancementNew feature or requestNew feature or request

Status: Open.

#21 In manticore-projects/aurscan;

· HaleTom opened on Jun 20, 2026