Issues

• Private repository tokens are propagated in browser and API URLs

  AsyncFuncAI/deepwiki-open#610 · Filter by author carfeii opened on Oct 5, 2026

• Arbitrary repository URLs enable blind SSRF through Git clone

  AsyncFuncAI/deepwiki-open#609 · Filter by author carfeii opened on Oct 5, 2026

• OpenRouter client persists complete prompts, source context, and responses in INFO logs

  AsyncFuncAI/deepwiki-open#608 · Filter by author carfeii opened on Oct 5, 2026

• Distinct repositories reuse clone and embedding state through name collisions

  AsyncFuncAI/deepwiki-open#607 · Filter by author carfeii opened on Oct 5, 2026

• Repository-influenced model output is rendered as active slide HTML

  AsyncFuncAI/deepwiki-open#606 · Filter by author carfeii opened on Oct 5, 2026

• Unauthenticated task submission permits an unbounded work backlog

  AsyncFuncAI/deepwiki-open#605 · Filter by author carfeii opened on Oct 5, 2026

• Authorization mode leaves generation, indexing, chat, and cache reads unprotected

  AsyncFuncAI/deepwiki-open#604 · Filter by author carfeii opened on Oct 5, 2026

• Optional LiteLLM deployment publishes services with public default credentials

  AsyncFuncAI/deepwiki-open#603 · Filter by author carfeii opened on Oct 5, 2026

• Malicious repository symlinks escape the clone root during indexing

  AsyncFuncAI/deepwiki-open#602 · Filter by author carfeii opened on Oct 5, 2026

• Unauthenticated local-path APIs disclose arbitrary server files

  AsyncFuncAI/deepwiki-open#601 · Filter by author carfeii opened on Oct 5, 2026

• Two unauthenticated file-disclosure bugs in the API

  AsyncFuncAI/deepwiki-open#590 · Filter by author AvAl4nch opened on Sep 20, 2026

• Unauthenticated arbitrary-path filesystem disclosure via GET /local_repo/structure

  AsyncFuncAI/deepwiki-open#587 · Filter by author carfeii opened on Sep 11, 2026

• OpenAI streaming fails: 'ResponseCreatedEvent' object has no attribute 'choices'

  AsyncFuncAI/deepwiki-open#585 · Filter by author sevelar05 opened on Sep 8, 2026

• [urgent] Removal of Content of a deleted repository !!!!!

  AsyncFuncAI/deepwiki-open#581 · Filter by author ghost opened on Aug 20, 2026

• When using Docker to call a local Ollama model, the model cannot be found.

  AsyncFuncAI/deepwiki-open#579 · Filter by author songtiejun1416 opened on Aug 18, 2026
  2

• [Takedown Request] Please remove cached wiki for private repository wanyu445/stone_memory

  AsyncFuncAI/deepwiki-open#578 · Filter by author xieyunliang35-web opened on Aug 17, 2026
  1

• Isn't the desktop version project open source? After deploying and running with Docker as per the README, it's still the old web UI.

  AsyncFuncAI/deepwiki-open#576 · Filter by author sopaco opened on Aug 13, 2026

• uv.lock pins requests 2.32.3, below the 2.32.4 fix for CVE-2024-47081

  AsyncFuncAI/deepwiki-open#539 · Filter by author hamizan-azman opened on Jun 24, 2026
  1

• Unauthenticated arbitrary server file read (source/config/JSON/YAML) and git-clone SSRF via the repo_url parameter on the all-interfaces, CORS-wildcard DeepWiki API

  AsyncFuncAI/deepwiki-open#536 · Filter by author geo-chen opened on Jun 13, 2026

• Repository file fetch follows redirects with environment netrc auth enabled

  AsyncFuncAI/deepwiki-open#535 · Filter by author hamizan-azman opened on Jun 5, 2026

• Private security disclosure contact requested

  AsyncFuncAI/deepwiki-open#534 · Filter by author huslayer826 opened on Jun 3, 2026
  1

• Docker Compose Up broken?

  AsyncFuncAI/deepwiki-open#516 · Filter by author Bazmundi opened on May 1, 2026
  2

• DeepWiki生成Wiki时调用了嵌入模型 (nomic-embed-text) 而不是生成模型 (qwen3:4b)

  AsyncFuncAI/deepwiki-open#511 · Filter by author Ranlicness opened on Apr 21, 2026

• 填入仓库代码后，回报：rate limit错误

  AsyncFuncAI/deepwiki-open#506 · Filter by author yaobin201 opened on Apr 11, 2026

• requirements.txt

  AsyncFuncAI/deepwiki-open#502 · Filter by author batterlwx opened on Apr 2, 2026
  1