Issues

• Make COSMOS Work with EDS-Generated Packets

  nasa/cFS#1184 · Filter by author Cameron-Sykes opened on Oct 30, 2026
  

• Update version number in all modules for release candidate

  nasa/cFS#1175 · Filter by author jphickey opened on Oct 20, 2026

• v7.0.1: EDS enum definition doesn't seem to adhere to CFE_MISSION DATA_BYTE_ORDER

  nasa/cFS#1167 · Filter by author dmccomas opened on Oct 16, 2026
  1

• Hardening: reference FDIR/safe-mode trusts unauthenticated commands and unvalidated telemetry

  nasa/cFS#1159 · Filter by author jfabio-navarrom opened on Oct 10, 2026
  

• Update the PR templates to unhide the reviewer notes

  nasa/cFS#1155 · Filter by author ddstewar opened on Oct 7, 2026
  

• Convert status codes to an enum

  nasa/cFS#1152 · Filter by author Cameron-Sykes opened on Oct 6, 2026
  1

• [SECURITY] Off-by-one bounds check in SBN HKPeerCmd/HKNetCmd allows access to invalid net/peer slots

  nasa/cFS#1128 · Filter by author yangyoung63 opened on Sep 18, 2026

• Inconsistent default values for cmd pipe depth across apps

  nasa/cFS#1122 · Filter by author jphickey opened on Sep 15, 2026
  1

• [SECURITY] CFE_TBL_LoadCmd() file descriptor leak causes denial of service via resource exhaustion

  nasa/cFS#1104 · Filter by author xmin-02 opened on Aug 25, 2026
  3

  

• [SECURITY] SBN TCP receive path uses attacker-controlled message size before the boundary check, causing an out-of-bounds write into a fixed static buffer

  nasa/cFS#1102 · Filter by author xmin-02 opened on Aug 25, 2026
  

• Feature: DFA-based structural health monitor app for telemetry channels

  nasa/cFS#1096 · Filter by author philphauler opened on Aug 22, 2026
  9

• [SECURITY] TO_LAB Remove command desynchronizes ActiveSubCount from actual subscription slot usage causing false capacity exhaustion

  nasa/cFS#1076 · Filter by author freedomfoxvare opened on Jul 15, 2026
  1

• [SECURITY] SBN subscription/unsubscription parser reads past real network payload due to missing MsgSz boundary check

  nasa/cFS#1074 · Filter by author freedomfoxvare opened on Jul 15, 2026

• [SECURITY] CFDP remote metadata dest_filename controls arbitrary receive file path

  nasa/cFS#1073 · Filter by author freedomfoxvare opened on Jul 15, 2026

• [SECURITY] DS basename field allows path traversal without modifying pathname

  nasa/cFS#1072 · Filter by author freedomfoxvare opened on Jul 15, 2026

• [SECURITY] DS SetDestPath command allows arbitrary telemetry archive path redirection

  nasa/cFS#1071 · Filter by author freedomfoxvare opened on Jul 15, 2026

• [SECURITY] HS EventMon uses forged event payload identity to trigger processor reset

  nasa/cFS#1069 · Filter by author freedomfoxvare opened on Jul 15, 2026

• Add QNX to cFS multi-target build

  nasa/cFS#1067 · Filter by author dmolock-NASA opened on Jul 14, 2026
  

• [SECURITY] SBN UDP Information Disclosure via Truncated Frame Expansion in cFS

  nasa/cFS#1058 · Filter by author freedomfoxvare opened on Jun 28, 2026
  1

• [SECURITY] Arbitrary Module Execution via ES_StartApp Command and CFDP Ingress in cFS

  nasa/cFS#1057 · Filter by author freedomfoxvare opened on Jun 28, 2026
  1

• Abstract POSIX gmtime_r() into OSAL

  nasa/cFS#1055 · Filter by author arielswalker opened on Jun 26, 2026

• Update Security file and propagate to all submodules

  nasa/cFS#1048 · Filter by author ddstewar opened on Jun 10, 2026

• Header guard typo in todimpl.h breaks native build

  nasa/cFS#1039 · Filter by author Liode01 opened on May 23, 2026

• Shutdown-path memory leak observed during instrumented testing

  nasa/cFS#1037 · Filter by author jackwill-hub opened on May 20, 2026

• Runtime startup depends on OS message queue limits

  nasa/cFS#1036 · Filter by author jackwill-hub opened on May 20, 2026