Issues

• Duplicate migration version 0121 breaks docker compose up / make full-setup

  weave-os/router#1630 · Filter by author michaeltrefry opened on Oct 6, 2026

• Gemini-native requests bypass tool-call loop detection

  weave-os/router#1604 · Filter by author kushal98457-ctrl opened on Oct 4, 2026
  1

• PreferredModels can poison the semantic cache

  weave-os/router#1603 · Filter by author kushal98457-ctrl opened on Oct 4, 2026
  1

• SQL queries lack tenant-ownership enforcement

  weave-os/router#1602 · Filter by author kushal98457-ctrl opened on Oct 4, 2026
  1

• HMM training transcript delta is byte-unbounded on the synchronous serving path

  weave-os/router#1601 · Filter by author kushal98457-ctrl opened on Oct 4, 2026

• File, audio and document content parts are dropped on cross-format paths

  weave-os/router#1600 · Filter by author kushal98457-ctrl opened on Oct 4, 2026

• catalog: claude-sonnet-5 still priced at $3/$15 with a 200K window; list price is $2/$10 with 1M

  weave-os/router#1469 · Filter by author tylerslater-io opened on Sep 25, 2026

• File, audio and document content parts are dropped on cross-format paths

  weave-os/router#1466 · Filter by author Android-Login-Analysis opened on Sep 25, 2026

• Tool schema pattern and strict are stripped, and allowed_tools is not recognised

  weave-os/router#1385 · Filter by author Android-Login-Analysis opened on Sep 19, 2026

• Installer silently overwrites a deliberately-empty attribution in ~/.claude/settings.json

  weave-os/router#1361 · Filter by author Dmitriusan opened on Sep 17, 2026

• OrcaRouter provider support for the Weave Router

  weave-os/router#1183 · Filter by author martinzudergaming-a11y opened on Sep 4, 2026

• Security Vulnerability

  weave-os/router#920 · Filter by author jeminsec opened on Aug 16, 2026

• billing: 1-hour TTL cache writes are billed at the 5-minute 1.25x rate, undercharging by 37.5%

  weave-os/router#867 · Filter by author mastermanas805 opened on Jul 31, 2026
  2

• ProxyOpenAIChatCompletion never runs the cross-envelope no-progress detector

  weave-os/router#825 · Filter by author rohith500 opened on Jul 23, 2026

• SQL queries for session_pins, DebitOrgCredits key_spend, and GetUserMonthlySpendAndLimit lack tenant-ownership predicates

  weave-os/router#796 · Filter by author rohith500 opened on Jul 20, 2026

• billing: org monthly spend-limit TOCTOU — concurrent preflights can overshoot a hard cap by N× request cost

  weave-os/router#793 · Filter by author rohith500 opened on Jul 19, 2026

• ProxyOpenAIChatCompletion never calls runCompactionHandover after PrefixTrimmed — OpenAI client-trim stays lose prior-work summary

  weave-os/router#791 · Filter by author rohith500 opened on Jul 19, 2026

• PreferredModels can poison the semantic cache — a hit serves another model's body while headers report the newly-scored model

  weave-os/router#789 · Filter by author rohith500 opened on Jul 19, 2026

• fix(cluster): Scorer.Route accepts non-finite and zero-norm embeddings

  weave-os/router#780 · Filter by author rohith500 opened on Jul 17, 2026
  1

• fix(cluster): computeDialCalibration ignores AlphaFloor — QualityBias dial dead zone on floored bundles

  weave-os/router#779 · Filter by author rohith500 opened on Jul 17, 2026
  1

• ProxyOpenAIChatCompletion never consumes UsageBypass: bypassToAnthropic + 429→routeFor fallthrough absent

  weave-os/router#775 · Filter by author rohith500 opened on Jul 17, 2026

• ProxyOpenAIChatCompletion has no post-dispatch failover: OSS-outage baseline retry and subscription-credit retry both absent

  weave-os/router#771 · Filter by author rohith500 opened on Jul 17, 2026

• ProxyOpenAIChatCompletion never suppresses an exhausted Claude subscription — spent OAuth token dispatched, no failover to deployment key

  weave-os/router#761 · Filter by author rohith500 opened on Jul 16, 2026

• Gemini SWITCH never gets bounded-cost handover — ProviderSummarizer rejects FormatGemini

  weave-os/router#755 · Filter by author rohith500 opened on Jul 16, 2026

• fix(bandit): repair PairedModel when Thompson sampling serves the runner-up

  weave-os/router#753 · Filter by author rohith500 opened on Jul 16, 2026