Issues

• Status code checked after reading entire response body into memory

  bug
  Chathula/bvm#13 · Filter by author Chathula opened on Sep 10, 2026

• .part temp file not cleaned up on rename failure

  bug
  Chathula/bvm#12 · Filter by author Chathula opened on Sep 10, 2026

• Weak zip-slip guard in archive extraction

  bug
  Chathula/bvm#11 · Filter by author Chathula opened on Sep 10, 2026

• Unquoted variable in install.sh POSIX test expression

  bug
  Chathula/bvm#9 · Filter by author Chathula opened on Sep 10, 2026

• Response body leak on API error path in RemoteVersions()

  bug
  Chathula/bvm#8 · Filter by author Chathula opened on Sep 10, 2026

• download() has no HTTP timeout — hangs forever on stalled servers

  bug
  Chathula/bvm#7 · Filter by author Chathula opened on Sep 10, 2026

• fail() destroys all error chains — prevents errors.Is/errors.As

  bug
  Chathula/bvm#6 · Filter by author Chathula opened on Sep 10, 2026

• copyBinary discards out.Close() error — corrupt shims possible

  bug
  Chathula/bvm#5 · Filter by author Chathula opened on Sep 10, 2026

• Linux ARM64 install broken — archive name mismatch

  bug
  Chathula/bvm#4 · Filter by author Chathula opened on Sep 10, 2026