Symptom index

Error messages and observable symptoms named by articles, alphabetically. Search also matches them.

"code": "TooManyRequests": Following Microsoft Graph's @odata.nextLink and handling 429 throttling and batch limits
"reason": "rateLimitExceeded": Google API pagination and quota errors: pageToken, 403 rateLimitExceeded and 429
"reason": "userRateLimitExceeded": Google API pagination and quota errors: pageToken, 403 rateLimitExceeded and 429
-bash: ./script.sh: Argument list too long: "Argument list too long" (E2BIG) and the ARG_MAX limit
./app: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.32' not found (required by ./app): "version `GLIBC_2.xx' not found" and how to diagnose a glibc mismatch
.dockerignore rule *.log excludes only files at the context root; nested .log files are still sent to the build: Glob pattern dialects: what * and ** mean in .gitignore, .dockerignore, bash, Python and GitHub Actions
.NET HttpClient throws TaskCanceledException after 100 seconds with no explicit Timeout set: Default HTTP client timeouts by language and library: none, 5 seconds, or 100 seconds
/bin/bash^M: bad interpreter: No such file or directory: "exec format error" and "cannot execute binary file": architecture and shebang mismatches
/usr/bin/env: 'bash\r': No such file or directory: "exec format error" and "cannot execute binary file": architecture and shebang mismatches
0.1 + 0.2 is not 0.3: Floating-point numbers: why 0.1 + 0.2 is not 0.3
1 packets transmitted, 0 received, 100% packet loss: make, ping and nc: exit codes that quietly don't check what you'd assume
400 Bad Request: Migrating an HTTP MCP server to 2026-07-28 while serving older clients
402 Payment Required: Implementing the x402 v2 HTTP exchange: headers, facilitators and settlement
424 (Failed Dependency) on a batch request that uses dependsOn: Following Microsoft Graph's @odata.nextLink and handling 429 throttling and batch limits
<file1> <file2> differ: byte <n>, line <m>: grep, diff, cmp and test/[: exit code 1 means not-found, not failure
<user>@<host>: Permission denied (publickey).: ssh and scp exit codes: 255 is ssh's own failure, anything else is the remote command's
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate: TLS verification errors across tools: unknown authority, CERTIFICATE_VERIFY_FAILED, self-signed in chain
A binary record works on one machine but has different offsets or size elsewhere.: Python struct wire formats: make byte order, size and padding explicit
A C call receives a dangling string pointer or memory is released by the wrong owner.: CString at an FFI boundary: distinguish a borrowed pointer from transferred ownership
A cached JSON-RPC response carries a previous request ID: MCP 2026-07-28 behind HTTP load balancers: routing and safe cache scope
A cached list contains tools unavailable to the current authorization context: MCP 2026-07-28 behind HTTP load balancers: routing and safe cache scope
A certificate renewal or library update changes cryptography without updating the inventory.: Building and maintaining a cryptographic inventory for post-quantum migration
A child acts on a requirement that the parent has superseded: Choosing inherited or fresh context for concurrent subagents
A child process hangs only when its output is captured or verbose.: Python subprocess pipes: drain both streams before waiting indefinitely
A child repeats research already completed by its parent: Choosing inherited or fresh context for concurrent subagents
A class is absent from the first training batch: Incremental learning with partial_fit: stable features, class lists and honest evaluation
A clean textual merge combines incompatible interface assumptions: Resolving ownership conflicts when parallel agents edit the same artifact
A client still sends initialize before every connection: MCP 2026-07-28: the stateless core and its compatibility boundaries
A client treats input_required as a completed tool result: MCP 2026-07-28: the stateless core and its compatibility boundaries
A command-launching service listens on an unintended network interface: Local agent control APIs: preventing host access through an unauthenticated proxy
a config value valid in Prometheus fails when passed to a Go program's own duration parser: Duration and interval strings: ISO 8601, Go's ParseDuration, systemd, Prometheus, PostgreSQL and .NET TimeSpan
A connection uses hybrid key exchange while its certificate still has an RSA or ECDSA public key.: Post-quantum signatures and public TLS certificates: separate readiness checks
A container build or runtime inventory still identifies Python 3.10: Python 3.10 after end of life: finding runtimes and rebuilding environments
A correct password is followed by a failed multifactor challenge: After a login-provider breach: scoped resets, session recovery and breached-password screening
A cyberattack threatens a covered Swiss operator's essential functions or causes information leakage: Swiss cyberattack reporting and the CRA: different duties for operators and product manufacturers
A dependency lock file records tensorlake or a listed native package at 0.5.144: Containing npm worm propagation across developer machines and publishing accounts
A deployment is marked complete while endpoint build evidence is missing.: Prioritising October 2026 Patch Tuesday by exploitation evidence and affected assets
A deployment record identifies an affected container image digest: LiteLLM 1.107.0: checking artifact exposure without restarting compromised Python
A deployment template contains an explicit list of classical curves.: Finding TLS group pins that prevent applications from adopting hybrid defaults
A documentation response asks the agent to read credentials, send data or delete unrelated files: Context7 CVE-2026-75130: hosted remediation and untrusted custom rules
A forced hybrid handshake fails while the connection using defaults succeeds.: Checking whether a TLS connection actually negotiated X25519MLKEM768
A late child response restores a plan the user has changed: Redirecting a running agent with revisioned instructions and reconciled side effects
A later function call receives items accumulated by an earlier call.: Python mutable defaults: distinguish omitted arguments from shared state
A library builds locally but its consumers lack headers or required link dependencies.: CMake PUBLIC, PRIVATE and INTERFACE: repairing dependency scope without global flags
A lifecycle feed is stale, unavailable or returns an unknown end date: Automating end-of-life detection across SBOMs, container images and software inventories
A local control service accepts privileged operations without authenticating the caller: Local agent control APIs: preventing host access through an unauthenticated proxy
A login provider reports exposure of password verifiers or session material: After a login-provider breach: scoped resets, session recovery and breached-password screening
A low-level sender truncates or duplicates output under pressure.: Partial writes: advance the buffer offset instead of resending the full payload
A native binding compiles but reads incorrect fields on a supported platform.: Rust FFI layout: repr(C) on an outer struct does not repair nested fields
A native test fails with an out-of-bounds or use-after-free report.: AddressSanitizer triage: fix the first invalid access before trusting later behavior
A new enum value disappears, moves to unknown fields or reaches an unhandled application branch.: Protocol Buffers enums: handle unknown numeric values according to runtime behavior
A notice omits affected accounts, data categories or a usable exposure window: Reading a provider breach notice: verify the sender, scope and indicators
A packed-field access is rejected or an unsafe cast is proposed as a workaround.: Packed Rust fields: avoid creating an unaligned reference before a raw-pointer cast
A panic or foreign exception unexpectedly crosses a language boundary.: Rust FFI unwinding: choose an explicit panic and exception boundary
A partial update cannot reliably clear a scalar value to its default.: Protocol Buffers field presence: distinguish setting zero from leaving a field unchanged
A patch is installed but investigation of earlier compromise remains open: After patching an exploited edge device: evidence, recovery and return-to-service checks
A payment has no linked approval or order record: Enforcing agent spending limits across x402, AP2 and delegated checkout
A private registry omits publication timestamps needed by the age policy: Package release cooldowns: exact settings, units, and enforcement boundaries
A product incident threatens sensitive data or enables malicious code: CRA reporting since September 2026: triggers, deadlines and the Single Reporting Platform
A project treats a free download as sufficient proof that no CRA duties can apply: CRA and open source: distinguishing contributors, manufacturers and stewards
A proposed direct upgrade treats Windows Server 2012 and 2012 R2 as the same source release: Windows Server 2012 ESU expiry and the Server 2016 migration deadline
A proposed fix uses unsafe pin access merely to satisfy a type error.: Rust Pin: preserve the pointee address without freezing the pointer variable
A provider publishes revised indicators or changes its affected-customer scope: Reading a provider breach notice: verify the sender, scope and indicators
A purchase exceeds its recorded approval: Enforcing agent spending limits across x402, AP2 and delegated checkout
A race appears in a service despite a previously clean race-detector test run.: Go race-detector coverage: a clean run says nothing about unexecuted paths
A race report names accesses from different threads to the same state.: ThreadSanitizer triage: recover the missing synchronization contract
A registered tool disappears or changes owner after another server connects: WeKnora CVE-2026-30856: verifying tool routing after a shadowing fix
A Relaunch button remains visible after an update downloads.: Chrome CVE-2026-87491: close the gap between an installed update and a relaunched browser
A release approval cannot be tied to a specific artifact and source revision: Binding npm and PyPI publishing identity to approved release artifacts
A reporting plan assigns the manufacturer's September 2026 start date to every open-source contributor: CRA and open source: distinguishing contributors, manufacturers and stewards
a resolved proposal shows no approve/reject count on the gateway: Artifact Council: reading a closed ballot's count and voters from chain
A restarted worker receives a fresh budget for the same task: Defining an execution contract for agents that continue after logout
A Server 2016 workload has no migration owner or documented ESU transition plan: Windows Server 2012 ESU expiry and the Server 2016 migration deadline
A server requests sampling/createMessage from the client: MCP Roots, Sampling and Logging: migration paths after 2026-07-28 deprecation
A server-start failure is followed by unexplained filesystem changes: MCP STDIO command injection: Langflow remediation and Fay exposure
A service has a software inventory but no record of negotiated cryptography.: Building and maintaining a cryptographic inventory for post-quantum migration
A service or scheduled job still points to a Python 3.10 virtual environment: Python 3.10 after end of life: finding runtimes and rebuilding environments
A signal causes spurious failures or repeated retries extend an operation indefinitely.: EINTR handling: retry the specific operation without renewing its whole deadline
A small compressed input expands beyond the intended memory budget.: Bounded zlib decompression: enforce the cumulative output budget while decoding
A streaming model changes behavior after feature preprocessing changes: Incremental learning with partial_fit: stable features, class lists and honest evaluation
A supplier reports post-quantum support without identifying the protocol or deployment path.: Building and maintaining a cryptographic inventory for post-quantum migration
A supporting legal entity is described as a steward without checking its role in product supply: CRA and open source: distinguishing contributors, manufacturers and stewards
A Swiss manufacturer learns of malicious exploitation affecting its product supplied to the EU: Swiss cyberattack reporting and the CRA: different duties for operators and product manufacturers
A task ignores cancellation or a structured task scope fails to shut down as expected.: asyncio cancellation: perform cleanup without swallowing CancelledError
A trusted publisher remains configured after its maintainer leaves: Binding npm and PyPI publishing identity to approved release artifacts
A vendor advisory matches an installed dependency or executed build artifact: A malicious package was installed: contain execution before replacing credentials
A verified provider notice identifies stored customer API keys as potentially exposed: When a breached provider stored your API keys: containment, replacement and billing checks
A vulnerability report cannot be mapped to shipped products or component versions: Preparing a manufacturer's CRA vulnerability workflow: intake, evidence and reporting clocks
A Windows 10 inventory entry has no ESU enrolment or activation evidence: Windows 10 after October 2026: consumer and organisational ESU coverage
About Google Chrome displays a version below the approved security baseline.: Chrome CVE-2026-87491: close the gap between an installed update and a relaunched browser
accept4() failed (24: Too many open files): "Too many open files" (EMFILE) and the file-descriptor limit
accept4: too many open files: "Too many open files" (EMFILE) and the file-descriptor limit
Access-log entries match the vendor's investigation guidance; a match requires investigation, not an automatic verdict.: Zammad and Atlassian October 2026 KEV response: select fixes by release and installation method
Agent transcripts or gateway response logs contain authentication tokens: LiteLLM's October 2026 incident: confirmed token exposure and gateway-log precautions
Aggregate model quality hides differences between clients: Federated averaging: local training, client weighting and heterogeneous data
An affected build with DTLS or SAML services enabled: NetScaler ADC and Gateway: distinguish the September and October fixes before recovery
An affected Connect Secure release remains deployed: Ivanti Connect Secure: patching CVE-2026-104935 and investigating earlier compromise
An affected PAN-OS maintenance release remains deployed: PAN-OS CVE-2026-0322: verify maintenance-line fixes and recover the management plane
An agent proposes file writes unrelated to the requested document or build: MCP file-write traversal: notebook vault containment and Ansible Lightspeed scope
An agent resubmits an older candidate after a conflict was resolved: Resolving ownership conflicts when parallel agents edit the same artifact
An algorithm implementation is described as certificate readiness without trust-policy evidence.: Post-quantum signatures and public TLS certificates: separate readiness checks
An application still negotiates classical groups after its TLS implementation is upgraded.: Finding TLS group pins that prevent applications from adopting hybrid defaults
An application's sys.version_info reports major=3 and minor=10: Python 3.10 after end of life: finding runtimes and rebuilding environments
An approved tool call is dispatched to an unexpected MCP server: WeKnora CVE-2026-30856: verifying tool routing after a shadowing fix
An Atlassian installation predates the fixed version for its product and release train.: Zammad and Atlassian October 2026 KEV response: select fixes by release and installation method
An authorization response omits iss despite advertised issuer-parameter support: MCP 2026-07-28 authorization: issuer checks and client registration changes
An edge device was exposed while running a version affected by an exploited vulnerability: After patching an exploited edge device: evidence, recovery and return-to-service checks
An editor reports missing headers while the build succeeds, or the reverse.: Compilation databases: reproduce the failing translation unit before changing headers
An email or message claims that your provider suffered a breach: Reading a provider breach notice: verify the sender, scope and indicators
An exploited vulnerability has no mapped asset owner or restart deadline.: Prioritising October 2026 Patch Tuesday by exploitation evidence and affected assets
An image has a current tag but no verified lifecycle evidence for its contents: Automating end-of-life detection across SBOMs, container images and software inventories
An incident record contains a Swiss notification receipt but no separate assessment of the CRA duty: Swiss cyberattack reporting and the CRA: different duties for operators and product manufacturers
An incident ticket lacks the time when active exploitation became known: Preparing a manufacturer's CRA vulnerability workflow: intake, evidence and reporting clocks
An installation record or lock file contains litellm==1.107.0: LiteLLM 1.107.0: checking artifact exposure without restarting compromised Python
An internet-reachable Zammad 6.5 installation lacks the emergency 6.5.5 update.: Zammad and Atlassian October 2026 KEV response: select fixes by release and installation method
An interrupted operation is repeated despite an unknown remote outcome: Redirecting a running agent with revisioned instructions and reconciled side effects
An inventory component has no mapped support provider or release cycle: Automating end-of-life detection across SBOMs, container images and software inventories
An old tlsmlkem=0 compatibility setting remains in the runtime environment.: Finding TLS group pins that prevent applications from adopting hybrid defaults
An SRP reminder shows a deadline earlier than the recorded awareness time implies: CRA reporting since September 2026: triggers, deadlines and the Single Reporting Platform
An unattended run waits indefinitely for an interactive answer: Defining an execution contract for agents that continue after logout
An update is deferred despite a newer published package version: Package release cooldowns: exact settings, units, and enforcement boundaries
An updater waits before opening a pull request but local installation accepts fresh dependencies: Package release cooldowns: exact settings, units, and enforcement boundaries
Another installation is already in progress. Complete that installation before proceeding with this install.: Windows exit codes beyond pass/fail: robocopy's bitmask, msiexec's installer codes, and $LASTEXITCODE
API rate limit exceeded for: Paging the GitHub REST API and reading its primary and secondary rate-limit headers
Appending to one slice unexpectedly changes data visible through another slice.: Go append aliasing: test both spare-capacity and reallocation paths
Arithmetic checks behave differently after changing optimization or compiler flags.: Signed arithmetic overflow: document the compiler contract before changing optimization
atob() throws InvalidCharacterError on a string Python decodes without complaint: Base64 variants: standard vs URL-safe alphabets, padding rules and decoder strictness
Audit records show unrecognized identities, credentials or resource changes: When a breached provider stored your API keys: containment, replacement and billing checks
Authentication failures increase across accounts or network sources: After a login-provider breach: scoped resets, session recovery and breached-password screening
authentication_required: Merchant integration with ACP: checkout sessions, delegated tokens and safe retries
Automatic merge failed; fix conflicts and then commit the result.: git exit codes an agent can rely on: diff --exit-code, ls-remote --exit-code, and bisect run's 125
base64url string containing - or _ fails to decode with a standard decoder, or Python silently returns wrong bytes: Base64 variants: standard vs URL-safe alphabets, padding rules and decoder strictness
bash: ./app: Text file busy: "Text file busy" (ETXTBSY): writing to a running executable
bash: /usr/bin/rm: Argument list too long: "Argument list too long" (E2BIG) and the ARG_MAX limit
batch returns 200 but individual responses have status 429: Following Microsoft Graph's @odata.nextLink and handling 429 throttling and batch limits
binascii.Error: Incorrect padding from base64.urlsafe_b64decode on a JWT segment: Base64 variants: standard vs URL-safe alphabets, padding rules and decoder strictness
Browser and command-line checks select different key-exchange groups.: Checking whether a TLS connection actually negotiated X25519MLKEM768
bundle update jumps from 2.2 to 2.9 despite a ~> 2.2 constraint: Version range syntax across npm, Cargo, pip, Composer, Go modules, Maven, NuGet and Bundler
cannot execute binary file: Exec format error: "exec format error" and "cannot execute binary file": architecture and shebang mismatches
cannot execute: required file not found: "exec format error" and "cannot execute binary file": architecture and shebang mismatches
cannot read the text of a proposal under vote: Artifact Council: the weekly deposit room refusal and reading a page under vote
cargo update picks a version the constraint did not seem to permit: Version range syntax across npm, Cargo, pip, Composer, Go modules, Maven, NuGet and Bundler
Chinese, Japanese or Korean substring search returns no result: Measured CJK substring retrieval with PostgreSQL simple full-text search and character bigrams
chrome://policy shows an unexpected update restriction or relaunch policy status.: Chrome CVE-2026-87491: close the gap between an installed update and a relaunched browser
Clean builds succeed but incremental or parallel builds use stale generated files.: CMake generated files: separate build ordering from regeneration dependencies
Code appears to lock shared state but different copies use different lock identities.: Go mutex copying: keep the lock identity with the state it protects
complete_in_progress: Merchant integration with ACP: checkout sessions, delegated tokens and safe retries
Concurrent queue consumers claim the same job: Measured PostgreSQL SKIP LOCKED claims with four concurrent queue consumers
Concurrent requests consume the same remaining budget: Enforcing agent spending limits across x402, AP2 and delegated checkout
Configuration tries to execute target binaries on the build host or finds host libraries.: CMake cross-compilation probes: distinguish compiling, linking and running
CONFLICT (content): Merge conflict in <file>: git exit codes an agent can rely on: diff --exit-code, ls-remote --exit-code, and bisect run's 125
Conflicting peer dependency:: npm's "ERESOLVE unable to resolve dependency tree" and peer dependency conflicts
Conversion output reports unsupported configuration or approximate timeout translation: After ingress-nginx retirement: validating a parallel Gateway API migration
Could not resolve dependency:: npm's "ERESOLVE unable to resolve dependency tree" and peer dependency conflicts
cp: cannot create regular file '/usr/local/bin/app': Text file busy: "Text file busy" (ETXTBSY): writing to a running executable
cron() string rejected by EventBridge with a field-count error: Cron expression dialects: fields, seconds and the day-of-month/day-of-week trap
CRON_TZ=Europe/Zurich prefix rejected by the Kubernetes API: Cron expression dialects: fields, seconds and the day-of-month/day-of-week trap
curl command runs for hours with no --max-time set: Default HTTP client timeouts by language and library: none, 5 seconds, or 100 seconds
curl ignores HTTP_PROXY set by a CI runner: Proxy environment variables across curl, requests, Go, Java, Node and wget
curl: (22) The requested URL returned error: 404: curl's exit codes: telling a DNS failure from a TLS failure from --fail
curl: (28) Connection timed out after <n> milliseconds: curl's exit codes: telling a DNS failure from a TLS failure from --fail
curl: (28) Operation timed out after <n> milliseconds with <n> bytes received: curl's exit codes: telling a DNS failure from a TLS failure from --fail
curl: (35) OpenSSL/<version>: error:0A00010B:SSL routines::wrong version number: curl's exit codes: telling a DNS failure from a TLS failure from --fail
curl: (52) Empty reply from server: curl's exit codes: telling a DNS failure from a TLS failure from --fail
curl: (56) Recv failure: Connection reset by peer: curl's exit codes: telling a DNS failure from a TLS failure from --fail
curl: (6) Could not resolve host: <host>: curl's exit codes: telling a DNS failure from a TLS failure from --fail
curl: (60) SSL certificate problem: unable to get local issuer certificate: TLS verification errors across tools: unknown authority, CERTIFICATE_VERIFY_FAILED, self-signed in chain · curl's exit codes: telling a DNS failure from a TLS failure from --fail
curl: (7) Failed to connect to <host> port 443 after <n> ms: Couldn't connect to server: curl's exit codes: telling a DNS failure from a TLS failure from --fail
current transaction is aborted: Savepoints and the aborted-transaction state in PostgreSQL
current transaction is aborted, commands ignored until end of transaction block: Measured PostgreSQL savepoint recovery after a duplicate-key error
Database connection pool exhausted: Database connection pooling and its limits
date formatted with a year token shows the wrong year on December 31 or January 1 (week-year trap): Date and time format tokens: strftime, Java, Go, .NET and Moment/date-fns translated
date-fns format() throws RangeError: Use `dd` instead of `DD` (in ...) for formatting days of the month: Date and time format tokens: strftime, Java, Go, .NET and Moment/date-fns translated
Dead tuples accumulate: VACUUM, autovacuum and table bloat
Deep OFFSET pagination becomes slow: Measured PostgreSQL deep pagination: 90,020 scanned rows with OFFSET versus 20 with a cursor
Dependency-install or test jobs also hold package-publishing credentials: Binding npm and PyPI publishing identity to approved release artifacts
diff exits 1 and prints the differing lines (normal format unless -u) when files differ: grep, diff, cmp and test/[: exit code 1 means not-found, not failure
Different agents claim authority to replace the same artifact: Resolving ownership conflicts when parallel agents edit the same artifact
docker run --env-file passes quotes and ${VAR} through literally, or rejects an export line: .env file parsing dialects: quoting, export, multiline and expansion across five loaders
double-quoted identifier fails on MySQL unless ANSI_QUOTES is set: Upsert, row limits and identifier quoting across PostgreSQL, MySQL, SQLite and SQL Server
dpkg: error processing package: apt-get, dpkg, dnf and zypper exit codes: when 100 means updates, not failure
E: Unable to locate package: apt-get, dpkg, dnf and zypper exit codes: when 100 means updates, not failure
Elapsed-time behavior changes after a timestamp is serialized, parsed or converted.: Go elapsed time: serialization loses the monotonic clock component
ENOSPC: System limit for number of file watchers reached: "ENOSPC: System limit for number of file watchers reached" and inotify limits
Equivalent messages produce different stored hashes after a runtime or producer change.: Protocol Buffers deterministic serialization is not a canonical message identity
ERR_REQUIRE_ESM: ES modules versus CommonJS in Node.js
Error: EMFILE: too many open files, open '/path/to/file': "Too many open files" (EMFILE) and the file-descriptor limit
Error: ENOSPC: System limit for number of file watchers reached, watch '/path/to/project': "ENOSPC: System limit for number of file watchers reached" and inotify limits
error: externally-managed-environment: Pip's "error: externally-managed-environment" and PEP 668
ES module and CommonJS interoperability problems: ES modules versus CommonJS in Node.js
ETXTBSY: "Text file busy" (ETXTBSY): writing to a running executable
Every deferred callback operates on the final loop item.: Python loop callbacks: bind the intended value before deferred execution
exec /<entrypoint>: exec format error: docker/podman run exit codes: 125, 126, 127, and the signal codes that reach through them
exec /usr/local/bin/app: exec format error: "exec format error" and "cannot execute binary file": architecture and shebang mismatches
exec user process caused: exec format error: "exec format error" and "cannot execute binary file": architecture and shebang mismatches
exec: "<cmd>": executable file not found in $PATH: docker/podman run exit codes: 125, 126, 127, and the signal codes that reach through them
failed: systemctl exit codes: is-active, is-enabled, is-failed, and what LSB code 3 means
Failed to Execute: NetScaler ADC and Gateway: distinguish the September and October fixes before recovery
Failed to verify authenticity: signature mismatch: Verifying Slack request signatures: X-Slack-Signature, the 5-minute replay window and the 3-second rule
Failed to verify authenticity: x-slack-request-timestamp must differ from system time by no more than 5 minutes or request is stale: Verifying Slack request signatures: X-Slack-Signature, the 5-minute replay window and the 3-second rule
fatal: detected dubious ownership in repository at '/path/to/repo': Git's "detected dubious ownership in repository" error and the safe.directory fix
fatal: unsafe repository ('/path/to/repo' is owned by someone else): Git's "detected dubious ownership in repository" error and the safe.directory fix
Fetch request does not finish: Using fetch with timeouts and AbortController
Fetch request needs cancellation: Using fetch with timeouts and AbortController
fetching all of users.list without pagination triggers stricter limits: Paging the Slack Web API and handling its per-method rate-limit tiers
Filesystem reports free space but writes fail: Diagnosing 'No space left on device' when df shows free space
find: '<path>': Permission denied: find and xargs exit codes: find's coarse 0/>0 versus xargs's 123-127 ladder
Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps: npm's "ERESOLVE unable to resolve dependency tree" and peer dependency conflicts
Floating-point rounding errors in monetary calculations: Money and other exact quantities: use Decimal, not float
fnmatch.fnmatch('a/b.py', '*.py') unexpectedly returns True: Glob pattern dialects: what * and ** mean in .gitignore, .dockerignore, bash, Python and GitHub Actions
Foreign resources leak, are freed twice or receive callbacks after wrapper destruction.: Rust FFI resource ownership: pair the foreign constructor with its actual destructor
FormatException when calling TimeSpan.Parse: Duration and interval strings: ISO 8601, Go's ParseDuration, systemd, Prometheus, PostgreSQL and .NET TimeSpan
funded: true at the quote, then refused at the proposal step: Artifact Council: the weekly deposit room refusal and reading a page under vote
Generated Markdown or JSON files appear outside the approved vault: MCP file-write traversal: notebook vault containment and Ansible Lightspeed scope
GET /v2/uploads/<upload> returns 404: Artifact Council: the weekly deposit room refusal and reading a page under vote
Git checkout contains LFS pointer instead of file content: Git LFS: pointer files, smudge filters and when not to use it
Git repository history contains large binary files: Removing large binaries from Git history with git filter-repo
GitHub Actions workflow ran later than the scheduled time, or an hour off after a DST change: Cron expression dialects: fields, seconds and the day-of-month/day-of-week trap
GitHub Actions workflow still runs even though the file matches paths-ignore: Glob pattern dialects: what * and ** mean in .gitignore, .dockerignore, bash, Python and GitHub Actions
GitHub Recent Deliveries shows timed out and no automatic retry follows: Idempotent webhook handling: delivery IDs, provider retry schedules and responding fast
gitignore negation pattern has no effect: Glob pattern dialects: what * and ** mean in .gitignore, .dockerignore, bash, Python and GitHub Actions
Go base64.StdEncoding.DecodeString fails on a string produced with URLEncoding: Base64 variants: standard vs URL-safe alphabets, padding rules and decoder strictness
Go interface containing a nil pointer is not nil: Go interfaces: implicit satisfaction and the non-nil nil
Go program proxies a request to a host curl and requests treated as excluded: Proxy environment variables across curl, requests, Go, Java, Node and wget
Go regexp.Compile returns an error parsing lookahead/backreference syntax: Regex flavors: BRE/ERE, PCRE2, RE2, JavaScript, Python and .NET side by side
Go time.Format prints the layout text (for example YYYY-MM-DD) literally instead of a date: Date and time format tokens: strftime, Java, Go, .NET and Moment/date-fns translated
grep 'a+b' matches the literal text a+b instead of one-or-more a followed by b: Regex flavors: BRE/ERE, PCRE2, RE2, JavaScript, Python and .NET side by side
grep exits 1 with no output when the pattern is absent: grep, diff, cmp and test/[: exit code 1 means not-found, not failure
grep: <file>: No such file or directory (exit 2): grep, diff, cmp and test/[: exit code 1 means not-found, not failure
HeaderMismatch: MCP 2026-07-28 behind HTTP load balancers: routing and safe cache scope · Migrating an HTTP MCP server to 2026-07-28 while serving older clients
hint: See PEP 668 for the detailed specification.: Pip's "error: externally-managed-environment" and PEP 668
Host key for example.com has changed and you have requested strict checking.: SSH's "Host key verification failed" and "REMOTE HOST IDENTIFICATION HAS CHANGED" warnings
Host key verification failed.: SSH's "Host key verification failed" and "REMOTE HOST IDENTIFICATION HAS CHANGED" warnings · ssh and scp exit codes: 255 is ssh's own failure, anything else is the remote command's
Host-side processes appear without a matching authorized agent action: Local agent control APIs: preventing host access through an unauthenticated proxy
HTTP 402 from /v2/relay: Artifact Council: the weekly deposit room refusal and reading a page under vote
HTTP/1.1 429 Too Many Requests: Paging the Slack Web API and handling its per-method rate-limit tiers
httpx.TimeoutException after 5 seconds on a call expected to wait longer: Default HTTP client timeouts by language and library: none, 5 seconds, or 100 seconds
idempotency_conflict: Merchant integration with ACP: checkout sessions, delegated tokens and safe retries
idempotency_in_flight: Merchant integration with ACP: checkout sessions, delegated tokens and safe retries
idempotency_key_required: Merchant integration with ACP: checkout sessions, delegated tokens and safe retries
Idempotent-Replayed: true: Stripe API pagination and idempotency keys: starting_after, has_more and the 24-hour window
In-flight requests interrupted during service shutdown: Graceful shutdown: handling SIGTERM in services
inactive: systemctl exit codes: is-active, is-enabled, is-failed, and what LSB code 3 means
Ingress resources still depend on nginx.ingress.kubernetes.io annotations: After ingress-nginx retirement: validating a parallel Gateway API migration
Installation success or error status: 3010.: Windows exit codes beyond pass/fail: robocopy's bitmask, msiexec's installer codes, and $LASTEXITCODE
invalid HTTP response: Verifying GitHub webhook signatures: X-Hub-Signature-256, timing-safe comparison and delivery IDs
invalid input syntax for type interval in PostgreSQL: Duration and interval strings: ISO 8601, Go's ParseDuration, systemd, Prometheus, PostgreSQL and .NET TimeSpan
invalid_credential: AP2 v0.2 mandates: user intent, autonomous purchases and FIDO governance
invalid_cursor: Paging the Slack Web API and handling its per-method rate-limit tiers
Inventory or deployment records show litellm==1.107.0 from the affected publication: LiteLLM's October 2026 incident: confirmed token exposure and gateway-log precautions
Java client with -Dhttp.nonProxyHosts still routes through the proxy: Proxy environment variables across curl, requests, Go, Java, Node and wget
Java output shows a day number above 31 because the pattern used DD: Date and time format tokens: strftime, Java, Go, .NET and Moment/date-fns translated
job fires on both the matched weekday and the matched day of month, not just one: Cron expression dialects: fields, seconds and the day-of-month/day-of-week trap
JSON serialization throws for BigInt or large identifiers change value after a round trip.: BigInt over JSON: define a lossless field contract before adding a replacer
JVM container exceeds memory limit: Sizing a JVM inside a container: heap percentage, non-heap memory and CPU count
JWT fails to decode because of unexpected padding characters: Base64 variants: standard vs URL-safe alphabets, padding rules and decoder strictness
kex_exchange_identification: read: Connection reset by peer: ssh and scp exit codes: 255 is ssh's own failure, anything else is the remote command's
Keys for idempotent requests can only be used with the same parameters they were first used with.: Stripe API pagination and idempotency keys: starting_after, has_more and the 24-hour window
Killed: timeout, kill and the 128+signal convention: reading what killed a process from its exit code
list response has_more is true but iteration stopped early: Stripe API pagination and idempotency keys: starting_after, has_more and the 24-hour window
Livepatch status lacks confirmed coverage for an applicable CVE.: Linux kernel KEV remediation: verify each CVE against the distribution package and running kernel
lock_timeout: Stripe API pagination and idempotency keys: starting_after, has_more and the 24-hour window
Long JavaScript tasks block rendering: The JavaScript event loop: tasks, microtasks and rendering
Long-running transactions block database maintenance: Long-running and idle-in-transaction sessions in PostgreSQL: what they block and how to bound them
make: *** [<makefile>:<line>: <target>] Error <n>: make, ping and nc: exit codes that quietly don't check what you'd assume
make: *** No rule to make target '<target>'. Stop.: make, ping and nc: exit codes that quietly don't check what you'd assume
Management inventory shows domain join, Microsoft Entra join or MDM enrolment: Windows 10 after October 2026: consumer and organisational ESU coverage
Management-plane traffic involving an indicator published in the advisory: PAN-OS CVE-2026-0322: verify maintenance-line fixes and recover the management plane
Maven build resolves a lower version than a bare version number that looked like a strict minimum: Version range syntax across npm, Cargo, pip, Composer, Go modules, Maven, NuGet and Bundler
MCP launch commands or environment settings differ from the approved configuration: MCP STDIO command injection: Langflow remediation and Fay exposure
minute value appears where the month was expected, or vice versa: Date and time format tokens: strftime, Java, Go, .NET and Moment/date-fns translated
Missing page returns HTTP 200: Custom 404 pages and soft 404s: serve the error page with the error status
Model evaluation includes information from the test set: Data leakage in machine learning: how information from the future or the test set gets into a model
More local training does not improve the shared model: Federated averaging: local training, client weighting and heterogeneous data
Native-client registration fails because of redirect URI constraints: MCP 2026-07-28 authorization: issuer checks and client registration changes
nextPageToken present but iteration stopped early: Google API pagination and quota errors: pageToken, 403 rateLimitExceeded and 429
No ED25519 host key is known for example.com and you have requested strict checking.: SSH's "Host key verification failed" and "REMOTE HOST IDENTIFICATION HAS CHANGED" warnings
No signatures found matching the expected signature for payload: The raw-body trap: why JSON body parsers break webhook signature verification
No signatures found with expected scheme v1: Verifying Stripe webhook signatures: Stripe-Signature, timestamp tolerance and secret rotation
No space left on device: Diagnosing 'No space left on device' when df shows free space
Node fetch() bypasses the proxy even though HTTPS_PROXY is exported: Proxy environment variables across curl, requests, Go, Java, Node and wget
Node process sees an escaped \n instead of a real newline: .env file parsing dialects: quoting, export, multiline and expansion across five loaders
Nothing to do.: apt-get, dpkg, dnf and zypper exit codes: when 100 means updates, not failure
npm ERR! code ERESOLVE: npm's "ERESOLVE unable to resolve dependency tree" and peer dependency conflicts
npm ERR! ERESOLVE unable to resolve dependency tree: npm's "ERESOLVE unable to resolve dependency tree" and peer dependency conflicts
npm error code ERESOLVE: npm's "ERESOLVE unable to resolve dependency tree" and peer dependency conflicts
npm error ERESOLVE unable to resolve dependency tree: npm's "ERESOLVE unable to resolve dependency tree" and peer dependency conflicts
npm install resolves a version outside what a ^ range looked like it should allow: Version range syntax across npm, Cargo, pip, Composer, Go modules, Maven, NuGet and Bundler
NULL values pass a positive-value CHECK constraint: Measured PostgreSQL CHECK and UNIQUE behavior with two NULL values
Numeric parsing or formatting depends on another request changing the process locale.: Python locale changes: keep request-specific number parsing out of process-global state
OCI runtime create failed: runc create failed: unable to start container process: docker/podman run exit codes: 125, 126, 127, and the signal codes that reach through them
octal-looking value 0755 parsed as decimal 755, not octal 493: YAML 1.1 vs 1.2 implicit typing: the Norway problem, octal numbers and which parsers use which
on/off values silently become booleans in one tool and stay strings in another: YAML 1.1 vs 1.2 implicit typing: the Norway problem, octal numbers and which parsers use which
OOMKilled: Kubernetes resource requests and limits: scheduling, throttling and OOM kills
Operating-system inventory identifies Windows Server 2012 or Windows Server 2012 R2: Windows Server 2012 ESU expiry and the Server 2016 migration deadline
operation_timeout: Verifying Slack request signatures: X-Slack-Signature, the 5-minute replay window and the 3-second rule
OSError: [Errno 24] Too many open files: "Too many open files" (EMFILE) and the file-descriptor limit
OSError: [Errno 26] Text file busy: "Text file busy" (ETXTBSY): writing to a running executable
OSError: [Errno 7] Argument list too long: "Argument list too long" (E2BIG) and the ARG_MAX limit
OSError: [Errno 8] Exec format error: "exec format error" and "cannot execute binary file": architecture and shebang mismatches
Outbound connections to the vendor-published indicator proxystream.st.: Plex Media Server October 2026 KEV response: update, review exposure and recover compromised hosts
PAYMENT-SIGNATURE header is required: Implementing the x402 v2 HTTP exchange: headers, facilitators and settlement
per_page value above 100 silently returns fewer results than requested: Paging the GitHub REST API and reading its primary and secondary rate-limit headers
Permission denied (publickey).: SSH's "Permission denied (publickey)" and how to read it with ssh -v
Permission denied (publickey,gssapi-keyex,gssapi-with-mic).: SSH's "Permission denied (publickey)" and how to read it with ssh -v
Permission denied (publickey,password).: SSH's "Permission denied (publickey)" and how to read it with ssh -v
ping: <host>: Name or service not known: make, ping and nc: exit codes that quietly don't check what you'd assume
pip install 'package~=2.2' rejects a version the developer expected to match: Version range syntax across npm, Cargo, pip, Composer, Go modules, Maven, NuGet and Bundler
piping through base64 breaks a one-line config value because of embedded newlines: Base64 variants: standard vs URL-safe alphabets, padding rules and decoder strictness
Please retry again later.: Following Microsoft Graph's @odata.nextLink and handling 429 throttling and batch limits
Plex Web Settings > General displays a server version older than 1.43.3.10861.: Plex Media Server October 2026 KEV response: update, review exposure and recover compromised hosts
Pods carry the label app.kubernetes.io/name=ingress-nginx: After ingress-nginx retirement: validating a parallel Gateway API migration
PostgreSQL collation version mismatch after library upgrade: Collations in PostgreSQL: libc, ICU and the builtin provider, and why a library upgrade can corrupt an index
PostgreSQL deadlock: Diagnosing lock waits and deadlocks in PostgreSQL with pg_locks, pg_blocking_pids and lock_timeout
PostgreSQL idle in transaction: Long-running and idle-in-transaction sessions in PostgreSQL: what they block and how to bound them
PostgreSQL planner row estimates are wrong: Planner statistics in PostgreSQL: statistics targets, correlated columns and misestimates
PostgreSQL queries wait for locks: Diagnosing lock waits and deadlocks in PostgreSQL with pg_locks, pg_blocking_pids and lock_timeout
PostgreSQL table bloat: VACUUM, autovacuum and table bloat
PostgreSQL transaction remains aborted after an error: Savepoints and the aborted-transaction state in PostgreSQL
Potentially Compromised: NetScaler ADC and Gateway: distinguish the September and October fixes before recovery
Preserved site-packages contains litellm-1.107.0.dist-info or incident-matching startup files: LiteLLM 1.107.0: checking artifact exposure without restarting compromised Python
proposal missing from proposals[] after it passed: Artifact Council: reading a closed ballot's count and voters from chain
Protocol log messages disappear when request logLevel is omitted: MCP Roots, Sampling and Logging: migration paths after 2026-07-28 deprecation
Public package shadows a private dependency: Dependency confusion: when a public package shadows a private one
Publishing or repository activity appears after a suspicious dependency installation: A malicious package was installed: contain execution before replacing credentials
Python 3.13 upgrade changes what Path.glob('**') returns: Glob pattern dialects: what * and ** mean in .gitignore, .dockerignore, bash, Python and GitHub Actions
Python memory usage keeps growing: Finding a memory leak with tracemalloc snapshots
Python re.error: look-behind requires fixed-width pattern: Regex flavors: BRE/ERE, PCRE2, RE2, JavaScript, Python and .NET side by side
Python re.error: unknown extension ?<n for a (?<name>...) group written for PCRE or JavaScript: Regex flavors: BRE/ERE, PCRE2, RE2, JavaScript, Python and .NET side by side
Quartz rejects an expression that sets both day-of-month and day-of-week instead of using ?: Cron expression dialects: fields, seconds and the day-of-month/day-of-week trap
Rate Limit Exceeded: Google API pagination and quota errors: pageToken, 403 rateLimitExceeded and 429
RateLimit-Policy: "default";q=100;w=60: RateLimit and RateLimit-Policy versus X-RateLimit-*: reading whichever quota headers an API sends
RateLimit: "default";r=0;t=30: RateLimit and RateLimit-Policy versus X-RateLimit-*: reading whichever quota headers an API sends
recent entry has only hash, kind, status, at: Artifact Council: reading a closed ballot's count and voters from chain
Reliable evidence of malicious exploitation of a vulnerability in a shipped product: CRA reporting since September 2026: triggers, deadlines and the Single Reporting Platform
Remote operations continue after the local worker has stopped: Defining an execution contract for agents that continue after logout
Request metadata leaks into later work or a nested override erases its parent context.: ContextVar restoration: reset with the token instead of guessing the previous value
Request signatures didn't match!: The raw-body trap: why JSON body parsers break webhook signature verification · Verifying GitHub webhook signatures: X-Hub-Signature-256, timing-safe comparison and delivery IDs
requests bypasses the proxy for notexample.com because NO_PROXY contains example.com: Proxy environment variables across curl, requests, Go, Java, Node and wget
Requests fail when routed to a different server instance: Migrating an HTTP MCP server to 2026-07-28 while serving older clients
requests.get() call never returns: Default HTTP client timeouts by language and library: none, 5 seconds, or 100 seconds
Retrieved custom rules are inserted into privileged instructions without source labeling: Context7 CVE-2026-75130: hosted remediation and untrusted custom rules
Retry-After: 30: Paging the Slack Web API and handling its per-method rate-limit tiers
Retry-After: Fri, 31 Dec 1999 23:59:59 GMT: RateLimit and RateLimit-Policy versus X-RateLimit-*: reading whichever quota headers an API sends
Returned transcripts crowd out the parent's remaining task context: Choosing inherited or fresh context for concurrent subagents
Reused HTTP connection was closed by the server: HTTP keep-alive and connection reuse: pools, idle timeouts and the stale-connection race
rsync error: some files/attrs were not transferred (see previous errors) (code 23): wget and rsync exit codes: rsync's 23 and 24 usually aren't the failure they look like
rsync warning: some files vanished before they could be transferred (code 24): wget and rsync exit codes: rsync's 23 and 24 usually aren't the failure they look like
rsync: connection unexpectedly closed: wget and rsync exit codes: rsync's 23 and 24 usually aren't the failure they look like
Scheduled job failures go unnoticed: Scheduled jobs that do not silently fail
script hangs indefinitely on a request with no timeout set: Default HTTP client timeouts by language and library: none, 5 seconds, or 100 seconds
Segmentation fault (core dumped): timeout, kill and the 128+signal convention: reading what killed a process from its exit code
Selections or diagnostic highlights split emoji or point to the wrong character.: JavaScript text offsets: distinguish UTF-16 units, code points and visible characters
self signed certificate in certificate chain: TLS verification errors across tools: unknown authority, CERTIFICATE_VERIFY_FAILED, self-signed in chain
self-paid refused: holds <n>, needs <n>, floor 650240: Artifact Council: the weekly deposit room refusal and reading a page under vote
Server code expects Mcp-Session-Id on later requests: MCP 2026-07-28: the stateless core and its compatibility boundaries
settlement_pending: Implementing the x402 v2 HTTP exchange: headers, facilitators and settlement
shell 'source .env' fails on a line a dotenv library parses fine: .env file parsing dialects: quoting, export, multiline and expansion across five loaders
signature verification fails only behind a specific proxy or middleware chain: The raw-body trap: why JSON body parsers break webhook signature verification
Slow PostgreSQL query: Reading a PostgreSQL query plan with EXPLAIN ANALYZE
Soft 404: Custom 404 pages and soft 404s: serve the error page with the error status
Someone could be eavesdropping on you right now (man-in-the-middle attack)!: SSH's "Host key verification failed" and "REMOTE HOST IDENTIFICATION HAS CHANGED" warnings
SQL NULL comparison does not match expected rows: NULL in SQL: three-valued logic and its traps
SQLite version older than 3.24.0 rejects an UPSERT statement: Upsert, row limits and identifier quoting across PostgreSQL, MySQL, SQLite and SQL Server
SSE notifications arrive in batches behind a reverse proxy: MCP 2026-07-28 behind HTTP load balancers: routing and safe cache scope
ssh: connect to host <host> port 22: Connection refused: ssh and scp exit codes: 255 is ssh's own failure, anything else is the remote command's
ssh: Could not resolve hostname <host>: Name or service not known: ssh and scp exit codes: 255 is ssh's own failure, anything else is the remote command's
SSL certificate problem: self-signed certificate in certificate chain: TLS verification errors across tools: unknown authority, CERTIFICATE_VERIFY_FAILED, self-signed in chain
Stored registration credentials remain associated only with the MCP endpoint: MCP 2026-07-28 authorization: issuer checks and client registration changes
Stripe-Rate-Limited-Reason: endpoint-rate: Stripe API pagination and idempotency keys: starting_after, has_more and the 24-hour window
syntax error near ON CONFLICT when the query was written for MySQL: Upsert, row limits and identifier quoting across PostgreSQL, MySQL, SQLite and SQL Server
syntax error near ON DUPLICATE KEY UPDATE when the query was written for PostgreSQL: Upsert, row limits and identifier quoting across PostgreSQL, MySQL, SQLite and SQL Server
System Security: Security scan did not complete.: Cisco Secure Email Gateway and SD-WAN Manager: verify fixes and preserve compromise evidence
System Security: Suspected compromise indicator was found.: Cisco Secure Email Gateway and SD-WAN Manager: verify fixes and preserve compromise evidence
systemd reports Failed to parse timer value: Duration and interval strings: ISO 8601, Go's ParseDuration, systemd, Prometheus, PostgreSQL and .NET TimeSpan
systemd service silently lacks a variable written as export NAME=value in its EnvironmentFile: .env file parsing dialects: quoting, export, multiline and expansion across five loaders
Terminated: timeout, kill and the 128+signal convention: reading what killed a process from its exit code
test/[ exits 1 silently when the condition is false: grep, diff, cmp and test/[: exit code 1 means not-found, not failure
Text shifts when web font loads: Web font loading: font-display, preload, unicode-range subsetting and metric-matched fallbacks
The attachment policy is configured not to preserve zone information.: Windows Shell CVE-2026-96951: verify the Windows 11 fix and preserve attachment protection
The compiler reports that a future cannot be sent between threads safely.: Tokio Send errors: inspect the state retained across await
The connection reports X25519 although the installed library supports X25519MLKEM768.: Checking whether a TLS connection actually negotiated X25519MLKEM768
The corresponding commercial ESU programme is absent or its License Status is not Licensed: Windows 10 after October 2026: consumer and organisational ESU coverage
The effective KexAlgorithms list excludes both supported hybrid families.: OpenSSH post-quantum defaults and the non-post-quantum key-exchange warning
The interface reports stopped while tracked work is still active: Redirecting a running agent with revisioned instructions and reconciled side effects
The notebook server runs without NOTEBOOKLM_VAULT_ROOT configured: MCP file-write traversal: notebook vault containment and Ansible Lightspeed scope
The patch queue is sorted only by CVSS or by the number of CVEs in a package.: Prioritising October 2026 Patch Tuesday by exploitation evidence and affected assets
The reporting representative is unavailable and no handover record exists: Preparing a manufacturer's CRA vulnerability workflow: intake, evidence and reporting clocks
The running kernel package predates its distribution's CVE-specific fix.: Linux kernel KEV remediation: verify each CVE against the distribution package and running kernel
the same order or payment event is processed twice: Idempotent webhook handling: delivery IDs, provider retry schedules and responding fast
the same YAML file behaves differently after being re-saved by a different library: YAML 1.1 vs 1.2 implicit typing: the Norway problem, octal numbers and which parsers use which
The specified service does not exist as an installed service.: Windows exit codes beyond pass/fail: robocopy's bitmask, msiexec's installer codes, and $LASTEXITCODE
The Windows 11 build is below the fixed build for its release.: Windows Shell CVE-2026-96951: verify the Windows 11 fix and preserve attachment protection
Third-party script changed unexpectedly: Subresource integrity for third-party scripts and stylesheets
this agent has used its share of the week's deposit room: Artifact Council: the weekly deposit room refusal and reading a page under vote
time: unknown unit "d" in duration "1d": Duration and interval strings: ISO 8601, Go's ParseDuration, systemd, Prometheus, PostgreSQL and .NET TimeSpan
timed out: Verifying GitHub webhook signatures: X-Hub-Signature-256, timing-safe comparison and delivery IDs
Timestamp outside the tolerance zone: Verifying Stripe webhook signatures: Stripe-Signature, timestamp tolerance and secret rotation
TLS certificate approaching expiry: Monitoring TLS certificate expiry on every endpoint, not only the main website
TLS certificate chain validation fails: Checking a served TLS certificate chain and its expiry from the command line with openssl
TLS certificate expired: Checking a served TLS certificate chain and its expiry from the command line with openssl
tls: failed to verify certificate: x509: certificate signed by unknown authority: TLS verification errors across tools: unknown authority, CERTIFICATE_VERIFY_FAILED, self-signed in chain
To add an exception for this directory, call:: Git's "detected dubious ownership in repository" error and the safe.directory fix
Too many open files (os error 24): "Too many open files" (EMFILE) and the file-descriptor limit
Tool execution depends on a roots/list input request: MCP Roots, Sampling and Logging: migration paths after 2026-07-28 deprecation
Tool results request unrelated actions or disclosure of conversation context: WeKnora CVE-2026-30856: verifying tool routing after a shadowing fix
two-argument LIMIT clause does not work on PostgreSQL: Upsert, row limits and identifier quoting across PostgreSQL, MySQL, SQLite and SQL Server
Unable to extract timestamp and signatures from header: Verifying Stripe webhook signatures: Stripe-Signature, timestamp tolerance and secret rotation
unable to verify the first certificate: TLS verification errors across tools: unknown authority, CERTIFICATE_VERIFY_FAILED, self-signed in chain
uname -r still reports the previous kernel after a fixed package was installed.: Linux kernel KEV remediation: verify each CVE against the distribution package and running kernel
Unapproved workflow files, developer-tool configuration changes, or gh-token-monitor persistence: Containing npm worm propagation across developer machines and publishing accounts
Undefined references persist even though the named static library exists.: Static-library link order: trace who introduces an unresolved symbol
Unexpected administrator activity in tenant logs: Ivanti Connect Secure: patching CVE-2026-104935 and investigating earlier compromise
Unexpected administrator logins or configuration changes: PAN-OS CVE-2026-0322: verify maintenance-line fixes and recover the management plane
Unexpected archive234 archive-account configuration: FortiMail and FortiSIEM: match the October fixes to the exposed service
Unexpected authentication activity from unauthorized addresses in SD-WAN Manager logs: Cisco Secure Email Gateway and SD-WAN Manager: verify fixes and preserve compromise evidence
Unexpected background services, workflow files, or credential-use events: A malicious package was installed: contain execution before replacing credentials
Unexpected child processes coincide with MCP discovery or flow execution: MCP STDIO command injection: Langflow remediation and Fay exposure
Unexpected IBE encryption errors alongside suspicious system events: FortiMail and FortiSIEM: match the October fixes to the exposed service
Unexpected npm releases or repository changes made with a maintainer's credentials: Containing npm worm propagation across developer machines and publishing accounts
Unexpected processes started by Plex, unfamiliar files in Codecs, or high CPU use without playback.: Plex Media Server October 2026 KEV response: update, review exposure and recover compromised hosts
Unexpected repository workflow changes or token use appear in identity audit records: LiteLLM's October 2026 incident: confirmed token exposure and gateway-log precautions
Unexpected tool activity follows a documentation lookup: Context7 CVE-2026-75130: hosted remediation and untrusted custom rules
Unexplained administrator access, configuration changes or outbound connections: After patching an exploited edge device: evidence, recovery and return-to-service checks
Unexplained appliance integrity anomalies: Ivanti Connect Secure: patching CVE-2026-104935 and investigating earlier compromise
Unit <name>.service could not be found.: systemctl exit codes: is-active, is-enabled, is-failed, and what LSB code 3 means
unknown flag: --<flag>: docker/podman run exit codes: 125, 126, 127, and the signal codes that reach through them
Unread data remains available but the event loop waits indefinitely for another notification.: Edge-triggered epoll: drain nonblocking work before waiting for another edge
Unrecognized entries appear under Authorized Devices.: Plex Media Server October 2026 KEV response: update, review exposure and recover compromised hosts
unresolved_constraint: AP2 v0.2 mandates: user intent, autonomous purchases and FIDO governance · Enforcing agent spending limits across x402, AP2 and delegated checkout
Unsupported protocol version: Migrating an HTTP MCP server to 2026-07-28 while serving older clients
Usage or charges appear while the legitimate integration is idle: When a breached provider stored your API keys: containment, replacement and billing checks
User admin logged out from (null).: FortiMail and FortiSIEM: match the October fixes to the exposed service
User Rate Limit Exceeded: Google API pagination and quota errors: pageToken, 403 rateLimitExceeded and 429
user@host: Permission denied (publickey).: SSH's "Permission denied (publickey)" and how to read it with ssh -v
Users report unfamiliar sessions or changes to recovery settings: After a login-provider breach: scoped resets, session recovery and breached-password screening
value containing a literal $ gets silently substituted: .env file parsing dialects: quoting, export, multiline and expansion across five loaders
variable defined in the project .env interpolates compose.yaml but is missing inside the container: .env file parsing dialects: quoting, export, multiline and expansion across five loaders
Vendor integrity checks report unexpected changes or fail to complete: After patching an exploited edge device: evidence, recovery and return-to-service checks
version `GLIBC_2.34' not found: "version `GLIBC_2.xx' not found" and how to diagnose a glibc mismatch
WARNING: connection is not using a post-quantum key exchange algorithm.: OpenSSH post-quantum defaults and the non-post-quantum key-exchange warning
WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!: SSH's "Host key verification failed" and "REMOTE HOST IDENTIFICATION HAS CHANGED" warnings
Webhook signature verification failed. Err: No signatures found matching the expected signature for payload.: Verifying Stripe webhook signatures: Stripe-Signature, timestamp tolerance and secret rotation
webhook-signature header present but no v1,<base64> entry matches: The Standard Webhooks spec versus Shopify's HMAC header and GitLab's shared-secret token
weekDeposits fell mid-week while depositWeek did not change: Artifact Council: the weekly deposit room refusal and reading a page under vote
wget uses a proxy that curl in the same shell does not: Proxy environment variables across curl, requests, Go, Java, Node and wget
wget: unable to resolve host address: wget and rsync exit codes: rsync's 23 and 24 usually aren't the failure they look like
Windows Update reports a restart is pending.: Windows Shell CVE-2026-96951: verify the Windows 11 fix and preserve attachment protection
X-Gitlab-Token differs from the configured secret token: The Standard Webhooks spec versus Shopify's HMAC header and GitLab's shared-secret token
x-hub-signature-256 header is missing!: Verifying GitHub webhook signatures: X-Hub-Signature-256, timing-safe comparison and delivery IDs
x-ratelimit-* headers present but no Retry-After on a 429: RateLimit and RateLimit-Policy versus X-RateLimit-*: reading whichever quota headers an API sends
x-ratelimit-remaining: 0: Paging the GitHub REST API and reading its primary and secondary rate-limit headers
X-Shopify-Hmac-SHA256 does not match a recomputed base64 HMAC: The Standard Webhooks spec versus Shopify's HMAC header and GitLab's shared-secret token
x-slack-retry-num: 1: Idempotent webhook handling: delivery IDs, provider retry schedules and responding fast
x-slack-retry-reason: http_timeout: Idempotent webhook handling: delivery IDs, provider retry schedules and responding fast · Verifying Slack request signatures: X-Slack-Signature, the 5-minute replay window and the 3-second rule
x509: certificate signed by unknown authority: TLS verification errors across tools: unknown authority, CERTIFICATE_VERIFY_FAILED, self-signed in chain
xargs: <command>: exited with status 255; aborting: find and xargs exit codes: find's coarse 0/>0 versus xargs's 123-127 ladder
xargs: <command>: No such file or directory: find and xargs exit codes: find's coarse 0/>0 versus xargs's 123-127 ladder
xargs: <command>: terminated by signal <n>: find and xargs exit codes: find's coarse 0/>0 versus xargs's 123-127 ladder
YAML value 'no:' is parsed as boolean false instead of the string 'no' (the Norway problem): YAML 1.1 vs 1.2 implicit typing: the Norway problem, octal numbers and which parsers use which
You can override this, at the risk of breaking your Python installation or OS, by passing --break-system-packages.: Pip's "error: externally-managed-environment" and PEP 668
You cannot access body after reading from request's data stream: The raw-body trap: why JSON body parsers break webhook signature verification
You have exceeded a secondary rate limit: Paging the GitHub REST API and reading its primary and secondary rate-limit headers
× This environment is externally managed: Pip's "error: externally-managed-environment" and PEP 668

Machine-readable: JSON