Issues

• BUG BrailleConverter output is ambiguous: "1a" encodes the same as "11", and "$" uses the period cell

  Bug: triage
  microsoft/PyRIT#3532 · Filter by author barkha1research-ai opened on Oct 25, 2026

• BUG: OpenAIResponseTarget passes non-object tool arguments to custom functions

  microsoft/PyRIT#3516 · Filter by author Shizoqua opened on Oct 24, 2026

• BUG: Inferred objective is empty when tool calls come between the request and the answer

  microsoft/PyRIT#3515 · Filter by author Shizoqua opened on Oct 24, 2026

• BUG: PackageHallucinationScorer flags JavaScript relative paths, node: built-ins and subpath imports as hallucinated packages

  microsoft/PyRIT#3512 · Filter by author ShivamSharma43 opened on Oct 24, 2026

• BUG: make_request_and_raise_if_error_async drops repeated query parameters from the endpoint URL

  microsoft/PyRIT#3510 · Filter by author ShivamSharma43 opened on Oct 24, 2026

• Feature request: speciesist bias harm definition and seed prompts

  microsoft/PyRIT#3501 · Filter by author samtuckerdavis opened on Oct 23, 2026

• BUG: OpenAIChatTarget, OpenAICompletionTarget, and LiteLLMChatTarget do not validate presence_penalty or frequency_penalty

  microsoft/PyRIT#3498 · Filter by author nithin42 opened on Oct 23, 2026
  2

  

• BUG: AzureBlobStorageTarget returns a URL with // when the container URL ends with a slash

  microsoft/PyRIT#3495 · Filter by author ShivamSharma43 opened on Oct 23, 2026

• BUG: OpenAIImageTarget uploads edited images under a generated local path instead of their file name

  microsoft/PyRIT#3494 · Filter by author ShivamSharma43 opened on Oct 23, 2026

• BUG: XXEOutputScorer misses direct external DTD references and Java netdoc: / gopher: URI schemes

  microsoft/PyRIT#3485 · Filter by author Kaap10 opened on Oct 23, 2026

• BUG: StaticPromptInjectionScorer misses modern LLM chat template tokens (Meta Llama 3+, Google Gemma, Microsoft Phi-3/4)

  microsoft/PyRIT#3483 · Filter by author Kaap10 opened on Oct 23, 2026

• MAINT: Catch converter identifier gaps with one registry-wide test

  feature-request
  microsoft/PyRIT#3477 · Filter by author Ayoubhm07 opened on Oct 23, 2026

• BUG: image text converters drop line breaks

  microsoft/PyRIT#3473 · Filter by author u7k4rs6 opened on Oct 23, 2026

• Detect Azure SAS tokens, SharedAccessKey connection strings, and Databricks PATs in CredentialLeakScorer

  microsoft/PyRIT#3468 · Filter by author nithin42 opened on Oct 22, 2026

• BUG: UrlConverter preserves forward slashes by default, preventing path payload evasion

  microsoft/PyRIT#3401 · Filter by author Kaap10 opened on Oct 20, 2026
  

• [BLOCKED] FEAT: Drill into paired Scenario outcome conversations

  feature-requesthelp wanted
  microsoft/PyRIT#3389 · Filter by author romanlutz opened on Oct 20, 2026
  1

• BUG: LLMGenericTextConverter identifier ignores the template parameters it renders

  microsoft/PyRIT#3385 · Filter by author ShivamSharma43 opened on Oct 20, 2026
  2

• BUG: write_txt raises KeyError on missing prompt key or empty rows

  microsoft/PyRIT#3377 · Filter by author ManoharPaturi opened on Oct 20, 2026
  

• FEAT: OWASP LLM10 cost amplification scenario with a token usage scorer

  microsoft/PyRIT#3345 · Filter by author ashwingadhave opened on Oct 19, 2026
  2

  

• BUG: MarkdownInjectionScorer misses shortcut-reference images with path-based exfiltration, and raw HTML <img>

  Bug: triage
  microsoft/PyRIT#3343 · Filter by author aatif101 opened on Oct 19, 2026
  2

  

• MAINT: declare scenario ingredient datasets outside dataset_config

  microsoft/PyRIT#3336 · Filter by author u7k4rs6 opened on Oct 19, 2026
  2

  

• FEAT: Compare paired baseline and attack outcomes for Scenario runs

  microsoft/PyRIT#3330 · Filter by author shashank03-dev opened on Oct 19, 2026
  4

  

• Scorer-eval GUI drops the coverage fields the docs say to compare

  microsoft/PyRIT#3325 · Filter by author AUTHENSOR opened on Oct 18, 2026
  2

• Detection coverage gaps: 47 missed payload classes across 9 output scorers

  microsoft/PyRIT#3324 · Filter by author AUTHENSOR opened on Oct 18, 2026
  3

• Judge-supplied metadata can override the stored score value; extraction and rendering trust quoted JSON and unfenced role lines

  microsoft/PyRIT#3323 · Filter by author AUTHENSOR opened on Oct 18, 2026
  1