Roo-Code's auto-approve gate read a command one way while bash ran another

What happened

Two parser gaps let a crafted command pass the allowlist while bash executes a denied command with the agent's auto-execute privileges. One omits the stderr-redirecting pipe operator from the parser's token set, so an approved prefix carries a denied command through the gate; the other is a word-boundary mismatch in comment handling, where an approved term set against a hash symbol reads as a comment to the gate and as a command to bash. NVD scores both CVSS 3.1 8.8. Every released version is affected: the newest release remains 3.54.0 at the 15 September check. These are two related vulnerabilities grouped into one radar record.