-
-
Notifications
You must be signed in to change notification settings - Fork 2
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
CI hygiene: unpinned actions, archived action, files '**', cosign unused, floating base images, stale deny ignore
securitySecurity findings and hardeningSecurity findings and hardeningStatus: Open.#139 In vaam-apps/fyi;Supply-chain: GHCR 'latest' tag overwritable by any branch push; Helm charts consume 'latest'
securitySecurity findings and hardeningSecurity findings and hardeningStatus: Open.#137 In vaam-apps/fyi;Deployment: Helm defaults crash-loop, runAsUser mismatch, no TLS/NetworkPolicy defaults
securitySecurity findings and hardeningSecurity findings and hardeningStatus: Open.#138 In vaam-apps/fyi;Supply-chain: image vulnerability scan runs after publish; cargo-deny advisories non-blocking
securitySecurity findings and hardeningSecurity findings and hardeningStatus: Open.#136 In vaam-apps/fyi;Security: no audit trail for link creation/overwrite (created_by_api_key_id never populated)
securitySecurity findings and hardeningSecurity findings and hardeningStatus: Open.#135 In vaam-apps/fyi;Security: no rate limiting anywhere; unbounded pagination & unindexed ILIKE on list
securitySecurity findings and hardeningSecurity findings and hardeningStatus: Open.#133 In vaam-apps/fyi;Security: 24-bit generated slugs + global PK, no delete/expiry => enumeration & permanent cross-tenant slug squatting
securitySecurity findings and hardeningSecurity findings and hardeningStatus: Open.#134 In vaam-apps/fyi;Security: plaintext secrets in compose & Helm defaults; redirect connects with read-write DB role
securitySecurity findings and hardeningSecurity findings and hardeningStatus: Open.#132 In vaam-apps/fyi;Security: removing a tenant from config bricks CRUD server startup (FK violation, no cascade)
bugSomething isn't workingSomething isn't workingsecuritySecurity findings and hardeningSecurity findings and hardeningStatus: Open.#131 In vaam-apps/fyi;Security: no target_url validation => open redirect / phishing platform + stored permanent-500 links
bugSomething isn't workingSomething isn't workingsecuritySecurity findings and hardeningSecurity findings and hardeningStatus: Open.#130 In vaam-apps/fyi;Security: unbounded Prometheus label cardinality on public redirect => memory DoS + PII in unauthenticated /metrics
bugSomething isn't workingSomething isn't workingsecuritySecurity findings and hardeningSecurity findings and hardeningStatus: Open.#129 In vaam-apps/fyi;Security: empty configured API key authenticates as master (auth bypass, fail-open)
bugSomething isn't workingSomething isn't workingsecuritySecurity findings and hardeningSecurity findings and hardeningStatus: Open.#128 In vaam-apps/fyi;