-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
[P2] Document the intentional no-per-user-session-isolation model in SECURITY.md, README.md, and lib/session-auth.js header
auditAudit, review, or investigation work.Audit, review, or investigation work.priority/p2Normal priority.Normal priority.status/readyReady for Dispatch worker pickup.Ready for Dispatch worker pickup.Status: Open.#850 In misospace/miso-chat;[P2] Link-preview fetch has DNS time-of-check/time-of-use race (validated IP not pinned for the outbound fetch)
area/securitySecurity relatedSecurity relatedauditAudit, review, or investigation work.Audit, review, or investigation work.priority/p2Normal priority.Normal priority.status/readyReady for Dispatch worker pickup.Ready for Dispatch worker pickup.Status: Open.#849 In misospace/miso-chat;[P2] IPv6 multicast range ff00::/8 is not blocked by isPrivateIPv6
area/securitySecurity relatedSecurity relatedauditAudit, review, or investigation work.Audit, review, or investigation work.priority/p2Normal priority.Normal priority.status/readyReady for Dispatch worker pickup.Ready for Dispatch worker pickup.Status: Open.#848 In misospace/miso-chat;[P1] SSRF IPv4 private-range check omits RFC 6598 CGNAT 100.64.0.0/10
area/securitySecurity relatedSecurity relatedauditAudit, review, or investigation work.Audit, review, or investigation work.priority/p1High priority.High priority.status/readyReady for Dispatch worker pickup.Ready for Dispatch worker pickup.Status: Open.#847 In misospace/miso-chat;[P1] isPrivateIPv6 only catches literal fe80: prefix, leaving fe90: through febf: (full fe80::/10) reachable from /api/link-preview
area/securitySecurity relatedSecurity relatedauditAudit, review, or investigation work.Audit, review, or investigation work.priority/p1High priority.High priority.status/readyReady for Dispatch worker pickup.Ready for Dispatch worker pickup.Status: Open.#846 In misospace/miso-chat;Renovate Dashboard 🤖
renovateAutomated Renovate dashboardAutomated Renovate dashboardStatus: Open.#440 In misospace/miso-chat;