-
Notifications
You must be signed in to change notification settings - Fork 61
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Credential stuffing detector stores the first 4 characters of plaintext passwords in Redis: password prefixes retained on disk for the window plus 60 seconds
area/authAuthentication, tokens, sessions, RBAC, account lockoutAuthentication, tokens, sessions, RBAC, account lockoutarea/securitySecurity hardening, vulnerability fixes, threat surface reductionSecurity hardening, vulnerability fixes, threat surface reductionGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority/highImportant; address in current quarterImportant; address in current quarterStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#395 In ApexChainx/ApexChainx-Backend;Registration accepts any string as email: no EmailStr validation means junk addresses and unbounded account data
area/authAuthentication, tokens, sessions, RBAC, account lockoutAuthentication, tokens, sessions, RBAC, account lockoutGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority/mediumStandard backlog itemStandard backlog itemStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#394 In ApexChainx/ApexChainx-Backend;Profile update accepts any string as stellar_wallet: no wallet_address validation before persisting an invalid wallet
area/authAuthentication, tokens, sessions, RBAC, account lockoutAuthentication, tokens, sessions, RBAC, account lockoutarea/walletsImported campaign issue labelImported campaign issue labelGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority/mediumStandard backlog itemStandard backlog itemStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#393 In ApexChainx/ApexChainx-Backend;Job status polling hits the Celery result backend on every request: get_job and get_job_progress make N+1 Redis round trips under polling load
area/jobsImported campaign issue labelImported campaign issue labelarea/performanceLatency, throughput, caching, connection pools, query optimizationLatency, throughput, caching, connection pools, query optimizationGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority/mediumStandard backlog itemStandard backlog itemStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#392 In ApexChainx/ApexChainx-Backend;Jobs list endpoint has no pagination: only the latest 200 jobs are reachable and engineers cannot page through history
area/apiREST API surface, OpenAPI, pagination, content-negotiation, error responsesREST API surface, OpenAPI, pagination, content-negotiation, error responsesarea/jobsImported campaign issue labelImported campaign issue labelGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority/mediumStandard backlog itemStandard backlog itemStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#391 In ApexChainx/ApexChainx-Backend;Seed --force clears only outages: SLA results, payments, and outage events are left referencing deleted rows
area/dataImported campaign issue labelImported campaign issue labelarea/dxImported campaign issue labelImported campaign issue labelGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority/mediumStandard backlog itemStandard backlog itemStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#390 In ApexChainx/ApexChainx-Backend;GDPR export silently truncates audit history at 1000 entries: the data-subject export is incomplete by design
area/gdprImported campaign issue labelImported campaign issue labelGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority/highImportant; address in current quarterImportant; address in current quarterStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#389 In ApexChainx/ApexChainx-Backend;GDPR export returns a full base64 tarball inside a JSON response: memory-heavy payloads block workers and fail large accounts
area/gdprImported campaign issue labelImported campaign issue labelarea/securitySecurity hardening, vulnerability fixes, threat surface reductionSecurity hardening, vulnerability fixes, threat surface reductionGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority/highImportant; address in current quarterImportant; address in current quarterStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#388 In ApexChainx/ApexChainx-Backend;Job retry WEBHOOK_DISPATCH branch passes a dict where a delivery id is expected, and no code ever creates such jobs
area/jobsImported campaign issue labelImported campaign issue labelGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority/highImportant; address in current quarterImportant; address in current quarterStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#387 In ApexChainx/ApexChainx-Backend;Job retry for SLA jobs enqueues a duplicate job row and overwrites celery_task_id: two rows share one task ID and one is orphaned
area/jobsImported campaign issue labelImported campaign issue labelGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority/highImportant; address in current quarterImportant; address in current quarterStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#386 In ApexChainx/ApexChainx-Backend;WalletCache keys only the public key while WalletRepository stores user_id and public_key: two identities, one cache namespace
area/walletsImported campaign issue labelImported campaign issue labelGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority/mediumStandard backlog itemStandard backlog itemStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#385 In ApexChainx/ApexChainx-Backend;compute_device_sla performs no locking on recompute: the job path and the recompute endpoint can write the same outage concurrently
area/concurrencyImported campaign issue labelImported campaign issue labelarea/slaSLA computation, MTTR, availability, dispute workflow, analyticsSLA computation, MTTR, availability, dispute workflow, analyticsGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority/highImportant; address in current quarterImportant; address in current quarterStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#384 In ApexChainx/ApexChainx-Backend;