Search results

Testing, CI, and tooling gaps from the round 3 audit

Status: Open.

#392 In Devlaner/devlane;

· cavidelizade opened on Jul 17, 2026

Round 3 audit: lower-severity correctness and abuse items

Status: Open.

#391 In Devlaner/devlane;

· cavidelizade opened on Jul 17, 2026

More timezone date-shift bugs; configured timezones are never applied

Status: Open.

#390 In Devlaner/devlane;

· cavidelizade opened on Jul 17, 2026

Analytics undercounts states matched by name instead of group

Status: Open.

#389 In Devlaner/devlane;

· cavidelizade opened on Jul 17, 2026

Missing indexes on issue child tables

Status: Open.

#388 In Devlaner/devlane;

· cavidelizade opened on Jul 17, 2026

Server-side validation gaps: priority, state group, string length

Status: Open.

#387 In Devlaner/devlane;

· cavidelizade opened on Jul 17, 2026

Login lockouts are keyed on the victim email (targeted DoS)

Status: Open.

#386 In Devlaner/devlane;

· cavidelizade opened on Jul 17, 2026

Disabling an OAuth provider does not block sign-in

Status: Open.

#385 In Devlaner/devlane;

· cavidelizade opened on Jul 17, 2026

Estimate creation is not atomic

Status: Open.

#384 In Devlaner/devlane;

· cavidelizade opened on Jul 17, 2026

Cycle Version field is unused, so concurrent cycle edits lost-update

Status: Open.

#383 In Devlaner/devlane;

· cavidelizade opened on Jul 17, 2026

Project identifier has no uniqueness or format enforcement

Status: Open.

#382 In Devlaner/devlane;

· cavidelizade opened on Jul 17, 2026

Intake Accept then Decline leaves the work item live

Status: Open.

#381 In Devlaner/devlane;

· cavidelizade opened on Jul 17, 2026