-
Notifications
You must be signed in to change notification settings - Fork 18
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Security: Long-poll endpoint accumulates EventEmitter listeners without cleanup on client disconnect
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#291 In Eyevinn/intercom-manager;Security: NewSession.lineId missing maxLength constraint — unbounded input stored in DB
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#290 In Eyevinn/intercom-manager;Security: PATCH /session response schema declares 200 but handler sends 204 — validation bypass
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#289 In Eyevinn/intercom-manager;Security: Preset companionUrl stored without WebSocket protocol validation in backend schema
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#288 In Eyevinn/intercom-manager;Security: Log injection via unsanitized username/lineId in WHIP/WHEP log output
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#287 In Eyevinn/intercom-manager;Security: Add
permissions:blocks to all GitHub Actions workflows to restrict GITHUB_TOKEN scopesecuritySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#286 In Eyevinn/intercom-manager;Security: brace-expansion DoS via exponential expansion — not covered in #231
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#280 In Eyevinn/intercom-manager;Security: js-yaml prototype pollution and quadratic-complexity DoS — update to >=4.2.1
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#279 In Eyevinn/intercom-manager;Security: form-data 4.0.0-4.0.5 CRLF injection via unescaped field names and filenames
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#278 In Eyevinn/intercom-manager;Security: find-my-way <=9.6.0 DDoS vulnerability via HTTP/2 — update router dependency
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#277 In Eyevinn/intercom-manager;Security: Warn at startup when SMB_ADDRESS uses plaintext http:// to a non-localhost host
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#276 In Eyevinn/intercom-manager;Add .env.example to document all required environment variables
documentationImprovements or additions to documentationImprovements or additions to documentationStatus: Open.#275 In Eyevinn/intercom-manager;