-
Notifications
You must be signed in to change notification settings - Fork 24
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
GET /ipfs/{cid} leaks raw sqlx/DB error text in the 500 body to unauthenticated callers (sibling of #106)
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:securityVulnerability fix or hardeningVulnerability fix or hardeningsev:highMajor break or real security/trust risk, no easy workaroundMajor break or real security/trust risk, no easy workaroundsubsystem:apiNode REST API request/response surfaceNode REST API request/response surfacesubsystem:storageBlob/object store, Arweave, IPFS, archivesBlob/object store, Arweave, IPFS, archivessubsystem:visibilityPath-scoped visibility and content withholdingPath-scoped visibility and content withholdingStatus: Open.#226 In Gitlawb/node;Replication object-set filter duplicated across pinata_object_list_for_refs and resolve_drain_object_list (fail-closed drift risk)
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:refactorRestructure, behavior preservedRestructure, behavior preservedsev:lowCosmetic, cleanup, or nice-to-haveCosmetic, cleanup, or nice-to-havesubsystem:replicationMirror, replica, and cross-node syncMirror, replica, and cross-node syncsubsystem:visibilityPath-scoped visibility and content withholdingPath-scoped visibility and content withholdingStatus: Open.#225 In Gitlawb/node;test(git-remote): run_bounded clean-exit path lacks a Windows descendant reap (Unix-only cfg)
kind:testTest coverage or harnessTest coverage or harnesssev:lowCosmetic, cleanup, or nice-to-haveCosmetic, cleanup, or nice-to-havesubsystem:replicationMirror, replica, and cross-node syncMirror, replica, and cross-node syncStatus: Open.#222 In Gitlawb/node;gl whoami reports registered: false on a failed trust lookup, not just a genuine 404
crate:glgl — the contributor CLIgl — the contributor CLIkind:bugDefect fix — wrong or unsafe behaviorDefect fix — wrong or unsafe behaviorsev:mediumDegraded but workaround existsDegraded but workaround existssubsystem:apiNode REST API request/response surfaceNode REST API request/response surfacesubsystem:identityDID/UCAN, http-sig auth, push authorizationDID/UCAN, http-sig auth, push authorizationStatus: Open.#220 In Gitlawb/node;Implement the reconciliation sweep the replication path already assumes as a durability backstop
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:featureNew capability or surfaceNew capability or surfacesev:highMajor break or real security/trust risk, no easy workaroundMajor break or real security/trust risk, no easy workaroundsubsystem:replicationMirror, replica, and cross-node syncMirror, replica, and cross-node syncsubsystem:storageBlob/object store, Arweave, IPFS, archivesBlob/object store, Arweave, IPFS, archivesStatus: Open.#218 In Gitlawb/node;Detach post-receive replication scans onto the F5 drain task (close the #174 inline-park residual)
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:bugDefect fix — wrong or unsafe behaviorDefect fix — wrong or unsafe behaviorsev:highMajor break or real security/trust risk, no easy workaroundMajor break or real security/trust risk, no easy workaroundsubsystem:apiNode REST API request/response surfaceNode REST API request/response surfacesubsystem:encryptionEncrypted subtrees, recipient blinding, key zeroizationEncrypted subtrees, recipient blinding, key zeroizationsubsystem:replicationMirror, replica, and cross-node syncMirror, replica, and cross-node syncStatus: Open.#217 In Gitlawb/node;icaptcha-client: no test binds new()'s empty-API-key filter, so a Some("") regression would ship green
kind:testTest coverage or harnessTest coverage or harnesssev:lowCosmetic, cleanup, or nice-to-haveCosmetic, cleanup, or nice-to-havesubsystem:apiNode REST API request/response surfaceNode REST API request/response surfaceStatus: Open.#216 In Gitlawb/node;icaptcha-client: no test binds to IcaptchaCfg::new's API-key gate, so a key-attach regression would ship green
crate:glgl — the contributor CLIgl — the contributor CLIkind:securityVulnerability fix or hardeningVulnerability fix or hardeningsev:highMajor break or real security/trust risk, no easy workaroundMajor break or real security/trust risk, no easy workaroundsubsystem:apiNode REST API request/response surfaceNode REST API request/response surfaceStatus: Open.#212 In Gitlawb/node;icaptcha mock-consumed guard: swallowed dual-contact leak is invisible, and the blackhole has no tripwire test
kind:securityVulnerability fix or hardeningVulnerability fix or hardeningsev:highMajor break or real security/trust risk, no easy workaroundMajor break or real security/trust risk, no easy workaroundsubsystem:identityDID/UCAN, http-sig auth, push authorizationDID/UCAN, http-sig auth, push authorizationStatus: Open.#211 In Gitlawb/node;Advisory-lock key uses DefaultHasher — cross-machine write exclusion can silently break across node builds
crate:coregitlawb-core — identity, certs, encrypt, DID/UCANgitlawb-core — identity, certs, encrypt, DID/UCANcrate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:bugDefect fix — wrong or unsafe behaviorDefect fix — wrong or unsafe behaviorsev:highMajor break or real security/trust risk, no easy workaroundMajor break or real security/trust risk, no easy workaroundsubsystem:storageBlob/object store, Arweave, IPFS, archivesBlob/object store, Arweave, IPFS, archivesStatus: Open.#210 In Gitlawb/node;gl duplicates the owner-resolution helper across 4 command modules, keeping a node-DID fallback repo.rs already dropped as a bug
crate:glgl — the contributor CLIgl — the contributor CLIkind:refactorRestructure, behavior preservedRestructure, behavior preservedsev:lowCosmetic, cleanup, or nice-to-haveCosmetic, cleanup, or nice-to-havesubsystem:identityDID/UCAN, http-sig auth, push authorizationDID/UCAN, http-sig auth, push authorizationStatus: Open.#208 In Gitlawb/node;iCaptcha gate fails OPEN in enforce mode when the public key cannot load
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:securityVulnerability fix or hardeningVulnerability fix or hardeningsev:highMajor break or real security/trust risk, no easy workaroundMajor break or real security/trust risk, no easy workaroundsubsystem:apiNode REST API request/response surfaceNode REST API request/response surfacesubsystem:encryptionEncrypted subtrees, recipient blinding, key zeroizationEncrypted subtrees, recipient blinding, key zeroizationStatus: Open.#206 In Gitlawb/node;