-
Notifications
You must be signed in to change notification settings - Fork 39
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
cargo audit failing repo-wide: RUSTSEC-2026-0285 (rustls 0.23.37)
kind:securityVulnerability fix or hardeningVulnerability fix or hardeningsev:highMajor break or real security/trust risk, no easy workaroundMajor break or real security/trust risk, no easy workaroundsubsystem:encryptionEncrypted subtrees, recipient blinding, key zeroizationEncrypted subtrees, recipient blinding, key zeroizationStatus: Open.#454 In Gitlawb/node;pin_git_object records a fabricated CID when /api/v0/add returns no Hash
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:bugDefect fix — wrong or unsafe behaviorDefect fix — wrong or unsafe behaviorsev:highMajor break or real security/trust risk, no easy workaroundMajor break or real security/trust risk, no easy workaroundsubsystem:encryptionEncrypted subtrees, recipient blinding, key zeroizationEncrypted subtrees, recipient blinding, key zeroizationsubsystem:storageBlob/object store, Arweave, IPFS, archivesBlob/object store, Arweave, IPFS, archivesStatus: Open.#452 In Gitlawb/node;api(issues): list_issues executes unpaginated serial git subprocesses on worker runtime
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:perfPerformance or allocation work, no behavior changePerformance or allocation work, no behavior changesev:mediumDegraded but workaround existsDegraded but workaround existssubsystem:apiNode REST API request/response surfaceNode REST API request/response surfaceStatus: Open.#450 In Gitlawb/node;api: Enforce read-visibility before ownership checks across repo mutation surfaces
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:securityVulnerability fix or hardeningVulnerability fix or hardeningsev:mediumDegraded but workaround existsDegraded but workaround existssubsystem:apiNode REST API request/response surfaceNode REST API request/response surfacesubsystem:visibilityPath-scoped visibility and content withholdingPath-scoped visibility and content withholdingStatus: Open.#449 In Gitlawb/node;breaking: repos returns error above 200 visible repositories
kind:bugDefect fix — wrong or unsafe behaviorDefect fix — wrong or unsafe behaviorsev:mediumDegraded but workaround existsDegraded but workaround existssubsystem:apiNode REST API request/response surfaceNode REST API request/response surfacesubsystem:visibilityPath-scoped visibility and content withholdingPath-scoped visibility and content withholdingStatus: Open.#446 In Gitlawb/node;webhooks: Bound delivery admission and per-repository hook count
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:securityVulnerability fix or hardeningVulnerability fix or hardeningsev:mediumDegraded but workaround existsDegraded but workaround existssubsystem:apiNode REST API request/response surfaceNode REST API request/response surfaceStatus: Open.#436 In Gitlawb/node;api(replicas): Enforce read visibility on replica registration and removal
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:securityVulnerability fix or hardeningVulnerability fix or hardeningsev:mediumDegraded but workaround existsDegraded but workaround existssubsystem:apiNode REST API request/response surfaceNode REST API request/response surfacesubsystem:replicationMirror, replica, and cross-node syncMirror, replica, and cross-node syncsubsystem:visibilityPath-scoped visibility and content withholdingPath-scoped visibility and content withholdingStatus: Open.#435 In Gitlawb/node;sync: Missing origin-ownership check allows known peer to force-fetch into existing mirror
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:securityVulnerability fix or hardeningVulnerability fix or hardeningsev:highMajor break or real security/trust risk, no easy workaroundMajor break or real security/trust risk, no easy workaroundsubsystem:apiNode REST API request/response surfaceNode REST API request/response surfacesubsystem:peersPeer announce, discovery, and registryPeer announce, discovery, and registrysubsystem:replicationMirror, replica, and cross-node syncMirror, replica, and cross-node syncStatus: Open.#432 In Gitlawb/node;p2p(kademlia): Unbounded address accumulation from Identify Push messages
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:securityVulnerability fix or hardeningVulnerability fix or hardeningsev:mediumDegraded but workaround existsDegraded but workaround existssubsystem:peersPeer announce, discovery, and registryPeer announce, discovery, and registryStatus: Open.#429 In Gitlawb/node;graphql: Missing query complexity and alias bounds on repos field
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:securityVulnerability fix or hardeningVulnerability fix or hardeningsev:highMajor break or real security/trust risk, no easy workaroundMajor break or real security/trust risk, no easy workaroundsubsystem:apiNode REST API request/response surfaceNode REST API request/response surfaceStatus: Open.#428 In Gitlawb/node;api(repos): Unbounded aggregate allocation in federated repository response
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:securityVulnerability fix or hardeningVulnerability fix or hardeningsev:mediumDegraded but workaround existsDegraded but workaround existssubsystem:apiNode REST API request/response surfaceNode REST API request/response surfacesubsystem:peersPeer announce, discovery, and registryPeer announce, discovery, and registryStatus: Open.#427 In Gitlawb/node;close_issue expects a resolved ref to stay readable, but get_issue folds every git cat-file failure into None
kind:bugDefect fix — wrong or unsafe behaviorDefect fix — wrong or unsafe behaviorsev:lowCosmetic, cleanup, or nice-to-haveCosmetic, cleanup, or nice-to-havesubsystem:apiNode REST API request/response surfaceNode REST API request/response surfacesubsystem:storageBlob/object store, Arweave, IPFS, archivesBlob/object store, Arweave, IPFS, archivesStatus: Open.#426 In Gitlawb/node;