Search results

🔒 Node hardening: timing oracle, sharp DoS, dependabot, prod deps

Status: Open.

#3853 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

🔒 Production env-gate: error leak + swagger/debug/rate-limiter defaults

Status: Open.

#3852 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

🔒 Org self-join via shadowed Organization policy subject

Status: Open.

#3851 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

🔒 Mass assignment on signup (emailVerified/providerData client-settable)

Status: Open.

#3850 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

🔒 OAuth callback trusts client-asserted identity → account takeover

Status: Open.

#3849 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

🎯 Security audit hardening — Node + Vue (2026-06 audit)

Status: Open.

#3848 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

🔧 OSS hygiene: scrub historical downstream references from docs/comments/fixtures

Status: Open.

#3847 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

🎯 Invitations/org hardening — post-epic follow-ups (tracker)

Status: Open.

#3845 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

✨ instant referee grant: retry grantForInvitation when the org is provisioned at email verification

Status: Open.

#3844 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

🐛 membership partial-unique index (userId,organizationId) declared in the model but absent on deployed DBs

Status: Open.

#3841 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

✨ readiness summary count surfaced for the admin Readiness tab badge (analysis)

Status: Open.

#3836 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 11, 2026

🔧 restore HTTP-level e2e for the org membership lifecycle (addMember→accept→promote→leave)

Status: Open.

#3835 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 11, 2026