This repository was archived by the owner on Sep 3, 2026. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issues
is:issue state:open
is:issue state:open
Search results
- Status: Open.#1955 In farnalabs/modulo-bak;
security: str(None) coercion in connectors and node_runner (str-none-coercion sweep)
securitySecurity-related issue/PRSecurity-related issue/PRStatus: Open.#1802 In farnalabs/modulo-bak;security: GET /guardrails/drift performs state writes on viewer-gated read endpoint
securitySecurity-related issue/PRSecurity-related issue/PRStatus: Open.#1800 In farnalabs/modulo-bak;security: pipeline team-gate TOCTOU — membership gate commits before mutation txn
securitySecurity-related issue/PRSecurity-related issue/PRStatus: Open.#1801 In farnalabs/modulo-bak;security: admin_orgs license settings_json read-modify-write TOCTOU
securitySecurity-related issue/PRSecurity-related issue/PRStatus: Open.#1798 In farnalabs/modulo-bak;security: SCIM PATCH group member ops skip org-membership validation
securitySecurity-related issue/PRSecurity-related issue/PRStatus: Open.#1797 In farnalabs/modulo-bak;security: SSRF — admin-gated webhook & error-forwarder URLs not SSRF-validated
securitySecurity-related issue/PRSecurity-related issue/PRStatus: Open.#1796 In farnalabs/modulo-bak;security: analytics team-isolation gap — org-wide aggregation exposed to team-scoped viewers
securitySecurity-related issue/PRSecurity-related issue/PRStatus: Open.#1795 In farnalabs/modulo-bak;security: cross-tenant account deactivate/reactivate via single-org admin (global accounts.active)
securitySecurity-related issue/PRSecurity-related issue/PRStatus: Open.#1794 In farnalabs/modulo-bak;security: team-assignment bypass on create/copy paths — owner_team_id/target_team_id not org/membership-validated
securitySecurity-related issue/PRSecurity-related issue/PRStatus: Open.#1793 In farnalabs/modulo-bak;