Search results

🔒 Node hardening: timing oracle, sharp DoS, dependabot, prod deps

Status: Open.

#3853 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

🔒 Production env-gate: error leak + swagger/debug/rate-limiter defaults

Status: Open.

#3852 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

🔒 Org self-join via shadowed Organization policy subject

Status: Open.

#3851 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

🔒 Mass assignment on signup (emailVerified/providerData client-settable)

Status: Open.

#3850 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

🔒 OAuth callback trusts client-asserted identity → account takeover

Status: Open.

#3849 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

🎯 Security audit hardening — Node + Vue (2026-06 audit)

Status: Open.

#3848 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

🔧 OSS hygiene: scrub historical downstream references from docs/comments/fixtures

Status: Open.

#3847 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

🎯 Invitations/org hardening — post-epic follow-ups (tracker)

Status: Open.

#3845 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 12, 2026

🔒 Auth Clerk (pluggable provider)

Status: Open.

#3806 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 8, 2026

🔒 Refresh token rotation

Status: Open.

#3805 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 8, 2026

🎯 Auth & session hardening

Status: Open.

#3804 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 8, 2026

🔒 GDPR export (provider-registry framework)

Status: Open.

#3802 In pierreb-devkit/Node;

· PierreBrisorgueil opened on Jun 8, 2026