Labels Milestones New Issue

3 Open 0 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

component:agent

component:dashboard

component:server

security

severity:critical

severity:high

Milestone

All milestones No milestones

Project

All projects No project

Author

All users

Assignee

Assigned to nobody Assigned to anybody

azcomputerguru

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

Label

3 Open 0 Closed

Close

Label

Clear labels

component:agent

component:dashboard

component:server

security

severity:critical

severity:high

Milestone

No milestone

Projects

Clear projects

Assignee

Clear assignees

No assignee

azcomputerguru

[H6] Dashboard JWT in sessionStorage, blindly attached as Bearer, no exp/refresh/idle-timeout component:dashboard security severity:high

#20 opened 2026-06-05 17:35:49 -07:00 by azcomputerguru

[H5] Server does not block self-role-demotion (only self-delete); lockout guard is client-only component:dashboard component:server security severity:high

#19 opened 2026-06-05 17:35:45 -07:00 by azcomputerguru

[C1] Secrets/tokens in WebSocket URL query strings component:agent component:dashboard security severity:critical

#10 opened 2026-06-05 17:34:55 -07:00 by azcomputerguru