Go to issue

Labels Milestones New Issue

49 Open 1 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

Milestone

All milestones No milestones

Project

All projects No project

Author

All users

Assignee

Assigned to nobody Assigned to anybody

rezidir

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

49 Open 1 Closed

Close

Label

Clear labels

Milestone

No milestone

Projects

Clear projects

Assignee

Clear assignees

rezidir

[SEC-009][высокий] Нет защиты от brute-force на login

#18

opened 2026-06-26 19:45:44 +03:00 by cucadmuh

[SEC-008][высокий] Открытая регистрация без ограничений

#17

opened 2026-06-26 19:45:44 +03:00 by cucadmuh

[SEC-007][критический] Пароли пишутся в логи при login

#16

opened 2026-06-26 19:45:44 +03:00 by cucadmuh

[SEC-006][критический] Секреты закоммичены в git (bin/.env)

#15

opened 2026-06-26 19:45:44 +03:00 by cucadmuh

[SEC-005][высокий] Конфигурация сломана: нет dotenv.load()

#14

opened 2026-06-26 19:45:44 +03:00 by cucadmuh

[SEC-004][критический] JWT secret с fallback на пустую строку

#13

opened 2026-06-26 19:45:44 +03:00 by cucadmuh

[SEC-003][высокий] JWT без срока действия

#12

opened 2026-06-26 19:45:44 +03:00 by cucadmuh

[SEC-002][критический] Нет авторизации на уровне share/watch

#11

opened 2026-06-26 19:45:44 +03:00 by cucadmuh

[SEC-001][критический] IDOR: любой пользователь может обновить чужую геопозицию

#10

opened 2026-06-26 19:45:43 +03:00 by cucadmuh