-
Notifications
You must be signed in to change notification settings - Fork 1
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
security: dependency version pinning — loose caret ranges allow silent vulnerability introduction
securitySecurity vulnerability or concernSecurity vulnerability or concernStatus: Open.#10 In KozyOps/semantic-release-clickup;security: CLICKUP_TOKEN sent as raw Authorization header value instead of Bearer scheme
securitySecurity vulnerability or concernSecurity vulnerability or concernStatus: Open.#9 In KozyOps/semantic-release-clickup;security: no HTTP 429 rate-limit handling — silent failures when ClickUp throttles requests
bugSomething isn't workingSomething isn't workingsecuritySecurity vulnerability or concernSecurity vulnerability or concernStatus: Open.#8 In KozyOps/semantic-release-clickup;security: function templates in plugin config allow arbitrary code execution
bugSomething isn't workingSomething isn't workingsecuritySecurity vulnerability or concernSecurity vulnerability or concernStatus: Open.#7 In KozyOps/semantic-release-clickup;security: commit subjects and author names inserted into markdown messages without escaping
bugSomething isn't workingSomething isn't workingsecuritySecurity vulnerability or concernSecurity vulnerability or concernStatus: Open.#6 In KozyOps/semantic-release-clickup;security: messageType validation inconsistency — 'update' is a valid type but fails verifyConditions
bugSomething isn't workingSomething isn't workingsecuritySecurity vulnerability or concernSecurity vulnerability or concernStatus: Open.#5 In KozyOps/semantic-release-clickup;security: no timeout on ClickUp API HTTP requests — CI pipeline can hang indefinitely
bugSomething isn't workingSomething isn't workingsecuritySecurity vulnerability or concernSecurity vulnerability or concernStatus: Open.#4 In KozyOps/semantic-release-clickup;security: sensitive error response body logged verbatim and included in thrown errors
bugSomething isn't workingSomething isn't workingsecuritySecurity vulnerability or concernSecurity vulnerability or concernStatus: Open.#3 In KozyOps/semantic-release-clickup;security: URL injection via unvalidated workspaceId and channelId
bugSomething isn't workingSomething isn't workingsecuritySecurity vulnerability or concernSecurity vulnerability or concernStatus: Open.#2 In KozyOps/semantic-release-clickup;