forked from Alia5/VIIPER
-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
[security] Do not write generated API passwords to world-readable logs
securitySecurity issueSecurity issueStatus: Open.#11 In PatrickQuintal/VIIPER;- Status: Open.#10 In PatrickQuintal/VIIPER;
- Status: Open.#9 In PatrickQuintal/VIIPER;
[security] Reject encrypted API frames that are too short before slicing nonce and ciphertext
securitySecurity issueSecurity issueStatus: Open.#8 In PatrickQuintal/VIIPER;[security] Validate release tags and workflow inputs before using them in shell or generated installer scripts
securitySecurity issueSecurity issueStatus: Open.#7 In PatrickQuintal/VIIPER;[security] Verify installer and updater artifacts before executing downloaded code
securitySecurity issueSecurity issueStatus: Open.#6 In PatrickQuintal/VIIPER;[security] Add pre-auth read deadlines and connection limits to the API server
securitySecurity issueSecurity issueStatus: Open.#5 In PatrickQuintal/VIIPER;[security] Cap USB/IP TransferBufferLength before allocating OUT payloads
securitySecurity issueSecurity issueStatus: Open.#4 In PatrickQuintal/VIIPER;[security] Validate USB/IP import busid before slicing to avoid unauthenticated panic
securitySecurity issueSecurity issueStatus: Open.#3 In PatrickQuintal/VIIPER;[security] Require authentication for localhost API clients when auto-attach can affect privileged USB state
securitySecurity issueSecurity issueStatus: Open.#2 In PatrickQuintal/VIIPER;[security] Use separate AEAD keys or nonce spaces for each API direction
securitySecurity issueSecurity issueStatus: Open.#1 In PatrickQuintal/VIIPER;