Search results

[P1][security] validateJwtSecret should fail-closed on any default secret in non-dev envs

Status: Open.

#3737 In pierreb-devkit/Node;

· PierreBrisorgueil opened on May 29, 2026

fix(uploads): uploads.controller.contenttype test fails in downstream projects — logger mock missing

FixA bug fixA bug fix

Status: Open.

#3736 In pierreb-devkit/Node;

· PierreBrisorgueil opened on May 29, 2026

[audit][P1][security] core: initErrorRoutes leaks err.message/code to clients in production

audit

P2Important — depends on P1Important — depends on P1

security

Status: Open.

#3726 In pierreb-devkit/Node;

· PierreBrisorgueil opened on May 29, 2026

[audit][P1][security] auth: forgot endpoint allows account enumeration + timing oracle

audit

P2Important — depends on P1Important — depends on P1

security

Status: Open.

#3722 In pierreb-devkit/Node;

· PierreBrisorgueil opened on May 29, 2026