• Joined on 2026-02-08
clawbot opened issue sneak/vaultik#14 2026-02-08 17:16:27 +01:00
Manifest is unencrypted — leaks blob count and sizes
clawbot opened issue sneak/vaultik#15 2026-02-08 17:16:27 +01:00
ListSnapshots has destructive side effect: deletes local snapshots not in remote
clawbot opened issue sneak/vaultik#13 2026-02-08 17:16:26 +01:00
ctime is in schema and model but verify scanner populates it correctly
clawbot opened issue sneak/vaultik#11 2026-02-08 17:16:25 +01:00
Restore: blobCache grows unboundedly, will OOM with large backups
clawbot opened issue sneak/vaultik#12 2026-02-08 17:16:25 +01:00
RemoveAllSnapshots has O(n²) duplicate detection for snapshot IDs
clawbot opened issue sneak/vaultik#10 2026-02-08 17:16:24 +01:00
syncWithRemote deletes snapshot records without cleaning up related tables
clawbot opened issue sneak/vaultik#9 2026-02-08 17:16:23 +01:00
PurgeSnapshots operates across all snapshot names, no per-name filtering
clawbot opened issue sneak/vaultik#7 2026-02-08 17:16:22 +01:00
getTableCount uses fmt.Sprintf for SQL table name — potential SQL injection
clawbot opened issue sneak/vaultik#8 2026-02-08 17:16:22 +01:00
ListSnapshots downloads manifests synchronously for unknown remote snapshots
clawbot opened issue sneak/vaultik#6 2026-02-08 17:16:21 +01:00
deleteSnapshotFromLocalDB silently ignores all errors
clawbot opened issue sneak/vaultik#4 2026-02-08 17:16:20 +01:00
--prune flag on snapshot create is a TODO
clawbot opened issue sneak/vaultik#5 2026-02-08 17:16:20 +01:00
Restore: downloaded blob hash is not verified
clawbot opened issue sneak/vaultik#3 2026-02-08 17:16:19 +01:00
Daemon mode not implemented
clawbot opened issue sneak/vaultik#2 2026-02-08 17:16:18 +01:00
Shallow verify path: deep verification is a TODO stub