sneak/upaas
1
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
Labels Milestones New Issue
0 Open 103 Closed
Label
Clear labels
bug
duplicate
enhancement
help wanted
invalid
merge-ready
needs-checks
needs-rebase
needs-review
needs-rework
notplanned
question
wontfix
Milestone
No milestone
Open milestones
1.0
1.5
Projects
Clear projects
Assignee
Clear assignees
No assignee
clawbot
sneak
Missing .editorconfig file
#133 by clawbot was closed 2026-03-03 18:07:45 +01:00
Missing .gitignore file
#132 by clawbot was closed 2026-03-03 18:07:45 +01:00
the gitea action doesn't comply with repo policies.
#130 by sneak was closed 2026-02-26 11:53:14 +01:00
1
Refactor: break up app.js into smaller modules
#128 by clawbot was closed 2026-02-26 10:59:03 +01:00
LOW: applyMigration deferred rollback skipped when Commit() fails
#125 by clawbot was closed 2026-02-26 11:52:55 +01:00
LOW: createAndStartContainer has unused imageID parameter
#124 by clawbot was closed 2026-02-23 20:48:23 +01:00
2
LOW: GetBuildDir parameter named appID but always called with app.Name
#123 by clawbot was closed 2026-02-26 11:52:55 +01:00
HIGH: No size limit on deployment logs stored in SQLite
#122 by clawbot was closed 2026-02-26 11:52:55 +01:00
HIGH: Template rendering bypass in HandleAppCreate/HandleAppUpdate can produce partial HTML
#121 by clawbot was closed 2026-02-26 11:52:55 +01:00
CRITICAL: docker-compose.yml missing HOST_DATA_DIR — git clone fails in containerized deployment
#120 by clawbot was closed 2026-02-26 11:52:55 +01:00
CRITICAL: rce in docker build
#118 by sneak was closed 2026-02-23 20:48:09 +01:00
1
CRITICAL: API exposes webhook secret and SSH private key in app detail response
#114 by clawbot was closed 2026-02-20 14:27:50 +01:00
2
CRITICAL: Port mappings bind to 0.0.0.0 with no restriction on privileged ports or conflicts
#113 by clawbot was closed 2026-02-20 14:27:43 +01:00
1
CRITICAL: API v1 routes use cookie auth without CSRF protection — cross-site request forgery
#112 by clawbot was closed 2026-02-20 14:35:13 +01:00
1
CRITICAL: Volume mounts allow access to any host path (Docker socket, /etc/shadow, etc.)
#111 by clawbot was closed 2026-02-20 14:28:44 +01:00
1
CRITICAL: Deployed containers have no security constraints (capabilities, seccomp, resource limits)
#110 by clawbot was closed 2026-02-20 14:29:15 +01:00
1
BUG: SetupRequired middleware blocks /health, /s/*, and /api/* before initial setup bug
#108 by clawbot was closed 2026-02-20 13:47:14 +01:00 1.0
BUG: HandleVolumeAdd missing path validation — path traversal possible on volume creation bug
#107 by clawbot was closed 2026-02-20 13:47:14 +01:00 1.0
BUG: API delete endpoint does not stop/remove Docker container — orphaned containers bug
#106 by clawbot was closed 2026-02-20 13:47:14 +01:00 1.0
BUG: API deploy handler uses request context — deployment cancelled on client disconnect bug
#105 by clawbot was closed 2026-02-20 13:47:14 +01:00 1.0