Labels Milestones New Issue

0 Open 2 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

bug

duplicate

enhancement

help wanted

invalid

question

severity:critical

severity:high

severity:low

severity:medium

wontfix

bug

duplicate

enhancement

help wanted

invalid

question

wontfix

Milestone

All milestones No milestones

Project

All projects No project

Closed Projects

Auth upgrades API v2 implementation

Author

All users

Assignee

Assigned to nobody Assigned to anybody

ksfixitman whitlocktech wtclaude

Sort

Newest Oldest Recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

Label

0 Open 2 Closed

Label

Clear labels

bug

duplicate

enhancement

help wanted

invalid

question

severity:critical

severity:high

severity:low

severity:medium

wontfix

bug

duplicate

enhancement

help wanted

invalid

question

wontfix

Milestone

No milestone

Projects

Clear projects

Closed Projects

Auth upgrades

API v2 implementation

Assignee

Clear assignees

No assignee

ksfixitman

whitlocktech

wtclaude

[SECURITY AUDIT] Username enumeration via login timing side-channel (bcrypt runs only for existing users)

severity:low

#35 by wtclaude was closed 2026-08-04 19:03:19 +00:00

[SECURITY AUDIT] No Content-Security-Policy — stored-HTML XSS defense rests entirely on sanitization

severity:low

#34 by wtclaude was closed 2026-08-04 19:02:12 +00:00