Issues

• security: validate and escape country codes in the CSV-to-SQL importer

  sndcds/uranus#240 · Filter by author p3t3r67x0 opened on Sep 19, 2026

• security: bound public list results and database query execution

  sndcds/uranus#239 · Filter by author p3t3r67x0 opened on Sep 19, 2026

• security: enforce HTTP body limits and server read deadlines

  sndcds/uranus#238 · Filter by author p3t3r67x0 opened on Sep 19, 2026

• security: prevent calendar property injection through organizer fields

  sndcds/uranus#237 · Filter by author p3t3r67x0 opened on Sep 19, 2026

• security: make contact IP and email quotas atomic under concurrency

  sndcds/uranus#236 · Filter by author p3t3r67x0 opened on Sep 19, 2026

• security: restrict detailed host diagnostics and avoid public recursive disk scans

  sndcds/uranus#235 · Filter by author p3t3r67x0 opened on Sep 19, 2026

• security: redact all credentials from startup configuration logs

  sndcds/uranus#234 · Filter by author p3t3r67x0 opened on Sep 19, 2026

• security: rate-limit authentication and security-email endpoints

  sndcds/uranus#233 · Filter by author p3t3r67x0 opened on Sep 19, 2026

• security: limit public image variants and prevent unbounded cache growth

  sndcds/uranus#232 · Filter by author p3t3r67x0 opened on Sep 19, 2026

• security: update x/image to fix reachable TIFF decoder vulnerabilities

  sndcds/uranus#231 · Filter by author p3t3r67x0 opened on Sep 19, 2026

• security: bound uploaded image size and pixel count before decoding

  sndcds/uranus#230 · Filter by author p3t3r67x0 opened on Sep 19, 2026

• security: enforce publication visibility on public event dates and ICS exports

  sndcds/uranus#229 · Filter by author p3t3r67x0 opened on Sep 19, 2026

• security: require reauthentication and mailbox verification for account email changes

  sndcds/uranus#228 · Filter by author p3t3r67x0 opened on Sep 19, 2026

• security: prevent attacker-controlled reset, activation and invitation links

  sndcds/uranus#227 · Filter by author p3t3r67x0 opened on Sep 19, 2026

• security: reject weak HS256 signing keys before startup

  sndcds/uranus#226 · Filter by author p3t3r67x0 opened on Sep 19, 2026

• Add org postal_code, city, country to table event_projection

  documentationenhancement
  Feature

  sndcds/uranus#218 · Filter by author roaldchristesen opened on Sep 16, 2026

• deploy: replace in-place git pull deployment with immutable releases and verified SSH hosts

  sndcds/uranus#207 · Filter by author p3t3r67x0 opened on Sep 7, 2026

• ci: add backend test, vet, static analysis and security gates before deploy

  sndcds/uranus#206 · Filter by author p3t3r67x0 opened on Sep 7, 2026

• bug: prevent nil-error panic in login failure paths

  sndcds/uranus#205 · Filter by author p3t3r67x0 opened on Sep 7, 2026

• security: harden password reset flow and enforce reset-token expiry

  sndcds/uranus#204 · Filter by author p3t3r67x0 opened on Sep 7, 2026

• security: enforce organization-level authorization on all admin endpoints

  sndcds/uranus#203 · Filter by author p3t3r67x0 opened on Sep 7, 2026

• security: distinguish access tokens from refresh tokens and enforce token purpose

  sndcds/uranus#202 · Filter by author p3t3r67x0 opened on Sep 7, 2026

• Add member_of_orgs as JSONB to organizations

  documentationenhancement
  sndcds/uranus#197 · Filter by author roaldchristesen opened on Sep 2, 2026