-
Notifications
You must be signed in to change notification settings - Fork 0
Issues
is:issue state:open
is:issue state:open
Issue creation is restricted in this repository
Search results
Scope enforcement is broken end-to-end (spans dpp-types, dpp-dal, dpp-vault)
bugSomething isn't workingSomething isn't workingsecuritySecurity-relevant issueSecurity-relevant issueStatus: Open.#23 In odal-node/dpp-engine;odal CLI: byte-index slicing on untrusted UTF-8 panics; credential secrets accepted as plain CLI arguments
bugSomething isn't workingSomething isn't workingsecuritySecurity-relevant issueSecurity-relevant issueStatus: Open.#22 In odal-node/dpp-engine;dpp-types: unrecognized API-key scope strings fail open to Admin; retention policy has no lower bound
bugSomething isn't workingSomething isn't workingcomplianceRegulatory/compliance correctness issueRegulatory/compliance correctness issuesecuritySecurity-relevant issueSecurity-relevant issueStatus: Open.#21 In odal-node/dpp-engine;dpp-vault: Read-scoped API keys can perform full passport-lifecycle writes
bugSomething isn't workingSomething isn't workingsecuritySecurity-relevant issueSecurity-relevant issueStatus: Open.#20 In odal-node/dpp-engine;dpp-node: EU registry payload validation failure sends anyway; transfer notifications always omit the prior operator
bugSomething isn't workingSomething isn't workingcomplianceRegulatory/compliance correctness issueRegulatory/compliance correctness issueStatus: Open.#19 In odal-node/dpp-engine;dpp-dal: LIKE-pattern injection exposes arbitrary passports; stale compliance-critical columns; fail-open scope default
bugSomething isn't workingSomething isn't workingcomplianceRegulatory/compliance correctness issueRegulatory/compliance correctness issuesecuritySecurity-relevant issueSecurity-relevant issueStatus: Open.#18 In odal-node/dpp-engine;dpp-plugin-host: Wasm sandbox limiter gap; spoofable sandbox alerts; missing in-force gate on one output path
bugSomething isn't workingSomething isn't workingsecuritySecurity-relevant issueSecurity-relevant issueStatus: Open.#17 In odal-node/dpp-engine;dpp-seal: capabilities() reports sealing support the adapter cannot actually deliver
bugSomething isn't workingSomething isn't workingStatus: Open.#16 In odal-node/dpp-engine;dpp-resolver: unvalidated gtin enables SSRF/path traversal; tamperable qrCodeUrl enables open redirect
bugSomething isn't workingSomething isn't workingsecuritySecurity-relevant issueSecurity-relevant issueStatus: Open.#15 In odal-node/dpp-engine;dpp-identity: mTLS authorization trusts client-supplied headers with no session binding; key rotation fails open
bugSomething isn't workingSomething isn't workingsecuritySecurity-relevant issueSecurity-relevant issueStatus: Open.#14 In odal-node/dpp-engine;dpp-common: request-ID middleware never matches its own error content-type; oversized bodies silently emptied
bugSomething isn't workingSomething isn't workingStatus: Open.#13 In odal-node/dpp-engine;dpp-integrator: steel/aluminium/tyre skip GTIN checksum validation; malformed vault response recorded as success
bugSomething isn't workingSomething isn't workingcomplianceRegulatory/compliance correctness issueRegulatory/compliance correctness issueStatus: Open.#12 In odal-node/dpp-engine;