-
Notifications
You must be signed in to change notification settings - Fork 8
Issues
is:issue state:open
is:issue state:open
Issue creation is restricted in this repository
Search results
No rate limiting on /api/auth/login enables credential-stuffing / brute force
backendBackend service logicBackend service logicsecuritySecurity concernSecurity concernStatus: Open.#18 In StellarSend/backend;No numeric validation on payment amount fields (QuoteRequest.amount, SendPaymentRequest.send_amount)
backendBackend service logicBackend service logicbugSomething isn't workingSomething isn't workingStatus: Open.#17 In StellarSend/backend;Registration accepts unvalidated stellar_address and lacks structured input validation
bugSomething isn't workingSomething isn't workingsecuritySecurity concernSecurity concernStatus: Open.#16 In StellarSend/backend;No retry/backoff logic for Horizon API calls in StellarService
backendBackend service logicBackend service logicenhancementNew feature or requestNew feature or requestStatus: Open.#15 In StellarSend/backend;No graceful shutdown handling despite tokio-util 'full' dependency
backendBackend service logicBackend service logicenhancementNew feature or requestNew feature or requestStatus: Open.#14 In StellarSend/backend;rust-toolchain.toml and .cargo/config.toml hardcode x86_64-apple-darwin target, breaking Linux/CI/Docker builds
bugSomething isn't workingSomething isn't workingdevopsDeployment/infraDeployment/infraStatus: Open.#13 In StellarSend/backend;Default database password committed in plaintext in docker-compose.yml
devopsDeployment/infraDeployment/infrasecuritySecurity concernSecurity concernStatus: Open.#12 In StellarSend/backend;No .dockerignore — build context includes .git, target/, and other unneeded files
devopsDeployment/infraDeployment/infragood first issueGood for newcomersGood for newcomersStatus: Open.#11 In StellarSend/backend;docker-compose.yml has no healthchecks for api or db services
devopsDeployment/infraDeployment/infragood first issueGood for newcomersGood for newcomersStatus: Open.#10 In StellarSend/backend;docker-compose.yml is missing required JWT_SECRET/HORIZON_URL env vars — container will crash-loop
bugSomething isn't workingSomething isn't workingdevopsDeployment/infraDeployment/infraStatus: Open.#9 In StellarSend/backend;README's embedded Dockerfile/docker-compose.yml differ from the actual root files
devopsDeployment/infraDeployment/infradocumentationImprovements or additions to documentationImprovements or additions to documentationStatus: Open.#8 In StellarSend/backend;docs/API.md is out of sync with actual routes in src/routes/mod.rs
bugSomething isn't workingSomething isn't workingdocumentationImprovements or additions to documentationImprovements or additions to documentationStatus: Open.#7 In StellarSend/backend;