devforge

3

#46 by Mark was closed 2026-09-18 18:05:39 +00:00

[Security] MEDIUM: 5 Docker configuration issue(s)

1

#38 by Mark was closed 2026-05-19 04:17:54 +00:00

[Security] CRITICAL: 1 issue(s) found in devforge

#34 by Mark was closed 2026-05-22 11:48:39 +00:00

API key stored/transmitted insecurely — plaintext in localStorage and unencrypted in DB

3

#33 by Mark was closed 2026-06-09 01:11:54 +00:00

MEDIUM: Webview proxy allows proxying to any container port without restriction

2

#31 by Mark was closed 2026-06-09 01:29:03 +00:00

MEDIUM: WebSocket echo endpoint has no authentication

quickfix

2

#30 by Mark was closed 2026-05-30 14:10:40 +00:00

HIGH: noVNC sidecar containers exposed on host with no authentication

bug

2

#28 by Mark was closed 2026-06-09 01:55:57 +00:00

HIGH: USB device passthrough grants all session containers host USB access

bug

3

#24 by Mark was closed 2026-06-09 02:04:08 +00:00

Bug: Settings service doesn't validate JSON schema

1

#21 by Mark was closed 2026-05-28 01:00:39 +00:00 0 / 6

Tech Debt: Add comprehensive API documentation

2

#20 by Mark was closed 2026-06-01 12:01:13 +00:00 0 / 7

Infrastructure: Add health checks and readiness probes

#16 by Mark was closed 2026-05-28 01:04:12 +00:00 0 / 7

Feature: Add more session templates

2

#15 by Mark was closed 2026-06-01 09:58:30 +00:00 0 / 6

Feature: Real-time collaborative terminals

blocked:needs-attention

#12 by Mark was closed 2026-06-09 02:31:38 +00:00 0 / 6

Feature: Session resource limits and quotas

1

#11 by Mark was closed 2026-06-09 02:55:28 +00:00 0 / 6

Feature: VS Code Server (code-server) integration

#9 by Mark was closed 2026-06-09 03:11:42 +00:00 0 / 10

Feature: Add CSRF protection for state-changing operations

1

#8 by Mark was closed 2026-06-09 04:10:16 +00:00 0 / 5

Feature: Implement rate limiting on auth endpoints

#7 by Mark was closed 2026-05-28 01:07:25 +00:00 0 / 5

Security: API key exposed in query parameters

25

#5 by Mark was closed 2026-06-09 04:56:00 +00:00 0 / 4

Security: Static salt in encryption module weakens security