jamesread
|
cb3aa3362e
|
chore: fix potential panic in tests
|
2026-03-11 00:29:56 +00:00 |
|
jamesread
|
606b705bdd
|
chore: fix potential panic in tests
|
2026-03-11 00:27:42 +00:00 |
|
jamesread
|
acd6cb839e
|
security: GHSA-228v-wc5r-j8m7 (HIGH) Unauthorized Action Output Disclosure via EventStream
|
2026-03-10 23:47:35 +00:00 |
|
jamesread
|
86c35f40c3
|
chore: remove unneeded comment
|
2026-03-10 23:28:17 +00:00 |
|
jamesread
|
bc5e9fbe1e
|
security: GHSA-xx6g-43w2-9g6g (MODERATE) Email argument makes compliance harder, enables log injection
|
2026-03-10 23:27:09 +00:00 |
|
jamesread
|
ac0852aad4
|
chore: dep update March 26
|
2026-03-10 22:36:28 +00:00 |
|
jamesread
|
9d916b7175
|
fix: Add link to websocket disconnection
|
2026-03-10 11:40:06 +00:00 |
|
James Read
|
b03af0e2ec
|
Next (#927)
|
2026-03-09 10:20:40 +00:00 |
|
jamesread
|
b33aded230
|
chore: Use a constant for the default CSP
|
2026-03-09 10:00:47 +00:00 |
|
jamesread
|
b298a6bd8c
|
chore: Treat root fieldset separately for ordering
|
2026-03-09 09:31:40 +00:00 |
|
jamesread
|
b78b0df84d
|
Merge branch 'next' of github.com:OliveTin/OliveTin into next
|
2026-03-09 09:20:02 +00:00 |
|
jamesread
|
dcb5bd0c82
|
chore: Allow entity key ordering for actionless components
|
2026-03-09 09:18:24 +00:00 |
|
James Read
|
57ebade75b
|
Merge branch 'main' into next
|
2026-03-09 04:58:10 -04:00 |
|
jamesread
|
93a9636a82
|
chore: additional test coverage for view permission
|
2026-03-09 08:55:47 +00:00 |
|
jamesread
|
caf5a4b025
|
fix: Disconnection banner preserves original disconnect time
|
2026-03-09 08:47:26 +00:00 |
|
jamesread
|
a5c102dbf1
|
fix: Much more helpful reconnection banner
|
2026-03-09 00:27:53 +00:00 |
|
jamesread
|
2f77000de4
|
security: GHSA-364q-w7vh-vhpc (HIGH) Unsafe parsing of UniqueTrackingId can be used to write files
|
2026-03-08 23:29:00 +00:00 |
|
jamesread
|
24e8b48dc9
|
fix: Websocket reconnection logic (#802, 889, #884)
|
2026-03-08 23:09:23 +00:00 |
|
jamesread
|
71bb999950
|
security: Actions that people didnt have permission to view were being returned (#921)
|
2026-03-08 22:45:46 +00:00 |
|
jamesread
|
5ff6b5d080
|
fix: Entity ordering (#886, #762)
|
2026-03-08 22:16:24 +00:00 |
|
jamesread
|
0fee24089f
|
fix: Restart action button was not working
|
2026-03-08 21:11:27 +00:00 |
|
jamesread
|
3f46007281
|
fix: Relax default CSP to allow iconify to work
|
2026-03-08 20:46:52 +00:00 |
|
James Read
|
276e3f62dd
|
Next (#915)
|
2026-03-05 09:51:25 +00:00 |
|
jamesread
|
b032ae5e5e
|
chore: fix regression on arguments not being found
|
2026-03-05 08:29:30 +00:00 |
|
James Read
|
6e7f3b0823
|
Merge commit from fork
security: GHSA-jf73-858c-54pg (MODERATE) View permission not being checked when returning dashboards
|
2026-03-05 03:24:56 -05:00 |
|
James Read
|
93d983c506
|
Merge branch 'next' into advisory-fix-1
|
2026-03-05 03:24:12 -05:00 |
|
jamesread
|
d7962710e7
|
security: GHSA-jf73-858c-54pg (MODERATE) View permission not being checked when returning dashboards
|
2026-03-05 08:20:02 +00:00 |
|
jamesread
|
9080577f2b
|
chore: potential crash in unit tests
|
2026-03-05 08:10:56 +00:00 |
|
jamesread
|
10f5ba62a2
|
docs: typos in SECURITY.md
|
2026-03-05 08:07:56 +00:00 |
|
jamesread
|
131393fb2d
|
Merge branch 'next' of github.com:OliveTin/OliveTin into next
|
2026-03-05 00:24:20 +00:00 |
|
jamesread
|
9d55d4a178
|
docs: Policy change, 2k will receive security updates much slower
|
2026-03-05 00:24:00 +00:00 |
|
James Read
|
06557683a1
|
Merge commit from fork
GHSA-fwhj-785h-43hh
|
2026-03-04 19:16:35 -05:00 |
|
James Read
|
5e0c052e68
|
Merge branch 'next' into advisory-fix-1
|
2026-03-04 19:16:07 -05:00 |
|
James Read
|
6202736d53
|
Merge commit from fork
security: GHSA-p443-p7w5-2f7f (MODERATE) RestartAction always runs actions as guest
|
2026-03-04 19:05:48 -05:00 |
|
jamesread
|
cb46a597b2
|
security: GHSA-p443-p7w5-2f7f (MODERATE) RestartAction always runs actions as guest
|
2026-03-05 00:04:58 +00:00 |
|
James Read
|
32c7fd73b8
|
Merge commit from fork
security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session
|
2026-03-04 18:36:22 -05:00 |
|
jamesread
|
d6a0abc375
|
security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session
|
2026-03-04 23:31:15 +00:00 |
|
jamesread
|
e97d8ecbd8
|
security: GHSA-g962-2j28-3cg9 (HIGH) JWT Audience Validation Bypass in Local Key and HMAC Modes
|
2026-03-04 23:13:39 +00:00 |
|
jamesread
|
92a1346edf
|
docs: update security.md with the fix process
|
2026-03-04 23:12:20 +00:00 |
|
jamesread
|
00cb5a2abf
|
fix: action triggers were broken #914
|
2026-03-04 23:12:20 +00:00 |
|
jamesread
|
0c47564652
|
chore: logs are written with 0600 instead of 0644
|
2026-03-04 23:12:20 +00:00 |
|
jamesread
|
bb14c5da3e
|
security: (MED) GHSA-fwhj-785h-43hh Crash on NPE by calling APIs with invalid bindings or log references
|
2026-03-04 22:51:58 +00:00 |
|
James Read
|
235493e471
|
Next (#911)
|
2026-03-02 00:49:13 +00:00 |
|
James Read
|
d9aed9d5c5
|
chore(deps): bump minimatch from 3.1.2 to 3.1.5 in /frontend (#906)
|
2026-03-01 19:45:05 -05:00 |
|
jamesread
|
87148f05bd
|
chore: Update SECURITY.md
|
2026-03-02 00:44:49 +00:00 |
|
James Read
|
e8e62d22f1
|
Merge branch 'next' into dependabot/npm_and_yarn/frontend/minimatch-3.1.5
|
2026-03-01 19:36:51 -05:00 |
|
jamesread
|
0412b9ea1d
|
Merge branch 'next' of github.com:OliveTin/OliveTin into next
|
2026-03-02 00:35:05 +00:00 |
|
jamesread
|
d9804182ea
|
security: GHSA-4fqm-6fmh-82mq Authentication bypass in KillAction - thanks for the responsible disclosure @kule500 and making OliveTin better
|
2026-03-02 00:29:02 +00:00 |
|
James Read
|
26086576da
|
feat: Clickable links in outout (#900) (#909)
|
2026-03-01 19:16:25 -05:00 |
|
James Read
|
58b0a7b8f6
|
Security remote crash in oauth2 (#910)
|
2026-03-01 19:14:36 -05:00 |