Client audit 2026-09 — tracking index

#89 by jared was closed 2026-10-25 19:25:54 -04:00

0 / 94

Go to issue

Labels Milestones New Issue

0 Open 64 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

a11y

area: appearance

area: auth-session

area: build-ci

area: calls

area: desktop

area: media

area: messaging

area: mobile

area: moderation

area: navigation

area: notifications

area: settings

area: threads

bug

dependencies

docs

duplicate

enhancement

help wanted

invalid

needs-human-review

performance

planning

priority: critical

priority: high

priority: low

priority: medium

qa

question

research

security

tech-debt

ux

wontfix

Milestone

All milestones No milestones

Open milestones

Manual QA backlog Audit 2026-09 · P0 security & data loss Audit 2026-09 · High Audit 2026-09 · Medium & Low Features 2026-Q4

Project

All projects No project

Author

All users

Assignee

Assigned to nobody Assigned to anybody

cole (Cole Keller) jared (Jared Vititoe) nathan (Nathan Vititoe)

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

0 Open 64 Closed

Label

Clear labels

a11y

area: appearance

area: auth-session

area: build-ci

area: calls

area: desktop

area: media

area: messaging

area: mobile

area: moderation

area: navigation

area: notifications

area: settings

area: threads

bug

dependencies

docs

duplicate

enhancement

help wanted

invalid

needs-human-review

performance

planning

priority: critical

priority: high

priority: low

priority: medium

qa

question

research

security

tech-debt

ux

wontfix

Milestone

No milestone

Open milestones

Manual QA backlog

Audit 2026-09 · P0 security & data loss

Audit 2026-09 · High

Audit 2026-09 · Medium & Low

Features 2026-Q4

Projects

Clear projects

Assignee

Clear assignees

cole

jared

nathan

GIF picker sends unencrypted media into encrypted rooms area: messagingbugpriority: highsecurity

#11

by jared was closed 2026-09-12 02:14:51 -04:00

Audit 2026-09 · P0 security & data loss 2026-09-25

Bookmarks and reminders upload decrypted message text to server account data area: messagingbugpriority: highsecurity

#10

by jared was closed 2026-09-12 19:46:14 -04:00

Audit 2026-09 · P0 security & data loss 2026-09-25

Scheduled messages bypass encryption — plaintext m.room.message in E2EE rooms area: messagingbugpriority: criticalsecurity

#7

by jared was closed 2026-09-12 02:14:51 -04:00

Audit 2026-09 · P0 security & data loss 2026-09-18

Image compression in an E2EE room uploads plaintext and breaks the event area: messagingbugpriority: criticalsecurity

#6

by jared was closed 2026-09-12 02:14:51 -04:00

Audit 2026-09 · P0 security & data loss 2026-09-18