cinny

Room-history export gives no indication that a message was media/an attachment area: media bug priority: low

by jared was closed 2026-09-12 20:29:09 -04:00

Audit 2026-09 · Medium & Low

getNotificationType/main-timeline gate re-derives push rules on every event without memoization area: notifications bug performance priority: low

#77

by jared was closed 2026-09-12 20:29:07 -04:00

Audit 2026-09 · Medium & Low

useTauriCallPower never releases the native keep-awake state on unmount area: desktop bug priority: low

#76

by jared was closed 2026-09-12 20:29:06 -04:00

Audit 2026-09 · Medium & Low

Halloween fog-band layers keep willChange set even when motion is fully disabled area: appearance bug performance priority: low

#73

by jared was closed 2026-09-12 02:14:51 -04:00

Audit 2026-09 · Medium & Low

Cross-tab session sync is absent on the auth pages area: auth-session bug priority: low

#69

by jared was closed 2026-09-12 20:29:09 -04:00

Audit 2026-09 · Medium & Low

GIF picker sends search terms and IP directly to Giphy, outside any privacy setting area: messaging bug priority: low security

#68

by jared was closed 2026-09-12 20:29:06 -04:00

Audit 2026-09 · Medium & Low

Any OIDC login failure discards the cached dynamic client id area: auth-session bug priority: low

#67

by jared was closed 2026-09-12 19:46:15 -04:00

Audit 2026-09 · Medium & Low

Location messages load an OpenStreetMap iframe with no facade or auto-load gate area: messaging bug priority: low security

#66

by jared was closed 2026-09-12 20:29:02 -04:00

Audit 2026-09 · Medium & Low

KaTeX renders remote LaTeX with no maxSize/maxExpand limits area: messaging bug priority: low security

#65

by jared was closed 2026-09-12 20:29:01 -04:00

Audit 2026-09 · Medium & Low

Avatar-decoration slug from a remote profile is interpolated into a URL unvalidated area: media bug priority: low security

#64

by jared was closed 2026-09-12 14:59:49 -04:00

Audit 2026-09 · Medium & Low

Forwarding an encrypted attachment into a plaintext room publishes its AES key area: messaging bug priority: low security

#63

by jared was closed 2026-09-12 20:29:01 -04:00

Audit 2026-09 · Medium & Low

RoomMemberEvent.Membership listener on Room never fires (dead handler) area: messaging bug priority: low

#61

by jared was closed 2026-09-12 20:29:01 -04:00

Audit 2026-09 · Medium & Low

In-iframe PTT/deafen key listeners are lost if the EC iframe reloads area: calls bug priority: low

#60

by jared was closed 2026-09-12 19:46:14 -04:00

Audit 2026-09 · Medium & Low

Soundboard clip blob URLs are never revoked and survive logout area: calls bug priority: low security

#57

by jared was closed 2026-09-12 20:29:01 -04:00

Audit 2026-09 · Medium & Low

Room invite link / QR code always uses the local homeserver as the only via-server, ignoring the shared via-server resolver area: navigation bug priority: medium

#51

by jared was closed 2026-09-12 20:29:09 -04:00

Audit 2026-09 · Medium & Low

2026-11-14

Room-history export shows outdated content and a garbled duplicate line for edited messages area: navigation bug priority: medium

#50

by jared was closed 2026-09-12 20:29:09 -04:00

Audit 2026-09 · Medium & Low

2026-11-14

"Deny" on a pending knock request has no error handling and can be shown to users who lack kick power area: moderation bug priority: medium

#49

by jared was closed 2026-09-12 20:29:09 -04:00

Audit 2026-09 · Medium & Low

2026-11-14

Notification profile presets don't clear an active "Pause Notifications" snooze area: notifications bug priority: medium

#48

by jared was closed 2026-09-12 19:46:18 -04:00

Audit 2026-09 · Medium & Low

2026-11-14

Profile field edits can be clobbered by a slow-loading initial fetch (pronouns, timezone, avatar decoration) area: settings bug priority: medium

#47

by jared was closed 2026-09-12 19:46:17 -04:00

Audit 2026-09 · Medium & Low

2026-11-14

Avatar Decoration settings panel shows "None" on any fetch failure, not just true absence area: settings bug priority: medium

#46

by jared was closed 2026-09-12 19:46:17 -04:00

Audit 2026-09 · Medium & Low

2026-11-14