EC fork audit 2026-09 · High

New Issue

High-severity findings from the September 2026 Element Call fork audit.

2026-10-14

100% Completed

0 Open 6 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

a11y

area: audio-pipeline

area: build-publish

area: deafen

area: decorations

area: denoise

area: livekit

area: mobile-ui

area: soundboard-inject

area: upstream-sync

area: widget-actions

bug

dependencies

docs

enhancement

performance

priority: critical

priority: high

priority: low

priority: medium

research

security

tech-debt

ux

Project

All projects No project

Author

All users

Assignee

Assigned to nobody Assigned to anybody

cole (Cole Keller) jared (Jared Vititoe) nathan (Nathan Vititoe)

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

Nothing in CI or the test suite exercises src/lotus/* at all area: build-publishpriority: hightech-debt

#6

by jared was closed 2026-09-13 01:28:39 -04:00

2026-10-14

1

Fork CI never runs the test/lint/typecheck suite before publish area: build-publishbugpriority: high

#5

by jared was closed 2026-09-12 11:56:46 -04:00

2026-10-14

1

In-call avatar decoration is sized 1:1 with the avatar (no inset like the host) and has no onError fallback area: decorationsbugpriority: high

#4

by jared was closed 2026-09-13 01:22:51 -04:00

2026-10-14

focus_participant is a silent no-op in EC's default grid layout area: widget-actionsbugpriority: high

#3

by jared was closed 2026-09-13 01:22:48 -04:00

2026-10-14

Denoise restart fallback hands LiveKit the raw mic as processedTrack, which later gets stopped area: denoisebugpriority: high

#2

by jared was closed 2026-09-12 11:56:45 -04:00

2026-10-14

1

Deafen via per-participant setVolume is undone by EC volume controls and clobbers tile volumes on undeafen area: deafenbugpriority: high

#1

by jared was closed 2026-09-12 11:56:45 -04:00

2026-10-14

1