2026-10-05 - 2026-11-05
Overview
There has been no commit activity in this period.
2 Issues created by 1 user
Opened
#37 Authelia Remote-* headers are trusted from any source — LAN clients can impersonate any user/group
Opened
#38 WebSocket has no authentication: anyone reaching :8080 gets the live event feed and can pose as a worker