Repository navigation

Fix five verified security findings from the audit - #24

Open

vijaythecoder wants to merge 8 commits into

mainfrom

claude/loving-benz-097c19

Open

Fix five verified security findings from the audit#24
vijaythecoder wants to merge 8 commits into
mainfrom
claude/loving-benz-097c19

Commits on Oct 17, 2026
- Block MIME header injection via CRLF in custom header names
  
  vijaythecoder
  and
  claude
  committed
  7162027
- Pin SNS topic and enforce timestamp freshness on SES webhooks
  
  vijaythecoder
  and
  claude
  committed
  a35328e
- Stop trusting all proxies and harden the login rate limiter
  
  vijaythecoder
  and
  claude
  committed
  39f2583
- Prevent workspace-context hijack via consentless member attachment
  
  vijaythecoder
  and
  claude
  committed
  0b3f531
- Apply formula-safe escaping to activity CSV exports
  
  vijaythecoder
  and
  claude
  committed
  7e04559
Commits on Oct 18, 2026
- Update locked dependencies to clear composer audit advisories
  
  vijaythecoder
  and
  claude
  committed
  d6c48a8
- Update Wayfinder so generated types support the QUERY route method
  
  vijaythecoder
  and
  claude
  committed
  a3cf751
- Clear npm audit advisories and scope the CI audit to production deps
  
  vijaythecoder
  and
  claude
  committed
  428f344