Issues - stack - Mosaic Gitea

mosaic/stack

Labels Milestones New Issue

🔴 [P0] Sanitize agent spawn command payloads (command injection risk) api api p0 security

#274 by jason.woltje was closed 2026-02-04 02:18:10 +00:00 M7.1-Remediation (0.0.8)

🔴 [P0] Implement capability enforcement for federation commands api api p0 security

#273 by jason.woltje was closed 2026-02-04 01:58:08 +00:00 M7.1-Remediation (0.0.8)

🔴 [P0] Add rate limiting to all federation endpoints (DoS vulnerability) api api p0 security

#272 by jason.woltje was closed 2026-02-04 00:59:07 +00:00 M7.1-Remediation (0.0.8)

🔴 [P0] Implement OIDC token validation (authentication bypass) api api p0 security

#271 by jason.woltje was closed 2026-02-04 01:31:33 +00:00 M7.1-Remediation (0.0.8) 0 / 6

[ORCH-102] Create server with health checks api api orchestrator

#237 by jason.woltje was closed 2026-02-02 20:33:30 +00:00 M6-AgentOrchestration (0.0.6)

[ORCH-130] apps/api: Add orchestrator client api api

#231 by jason.woltje was closed 2026-02-05 18:25:03 +00:00 M6-AgentOrchestration (0.0.6) 0 / 4

[ORCH-102] Create NestJS server with health checks api api orchestrator

#203 by jason.woltje was closed 2026-02-05 18:25:03 +00:00 M6-AgentOrchestration (0.0.6) 0 / 9

Implement rate limiting on webhook endpoints api api p2 security

#199 by jason.woltje was closed 2026-02-02 19:08:01 +00:00 M4.2-Infrastructure (0.0.4) 0 / 11

Strengthen WebSocket authentication api api p2 security

#198 by jason.woltje was closed 2026-02-02 19:05:19 +00:00 M4.2-Infrastructure (0.0.4) 0 / 10

Add explicit return types to service methods api api p2

#197 by jason.woltje was closed 2026-02-02 18:55:42 +00:00 M4.2-Infrastructure (0.0.4) 0 / 6

Fix race condition in job status updates api api p2

#196 by jason.woltje was closed 2026-02-02 18:51:42 +00:00 M4.2-Infrastructure (0.0.4) 0 / 9

Implement RLS context helpers consistently across all services api api database database p1 security

#195 by jason.woltje was closed 2026-02-04 04:45:23 +00:00 M7.1-Remediation (0.0.8) 0 / 11

Fix workspace ID transmission mismatch between API and client api api p1 web

#194 by jason.woltje was closed 2026-02-04 04:38:52 +00:00 M7.1-Remediation (0.0.8) 0 / 10

Align authentication mechanism between API and web client api api auth p1 web

#193 by jason.woltje was closed 2026-02-04 04:30:28 +00:00 M7.1-Remediation (0.0.8) 0 / 12

[CRITICAL] Fix CORS configuration for cookie-based authentication api api auth p0 security

#192 by jason.woltje was closed 2026-02-02 18:14:01 +00:00 M4.2-Infrastructure (0.0.4) 0 / 12

Sanitize Discord error logs to prevent secret exposure api api p1 security

#188 by jason.woltje was closed 2026-02-02 18:24:36 +00:00 M4.2-Infrastructure (0.0.4) 0 / 11

Implement error recovery in SSE streaming api api p1

#187 by jason.woltje was closed 2026-02-02 18:42:04 +00:00 M4.2-Infrastructure (0.0.4) 0 / 8

Add comprehensive input validation to webhook and job DTOs api api p1 security

#186 by jason.woltje was closed 2026-02-02 18:22:33 +00:00 M4.2-Infrastructure (0.0.4) 0 / 7

[BLOCKER] Fix silent error swallowing in Herald broadcasting api api p0

#185 by jason.woltje was closed 2026-02-02 17:47:35 +00:00 M4.2-Infrastructure (0.0.4) 0 / 7

[BLOCKER] Add authentication to coordinator integration endpoints api api p0 security

#184 by jason.woltje was closed 2026-02-02 17:53:06 +00:00 M4.2-Infrastructure (0.0.4) 0 / 8

1 2 3 4 5 ...