-
Notifications
You must be signed in to change notification settings - Fork 35
Pull requests: vibeforge1111/vibeship-spawner-ui
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
[spark-compete] fix(spawner-ui): return 400 for empty/malformed JSON body on MCP endpoints
#887
opened Jul 8, 2026 by
cryptopecx
Loading…
[spark-compete] Fix fragile optional chaining in hostedUiAuthClientKey
#878
opened Jun 9, 2026 by
Abh1shxkk
Contributor
Loading…
2 tasks
fix(security): remove tracePath from creator mission GET response
#877
opened Jun 7, 2026 by
Esc1200
Contributor
Loading…
fix(security): remove server path from mission active POST response
#876
opened Jun 7, 2026 by
Esc1200
Contributor
Loading…
fix(security): use trusted IP source for rate limiter client key
#875
opened Jun 7, 2026 by
Esc1200
Contributor
Loading…
fix(security): remove rawResponse field from analyze error response
#874
opened Jun 7, 2026 by
Esc1200
Contributor
Loading…
fix(security): remove x-spark-preview-root header leaking server path
#873
opened Jun 7, 2026 by
Esc1200
Contributor
Loading…
[spark-compete] perf(h70-skill-matcher): cache phrase key subset to eliminate per-task scan
#872
opened Jun 7, 2026 by
4gjnbzb4zf-sudo
Contributor
Loading…
fix(vibeship-spawner-ui): mitigate critical vulnerability in api_gateway.ts)
#871
opened Jun 7, 2026 by
driasim
Contributor
Loading…
[spark-compete] fix(security): validate missionId in creator-mission to prevent path traversal
#870
opened Jun 7, 2026 by
ifeoluwaaj
Contributor
Loading…
[spark-compete] fix(security): reject interpreter -c flag in validation commands to prevent code execution
#869
opened Jun 7, 2026 by
ifeoluwaaj
Contributor
Loading…
fix(vibeship-spawner-ui): mitigate critical vulnerability in auth_controller.ts)
#868
opened Jun 7, 2026 by
driasim
Contributor
Loading…
[spark-compete] fix(canvas-store): connection IDs use Math.random at 4 sites — weak entropy
#867
opened Jun 7, 2026 by
TALLSOME24
Contributor
Loading…
[spark-compete] fix(canvas): pipeline connection IDs use Math.random — weak entropy
#866
opened Jun 7, 2026 by
TALLSOME24
Contributor
Loading…
[spark-compete] fix(canvas): pipeline node IDs use Math.random — weak entropy
#865
opened Jun 7, 2026 by
TALLSOME24
Contributor
Loading…
[spark-compete] fix(welcome): PRD bridge requestId uses Math.random — weak entropy
#864
opened Jun 7, 2026 by
TALLSOME24
Contributor
Loading…
[spark-compete] fix(welcome): createQueuedPipelineId uses Math.random — weak entropy
#863
opened Jun 7, 2026 by
TALLSOME24
Contributor
Loading…
[spark-compete] fix(security): validate targetFolder in PRD bridge write to prevent path traversal
#862
opened Jun 7, 2026 by
ifeoluwaaj
Contributor
Loading…
[spark-compete] fix(security): validate workingDirectory in dispatch endpoint to prevent arbitrary cwd for spawned processes
#861
opened Jun 7, 2026 by
ifeoluwaaj
Contributor
Loading…
[spark-compete] fix(security): add authentication to teams API endpoint to prevent information disclosure
#860
opened Jun 7, 2026 by
ifeoluwaaj
Contributor
Loading…
[spark-compete] fix(canvas): Spawner canvas: open in two tabs, edits in one tab get silently overwritten by stale state in the other
#859
opened Jun 7, 2026 by
4gjnbzb4zf-sudo
Contributor
Loading…
[spark-compete] fix(scheduler): scheduler _tick can relaunch the same record while its previous fire is still in flight
#858
opened Jun 7, 2026 by
4gjnbzb4zf-sudo
Contributor
Loading…
[spark-compete] fix(security): prevent timing side-channel in constantTimeEquals length comparison
#857
opened Jun 7, 2026 by
ifeoluwaaj
Contributor
Loading…
[spark-compete] fix(cancel): Cancel signal lost when debounced state-sync POST resolves after cancel DELETE
#856
opened Jun 7, 2026 by
4gjnbzb4zf-sudo
Contributor
Loading…
[spark-compete] fix(runcommand): src/lib/server/command-runner
#855
opened Jun 7, 2026 by
4gjnbzb4zf-sudo
Contributor
Loading…
Previous Next
ProTip!
Adding no:label will show everything without a label.