Issues · APN-Network/protos · GitHub

Labels Milestones

Pong.gauges 'Known keys' list documents 'rtt' but Node sends 'TUN' instead

#31

· bibonix opened

on Jun 23, 2026

`Pong.expires` and the matching `Property.expires` report the same Node decommission time from two independent sources with no defined precedence

#30

· bibonix opened

on Jun 21, 2026

Auth.timestamp minute granularity makes replay-prevention nonce ineffective

#29

· bibonix opened

on Jun 18, 2026

Property.port and Peer.port use uint32, allowing values above 65535 that no TCP stack accepts

#28

· bibonix opened

on Jun 17, 2026

Pong.properties has no maximum-entry contract, enabling unbounded client-side memory allocation

#27

· bibonix opened

on Jun 17, 2026

Pong.gauges has no maximum-entry or maximum-key-length contract, enabling unbounded client-side memory allocation

#26

· bibonix opened

on Jun 16, 2026

Pong.servers has no maximum-entry contract, enabling unbounded client-side memory allocation

#25

· bibonix opened

on Jun 16, 2026

Welcome.nid has no non-empty contract; unset APN_NID silently breaks the tunnel-header prefix invariant

#24

· bibonix opened

on Jun 16, 2026

Ping.canaries has no maximum-entry contract, enabling unbounded map allocation at the Node

#23

· bibonix opened

on Jun 13, 2026

Auth.hmac has no minimum-length contract; 12-byte enforcement left to each implementation

#21

· bibonix opened

on Jun 12, 2026

Peer.sni has no non-empty contract; empty sni causes a TLS handshake failure indistinguishable from a dead Node

#20

· bibonix opened

on Jun 11, 2026

Welcome.padding has no maximum-size contract, enabling post-auth memory exhaustion at the client

#19

· bibonix opened

on Jun 11, 2026