All issues

Search results

JSONP callback parameter is reflected without validation, enabling XSS

Status: Open.

#1587 In guardian/riff-raff;

· m75gyqbsrw-boop opened on Apr 22, 2026

API key authentication path contains SQL injection in getAndUpdateApiKey

Status: Open.

#1584 In guardian/riff-raff;

· m75gyqbsrw-boop opened on Apr 22, 2026

Sensitive secrets are written to logs for API keys and hook credentials

Status: Open.

#1586 In guardian/riff-raff;

· m75gyqbsrw-boop opened on Apr 22, 2026

OAuth client secret and default database credentials are committed in application.conf

Status: Open.

#1585 In guardian/riff-raff;

· m75gyqbsrw-boop opened on Apr 22, 2026

Unauthenticated management endpoints allow remote shutdown and instance rotation

Status: Open.

#1583 In guardian/riff-raff;

· m75gyqbsrw-boop opened on Apr 22, 2026

Finding the warnings when a deploy gets a Warnings encountered striped banner can be very hard

Status: Open.

#1459 In guardian/riff-raff;

· rtyley opened on Aug 6, 2025

Feature request: Link to pull requests on deploy pages

Status: Open.

#1424 In guardian/riff-raff;

· emdash-ie opened on Mar 31, 2025

Apps can not auto-scale until an autoscaling deploy has successfully completed

Status: Open.

#1342 In guardian/riff-raff;

· rtyley opened on May 23, 2024

deploys which refer to an amigo recipe with no bakes, silently succeed, leaving behind stale AMI IDs on CFN stack

Status: Open.

#946 In guardian/riff-raff;

· twrichards opened on Dec 8, 2022

Race condition for polling builds

Status: Open.

#612 In guardian/riff-raff;

· sihil opened on Jan 18, 2021

UI: Two less keypresses

Status: Open.

#603 In guardian/riff-raff;

· paperboyo opened on Sep 21, 2020

Deploy view adds build history of other projects that start with the name of the selected project

defect

Status: Open.

#534 In guardian/riff-raff;

· markrichardsg opened on Mar 15, 2019