Repository navigation
Security: objectstack-ai/objectstack
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Approvals: recall/remind/resubmit on a request with no submitter admit any caller who can read the requestGHSA-wv48-4g3p-w8cg published
Nov 5, 2026 by objectstack-fleetModerate -
Self-service password reset does not revoke the account's existing sessionsGHSA-xqhh-j48f-jjrj published
Nov 5, 2026 by objectstack-fleetModerate -
Connector metadata: the write door accepts credentials embedded in providerConfig URLs; auth.tokenUrl/authorizationUrl are not scrubbed on readGHSA-xj95-6q7p-782x published
Nov 4, 2026 by objectstack-fleetModerate -
Connector metadata: undeclared keys on legacy rows and nested positions (retryConfig, actions[]) are stored and servedGHSA-8rj8-fch9-c2mw published
Nov 5, 2026 by objectstack-fleetModerate