 Jeppe B
|
4697c6b272
|
Merge pull request #251 from copenhagentruckwash/fix-subuser-management-permission-checks
Enforce own-scope subuser permissions for classic users in managed customer scope
|
2026-06-01 23:53:06 +02:00 |
|
|
Jeppe B
|
45e17e196c
|
Fix subuser management permission scope
|
2026-06-01 23:52:57 +02:00 |
|
|
Jeppe B
|
dcc81cbdc7
|
Merge pull request #250 from copenhagentruckwash/propose-fix-for-privilege-boundary-regression
Restrict studio simulation to config-version view and prevent auto-creating drafts
|
2026-06-01 23:52:28 +02:00 |
|
|
Jeppe B
|
c5cb0a3bfe
|
Fix studio simulation draft access
|
2026-06-01 23:52:18 +02:00 |
|
|
Jeppe B
|
465f3ed027
|
Merge pull request #249 from copenhagentruckwash/fix-edge-agent-vulnerability-for-unsigned-artifacts
Require checksums for edge agent updates
|
2026-06-01 23:50:05 +02:00 |
|
|
Jeppe B
|
80ff01f04e
|
Require checksums for edge agent updates
|
2026-06-01 23:49:56 +02:00 |
|
|
Jeppe B
|
f6e4d851d3
|
Merge pull request #248 from copenhagentruckwash/fix-authenticated-ssrf-in-broker-diagnostics
Prevent SSRF in broker diagnostics by ignoring caller URLs and redacting probe output
|
2026-06-01 23:49:24 +02:00 |
|
|
Jeppe B
|
cd4e3faea3
|
Fix broker diagnostics SSRF
|
2026-06-01 23:49:10 +02:00 |
|
|
Jeppe B
|
4cb9e68b33
|
Merge pull request #247 from copenhagentruckwash/fix-information-disclosure-in-websocket-upgrades
Sanitize websocket upgrade error responses
|
2026-06-01 23:47:09 +02:00 |
|
|
Jeppe B
|
0e7e79d205
|
Sanitize websocket upgrade errors
|
2026-06-01 23:46:59 +02:00 |
|
|
Jeppe B
|
a9ca7b41a7
|
Merge pull request #246 from copenhagentruckwash/fix-unbounded-relay-timer-vulnerability
Cap self-serve gate relay timers
|
2026-06-01 23:45:39 +02:00 |
|
|
Jeppe B
|
3b3ed31bb7
|
Cap self-serve gate relay timers
|
2026-06-01 23:45:20 +02:00 |
|
|
Jeppe B
|
4730eebdb4
|
Merge pull request #245 from copenhagentruckwash/fix-internal-ip-address-leakage
Stop exposing relay local IPs by default
|
2026-06-01 23:44:05 +02:00 |
|
|
Jeppe B
|
b25ce9cb11
|
Stop exposing relay local IPs by default
|
2026-06-01 23:43:53 +02:00 |
|
|
Jeppe B
|
fdb98f1399
|
Merge pull request #244 from copenhagentruckwash/fix-unauthenticated-relay-control-vulnerability
Require authorization for LAN worker relay endpoints
|
2026-06-01 23:43:34 +02:00 |
|
|
Jeppe B
|
1dc758a3a3
|
Require authorization for LAN worker relay endpoints
|
2026-06-01 23:43:23 +02:00 |
|
|
Jeppe B
|
032ce93d5e
|
Merge pull request #243 from copenhagentruckwash/fix-hardcoded-service-credentials-in-docker-config
Secure edge gateway service credentials
|
2026-06-01 23:42:47 +02:00 |
|
|
Jeppe B
|
f8ced3b8f2
|
Secure edge gateway service credentials
|
2026-06-01 23:42:34 +02:00 |
|
|
Jeppe B
|
9ea5a62577
|
Merge pull request #238 from copenhagentruckwash/fix-cache-only-lookup-for-invoice-flags
Normalize invoice-period cache keys and restore DB fallbacks for missing Redis entries
|
2026-06-01 23:41:26 +02:00 |
|
|
copilot-swe-agent[bot]
|
3555904423
|
Merge origin/master and resolve invoice_period_flag_service conflict
|
2026-06-01 21:37:53 +00:00 |
|
|
Jeppe B
|
a2dda5ea5b
|
Sanitize telemetry ingestion errors
|
2026-06-01 23:37:48 +02:00 |
|
|
Jeppe B
|
dcd57c7092
|
Merge pull request #221 from copenhagentruckwash/fix-system-search-associations-vulnerability
Prevent association expansion from bypassing own-only access
|
2026-06-01 23:31:00 +02:00 |
|
|
Jeppe B
|
bd7deaeded
|
Fix invoice period flag cache fallbacks
|
2026-06-01 23:29:05 +02:00 |
|
|
Jeppe B
|
07a3ef6418
|
Merge pull request #237 from copenhagentruckwash/fix-concurrent-access-vulnerability-in-start-command
Add per-lane START lock to prevent TOCTOU relay replay on wash start
|
2026-06-01 23:28:45 +02:00 |
|
|
Jeppe B
|
bffed6f5f3
|
Fix self-serve start relay race
|
2026-06-01 23:28:36 +02:00 |
|
|
Jeppe B
|
bfec31f94b
|
Merge pull request #236 from copenhagentruckwash/fix-task-attachment-link-vulnerability
Enforce lane department authorization for self-serve eligibility
|
2026-06-01 23:28:05 +02:00 |
|
|
Jeppe B
|
2123835aae
|
Fix self-serve eligibility lane authorization
|
2026-06-01 23:27:56 +02:00 |
|
|
Jeppe B
|
11f06e8f53
|
Merge pull request #235 from copenhagentruckwash/investigate-self-serve-path-projection-dos-vulnerability
Clamp self-serve path projection limits
|
2026-06-01 23:27:33 +02:00 |
|
|
Jeppe B
|
6712368323
|
Clamp self-serve path projection limits
|
2026-06-01 23:27:22 +02:00 |
|
|
Jeppe B
|
99fe659dbc
|
Merge pull request #234 from copenhagentruckwash/propose-fix-for-archived-department-vulnerability
Fix department archived filter smuggling
|
2026-06-01 23:27:06 +02:00 |
|
|
Jeppe B
|
357cfda46e
|
Fix department archived filter smuggling
|
2026-06-01 23:26:57 +02:00 |
|
|
Jeppe B
|
9c85135a07
|
Merge pull request #233 from copenhagentruckwash/fix-cross-tenant-vehicle-reference-leak
Restrict vehicle reference suggestions by department context
|
2026-06-01 23:26:36 +02:00 |
|
|
Jeppe B
|
a8a47104dd
|
Restrict vehicle reference suggestions by department context
|
2026-06-01 23:26:27 +02:00 |
|
|
Jeppe B
|
2c0907c486
|
Merge pull request #232 from copenhagentruckwash/fix-vulnerability-in-automatic-invoice-flags
Fix automatic invoice period flag suppression
|
2026-06-01 23:26:02 +02:00 |
|
|
Jeppe B
|
0ae28af309
|
Fix invoice period automatic flag cache misses
|
2026-06-01 23:25:54 +02:00 |
|
|
copilot-swe-agent[bot]
|
64d7e6f061
|
Merge master into fix-system-search-associations-vulnerability
|
2026-06-01 21:25:51 +00:00 |
|
|
Jeppe B
|
4f9a10402b
|
Merge pull request #231 from copenhagentruckwash/fix-exposure-of-private-git-commit-metadata
Redact GitHub commit metadata from public release runtime
|
2026-06-01 23:25:38 +02:00 |
|
|
Jeppe B
|
5e8ec85943
|
Redact release GitHub metadata from public runtime
|
2026-06-01 23:25:28 +02:00 |
|
|
Jeppe B
|
20d6056e40
|
Merge pull request #230 from copenhagentruckwash/fix-permission-bypass-for-invoice-flags
Guard invoice period flags by list permission
|
2026-06-01 23:25:02 +02:00 |
|
|
Jeppe B
|
5be6bc0198
|
Guard invoice period flags by list permission
|
2026-06-01 23:24:50 +02:00 |
|
|
Jeppe B
|
373aa7effb
|
Merge pull request #227 from copenhagentruckwash/fix-minio-credentials-exposure-vulnerability
Deny web access to replication bootstrap snapshots
|
2026-06-01 23:24:26 +02:00 |
|
|
Jeppe B
|
5282ee10ba
|
Merge pull request #229 from copenhagentruckwash/propose-fix-for-booking-po-vulnerability
Validate booking ownership before defaulting order PO (prevent cross-tenant leak)
|
2026-06-01 23:24:00 +02:00 |
|
|
copilot-swe-agent[bot]
|
06cba73a30
|
Initialize merge conflict resolution plan
|
2026-06-01 21:23:50 +00:00 |
|
|
Jeppe B
|
eab8394579
|
Fix booking PO default tenant validation
|
2026-06-01 23:23:49 +02:00 |
|
|
Jeppe B
|
b88c2742e8
|
Merge pull request #228 from copenhagentruckwash/fix-partial-release-tests-bypassing-promotion-gate
Require app-scoped release gates for bundle promotion
|
2026-06-01 23:23:34 +02:00 |
|
|
Jeppe B
|
4ea5eeb942
|
Require app-scoped release gates for bundle promotion
|
2026-06-01 23:23:23 +02:00 |
|
|
Jeppe B
|
e41b226529
|
Deny web access to replication bootstrap snapshots
|
2026-06-01 23:19:04 +02:00 |
|
|
Jeppe B
|
7cb248a112
|
Merge pull request #226 from copenhagentruckwash/fix-ssrf-vulnerability-in-release-gate
Harden release gate diagnostics fetches
|
2026-06-01 23:17:01 +02:00 |
|
|
Jeppe B
|
dfa0441266
|
Harden release gate diagnostics fetches
|
2026-06-01 23:16:51 +02:00 |
|
|
Jeppe B
|
6fbf7f271d
|
Merge pull request #223 from copenhagentruckwash/propose-fix-for-exposed-bootstrap-secret
Protect replication bootstrap file from static serving
|
2026-06-01 23:14:52 +02:00 |
|