-
-
Notifications
You must be signed in to change notification settings - Fork 63
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
[Warden N6V-S4W] External reusable workflow pinned to mutable @main receives app private key
SecuritySecurity findingSecurity findingStatus: Open.#8338 In getsentry/snuba;[Warden KJA-ZM3] workflow_call uses undeclared GETSENTRY_BOT_REVERT_TOKEN
SecuritySecurity findingSecurity findingStatus: Open.#8337 In getsentry/snuba;[Warden CL5-DFZ] Free-form package/version inputs enable shell RCE under bot PAT
SecuritySecurity findingSecurity findingStatus: Open.#8336 In getsentry/snuba;[Warden EQY-BZY] Sentry sourcemap token exposed to PR-controlled yarn install/build
SecuritySecurity findingSecurity findingStatus: Open.#8335 In getsentry/snuba;[Warden C5Z-958] Anonymized formatter re-emits original aliases on reuse
SecuritySecurity findingSecurity findingStatus: Open.#8334 In getsentry/snuba;[Warden SJT-LR7] Anonymized query logs leak user literals via DangerousRawSQL passthrough
SecuritySecurity findingSecurity findingStatus: Open.#8333 In getsentry/snuba;[Warden VN4-4K9] ARRAY JOIN table massaging can drop real tables from the allowlist check
SecuritySecurity findingSecurity findingStatus: Open.#8332 In getsentry/snuba;[Warden XAX-4RC] Production project allowlist bypassed via OR conditions
SecuritySecurity findingSecurity findingStatus: Open.#8331 In getsentry/snuba;[Warden 48Z-DCW] Uncaught exception handler returns exception text to clients
SecuritySecurity findingSecurity findingStatus: Open.#8330 In getsentry/snuba;[Warden 4WK-GEX] User-controlled cluster_name interpolated into executed ClickHouse SQL
SecuritySecurity findingSecurity findingStatus: Open.#8329 In getsentry/snuba;[Warden PD8-S8A] Table-allowlist bypass when any alias matches
array/leftARRAY JOIN workaround keysSecuritySecurity findingSecurity findingStatus: Open.#8328 In getsentry/snuba;[Warden 6S6-A6K] force_overwrite_migration_status skips migration group/policy checks
SecuritySecurity findingSecurity findingStatus: Open.#8327 In getsentry/snuba;