virtfoundry/core

[core] [security][high] Rate-limit login and stop username enumeration 6 days ago

bug help wanted security severity:high

virtfoundry/core

6

VirtFoundry core — API, worker, and UI for Kubernetes-native private cloud (KubeVirt)

Go

#cloud-native#golang#helm#iaas#kubernetes#kubevirt#multitenancy#private-cloud

[core] [security][high] Refuse to start with default JWT secret or root password 7 days ago

bug help wanted security severity:high

virtfoundry/core

6

VirtFoundry core — API, worker, and UI for Kubernetes-native private cloud (KubeVirt)

Go

#cloud-native#golang#helm#iaas#kubernetes#kubevirt#multitenancy#private-cloud

[core] [security][critical] Authenticate and tenant-scope /ws/events 8 days ago

bug help wanted security severity:critical

virtfoundry/core

6

VirtFoundry core — API, worker, and UI for Kubernetes-native private cloud (KubeVirt)

Go

#cloud-native#golang#helm#iaas#kubernetes#kubevirt#multitenancy#private-cloud

[core] [security][low] Run API/UI as non-root; set HTTP timeouts and body limits 12 days ago

bug good first issue help wanted security severity:low

virtfoundry/core

6

VirtFoundry core — API, worker, and UI for Kubernetes-native private cloud (KubeVirt)

Go

#cloud-native#golang#helm#iaas#kubernetes#kubevirt#multitenancy#private-cloud

[core] [security][critical] Prevent tenant admins from granting platform.root or wildcard roles 13 days ago

bug help wanted security severity:critical

virtfoundry/core

6

VirtFoundry core — API, worker, and UI for Kubernetes-native private cloud (KubeVirt)

Go

#cloud-native#golang#helm#iaas#kubernetes#kubevirt#multitenancy#private-cloud

[core] [security][medium] Close AutoPermission fail-open and dashboard authz gaps 15 days ago

bug help wanted security severity:medium

virtfoundry/core

6

VirtFoundry core — API, worker, and UI for Kubernetes-native private cloud (KubeVirt)

Go

#cloud-native#golang#helm#iaas#kubernetes#kubevirt#multitenancy#private-cloud

[core] [security][medium] Pin GitHub Actions to commit SHAs 15 days ago

bug help wanted security severity:medium

virtfoundry/core

6

VirtFoundry core — API, worker, and UI for Kubernetes-native private cloud (KubeVirt)

Go

#cloud-native#golang#helm#iaas#kubernetes#kubevirt#multitenancy#private-cloud

[core] [security][medium] Restrict CORS to the UI origin; add UI security headers 15 days ago

bug help wanted security severity:medium

virtfoundry/core

6

VirtFoundry core — API, worker, and UI for Kubernetes-native private cloud (KubeVirt)

Go

#cloud-native#golang#helm#iaas#kubernetes#kubevirt#multitenancy#private-cloud

[core] [security][high] Do not default Linux guest SSH password to ubuntu 15 days ago

bug help wanted security severity:high

virtfoundry/core

6

VirtFoundry core — API, worker, and UI for Kubernetes-native private cloud (KubeVirt)

Go

#cloud-native#golang#helm#iaas#kubernetes#kubevirt#multitenancy#private-cloud

[core] [security][high] Allowlist ISO HTTP import URLs (SSRF via CDI) 15 days ago

bug help wanted security severity:high

virtfoundry/core

6

VirtFoundry core — API, worker, and UI for Kubernetes-native private cloud (KubeVirt)

Go

#cloud-native#golang#helm#iaas#kubernetes#kubevirt#multitenancy#private-cloud

[core] [security][high] VNC console: require vms:console and stop putting JWT in the query string 15 days ago

bug help wanted security severity:high

virtfoundry/core

6

VirtFoundry core — API, worker, and UI for Kubernetes-native private cloud (KubeVirt)

Go

#cloud-native#golang#helm#iaas#kubernetes#kubevirt#multitenancy#private-cloud

Open Issues Need Help