Repository navigation
Security: worker-dapp/lucidledger
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
-
Recruiter and mediator routes: profiles readable by any user, and recruiter signup trusts a client-supplied emailGHSA-v5r2-qjh6-4whc published
Oct 26, 2026 by eteitelbaumHigh -
Production rate limiter keys on a client-controlled headerGHSA-4m82-4448-cpxc published
Sep 18, 2026 by eteitelbaumModerate -
jobApplicationController performs no identity authorizationGHSA-5g2m-hh48-x87w published
Oct 26, 2026 by eteitelbaumModerate -
Cross-tenant authorization gaps: ownership compared against client-supplied ids, or not checked at allGHSA-9vpg-5jg3-5jpf published
Oct 26, 2026 by eteitelbaumHigh -
Any authenticated user can dump every worker's PII via list and lookup endpointsGHSA-whmf-p32v-hjrg published
Sep 18, 2026 by eteitelbaumHigh
Learn more about advisories related to worker-dapp/lucidledger in the GitHub Advisory Database