cproof

7

Backlog

[Security] Harden the AI/LLM client — block cleartext egress, enforce TLS verification, add timeouts

#145 opened 2026-07-03 10:26:46 +00:00 by jabber.developer2

0 / 3

[Security] Protect local data at rest — owner-only file permissions, DB integrity checks, secret-free logs

#146 opened 2026-07-03 10:27:30 +00:00 by jabber.developer2

0 / 5

[Security] E2EE & transport correctness — TLS policy floor, OMEMO/OTR/PGP fixes, downgrade/cert-failure visibility

#147 opened 2026-07-03 10:28:09 +00:00 by jabber.developer2

0 / 12

[Security] Harden untrusted-input handling — remote-DoS guards, memory safety, injection defenses

#148 opened 2026-07-03 10:28:45 +00:00 by jabber.developer2

0 / 9

[Security] Build & supply-chain security — blocking CI security gates, toolchain hardening, source/dependency pinning

#149 opened 2026-07-03 10:29:21 +00:00 by jabber.developer2

0 / 14

[Security] Credential & plugin trust — safe secret handling and plugin signature verification before dlopen

#150 opened 2026-07-03 10:29:59 +00:00 by jabber.developer2

0 / 4

[Security] Security process & documentation — vulnerability disclosure, release security gate, policies

#151 opened 2026-07-03 10:30:31 +00:00 by jabber.developer2

0 / 8

0

To Do

0

In Progress

0

Verification

1

Done

Make security audit for CWE-134

#85 by jabber.developer was closed 2026-03-07 10:58:04 +00:00

fix: CWE-134 format string vulnerability and compiler flags audit #98

[#49] harden NULL handling and resource lifecycle across UI and SQLite #47

Plans (2025-2026)