4 people 85d261b5d0 fix: vulnerability scan fixes (#11249) ...

| # | Severity | Category | File |
| :--- | :--- | :--- | :--- |
| 1 | **High** | SSRF bypass (IPv6) | `ssrf_guard.rs` |
| 2 | **High** | SSRF bypass (retry) | `enrichment_table/mod.rs` |
| 3 | **High** | SSRF defense-in-depth | `alert.rs` |
| 4 | **Critical** | CORS + credentials | `router/mod.rs` |
| 5 | **Critical** | SQL Injection | `postgres.rs`, `sqlite.rs` |
| 6 | **High** | Privilege escalation (token) | `users.rs` |
| 7 | **Medium** | Panic/DoS | `users.rs` |
| 8 | **Low** | Integer overflow | `alerts/mod.rs` |
| 9 | **Medium** | XSS | `alertSummaryGenerator.ts`, `colorizeQuery.ts`
|
| 10 | **Medium** | Credential exposure in logs | `validator.rs`,
`organization.rs`, `users.rs` |

---------

Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Shrinath Rao <shnath@openobserve.ai>
Co-authored-by: Prabhat Sharma <hi.prabhat@gmail.com>

2026-04-14 07:22:11 +00:00

..

multiselect-stream.spec.js

fix: vulnerability scan fixes (#11249)

2026-04-14 07:22:11 +00:00

stream-settings.spec.js

test: enhance E2E test coverage with landing page and language translation tests (#9686)

2025-12-19 20:01:49 +05:30

streamCreation.spec.js

test(pipelines): migrate Pipelines specs for alpha1 cloud (Set8) (#10882)

2026-03-13 18:35:47 +05:30

streaming.spec.js

test: enhance E2E test coverage with landing page and language translation tests (#9686)

2025-12-19 20:01:49 +05:30

streamname.spec.js

test: enhance E2E test coverage with landing page and language translation tests (#9686)

2025-12-19 20:01:49 +05:30