DocFast session 38: SSRF audit finding, state update

This commit is contained in:
Hoid 2026-02-16 08:36:24 +00:00
parent 4bed564e5d
commit b687980255
4 changed files with 348 additions and 3 deletions

View file

@ -64,9 +64,9 @@
},
"openBugs": {
"CRITICAL": [],
"HIGH": [],
"HIGH": ["BUG-040: SSRF vulnerability in URL→PDF endpoint — no private IP blocking. Fix in progress."],
"MEDIUM": [],
"LOW": []
"LOW": ["BUG-038: Health endpoint version shows 0.1.0 instead of 0.2.1 — fix in progress."]
},
"blockers": [
"E2E Pro payment test (needs investor to make real test payment)",
@ -74,5 +74,5 @@
"Off-site backup (Hetzner Storage Box, ~€3/mo)"
],
"startDate": "2026-02-14",
"sessionCount": 36
"sessionCount": 37
}