All issues

Search results

[medium] Stricter request destroys shared cache — Deleting an over-limit CID cache leaves looser-limit consu

Status: Open.

#545 In xAlisher/peers;

· xAlisher opened on Aug 28, 2026

fix: deliver long voice messages or surface terminal send failure

Status: Open.

#538 In xAlisher/peers;

· xAlisher opened on Aug 28, 2026

[infra] One-use upload grants and capability-only media downloads

infraCI, releases, project infrastructureCI, releases, project infrastructure

Status: Open.

#533 In xAlisher/peers;

· xAlisher opened on Aug 26, 2026

Epic: tokenless cross-platform media for Android and Basecamp

infraCI, releases, project infrastructureCI, releases, project infrastructure

Status: Open.

#532 In xAlisher/peers;

· xAlisher opened on Aug 26, 2026

Self-host guide: the Caddyfile doesn't parse, and its auth depends on line order

Status: Open.

#529 In xAlisher/peers;

· x0net opened on Aug 18, 2026

causal_history: unbounded receive-side state, and an i32 Lamport clock a member can pin

Status: Open.

#528 In xAlisher/peers;

· x0net opened on Aug 16, 2026

pfp1: binds the avatar to an author key that is not authenticated on GroupV2 or mesh

Status: Open.

#526 In xAlisher/peers;

· x0net opened on Aug 13, 2026

Release-signing assurance: docs/SBOM.md understates it, and the CI signature assertion it promises is still absent

Status: Open.

#522 In xAlisher/peers;

· x0net opened on Aug 13, 2026

libchat repin: upstream #202 (the KeyPackage signer binding, credited to @x0net) is in neither the fork nor the shipped core

Status: Open.

#521 In xAlisher/peers;

· x0net opened on Aug 12, 2026

Private mode defers the registry IP exposure rather than closing it — docs/privacy.md:38 says "Closed (opt-in)" (GHSA-jj3m Fix 3 follow-up)

Status: Open.

#520 In xAlisher/peers;

· x0net opened on Aug 12, 2026

Any member can re-enable group storage: the gcfg1: handler applies group config with no author check, and the stock composer can send the marker

Status: Open.

#518 In xAlisher/peers;

· x0net opened on Aug 12, 2026

[low] GHSA-jj3m: two of the advisory's own fail-open paths are still open in v0.9.13

Status: Open.

#517 In xAlisher/peers;

· x0net opened on Aug 11, 2026