2026-10-04 - 2026-10-11
Overview
There has not been any commit activity in this period.
4 issues created by 1 user
Opened
#8 SQL injection: NostrFilter.to_sql_components interpolates client filter values into SQL
Opened
#9 Account allow/block/delete endpoints skip relay ownership check (cross-tenant IDOR)
Opened
#10 get_accounts WHERE clause is unscoped by relay for the blocked branch
Opened
#11 invoice_paid_for_storage overwrites account.storage instead of adding to it
1 unresolved conversation
Open
#2
Generic single-letter tag filters (NIP-12 / NIP-01 §filters)