-
Notifications
You must be signed in to change notification settings - Fork 1
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
ARI: non-constant-time password/API-key comparison + default asterisk/asterisk credentials
bugSomething isn't workingSomething isn't workingStatus: Open.#131 In ryanmurf/rustisk;AMI: auth_timeout & auth_limit are configured but never enforced; no login rate-limit/backoff
bugSomething isn't workingSomething isn't workingStatus: Open.#130 In ryanmurf/rustisk;SIP: unconditional eprintln! debug spew logs Authorization header + caller PII on every INVITE
bugSomething isn't workingSomething isn't workingStatus: Open.#129 In ryanmurf/rustisk;SIP digest auth: nonce is never validated as server-issued or single-use — REGISTER/INVITE Authorization replay
bugSomething isn't workingSomething isn't workingStatus: Open.#128 In ryanmurf/rustisk;AMI: manager.conf read=/write= permissions are ignored — every user is granted ALL read+write (fail-open default)
bugSomething isn't workingSomething isn't workingStatus: Open.#127 In ryanmurf/rustisk;AMI: write-permission (write_perm) is never enforced — any authenticated user can Originate / run CLI Command / write config
bugSomething isn't workingSomething isn't workingStatus: Open.#126 In ryanmurf/rustisk;TaskProcessor uses an unbounded queue with no backpressure (latent soak leak)
bugSomething isn't workingSomething isn't workingStatus: Open.#124 In ryanmurf/rustisk;- Status: Open.#117 In ryanmurf/rustisk;
- Status: Open.#116 In ryanmurf/rustisk;
AMI: unbounded pre-auth read buffer (memory-exhaustion DoS)
bugSomething isn't workingSomething isn't workingStatus: Open.#110 In ryanmurf/rustisk;