UNITRONIX 44221f721b fix(security): close remaining CodeQL findings before 3.5.5 ...

Confine multer unlink to reconstructed safe paths, rate-limit public
agent downloads, allowlist GitHub fetch hosts and local builder tools.
Expand CodeQL query filters for validated false positives.

Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow); muopc (@muopc)

2026-10-17 16:32:23 +02:00

..

activity.routes.js

fix(security): harden TLS defaults, device auth, and update privileges

2026-08-15 23:28:03 +02:00

auth.routes.js

feat(oidc): add SSO-first login and role overrides

2026-10-12 11:14:20 +02:00

automation.routes.js

fix(security): harden TLS defaults, device auth, and update privileges

2026-08-15 23:28:03 +02:00

bd-api.routes.js

fix(security): harden update restore and notification CSRF

2026-08-23 21:08:05 +02:00

cdap-studio.routes.js

fix(rbac): resolve 404 on Policies/Attestation pages (#156)

2026-05-30 07:52:51 +02:00

cdap.routes.js

feat(console): coordinate service restarts and login metadata

2026-09-18 18:26:42 +02:00

chat.routes.js

Add SessionManager; update docs, i18n & CI

2026-04-05 13:42:07 +02:00

client-branding.routes.js

feat(console): add Client Branding for desktop remotes

2026-09-06 12:26:39 +02:00

commercialization.routes.js

fix(docker): skip native NTP restart prompt in split mode

2026-10-08 07:59:21 +02:00

cross-platform.routes.js

fix(security): phase-E shared Go API proxy, XSS hardening, audit clamp

2026-06-09 03:22:14 +02:00

dashboard.routes.js

fix(ui): UX 3.5 light topbar, a11y/i18n, and panel polish

2026-09-12 12:30:06 +02:00

dataguard.routes.js

fix(security): harden TLS defaults, device auth, and update privileges

2026-08-15 23:28:03 +02:00

desktop.routes.js

fix(web): embed beta 3.1 modules reliably

2026-05-03 02:24:35 +02:00

devices.routes.js

fix(security): clear OIDC race, Go CVEs, and CodeQL noise before 3.5.5

2026-10-17 16:21:39 +02:00

fileTransfer.routes.js

fix(security): harden TLS defaults, device auth, and update privileges

2026-08-15 23:28:03 +02:00

fleet.routes.js

fix(security): harden TLS defaults, device auth, and update privileges

2026-08-15 23:28:03 +02:00

folders.routes.js

feat: user scope UX, role labels, and device visibility defaults (#227)

2026-07-05 19:44:18 +02:00

generator.routes.js

fix(security): close remaining CodeQL findings before 3.5.5

2026-10-17 16:32:23 +02:00

guest.routes.js

feat(guest): enforce scoped guest access lifecycle

2026-10-03 10:22:20 +02:00

i18n.routes.js

feat(i18n): expose all panel languages in selector

2026-05-03 02:02:15 +02:00

index.js

feat(console): add Client Branding for desktop remotes

2026-09-06 12:26:39 +02:00

inventory.routes.js

feat(auth): implement SQLite auth consolidation and admin password validation

2026-08-05 23:49:42 +02:00

keys.routes.js

fix(ui): warn on unreachable config QR hosts (#368)

2026-08-17 06:55:04 +02:00

languages.routes.js

fix(security): enhance path validation and rate limiting for file access

2026-06-11 18:33:14 +02:00

meshcentral.routes.js

fix(security): patch Dependabot and CodeQL alerts on axios, mesh, OIDC

2026-07-20 23:52:32 +02:00

network.routes.js

BetterDesk 3.0.0 Alpha

2026-03-24 00:26:25 +01:00

organizations.routes.js

feat(org): encrypted peer credential vault for shared address book

2026-08-10 22:18:39 +02:00

pages.routes.js

fix: enhance server admin access and error handling

2026-07-05 20:03:57 +02:00

permissions.routes.js

fix(security): phase-D Go API ID guards across all proxy routes

2026-06-09 03:13:53 +02:00

phase4_5.routes.js

fix(security): close remaining CodeQL findings before 3.5.5

2026-10-17 16:32:23 +02:00

policies.routes.js

fix(security): harden TLS defaults, device auth, and update privileges

2026-08-15 23:28:03 +02:00

registration.routes.js

fix(enrollment): retain signal transport after approval

2026-10-07 15:59:00 +02:00

remote.routes.js

feat(remote): add gated RDP/VNC dependency updates

2026-10-04 00:56:07 +02:00

reports.routes.js

fix(rbac): resolve 404 on Policies/Attestation pages (#156)

2026-05-30 07:52:51 +02:00

resource-control.routes.js

fix(security): harden TLS defaults, device auth, and update privileges

2026-08-15 23:28:03 +02:00

rustdesk-api.routes.js

fix: stabilize BetterDesk API and support installer

2026-09-13 12:54:08 +02:00

scaling.routes.js

fix(scaling): make Relay Nodes Add/Edit actually save (#119)

2026-05-01 22:24:57 +02:00

security-audit.routes.js

fix(console): polish dashboard chat and accessibility

2026-10-03 10:44:20 +02:00

server-attestation.routes.js

feat(attestation): customize server badge labels

2026-09-25 10:59:44 +02:00

server-management.routes.js

feat(server-management): add server management service and terminal proxy

2026-05-07 03:09:03 +02:00

settings.routes.js

security: implement Phase 0-3 remediation (deps, SQL ident, JWT, CSP, suite)

2026-10-17 15:33:48 +02:00

system.routes.js

security: implement Phase 0-3 remediation (deps, SQL ident, JWT, CSP, suite)

2026-10-17 15:33:48 +02:00

tenants.routes.js

fix(rbac): resolve 404 on Policies/Attestation pages (#156)

2026-05-30 07:52:51 +02:00

tickets.routes.js

fix(security): finish privileged update path and relay auth tests

2026-08-15 23:29:01 +02:00

tokens.routes.js

Add RBAC permissions UI and server handlers

2026-04-11 00:47:08 +02:00

toolkit.routes.js

fix(security): harden CodeQL findings across console and Go server

2026-06-11 06:57:58 +02:00

users.routes.js

feat(oidc): add SSO-first login and role overrides

2026-10-12 11:14:20 +02:00