All issues

Search results

Remove cryptographic secrets and credentials from debug logs

bug

Status: Open.

#481 In Red5/red5-server;

· mondain opened on Aug 25, 2026

Bound Matroska element allocation and guarantee skip progress

bug

Status: Open.

#480 In Red5/red5-server;

· mondain opened on Aug 25, 2026

Bound per-connection RTMP packet queues and apply backpressure

bug

Status: Open.

#479 In Red5/red5-server;

· mondain opened on Aug 25, 2026

Bind WebSocket managers to unambiguous host and application identity

bug

Status: Open.

#478 In Red5/red5-server;

· mondain opened on Aug 25, 2026

Require admitted shared-object membership for mutations and sends

bug

Status: Open.

#477 In Red5/red5-server;

· mondain opened on Aug 25, 2026

Validate MP4 sample sizes against file bounds before allocation

bug

Status: Open.

#476 In Red5/red5-server;

· mondain opened on Aug 25, 2026

Add configurable protection against 1-byte RTMP chunk CPU amplification

bug

Status: Open.

#475 In Red5/red5-server;

· mondain opened on Aug 25, 2026

Prevent path traversal during WAR extraction

bug

Status: Open.

#474 In Red5/red5-server;

· mondain opened on Aug 25, 2026

Protect shutdown capability with owner-only permissions and no token logging

bug

Status: Open.

#473 In Red5/red5-server;

· mondain opened on Aug 25, 2026

Harden optional SCTP-over-UDP parsing and receive-loop state

bug

Status: Open.

#472 In Red5/red5-server;

· mondain opened on Aug 25, 2026

Validate OBU payload bounds before copying

bug

Status: Open.

#471 In Red5/red5-server;

· mondain opened on Aug 25, 2026

Enable exact WebSocket Origin validation for credentialed handshakes

bug

Status: Open.

#470 In Red5/red5-server;

· mondain opened on Aug 25, 2026