All issues

Search results

Security: defense-in-depth audit findings (58 items)

Status: Open.

#768 In Cacti/plugin_thold;

· somethingwithproof opened on Apr 9, 2026

hardening: escape request variables in JavaScript string contexts

Status: Open.

#763 In Cacti/plugin_thold;

· somethingwithproof opened on Mar 21, 2026

hardening: migrate RLIKE to db_qstr and improve input handling

Status: Open.

#761 In Cacti/plugin_thold;

· somethingwithproof opened on Mar 20, 2026

Bug: low/normal trigger command environments are built from trigger_cmd_high

Status: Open.

#760 In Cacti/plugin_thold;

· somethingwithproof opened on Mar 7, 2026

Bug: aggregated mail attachment merge references literal 'id' key

Status: Open.

#759 In Cacti/plugin_thold;

· somethingwithproof opened on Mar 7, 2026

Bug: template import error logging uses wrong variable in error loop

Status: Open.

#757 In Cacti/plugin_thold;

· somethingwithproof opened on Mar 7, 2026

hardening: sanitize session/referrer-based redirect targets in threshold flows

Status: Open.

#758 In Cacti/plugin_thold;

· somethingwithproof opened on Mar 7, 2026

Bug: notify list delete action uses malformed UPDATE SET clause for host email reset

Status: Open.

#756 In Cacti/plugin_thold;

· somethingwithproof opened on Mar 7, 2026

Threshold email notifications not sent despite correct SMTP configuration

Status: Open.

#754 In Cacti/plugin_thold;

· somethingwithproof opened on Mar 6, 2026

Bug: Type 2 warn2normal restoral path omits acknowledgment check

Status: Open.

#747 In Cacti/plugin_thold;

· somethingwithproof opened on Mar 5, 2026

Bug: Type 2 warning $ra recalculated with weaker logic, discarding time-window check

Status: Open.

#744 In Cacti/plugin_thold;

· somethingwithproof opened on Mar 5, 2026

Bug: SNMP warning/normal trap flags inverted — fires opposite of config

Status: Open.

#743 In Cacti/plugin_thold;

· somethingwithproof opened on Mar 5, 2026