Search results

Stream-session maps have no count bound (only an idle TTL): agent-connector StreamSessionStore and cli daemon stream workers — follow-up to #381

LOW

performancePerformance issuePerformance issue

Status: Open.

#722 In marmot-protocol/mdk;

· erskingardner opened on Jul 4, 2026

marmot-account: local secret-file overwrite (key rotation / re-login) skips the scrub that remove_secret performs, leaving prior key hex in freed disk blocks

LOW

security

Status: Open.

#721 In marmot-protocol/mdk;

· erskingardner opened on Jul 4, 2026

transport-nostr-adapter: inbound welcome routing is an O(accounts) linear scan while the group path is indexed (residual of the #380 sweep)

LOW

performancePerformance issuePerformance issue

Status: Open.

#720 In marmot-protocol/mdk;

· erskingardner opened on Jul 4, 2026

transport-nostr-peeler: kind-445 group h tag decoded with unbounded decode_hex — missing the 32-byte length check every sibling id enforces

LOW

security

Status: Open.

#719 In marmot-protocol/mdk;

· erskingardner opened on Jul 4, 2026

cli: daemon control requests share the connection semaphore with long-lived subscriptions — exhaustion makes daemon status report "not running" and daemon stop fail

bugSomething isn't workingSomething isn't working

MEDIUM

Status: Open.

#718 In marmot-protocol/mdk;

· erskingardner opened on Jul 4, 2026

agent-connector: no read/idle timeout on the pre-auth control frame — a peer that connects and stays silent pins a connection permit, exhausting the 64-slot pool

bugSomething isn't workingSomething isn't working

MEDIUM

security

Status: Open.

#717 In marmot-protocol/mdk;

· erskingardner opened on Jul 4, 2026

marmot-app: Blossom upload descriptor is read via unbounded response.json() (memory-exhaustion DoS); the download path is size-capped but upload is not

bugSomething isn't workingSomething isn't working

MEDIUM

security

Status: Open.

#716 In marmot-protocol/mdk;

· erskingardner opened on Jul 4, 2026

storage-sqlite: timeline_records_by_ids_tx / reply_message_ids_for_targets_tx build unchunked IN (...) — oversized statement fails timeline projection

bugSomething isn't workingSomething isn't working

MEDIUM

Status: Open.

#715 In marmot-protocol/mdk;

· erskingardner opened on Jul 4, 2026

marmot-markdown: try_uri_autolink accepts arbitrary URI schemes (javascript:/data:/file:), bypassing the bare-URL scheme allowlist

bugSomething isn't workingSomething isn't working

MEDIUM

security

Status: Open.

#714 In marmot-protocol/mdk;

· erskingardner opened on Jul 4, 2026

marmot-markdown: unbounded table-cell allocation (cells.resize(header.len())) — quadratic memory/CPU amplification DoS on untrusted message text

bugSomething isn't workingSomething isn't working

MEDIUM

performancePerformance issuePerformance issue

security

Status: Open.

#713 In marmot-protocol/mdk;

· erskingardner opened on Jul 4, 2026

marmot-app: next_event is not cancellation-safe; the account-worker select! drops an already-dequeued inbound delivery (message loss)

bugSomething isn't workingSomething isn't working

HIGH

Status: Open.

#712 In marmot-protocol/mdk;

· erskingardner opened on Jul 4, 2026

[Tracking] Validate-before-mutate discipline for multi-step state changes (no torn writes, defined compensation)

bugSomething isn't workingSomething isn't working

tracking-issue

Status: Open.

#711 In marmot-protocol/mdk;

· erskingardner opened on Jul 3, 2026