-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Debug heartbeat logs can leak clipboard snippets to peers
auditFound in the 2026-07 code auditFound in the 2026-07 code auditsecuritySecurity or privacy impactSecurity or privacy impactseverity:mediumDegraded behaviour or edge caseDegraded behaviour or edge caseStatus: Open.#33 In offbyonebit/clipsync;Failed clipboard writes leave
.tmpfiles in the sync folderauditFound in the 2026-07 code auditFound in the 2026-07 code auditbugSomething isn't workingSomething isn't workingseverity:mediumDegraded behaviour or edge caseDegraded behaviour or edge caseStatus: Open.#32 In offbyonebit/clipsync;macOS autostart plist is built by string concatenation without XML escaping
auditFound in the 2026-07 code auditFound in the 2026-07 code auditbugSomething isn't workingSomething isn't workingseverity:mediumDegraded behaviour or edge caseDegraded behaviour or edge caseStatus: Open.#31 In offbyonebit/clipsync;Clipboard file handler can crash on non-UTF-8 watchdog paths
auditFound in the 2026-07 code auditFound in the 2026-07 code auditbugSomething isn't workingSomething isn't workingseverity:mediumDegraded behaviour or edge caseDegraded behaviour or edge caseStatus: Open.#30 In offbyonebit/clipsync;Received-file deduplication set grows without bound
auditFound in the 2026-07 code auditFound in the 2026-07 code auditbugSomething isn't workingSomething isn't workingseverity:mediumDegraded behaviour or edge caseDegraded behaviour or edge caseStatus: Open.#29 In offbyonebit/clipsync;Linux image-clipboard detection gives up on
xclipfailure and never trieswl-pasteauditFound in the 2026-07 code auditFound in the 2026-07 code auditbugSomething isn't workingSomething isn't workingseverity:mediumDegraded behaviour or edge caseDegraded behaviour or edge caseStatus: Open.#28 In offbyonebit/clipsync;Changing the sync folder does not restart the file-transfer watcher
auditFound in the 2026-07 code auditFound in the 2026-07 code auditbugSomething isn't workingSomething isn't workingseverity:mediumDegraded behaviour or edge caseDegraded behaviour or edge caseStatus: Open.#27 In offbyonebit/clipsync;Syncthing release signature verification is silently skipped when
gpgis absentauditFound in the 2026-07 code auditFound in the 2026-07 code auditsecuritySecurity or privacy impactSecurity or privacy impactseverity:highWrong behaviour users will hitWrong behaviour users will hitStatus: Open.#26 In offbyonebit/clipsync;_last_syncedis updated before the clipboard/file write succeedsauditFound in the 2026-07 code auditFound in the 2026-07 code auditbugSomething isn't workingSomething isn't workingseverity:highWrong behaviour users will hitWrong behaviour users will hitStatus: Open.#25 In offbyonebit/clipsync;Encryption passphrase is stored in plaintext in
settings.jsonauditFound in the 2026-07 code auditFound in the 2026-07 code auditsecuritySecurity or privacy impactSecurity or privacy impactseverity:highWrong behaviour users will hitWrong behaviour users will hitStatus: Open.#24 In offbyonebit/clipsync;