Pulse/internal
rcourtman bd030c7c87 security: fix webhook SSRF, rate limit spoofing, metrics retention, and url poisoning
- Fix SSRF and rate limit bypass in SendEnhancedWebhook by validating the rendered URL.
- Fix rate limit spoofing in updates API by using secure IP extraction (trusted proxies).
- Fix memory leak in metrics history by correctly clearing fully stale data series.
- Fix public URL poisoning by preventing overwrites when explicitly configured.
2026-02-03 16:58:13 +00:00
..
agentbinaries chore: reliability and maintenance improvements 2026-01-22 00:45:04 +00:00
agentexec fix: Allow qm/pct reboot/shutdown commands with approval 2026-01-04 17:57:51 +00:00
agentupdate Refactor: Core monitoring and update managers multi-tenancy 2026-01-22 16:43:24 +00:00
ai fix(api/ai): resolve critical auth, agent download, and lifecycle issues 2026-02-03 16:35:12 +00:00
alerts Fix multi-tenant persistence and backend stability 2026-02-03 16:24:42 +00:00
api security: fix webhook SSRF, rate limit spoofing, metrics retention, and url poisoning 2026-02-03 16:58:13 +00:00
buffer Fix offline buffering: add tests, remove unused config, fix flaky test 2025-12-02 22:31:44 +00:00
ceph Improve internal package test coverage 2025-12-29 17:25:21 +00:00
config Fix API token authentication and multi-tenancy logic 2026-02-03 16:24:28 +00:00
crypto Improve internal package test coverage 2025-12-29 17:25:21 +00:00
discovery fix: Update runtime config when toggling Docker update actions setting 2026-01-03 11:14:17 +00:00
dockeragent fix: env overrides and OS-aware test improvements 2026-01-22 13:49:05 +00:00
errors refactor: Remove unreachable dead code branches 2025-12-02 14:48:57 +00:00
hostagent Update core infrastructure components 2026-01-28 16:52:35 +00:00
hostmetrics fix: ZFS pool usage now includes zvols and all pool consumers 2026-01-29 12:08:38 +00:00
infradiscovery feat(backend): implement AI Patrol, Investigation, and system-wide refactors 2026-01-30 19:02:14 +00:00
kubernetesagent test: expand backend coverage 2026-01-25 21:08:44 +00:00
license feat(license): implement free Patrol / pro Auto-Fix tiering strategy 2026-02-01 16:27:10 +00:00
logging fix: address linting issues and test adjustments 2026-02-01 23:27:11 +00:00
mdadm Improve internal package test coverage 2025-12-29 17:25:21 +00:00
metrics test: expand backend coverage 2026-01-25 21:08:44 +00:00
mock feat(kubernetes): Add Kubernetes mock data and UI 2025-12-12 23:13:40 +00:00
models Update core infrastructure components 2026-01-28 16:52:35 +00:00
monitoring security: fix webhook SSRF, rate limit spoofing, metrics retention, and url poisoning 2026-02-03 16:58:13 +00:00
notifications security: fix webhook SSRF, rate limit spoofing, metrics retention, and url poisoning 2026-02-03 16:58:13 +00:00
remoteconfig test: expand backend coverage 2026-01-25 21:08:44 +00:00
resources fix: Add nil checks in findDuplicate() to prevent crash. Related to #1119 2026-01-18 13:41:00 +00:00
sensors test: expand backend coverage 2026-01-25 21:08:44 +00:00
servicediscovery feat(discovery): auto-suggest web interface URLs for discovered services 2026-02-03 16:49:57 +00:00
smartctl feat: PULSE_DISK_EXCLUDE now applies to SMART monitoring. Related to #983 2025-12-31 23:07:01 +00:00
ssh/knownhosts Improve internal package test coverage 2025-12-29 17:25:21 +00:00
system Improve internal package test coverage 2025-12-29 17:25:21 +00:00
types test: add unit tests for types package 2025-11-26 14:10:21 +00:00
updatedetection Enhance devcontainer and CI workflows 2026-01-01 22:29:15 +00:00
updates test: expand backend coverage 2026-01-25 21:08:44 +00:00
utils Enhance devcontainer and CI workflows 2026-01-01 22:29:15 +00:00
websocket Fix multi-tenant persistence and backend stability 2026-02-03 16:24:42 +00:00