Search results

[P3] Incorrect Directory Mode (0644) in MkdirAll Calls

bugSomething isn't workingSomething isn't working

Status: Open.

#30 In Stella-IT/NanoKVM;

· winstar0070 opened on Mar 1, 2026

[P2] Nil Dereference Panic Paths in download/service.go

bugSomething isn't workingSomething isn't working

Status: Open.

#29 In Stella-IT/NanoKVM;

· winstar0070 opened on Mar 1, 2026

[P1] DeleteImage Path Validation Bypass Allows Out-of-Directory Deletion

bugSomething isn't workingSomething isn't working

security-inspection보안성 검토 상 지적사항보안성 검토 상 지적사항

Status: Open.

#28 In Stella-IT/NanoKVM;

· winstar0070 opened on Mar 1, 2026

[P0] Path Traversal and Symlink Extraction Risks in UnTarGz

bugSomething isn't workingSomething isn't working

security-inspection보안성 검토 상 지적사항보안성 검토 상 지적사항

Status: Open.

#27 In Stella-IT/NanoKVM;

· winstar0070 opened on Mar 1, 2026

[P0] Path Traversal and Command Injection Risk in vm/script Handlers

bugSomething isn't workingSomething isn't working

security-inspection보안성 검토 상 지적사항보안성 검토 상 지적사항

Status: Open.

#26 In Stella-IT/NanoKVM;

· winstar0070 opened on Mar 1, 2026

No login rate limiting or brute force protection

security-inspection보안성 검토 상 지적사항보안성 검토 상 지적사항

Status: Open.

#3 In Stella-IT/NanoKVM;

· winstar0070 opened on Feb 12, 2026

Hardcoded Chinese DNS servers in system_init.cpp

security-inspection보안성 검토 상 지적사항보안성 검토 상 지적사항

Status: Open.

#1 In Stella-IT/NanoKVM;

· winstar0070 opened on Feb 12, 2026