Issues

• ci: local CodeQL Go scan does not cover the plugins module

  backendgithub-actionslow
  Wikid82/Charon#1483 · Filter by author Wikid82 opened on Oct 4, 2026
  

• refactor: consolidate the three private-address check implementations

  architecturebackendtesting
  Wikid82/Charon#1482 · Filter by author Wikid82 opened on Oct 4, 2026
  

• cleanup: remove test-only host allowances from the CrowdSec hub URL check

  backendcrowdseclowsecuritytesting
  Wikid82/Charon#1481 · Filter by author Wikid82 opened on Oct 4, 2026
  

• hardening: pin the Google Drive resumable-upload host

  backendlowsecurity
  Wikid82/Charon#1480 · Filter by author Wikid82 opened on Oct 4, 2026
  

• hardening: WithAllowedDomains option is not enforced by the shared client

  backendcrowdseclowsecurity
  Wikid82/Charon#1479 · Filter by author Wikid82 opened on Oct 4, 2026
  

• hardening: tighten host-name handling in the shared dialer's localhost allowance

  backendlowsecurity
  Wikid82/Charon#1478 · Filter by author Wikid82 opened on Oct 4, 2026
  

• hardening: escape identifiers when building Tailscale and Cloudflare API paths

  backendlowsecurityui
  Wikid82/Charon#1477 · Filter by author Wikid82 opened on Oct 4, 2026
  

• test: emergency-reset E2E spec assumes Cerberus is already enabled in beforeAll

  e2e-testslowsecuritytesting
  Wikid82/Charon#1474 · Filter by author Wikid82 opened on Oct 3, 2026
  

• hardening: tighten host-name normalization used for proxy host matching

  backendenhancementlow
  Wikid82/Charon#1473 · Filter by author Wikid82 opened on Oct 3, 2026
  

• test: widen the request-identity guard test to cover indirect key access

  backendenhancementlowtesting
  Wikid82/Charon#1472 · Filter by author Wikid82 opened on Oct 3, 2026
  

• fix: DNS provider service never receives the caller's user ID for audit attribution

  backendbuglowsecurity
  Wikid82/Charon#1468 · Filter by author Wikid82 opened on Oct 3, 2026
  

• hardening: stop using forwarded headers for WebSocket origin and base-URL decisions

  backendenhancementlowsecurity
  Wikid82/Charon#1461 · Filter by author Wikid82 opened on Oct 3, 2026
  

• hardening: count break-glass password checks against the password-attempt guard

  backendenhancementlowsecurity
  Wikid82/Charon#1460 · Filter by author Wikid82 opened on Oct 3, 2026
  

• hardening: invite endpoints rate limiting, token storage and response consistency

  backendenhancementlowsecurityuser-management
  Wikid82/Charon#1459 · Filter by author Wikid82 opened on Oct 3, 2026
  

• fix: handle errors from audit log writes instead of discarding them

  backendbuglowsecurity
  Wikid82/Charon#1458 · Filter by author Wikid82 opened on Oct 3, 2026
  

• hardening: make first-run setup atomic

  backendbuglowsecurity
  Wikid82/Charon#1457 · Filter by author Wikid82 opened on Oct 3, 2026
  

• hardening: stop accepting the auth token via query string

  backendenhancementfrontendlowsecurity
  Wikid82/Charon#1456 · Filter by author Wikid82 opened on Oct 3, 2026
  

• fix: the uptime summary monitor subset has no id tie-breaker at the 500-monitor cap

  backendbuglow
  Wikid82/Charon#1455 · Filter by author Wikid82 opened on Oct 2, 2026
  

• test: repeating the services and handlers tests with -count>1 fails (state shared across iterations)

  backendbugdatabasesecurityssltesting
  Wikid82/Charon#1450 · Filter by author Wikid82 opened on Oct 2, 2026
  

• refactor: remove the unused legacy BackupService.RestoreBackup and its interface method; extend the temp-leak guard to the remaining test packages

  backenddatabasessltestingui
  Wikid82/Charon#1448 · Filter by author Wikid82 opened on Oct 2, 2026
  2

  

• docs: performance characteristics and sizing guide

  caddydatabasedocumentationperformanceui
  Wikid82/Charon#1447 · Filter by author Wikid82 opened on Oct 2, 2026
  

• perf: validate Charon on a Raspberry Pi 4 (arm64) and record sizing

  databaseperformancetesting
  Wikid82/Charon#1446 · Filter by author Wikid82 opened on Oct 2, 2026
  

• perf(frontend): bundle size audit and CI size budget

  frontendperformance
  Wikid82/Charon#1445 · Filter by author Wikid82 opened on Oct 2, 2026
  

• perf(caddy): measure config generation and reload time with 100+ proxy hosts

  backendcaddydatabaseperformancesecurity
  Wikid82/Charon#1444 · Filter by author Wikid82 opened on Oct 2, 2026
  

• perf: audit the three indexes on uptime_heartbeats (idx_heartbeat_lookup is the largest, 123 MB at 1.5 M rows)

  backenddatabaseperformance
  Wikid82/Charon#1443 · Filter by author Wikid82 opened on Oct 2, 2026