Ralksta d4d8c8b42f 🛡️ Sentinel: [HIGH] Fix timingSafeEqual DoS Vulnerability (#423) ...

* Fix timingSafeEqual DoS Vulnerability in Webhook

Co-authored-by: ralksta <16941050+ralksta@users.noreply.github.com>

* Fix memory exhaustion DoS in token decoding

Co-authored-by: ralksta <16941050+ralksta@users.noreply.github.com>

---------

Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>

2026-08-14 11:10:42 +02:00

..

__tests__

🛡️ Sentinel: [HIGH] Fix timingSafeEqual DoS Vulnerability (#423)

2026-08-14 11:10:42 +02:00

admin

security: stop leaking the admin password length through timing (#395)

2026-08-05 12:13:32 +02:00

config

🛡️ Sentinel: [HIGH] Fix timingSafeEqual DoS Vulnerability (#423)

2026-08-14 11:10:42 +02:00

albumSort.ts

🛡️ Sentinel: [HIGH] Fix timingSafeEqual DoS Vulnerability (#423)

2026-08-14 11:10:42 +02:00

auth.ts

fix: Immich outage handling, image tiers, admin save safety (#394)

2026-08-05 12:04:01 +02:00

cache.ts

Close the gaps left after v0.9.2's outage handling: route tests, stale cache, loading states (#397)

2026-08-07 11:07:34 +02:00

env.ts

Close the gaps left after v0.9.2's outage handling: route tests, stale cache, loading states (#397)

2026-08-07 11:07:34 +02:00

essay.ts

chore(release): v0.10.0 (#400)

2026-08-10 09:56:20 +02:00

imageSize.ts

fix: Immich outage handling, image tiers, admin save safety (#394)

2026-08-05 12:04:01 +02:00

immich.ts

🛡️ Sentinel: [HIGH] Fix timingSafeEqual DoS Vulnerability (#423)

2026-08-14 11:10:42 +02:00

immichLoader.ts

feat: visual polish & UX — fade-in, theme toggle, scroll-to-top, footer, cursor, badge

2026-02-14 11:47:26 +01:00

mapService.ts

security: fix pre-auth bypasses and restore Immich 3.x compatibility (#378)

2026-07-20 18:57:57 +02:00

proofing.ts

security: add Trivy container scan to Docker publish workflow (#399)

2026-08-07 11:08:04 +02:00

rate-limit.ts

fix: Immich outage handling, image tiers, admin save safety (#394)

2026-08-05 12:04:01 +02:00

secret.ts

security: fix pre-auth bypasses and restore Immich 3.x compatibility (#378)

2026-07-20 18:57:57 +02:00

thumbhash.ts

perf: return Buffer directly instead of wrapping in Uint8Array (#131)

2026-04-21 22:51:19 +02:00

tokens.ts

🛡️ Sentinel: [HIGH] Fix timingSafeEqual DoS Vulnerability (#423)

2026-08-14 11:10:42 +02:00

urls.ts

fix: Immich outage handling, image tiers, admin save safety (#394)

2026-08-05 12:04:01 +02:00

uuid.ts

security: fix pre-auth bypasses and restore Immich 3.x compatibility (#378)

2026-07-20 18:57:57 +02:00