Search results

Unauthenticated webhook routes 500 on a malformed id (uuid cast, no validation)

Status: Open.

#2914 In LanternOps/breeze;

· ToddHebebrand opened on Jul 28, 2026

mobileDeviceBlockedMiddleware never matches: device blocking is inert in production

Status: Open.

#2913 In LanternOps/breeze;

· ToddHebebrand opened on Jul 28, 2026

[API] Managed-software download policy should support a partner-wide tier

enhancementNew feature or requestNew feature or request

Status: Open.

#2897 In LanternOps/breeze;

· ToddHebebrand opened on Jul 28, 2026

[API] IP_ALLOWLIST_ENFORCEMENT_MODE is declared in envSchema but never passed into validateConfig, so its validation and default never run

bugSomething isn't workingSomething isn't working

tech-debtRefactor / cleanup / internal qualityRefactor / cleanup / internal quality

Status: Open.

#2896 In LanternOps/breeze;

· ToddHebebrand opened on Jul 28, 2026

[API] cf-access-logout falls back to the raw Host header for its redirect origin when DASHBOARD_URL/PUBLIC_APP_URL are unset

bugSomething isn't workingSomething isn't working

Status: Open.

#2895 In LanternOps/breeze;

· ToddHebebrand opened on Jul 28, 2026

[API] Agent token rotation confirm returns 409 without a machine-readable code, so the agent retries an unresolvable conflict until the pending window expires

bugSomething isn't workingSomething isn't working

Status: Open.

#2894 In LanternOps/breeze;

· ToddHebebrand opened on Jul 28, 2026

[Web] Bulk "Deploy software" drops the device selection — wizard makes you pick the devices again

bugSomething isn't workingSomething isn't working

Status: Open.

#2866 In LanternOps/breeze;

· ToddHebebrand opened on Jul 28, 2026

govulncheck: GO-2026-5051 (go-smb2 ReadDir OOB read/panic) has no fixed release — remove allowlist entry when one ships

Status: Open.

#2860 In LanternOps/breeze;

· ToddHebebrand opened on Jul 27, 2026

[Web] Site/org creation timezone dropdown is a 10-entry hardcoded list — Europe/Paris (and most IANA zones) missing

bugSomething isn't workingSomething isn't working

Status: Open.

#2856 In LanternOps/breeze;

· ToddHebebrand opened on Jul 27, 2026

CI: both binary-source smoke workflows red on main — REMOTE_ACCESS_ADMISSION_MODE never added to them

bugSomething isn't workingSomething isn't working

Status: Open.

#2855 In LanternOps/breeze;

· ToddHebebrand opened on Jul 27, 2026

CI: govulncheck red on every PR — GO-2026-5051 in go-smb2 v1.1.0 (no upstream fix)

bugSomething isn't workingSomething isn't working

Status: Open.

#2854 In LanternOps/breeze;

· ToddHebebrand opened on Jul 27, 2026

[API] POST /enrollment-keys/purge-expired has no live-bootstrap-token exemption — one-click "Delete expired" destroys live installer links

bugSomething isn't workingSomething isn't working

Status: Open.

#2832 In LanternOps/breeze;

· ToddHebebrand opened on Jul 27, 2026