Search results

Complete SDLC automation and fix classloader-java API compatibility

enhancementNew feature or requestNew feature or request

Status: Open.

#431 In FlossWare/platform-java;

· sfloess opened on Jun 12, 2026

Security: ApiServerConfig allows wildcard CORS origin

security

Status: Open.

#430 In FlossWare/platform-java;

· sfloess opened on Jun 9, 2026

bug: InMemoryProjectManager.createProject() has TOCTOU race - containsKey/put not atomic

Status: Open.

#429 In FlossWare/platform-java;

· sfloess opened on Jun 9, 2026

bug: InMemoryProjectManager.deleteProject() has TOCTOU race - containsKey/get not atomic

Status: Open.

#428 In FlossWare/platform-java;

· sfloess opened on Jun 9, 2026

Security: MaskingPatternLayout uses StringBuffer instead of StringBuilder

enhancementNew feature or requestNew feature or request

Status: Open.

#427 In FlossWare/platform-java;

· sfloess opened on Jun 9, 2026

Resource Leak: ApplicationManager.listenerExecutor never shut down

bugSomething isn't workingSomething isn't working

Status: Open.

#426 In FlossWare/platform-java;

· sfloess opened on Jun 9, 2026

bug: RestartManager.performRestart() uses Thread.sleep(1000) between stop and start - fragile timing

Status: Open.

#424 In FlossWare/platform-java;

· sfloess opened on Jun 9, 2026

ISSUE-11: Missing validation for negative values in ThreadPoolStats constructor

Status: Open.

#425 In FlossWare/platform-java;

· sfloess opened on Jun 9, 2026

ISSUE-10: Race condition potential in ApplicationManager concurrent operations

Status: Open.

#423 In FlossWare/platform-java;

· sfloess opened on Jun 9, 2026

security: NativeProcessLauncher path traversal check is incomplete - does not handle symlinks or encoded paths

Status: Open.

#422 In FlossWare/platform-java;

· sfloess opened on Jun 9, 2026

ISSUE-9: Security: CredentialMasker regex patterns have limited coverage

Status: Open.

#421 In FlossWare/platform-java;

· sfloess opened on Jun 9, 2026

security: ApplicationApiHandler does not sanitize appId from URL path - log injection risk

Status: Open.

#420 In FlossWare/platform-java;

· sfloess opened on Jun 9, 2026