fix: Security 24 vulnerabilities across auth, rate limiting, and uploads - #783

Merged

aXenDeveloper merged 8 commits into

claude/vitnode-security-review-5ly6gw

Sep 6, 2026

Commits on Sep 6, 2026

fix(security): close access-control, credential and upload issues

claude
authored and
aXenDeveloper
committed
1af2b93
fix(security): stop the locale redirect leaving this origin

claude
authored and
aXenDeveloper
committed
458e4f3
fix(security): gate the role read, bound the search cursor, expire the session cache on a role change

claude
authored and
aXenDeveloper
committed
951027b
fix(security): bound request bodies, stop unauthenticated device rows, and the rest of the second sweep

claude
authored and
aXenDeveloper
committed
c799722
docs: add the security review summary

claude
authored and
aXenDeveloper
committed
8e13c66
chore: remove proxy
aXenDeveloper
committed
bef98a7
perf: Remove Next.js related code
aXenDeveloper
committed
28cdb9c
fix: email canonical issue security
aXenDeveloper
committed
79b5511