Rig Community

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

Bugs

41 Topics 71 Posts

Something broken? Use the template (version, macOS, repro). Account / private fleet → help.userig.app

This category can be followed from the open social web via the handle bugs@community.userig.app

R

[Aikido][GH#11] Using document write methods can lead to XSS attacks (4 sites)
Watching Ignoring Scheduled Pinned Locked Moved resolved github-11 severity-high type-sast security
2

0 Votes

2 Posts

34 Views

R

Resolved in Mac 1.0.0-beta.55. GitHub: https://github.com/richharrington20/rig/issues/11 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

[Aikido][GH#6] Electron version no longer receiving security updates
Watching Ignoring Scheduled Pinned Locked Moved resolved github-6 severity-high type-eol security
2

0 Votes

2 Posts

41 Views

R

Resolved in Mac 1.0.0-beta.55. GitHub: https://github.com/richharrington20/rig/issues/6 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

[Aikido][GH#5] Electron dependency advisories (4 findings)
Watching Ignoring Scheduled Pinned Locked Moved resolved github-5 severity-high type-open-sourc security
2

0 Votes

2 Posts

36 Views

R

Resolved in Mac 1.0.0-beta.55. GitHub: https://github.com/richharrington20/rig/issues/5 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

[Aikido][GH#25] AIKIDO-2026-906996 in better-auth (2 lockfiles)
Watching Ignoring Scheduled Pinned Locked Moved resolved github-25 severity-medium type-open-sourc security
2

0 Votes

2 Posts

31 Views

R

Resolved in Cloud 0.18.0. GitHub: https://github.com/richharrington20/rig/issues/25 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

[Aikido][GH#24] Email HTML injection via untrusted fields (2 findings)
Watching Ignoring Scheduled Pinned Locked Moved resolved github-24 severity-medium type-ai-pentest security
2

0 Votes

2 Posts

32 Views

R

Resolved in Cloud 0.18.0. GitHub: https://github.com/richharrington20/rig/issues/24 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

[Aikido][GH#21] @hono/node-server advisories (2 findings)
Watching Ignoring Scheduled Pinned Locked Moved resolved github-21 severity-medium type-open-sourc security
2

0 Votes

2 Posts

34 Views

R

Resolved in Cloud 0.18.0. GitHub: https://github.com/richharrington20/rig/issues/21 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

[Aikido][GH#19] Docker containers run as default root user (2 Dockerfiles)
Watching Ignoring Scheduled Pinned Locked Moved resolved github-19 severity-medium type-iac security
2

0 Votes

2 Posts

26 Views

R

Resolved in Cloud 0.18.0. GitHub: https://github.com/richharrington20/rig/issues/19 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

[Aikido][GH#16] Potential Cross Site Scripting (XSS) via window.location.href
Watching Ignoring Scheduled Pinned Locked Moved resolved github-16 severity-high type-sast security
2

0 Votes

2 Posts

29 Views

R

Resolved in Cloud 0.18.0. GitHub: https://github.com/richharrington20/rig/issues/16 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

[Aikido][GH#15] DOM Cross-Site Scripting (XSS) via Insecure jQuery Execution Sinks
Watching Ignoring Scheduled Pinned Locked Moved resolved github-15 severity-high type-sast security
2

0 Votes

2 Posts

37 Views

R

Resolved in Cloud 0.18.0. GitHub: https://github.com/richharrington20/rig/issues/15 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

[Aikido][GH#8] Using document write methods can lead to XSS attacks (4 sites)
Watching Ignoring Scheduled Pinned Locked Moved resolved github-8 severity-high type-sast security
2

0 Votes

2 Posts

39 Views

R

Resolved in Cloud 0.18.0. GitHub: https://github.com/richharrington20/rig/issues/8 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

[Aikido][GH#20] GitHub org IP allow list not enabled
Watching Ignoring Scheduled Pinned Locked Moved resolved github-20 severity-medium type-scm-securi security
2

0 Votes

2 Posts

39 Views

R

Accepted — GitHub org IP allow lists are an org admin setting, not applicable for this public product repo. Tracked for awareness only.
R

[Aikido][GH#13] Timing-unsafe token comparison (2 sites)
Watching Ignoring Scheduled Pinned Locked Moved resolved github-13 severity-high type-sast security
2

0 Votes

2 Posts

37 Views

R

Resolved in Mac 1.0.0-beta.54. GitHub: https://github.com/richharrington20/rig/issues/13 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

[Aikido][GH#10] Detected a Generic API Key (sparkleUpdater.js)
Watching Ignoring Scheduled Pinned Locked Moved resolved github-10 severity-high type-leaked-sec security
2

0 Votes

2 Posts

27 Views

R

Resolved in Mac 1.0.0-beta.54. GitHub: https://github.com/richharrington20/rig/issues/10 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

[Aikido][GH#9] Detected a Generic API Key (sparkle.json)
Watching Ignoring Scheduled Pinned Locked Moved resolved github-9 severity-high type-leaked-sec security
2

0 Votes

2 Posts

43 Views

R

Resolved in Mac 1.0.0-beta.54. GitHub: https://github.com/richharrington20/rig/issues/9 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

[Aikido][GH#7] Express is not emitting security headers
Watching Ignoring Scheduled Pinned Locked Moved resolved github-7 severity-high type-sast security
2

0 Votes

2 Posts

36 Views

R

Resolved in Mac 1.0.0-beta.54. GitHub: https://github.com/richharrington20/rig/issues/7 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

[Aikido][GH#4] Potential for OS command injection via child_process call
Watching Ignoring Scheduled Pinned Locked Moved resolved github-4 severity-high type-sast security
2

0 Votes

2 Posts

37 Views

R

Resolved in Mac 1.0.0-beta.54. GitHub: https://github.com/richharrington20/rig/issues/4 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

[Aikido][GH#23] Missing Anti-clickjacking header
Watching Ignoring Scheduled Pinned Locked Moved resolved github-23 severity-medium type-surface-mo security
2

0 Votes

2 Posts

57 Views

R

Resolved in Cloud 0.17.0. GitHub: https://github.com/richharrington20/rig/issues/23 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

[Aikido][GH#3] HSTS header is missing
Watching Ignoring Scheduled Pinned Locked Moved resolved github-3 severity-high type-surface-mo security
2

0 Votes

2 Posts

58 Views

R

Resolved in Cloud 0.17.0. GitHub: https://github.com/richharrington20/rig/issues/3 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

[Aikido][GH#2] Content Security Policy (CSP) header not set
Watching Ignoring Scheduled Pinned Locked Moved resolved github-2 severity-critic type-surface-mo security
2

0 Votes

2 Posts

57 Views

R

Resolved in Cloud 0.17.0. GitHub: https://github.com/richharrington20/rig/issues/2 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
R

test
Watching Ignoring Scheduled Pinned Locked Moved
1

0 Votes

1 Posts

4 Views

R

ADALKDJASKLDNLA Drafted from Rig Support. Secrets stripped before publish. Prefer this thread for public repro; keep account details in the ticket.

2 / 3