Search results

[Bug][API] DCIM/IPAM built-in CI models missing after fresh deployment causes 404 on pages

Status: Open.

#771 In veops/cmdb;

· lhy8888 opened on Mar 8, 2026

[Bug][UI] Homepage white screen when Axios error has no response object

Status: Open.

#770 In veops/cmdb;

· lhy8888 opened on Mar 8, 2026

[Security][API] Runtime Python dependencies still contain known CVEs after baseline upgrades

Status: Open.

#767 In veops/cmdb;

· lhy8888 opened on Mar 8, 2026

[Security][UI] Frontend dependency tree has high/critical vulnerabilities (requires modernization plan)

Status: Open.

#768 In veops/cmdb;

· lhy8888 opened on Mar 8, 2026

[Security][API] Legacy weak hash fallback should be disabled by default (MD5/SHA1/plaintext)

Status: Open.

#766 In veops/cmdb;

· lhy8888 opened on Mar 8, 2026

[Security][API] Potential command injection in translation CLI commands

Status: Open.

#765 In veops/cmdb;

· lhy8888 opened on Mar 8, 2026

[SECURITY][Medium] Weak default sample database passwords in .env

Status: Open.

#763 In veops/cmdb;

· lhy8888 opened on Mar 8, 2026

[SECURITY][High] Relation graph node HTML rendering allows unsafe content

Status: Open.

#761 In veops/cmdb;

· lhy8888 opened on Mar 8, 2026

[SECURITY][High] DOM injection risk in highlight directive

Status: Open.

#759 In veops/cmdb;

· lhy8888 opened on Mar 8, 2026

[SECURITY][High] XSS risk via unsafe HTML rendering in notice/metadata views

Status: Open.

#757 In veops/cmdb;

· lhy8888 opened on Mar 8, 2026

[SECURITY][Medium] Hardcoded Vault token placeholder in executable example

Status: Open.

#755 In veops/cmdb;

· lhy8888 opened on Mar 8, 2026

[SECURITY][Medium] Root token exposed in initialization output

Status: Open.

#753 In veops/cmdb;

· lhy8888 opened on Mar 8, 2026