WhisperX tag archive

#staging

This page collects WhisperX intelligence signals tagged #staging. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (2)

The Lab · 2026-04-22 11:27:31 · GitHub Issues

1. F1503 SSRF Regression: isSafeURL Guard Deleted from Staging Leaves Metadata Endpoint Unprotected

A critical security regression has been identified in the F1503 staging branch, exposing a dangerous gap in server-side request forgery (SSRF) protection. Core-OffSec Audit #17 has confirmed that a2a_proxy_helpers.go, which housed the isSafeURL SSRF guard function, was deleted from the staging environment. The deletion...

The Lab · 2026-04-22 11:27:32 · GitHub Issues

2. Critical Shell Injection Regression in deleteViaEphemeral Exposes Staging to Path Traversal

A critical security regression has been identified in the staging environment at commit 36240c75, involving the deleteViaEphemeral function. The vulnerability, catalogued as F1502 under CWE-78 (OS Command Injection), stems from shell string concatenation in the deletion logic. The affected code constructs the command a...