nodejs/security-wg

Issues

• Proposed approach for build steps in deps which are not in make node

  #1236 opened 3 months ago by mhdawson
  6

• Node.js Security Initiatives 2024

  #1255 opened 10 days ago by RafaelGSS
  15

• OpenSSF Scorecard Report Updated!

  #1311 opened 10 days ago by github-actions
  0

• Node.js Security team Meeting 2024-05-23

  #1316 opened 13 days ago by mhdawson
  0

• Node.js Security team Meeting 2024-05-09

  #1302 opened 22 days ago by mhdawson
  0

• Discuss adding --security-revert to NODE_OPTIONS

  #1262 opened 24 days ago by RafaelGSS
  0

• OpenSSF Scorecard Report Updated!

  #1309 opened 24 days ago by github-actions
  0

• OpenSSF Scorecard Report Updated!

  #1307 opened 24 days ago by github-actions
  0

• OpenSSF Scorecard Report Updated!

  #1308 opened 24 days ago by github-actions
  0

• Scores of vulnerability found in experimental features can be too high

  #1296 opened 25 days ago by joyeecheung
  9

• Permission Model adoption from Package Managers

  #1300 opened a month ago by RafaelGSS
  3

• Adding language to Bug Bounty program to differentiate "security features" from "defense in depth features"

  #1299 opened a month ago by rdw-msft
  1

• More control over remote debugging (and killing)

  #1287 opened a month ago by RedYetiDev
  4

• Require optional PoC videos from hackers to help triaging reports

  #1285 opened a month ago by 4xpl0r3r
  0

• Node.js Security team Meeting 2024-04-25

  #1286 opened a month ago by mhdawson
  1

• Can we have "unsecure" features in Node.js?

  #1274 opened 2 months ago by aduh95
  4

• Collaborators Inactivity Policy Review

  #1282 opened 2 months ago by marco-ippolito
  3

• OpenSSF Scorecard Report Updated!

  #1293 opened a month ago by github-actions
  0

• OpenSSF Scorecard Report Updated!

  #1291 opened a month ago by github-actions
  0

• Security Vulnerability to report

  #1290 opened a month ago by 4xpl0r3r
  1

• Threat Model question about Permission Model

  #1288 opened a month ago by 4xpl0r3r
  2

• HackerOne page does not mention the threat model

  #1284 opened a month ago by joyeecheung
  1

• Question: Why do we have a `--experimental-policy`?

  #1283 opened 2 months ago by RedYetiDev
  4

• dependabot suggesting pre-release update

  #1271 opened 2 months ago by RafaelGSS
  1

• OpenSSF Scorecard Report Updated!

  #1277 opened 2 months ago by github-actions
  0

• Node.js Security team Meeting 2024-04-11

  #1275 opened 2 months ago by mhdawson
  5

• OpenSSF Scorecard Report Updated!

  #1266 opened 2 months ago by github-actions
  0

• April 3, 2024 security releases have not been announced on the nodejs-sec mailing list

  #1269 opened 2 months ago by rgrove
  2

• Node.js Security team Meeting 2024-03-28

  #1260 opened 2 months ago by mhdawson
  2

• OpenSSF Scorecard Report Updated!

  #1264 opened 2 months ago by github-actions
  0

• Node.js Security team Meeting 2024-03-14

  #1245 opened 3 months ago by mhdawson
  3

• Node.js Security team Meeting 2024-02-29

  #1237 opened 3 months ago by mhdawson
  5

• Node.js Security team Meeting 2024-02-01

  #1214 opened 3 months ago by mhdawson
  3

• OpenSSF Scorecard Report Updated!

  #1247 opened 3 months ago by github-actions
  0

• Node.js Security team Meeting 2024-02-15

  #1227 opened 3 months ago by mhdawson
  1

• OpenSSF Scorecard Report Updated!

  #1241 opened 3 months ago by github-actions
  0

• February 6 2024 Security Releases not announced to nodejs-sec

  #1224 opened 3 months ago by Yogu
  3

• Mitre organization for CVE id request

  #1193 opened 5 months ago by marco-ippolito
  28

• Read time outs in "Check for vulnerabilities daily" workflow

  #1243 opened 3 months ago by richardlau
  0

• OpenSSF Scorecard Report Updated!

  #1239 opened 3 months ago by github-actions
  0

• OpenSSF Scorecard Report Updated!

  #1229 opened 4 months ago by github-actions
  1

• OpenSSF Scorecard Report Updated!

  #1220 opened 4 months ago by github-actions
  0

• regarding installation of node

  #1218 opened 4 months ago by sk670994
  1

• zoom link does not appear on the calendar

  #1202 opened 4 months ago by marco-ippolito
  1

• OpenSSF Scorecard Report Updated!

  #1210 opened 4 months ago by github-actions
  1

• OpenSSF Scorecard Report Updated!

  #1208 opened 4 months ago by github-actions
  0

• Node.js Security team Meeting 2024-01-18

  #1196 opened 4 months ago by mhdawson
  1

• OSTIF<>Fuzzing Audit update to security-wg for February 1 meeting.

  #1207 opened 4 months ago by Amir-Montazery
  1

• OpenSSF Scorecard Report Updated!

  #1200 opened 5 months ago by github-actions
  0

• OpenSSF Scorecard Report Updated!

  #1198 opened 5 months ago by github-actions
  0