Security: Fix 24 vulnerabilities across auth, rate limiting, and uploads - #783

Open

aXenDeveloper wants to merge 5 commits into

claude/vitnode-security-review-5ly6gw

Commits on Sep 1, 2026

fix(security): close access-control, credential and upload issues
claude
committed
7056193

Commits on Sep 2, 2026

fix(security): stop the locale redirect leaving this origin
claude
committed
def5021
fix(security): gate the role read, bound the search cursor, expire the session cache on a role change
claude
committed
a8ef1e2
fix(security): bound request bodies, stop unauthenticated device rows, and the rest of the second sweep
claude
committed
59de0bf
docs: add the security review summary
claude
committed
aa5293a