Repository navigation
Security: share/sharedb
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Fetching a snapshot through a projection returns hidden fields when the database projects snapshotsGHSA-gg56-g99c-3qm3 published
Nov 12, 2026 by alecgibsonModerate -
Collection named `$presence…` leaks its ops to presence subscribers, bypassing read access controlGHSA-9p4p-3p2f-q7h8 published
Nov 10, 2026 by alecgibsonLow -
Resubscribing to a query on a projection polls the database without the projection's fieldsGHSA-gj85-q77q-5mw4 published
Nov 9, 2026 by alecgibsonModerate -
Non-string query collection name bypasses access-control middlewareGHSA-4fp7-5cq7-7mr6 published
Oct 22, 2026 by alecgibsonModerate -
Unchecked request fields let any client crash the server process (uncaught exception)GHSA-94fr-2wj7-v4vj published
Oct 22, 2026 by alecgibsonHigh -
Subscribe during an in-flight unsubscribe leaves a channel dead for other subscribers on the serverGHSA-4j7j-cw4p-wgv2 published
Nov 9, 2026 by alecgibsonLow -
Op that cannot be coerced crashes the server process (uncaught exception)GHSA-7vfr-354v-qmm7 published
Oct 6, 2026 by alecgibsonHigh -
Pub/sub channel name collision lets a client read ops from an unauthorized collectionGHSA-5h4c-qg46-x477 published
Oct 6, 2026 by alecgibsonModerate -
Client can leak pub/sub streams that outlive disconnect, causing unbounded memory growthGHSA-fv2v-f5r9-496g published
Oct 6, 2026 by alecgibsonModerate -
Malformed op submitted to a projection crashes the server process (uncaught exception)GHSA-7v53-4cxg-59q3 published
Oct 6, 2026 by alecgibsonHigh
Learn more about advisories related to share/sharedb in the GitHub Advisory Database