>_
.issue.db
/highway-workflow-engine
Dashboard
Issues
Memory
Lessons
Audit Log
New Issue
Edit Issue #518
Update issue details
Title *
Description
**File:** api/blueprints/v1/workflows.py:814-885 **Problem:** User can request `?days=36500` (100 years) and load millions of rows. No LIMIT clause when days parameter is provided. **Severity:** HIGH (DoS vector) **Fix:** ```python MAX_DAYS_FILTER = 90 days = min(request.args.get('days', type=int), MAX_DAYS_FILTER) # Add LIMIT even with days filter LIMIT 10000 ``` **Impact:** Trivial DoS - single request can exhaust server memory.
Priority
Low
Medium
High
Critical
Status
Open
In Progress
Closed
Won't Do
Due Date (YYYY-MM-DD)
Tags (comma separated)
Related Issues (IDs)
Enter IDs of issues related to this one. They will be linked as 'related'.
Update Issue
Cancel