| #573 |
[MEDIUM] cron.py TOCTOU in create_schedule/update_schedule
Race condition in cron.py: SELECT to check if schedule exists, then INSERT/UPDATE. Concurrent reques...
|
open |
medium |
2025-12-17 16:32 |
- |
|
| #572 |
[MEDIUM] steps.py unbounded list growth in batch operations
Batch step operations can accumulate large in-memory lists without bounds. For very large workflows ...
|
open |
medium |
2025-12-17 16:32 |
- |
|
| #571 |
[MEDIUM] Inconsistent error logging - some use exception() some use error()
Error logging is inconsistent across API endpoints. Some use logger.exception() which includes stack...
|
open |
medium |
2025-12-17 16:32 |
- |
|
| #570 |
[MEDIUM] Inconsistent timezone handling in API responses
Some timestamps use timezone-aware datetimes while others use naive datetimes. This can cause issues...
|
open |
medium |
2025-12-17 16:32 |
- |
|
| #569 |
[MEDIUM] analytics.py unused time_range query parameter
time_range parameter is parsed but never used in some analytics queries, wasting processing. Fix: Ei...
|
open |
medium |
2025-12-17 16:32 |
- |
|
| #568 |
[MEDIUM] Public endpoint lists scattered across files
PUBLIC_PATHS and skip-auth endpoint lists are defined in multiple places (rbac.py, auth.py) leading ...
|
open |
medium |
2025-12-17 16:32 |
- |
|
| #567 |
[MEDIUM] Missing workflow_id in permission check logs
Permission check audit logs in api/middleware/rbac.py don't include workflow_id when checking workfl...
|
open |
medium |
2025-12-17 16:32 |
- |
|
| #566 |
[MEDIUM] security_headers.py CSP nonce generated but unused
CSP nonce is generated on every request but never actually used in responses. This is wasted computa...
|
open |
medium |
2025-12-17 16:32 |
- |
|
| #450 |
P4: Add Encryption Migration Script
Issue #15 from review: Old data remains unencrypted. Location: engine/security/jsonb_encryption.py. ...
|
open |
low |
2025-12-16 00:57 |
- |
|
| #447 |
P3: Chunked Transaction Commits for Large Loops
Issue #10 from review: Transaction size bottleneck. Location: engine/interpreters/inline_executor.py...
|
open |
medium |
2025-12-16 00:56 |
- |
|
| #438 |
Implement Enterprise SSO (SAML/OIDC) for platform authentication
Add enterprise SSO support for Highway platform. Requirements: (1) SAML 2.0 support for enterprise I...
|
open |
medium |
2025-12-15 09:35 |
- |
|
| #435 |
App: Container Task Runner (container_runner)
## Overview
Execute arbitrary Docker containers as workflow tasks with input/output handling. Enable...
|
open |
low |
2025-12-14 20:17 |
- |
|
| #434 |
App: RSS Digest Emailer (rss_digest)
## Overview
Aggregate multiple RSS feeds, filter by keywords/date, and send daily/weekly email diges...
|
open |
medium |
2025-12-14 20:17 |
- |
|
| #433 |
App: Invoice Generator (invoice_generator)
## Overview
Generate professional PDF invoices from structured data with email delivery and S3 archi...
|
open |
low |
2025-12-14 20:17 |
- |
|
| #432 |
App: AI Content Generator (content_generator)
## Overview
Generate marketing content, blog posts, and social media content using LLM with human re...
|
open |
high |
2025-12-14 20:15 |
- |
|
| #431 |
App: Multi-Step Approval Chain (approval_chain)
## Overview
Sequential and parallel approval workflows with escalation, reminders, and audit trail.
...
|
open |
medium |
2025-12-14 20:15 |
- |
|
| #430 |
App: File Backup Manager (backup_manager)
## Overview
Scheduled file and database backups to S3 with retention policies and status reporting.
...
|
open |
medium |
2025-12-14 20:15 |
- |
|
| #429 |
App: Scheduled SQL Reporter (sql_reporter)
## Overview
Run database queries on schedule and email formatted results as reports.
## App Metadat...
|
open |
medium |
2025-12-14 20:14 |
- |
|
| #428 |
App: Webhook Gateway (webhook_gateway)
## Overview
Receive webhooks from external services, transform payloads, and forward to email/Slack/...
|
open |
high |
2025-12-14 20:14 |
- |
|
| #427 |
App: AI Document Summarizer (doc_summarizer)
## Overview
Summarize documents and web pages using LLM, with email delivery of results.
## App Met...
|
open |
high |
2025-12-14 20:14 |
- |
|