All issues

Channels behind a getter or as a Map key are unsanitized, never torn down, and can kill the process

#3176

· frenzzy opened

on Sep 1, 2026

decodeRedirectHeaderValue documents a resolved absolute target but validates nothing, so a javascript: or cross-origin target reaches the router

#3175

· frenzzy opened

on Sep 1, 2026

prepareRequest's return replaces the init unvalidated, so a hook that returns a fresh object drops the payload, the signal and the protocol headers

#3174

· frenzzy opened

on Sep 1, 2026

Revisit #3087: a 2xx the client cannot decode resolves as undefined, and a captive portal is indistinguishable from a void result

#3173

· frenzzy opened

on Sep 1, 2026

provideEvent's contract is unenforced: calling fn twice double-commits a mutation under a 200

#3172

· frenzzy opened

on Sep 1, 2026

A throwing transformResult is contained on the return path and escapes the handler on the thrown path

#3171

· frenzzy opened

on Sep 1, 2026

createEvent is never awaited, so an async one answers 200 while discarding every cookie and header the integration set

#3170

· frenzzy opened

on Sep 1, 2026

The CSRF origin matcher's return is coerced with !!, so a truthy non-boolean opens the gate

#3169

· frenzzy opened

on Sep 1, 2026

Decoded arguments keep proto as an own key, so an ordinary Object.assign merge in a handler re-prototypes the result

#3168

· frenzzy opened

on Sep 1, 2026

Solid 2 RC.4: should static and reactive `<select value>` behave differently?

#3167

· yumemi-thomas opened

on Sep 1, 2026

A tracked latest(isPending()) probe created mid-flight misses the current async flight

#3166

· brenelz opened

on Sep 1, 2026

SSR stream never closes when a rejected fragment abandons a pending serialized sibling

#3165

· brenelz opened

on Sep 1, 2026