All pull requests

Pull requests

• [Aikido] Enforce 512M pixel-frame limit to mitigate unauthenticated DoS in video generation nodes

  #18·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·

• [Aikido] Prevent cross-user file exfiltration in OpenAI and Gemini workflow nodes

  #17·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·

• [Aikido] Require cryptographic tokens for multi-user authentication in app/user_manager.py

  #16·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·

• [Aikido] Prevent cross-instance asset access via path validation in asset_management.py

  #15·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·

• [Aikido] Fix unauthenticated cross-user job disclosure in API endpoints

  #14·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·

• [Aikido] Prevent cross-tenant asset exposure by threading owner_id through prompt execution chain

  #13·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·

• [Aikido] Validate client_id as string or null in POST /prompt to prevent DoS

  #12·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·

• [Aikido] Add opt-in API key authentication middleware for control endpoints

  #11·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·

• [Aikido] Require GPG signatures and commit hash verification in Windows updater

  #10·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·

• [Aikido] Enforce owner_id validation for ownerless asset references in mutations

  #9·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·

• [Aikido] Remove users registry from /users endpoint in multi-user mode

  #8·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·

• [Aikido] Prevent custom node whitelist bypass via basename collision attacks

  #7·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·

• [Aikido] Enforce pixel budget limit in EmptyImage to prevent DoS via unbounded tensor dimensions

  #6·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·

• [Aikido] Restrict asset download path resolution to owned or ownerless references

  #5·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·

• [Aikido] Prevent excessive tensor allocation in ImagePadForOutpaint via dimension validation

  #4·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·

• [Aikido] Fix unrestricted format string traversal vulnerability in StringFormat node

  #3·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·

• [Aikido] Enforce PyTorch minimum version 2.7.0 to mitigate deserialization vulnerability

  #2·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·

• [Aikido] Fix path traversal vulnerability in SaveText format parameter validation

  #1·aikido-staging-writecapable[bot] opened Aug 27, 2026Bot·

  ·