Issues

• Semgrep rule timeouts on crowdsec_handler_test.go

  backendcrowdsectesting
  Wikid82/Charon#1776 · Filter by author Wikid82 opened on Oct 27, 2026
  

• agent/Dockerfile runs as root (Trivy DS-0002)

  deployment
  Wikid82/Charon#1775 · Filter by author Wikid82 opened on Oct 27, 2026
  

• Docs: remaining stale statements about rate limiting and the WAF

  crowdsecdocumentationwaf
  Wikid82/Charon#1774 · Filter by author Wikid82 opened on Oct 27, 2026
  

• Security E2E helpers: restore of absent module keys in tests/utils/security-helpers.ts

  crowdsecsecuritytesting
  Wikid82/Charon#1773 · Filter by author Wikid82 opened on Oct 27, 2026
  

• Cerberus WAF metric reads settings and row on every management-API request

  backendwaf
  Wikid82/Charon#1771 · Filter by author Wikid82 opened on Oct 27, 2026
  

• A rate_limit_mode of empty text can switch the rate limit back on from a stale row value

  backendsecurity
  Wikid82/Charon#1772 · Filter by author Wikid82 opened on Oct 27, 2026
  

• Failed-apply restore of security module settings is broader than the change

  backendcrowdsecsecurity
  Wikid82/Charon#1770 · Filter by author Wikid82 opened on Oct 27, 2026
  

• Security settings: legacy Cerberus key and rate_limit_mode accept any string

  backendsecurity
  Wikid82/Charon#1769 · Filter by author Wikid82 opened on Oct 27, 2026
  

• Coraza integration script hardcodes host ports 80, 443, 8080, 2019 and 2345

  Wikid82/Charon#1768 · Filter by author Wikid82 opened on Oct 27, 2026
  

• Flaky test: TestImportConfigFailureKeepsSecretsAndRestoresConfig/extraction_failure

  backendcrowdsecsecuritytesting
  Wikid82/Charon#1765 · Filter by author Wikid82 opened on Oct 27, 2026
  

• Frontend branch coverage is below 85%

  crowdsecfrontendsecurity
  Wikid82/Charon#1764 · Filter by author Wikid82 opened on Oct 26, 2026
  

• Security settings save answers 400 for database errors

  backenddatabasesecurity
  Wikid82/Charon#1763 · Filter by author Wikid82 opened on Oct 26, 2026
  

• Security settings: read-then-save callers can overwrite concurrent changes

  backendsecurity
  Wikid82/Charon#1762 · Filter by author Wikid82 opened on Oct 26, 2026
  

• Security settings values are not range-checked

  backendcrowdsecsecurity
  Wikid82/Charon#1761 · Filter by author Wikid82 opened on Oct 26, 2026
  

• Security page allow-list input has no accessible label

  frontendsecurity
  Wikid82/Charon#1759 · Filter by author Wikid82 opened on Oct 26, 2026
  

• Rate Limiting page shows raw translation keys for three strings

  frontendsecurity
  Wikid82/Charon#1758 · Filter by author Wikid82 opened on Oct 26, 2026
  

• Emergency server write timeout is shorter than the proxy apply bound

  backend
  Wikid82/Charon#1757 · Filter by author Wikid82 opened on Oct 26, 2026
  

• The security suite on/off switch is read in four places with different rules

  backendcaddycrowdsecsecurityui
  Wikid82/Charon#1756 · Filter by author Wikid82 opened on Oct 26, 2026
  

• Frontend lint backlog: 1358 warnings (0 errors) across frontend/src

  crowdsecfrontendsecuritytesting
  Wikid82/Charon#1743 · Filter by author Wikid82 opened on Oct 26, 2026
  

• Backup service tests leak state and fail when run more than once

  backendcrowdsecdatabasetesting
  Wikid82/Charon#1742 · Filter by author Wikid82 opened on Oct 26, 2026
  

• Source/local-host labels missing in the German, Spanish, French and Chinese translations

  crowdsecfrontend
  Wikid82/Charon#1741 · Filter by author Wikid82 opened on Oct 25, 2026
  1

  

• Retire the deprecated CrowdSec mode setting key

  backendbugcaddycrowdsecsecurity
  Wikid82/Charon#1733 · Filter by author Wikid82 opened on Oct 25, 2026
  

• Patch coverage report shows 0 changed frontend lines

  bugcrowdsecfrontendsecurity
  Wikid82/Charon#1725 · Filter by author Wikid82 opened on Oct 24, 2026
  

• Fresh-install boot logs an avoidable migration error and a CrowdSec skip warning

  backendbugcaddycrowdsecsecurityssl
  Wikid82/Charon#1724 · Filter by author Wikid82 opened on Oct 24, 2026
  

• CrowdSec startup: entrypoint cscli calls do not pass -c

  backendbugcrowdsecsecurity
  Wikid82/Charon#1723 · Filter by author Wikid82 opened on Oct 24, 2026