Issues

• RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety

  Telocel-Labs/Trident#893 · Filter by author github-actions opened on Oct 24, 2026

• RUSTSEC-2026-0381: Bundled root certificates allow trust in distrusted emSign intermediates

  Telocel-Labs/Trident#892 · Filter by author github-actions opened on Oct 23, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  Telocel-Labs/Trident#891 · Filter by author github-actions opened on Oct 23, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  Telocel-Labs/Trident#890 · Filter by author github-actions opened on Oct 23, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  Telocel-Labs/Trident#889 · Filter by author github-actions opened on Oct 23, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  Telocel-Labs/Trident#888 · Filter by author github-actions opened on Oct 23, 2026

• RUSTSEC-2026-0347: Buffered application data sent to outer server after ECH rejection

  Telocel-Labs/Trident#887 · Filter by author github-actions opened on Oct 23, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  Telocel-Labs/Trident#886 · Filter by author github-actions opened on Oct 23, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  Telocel-Labs/Trident#885 · Filter by author github-actions opened on Oct 23, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  Telocel-Labs/Trident#884 · Filter by author github-actions opened on Oct 23, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  Telocel-Labs/Trident#883 · Filter by author github-actions opened on Oct 23, 2026

• testing: no integration test runs more than one API replica

  apiStellar Wavetesting
  Telocel-Labs/Trident#807 · Filter by author Depo-dev opened on Oct 18, 2026
  2

• api: hand-rolled WebSocket server never reads client frames

  apibugreliabilitysecurityStellar Wave
  Telocel-Labs/Trident#806 · Filter by author Depo-dev opened on Oct 18, 2026
  4

• infrastructure: the backfill queue worker is not deployed anywhere, so gap and retained-floor jobs never run

  bugindexerinfrastructureStellar Wave
  Telocel-Labs/Trident#805 · Filter by author Depo-dev opened on Oct 18, 2026
  5

• api: webhook delivery depends on the Redis stream still holding the event — about minutes of retention at mainnet rates

  apireliabilityStellar Wave
  Telocel-Labs/Trident#804 · Filter by author Depo-dev opened on Oct 18, 2026
  2

• api: two generated copies of trident.proto are checked in from two different buf configs

  apirefactorStellar Wave
  Telocel-Labs/Trident#803 · Filter by author Depo-dev opened on Oct 18, 2026
  2

• indexer: an empty allowlist silently switches a mainnet indexer to index-everything mode

  indexerreliabilityStellar Wave
  Telocel-Labs/Trident#802 · Filter by author Depo-dev opened on Oct 18, 2026
  4

• indexer: allowlists larger than 25 contracts silently fall back to fetching every event on the network

  indexerperformanceStellar Wave
  Telocel-Labs/Trident#801 · Filter by author Depo-dev opened on Oct 18, 2026
  2

• api: audit log entries are dropped on backpressure and on insert failure, with no metric

  apibugsecurityStellar Wave
  Telocel-Labs/Trident#800 · Filter by author Depo-dev opened on Oct 18, 2026
  2

• infrastructure: Helm's nginx config breaks WebSocket and GraphQL upgrades, buffers SSE, and does not block /internal/

  buginfrastructureStellar Wave
  Telocel-Labs/Trident#799 · Filter by author Depo-dev opened on Oct 18, 2026
  2

• observability: trident_indexer_events_by_contract has unbounded label cardinality in index-all mode

  indexerobservabilityStellar Wave
  Telocel-Labs/Trident#798 · Filter by author Depo-dev opened on Oct 18, 2026
  2

• indexer: 3-connection pool is shared by the poll loop, relay, reconciler, maintenance jobs and health checks

  indexerperformancereliabilityStellar Wave
  Telocel-Labs/Trident#797 · Filter by author Depo-dev opened on Oct 18, 2026
  3

• database: soroban_events indexes do not match the keyset query, and low-selectivity indexes add write cost

  databaseperformanceStellar Wave
  Telocel-Labs/Trident#795 · Filter by author Depo-dev opened on Oct 18, 2026
  2

• ops: backups are local-only logical dumps with no PITR, off-site copy or scheduled job in the deployed stack

  databaseinfrastructurereliabilityStellar Wave
  Telocel-Labs/Trident#794 · Filter by author Depo-dev opened on Oct 18, 2026
  2

• testing: no end-to-end test proves an indexed event reaches WebSocket, SSE, gRPC stream and webhook subscribers

  Stellar Wavetesting
  Telocel-Labs/Trident#793 · Filter by author Depo-dev opened on Oct 18, 2026
  1