Issues

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  nearai/cloud-api#1257 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  nearai/cloud-api#1256 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  nearai/cloud-api#1255 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0347: Buffered application data sent to outer server after ECH rejection

  nearai/cloud-api#1254 · Filter by author github-actions opened on Oct 15, 2026

• [Feature] Scoped credential to manage one workspace's API keys

  apienhancement
  nearai/cloud-api#1252 · Filter by author PierreLeGuen opened on Oct 14, 2026

• [Fix] Google sign-in returns a 500 when the email already belongs to a GitHub account

  bug
  nearai/cloud-api#1246 · Filter by author PierreLeGuen opened on Oct 14, 2026
  

• RUSTSEC-2026-0340: Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled

  nearai/cloud-api#1241 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0338: Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads

  nearai/cloud-api#1242 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0342: Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto

  nearai/cloud-api#1240 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0339: Unbounded growth of pending connection ID retirements in quinn-proto

  nearai/cloud-api#1239 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0341: Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed

  nearai/cloud-api#1238 · Filter by author github-actions opened on Oct 13, 2026

• Attest promoted production images (promote.yml) so verifiers can distinguish production from staging

  nearai/cloud-api#1230 · Filter by author troy-conte opened on Oct 10, 2026

• Send Emails When Organization Credit Limits Change

  nearai/cloud-api#1211 · Filter by author italic-jinxin opened on Oct 8, 2026
  

• Send Emails for Organization Invitation Status Changes

  nearai/cloud-api#1210 · Filter by author italic-jinxin opened on Oct 8, 2026
  

• Send Emails for Organization and Workspace Deletion

  nearai/cloud-api#1209 · Filter by author italic-jinxin opened on Oct 8, 2026
  

• Send Emails for API Key Security and Limit Changes

  nearai/cloud-api#1208 · Filter by author italic-jinxin opened on Oct 8, 2026
  

• Send API Key Expiration Emails

  nearai/cloud-api#1207 · Filter by author italic-jinxin opened on Oct 8, 2026
  

• Send Low-Credit and Credit-Exhaustion Emails

  nearai/cloud-api#1206 · Filter by author italic-jinxin opened on Oct 8, 2026
  

• Send Emails When Organization Membership Is Removed

  nearai/cloud-api#1205 · Filter by author italic-jinxin opened on Oct 8, 2026
  

• Send Emails for Organization Member Permission Changes

  nearai/cloud-api#1204 · Filter by author italic-jinxin opened on Oct 8, 2026
  

• Complete Missing Transactional Email Notifications

  nearai/cloud-api#1203 · Filter by author italic-jinxin opened on Oct 8, 2026
  

• Add credit balance and API key expiration notifications

  nearai/cloud-api#1202 · Filter by author italic-jinxin opened on Oct 8, 2026
  

• Integrate member invitation and permission change notifications

  nearai/cloud-api#1201 · Filter by author italic-jinxin opened on Oct 8, 2026
  

• Add the Cloud UI notification center

  nearai/cloud-api#1200 · Filter by author italic-jinxin opened on Oct 8, 2026
  

• Build the backend notification platform and email delivery workflow

  nearai/cloud-api#1199 · Filter by author italic-jinxin opened on Oct 8, 2026