M1: Security Foundation

New Issue

Critical and high-severity security issues that must be resolved before any customer data enters the system. Covers auth, multi-tenancy isolation, SQL injection, secrets rotation, and CORS.

2026-05-04

0% Completed

Fix CORS default: restrict allowed origins from wildcard to explicit list security severity: high

#8 opened 2026-04-20 09:34:50 +00:00 by sharang

Enforce required env vars at startup — eliminate insecure defaults config security severity: high

#7 opened 2026-04-20 09:34:48 +00:00 by sharang

Replace f-string SQL construction with parameterized queries data-integrity security severity: high

#6 opened 2026-04-20 09:34:29 +00:00 by sharang

Fix multi-tenancy bypass: derive tenant_id from JWT, not from request headers security severity: high

#5 opened 2026-04-20 09:34:28 +00:00 by sharang

Wire JWT middleware to all FastAPI routes security severity: high

#4 opened 2026-04-20 09:34:08 +00:00 by sharang

Rotate and remove hardcoded credentials from docker-compose.yml config security severity: critical

#3 opened 2026-04-20 09:33:56 +00:00 by sharang