Issues

• Coordinated Vulnerability Disclosure from landxnsec 7 of 8

  security
  siv-org/siv#322 · Filter by author dsernst opened on Aug 16, 2026

• admin init_login_code never expires (found by landxnsec)

  security
  siv-org/siv#323 · Filter by author dsernst opened on Aug 16, 2026
  1

• Coordinated Vulnerability Disclosure from landxnsec 6 of 8

  security
  siv-org/siv#321 · Filter by author dsernst opened on Aug 16, 2026

• esignature POSTs could be blocked by malicious onlookers (found by landxnsec)

  security
  siv-org/siv#319 · Filter by author dsernst opened on Aug 14, 2026
  2

• Double-voting race window on /submit-vote (found by landxnsec)

  security
  siv-org/siv#318 · Filter by author dsernst opened on Aug 14, 2026
  3

• Unauthenticated reset of keygen / unlock state (found by landxnsec)

  security
  siv-org/siv#317 · Filter by author dsernst opened on Aug 14, 2026
  2

• Admin forged /unlock req.header.host could leak election private_keyshare (found by landxnsec)

  security
  siv-org/siv#316 · Filter by author dsernst opened on Aug 14, 2026
  3

• /applied-admins approval code has weak entropy (found by landxnsec)

  security
  siv-org/siv#315 · Filter by author dsernst opened on Aug 14, 2026
  2

• Approval Votes shape isn't quite right

  verificationVoter UX
  siv-org/siv#259 · Filter by author dsernst opened on Apr 26, 2025

• Friction setting up SIV Dev Environment because of Deprecated packages during install

  local-dev
  siv-org/siv#255 · Filter by author dsernst opened on Nov 11, 2024
  1

• NDP multiparty decryption hanging, needed help getting unstuck

  admin UXPrivacy Protector UXrobustness
  siv-org/siv#245 · Filter by author dsernst opened on Sep 14, 2024
  1

• Showing encrypted vote on submission screen by default feels intimidating

  designEasier UXVoter UX
  siv-org/siv#244 · Filter by author dsernst opened on Sep 14, 2024

• results: type=budget, rounds $, doesn't show ¢

  Voter UX
  siv-org/siv#243 · Filter by author dsernst opened on Sep 9, 2024

• Allowing any internet voting may open the door to some jurisdictions use incredibly weak systems

  siv-org/siv#242 · Filter by author dsernst opened on Aug 28, 2024

• Very hard for anyone else to run or verify the Shuffle & Decryption ZK Proofs

  verification
  siv-org/siv#241 · Filter by author dsernst opened on Aug 28, 2024
  1

• Trustee (privacy-protector) page missing "Election Title" in header

  Easier UXPrivacy Protector UX
  siv-org/siv#240 · Filter by author dsernst opened on Aug 28, 2024
  2

• /api/unlocked-votes not sorted nicely

  designEasier UXverificationVoter UX
  siv-org/siv#239 · Filter by author dsernst opened on Aug 16, 2024

• Verification # labeled tracking in api/unlocked-votes json

  Easier UXverificationVoter UX
  siv-org/siv#238 · Filter by author dsernst opened on Aug 16, 2024

• type=budget plaintext includes blank question id

  bugVoter UX
  siv-org/siv#237 · Filter by author dsernst opened on Aug 14, 2024

• HACK SIV — Public Prize Awards: Now Live

  siv-org/siv#236 · Filter by author dsernst opened on Aug 14, 2024
  11

• Privacy Protector invite allows accidentally sending localhost links

  admin UXEasier UXPrivacy Protector UX
  siv-org/siv#235 · Filter by author dsernst opened on Aug 14, 2024

• HACK SIV - MON 8/12 - END OF DAY REPORT — With a question for you...

  siv-org/siv#234 · Filter by author dsernst opened on Aug 13, 2024
  1

• HACK SIV - END OF DAY REPORT - SUN 8/11

  siv-org/siv#233 · Filter by author dsernst opened on Aug 12, 2024
  1

• Improving the timing of verification to minimize chaos

  siv-org/siv#232 · Filter by author GABuras opened on Aug 12, 2024

• 2nd Device Malware Verification Check can be defeated by rerouting the QR code to another malicious site (or other non-legit check websites)

  security
  siv-org/siv#231 · Filter by author dsernst opened on Aug 11, 2024
  3