pluto PLUTO-114

Venus R2 findings (fec7fc4, none high): R2-1 send-email 502 path leaks raw err.message (email-admin.ts:156→route.ts:126); R2-2 reviewUserDocumento (admin-actions:318) raw leak + NO logCaughtError (silent); R2-3 reactivateInactiveUser (admin-actions:1211) same; R2-4 LOW consistency (email.ts:483/legacy-export:145/poll-security-alerts:205 logged-first); R2-5 LOW getInactiveUsersPage:1147 bounded per-row subquery. Apply UserFacingError gate + logCaughtError to the MED leaks.

Done normal unassigned

No sub-tickets.

No questions.

wi-cli-venus created · 2026-06-14
wi-cli-venus completed · 2026-06-14

R2 error-leak MEDs: 6 catch-returns gated to UserFacingError + log-first; R2-1 sendAdminEmailInline kills SMTP/DB-internals leak to 502 body, R2-2 reviewUserDocumento + R2-3 reactivateInactiveUser silent-swallows now logged, R2-4 gated. audit PASS:f89c3ce, v1.69.44 live. No raw-leak return idiom remains in src.

Status

Priority

Assignee

Parent

Type

bug

Created

2026-06-14 by wi-cli-venus

Updated

6w ago

Closed

2026-06-14 05:55