Issues

• infra/secrets_rotation.py: Kebab-case rotation steps cause ValueError on AWS Secrets Manager lifecycle events

  buginfrasecurity
  Ethereal-Future/FuTuRe#1619 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/NetworkWarning.jsx: Testnet condition early-return prevents offline warning from ever displaying

  bugfrontend
  Ethereal-Future/FuTuRe#1618 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/SecurityKeyWarning.jsx: Unchecked secretKey.length causes crash on nullish values

  bugfrontend
  Ethereal-Future/FuTuRe#1617 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/LargeTransactionWarning.jsx: Static 1000 threshold applies to all asset types and fails to reset

  frontendux
  Ethereal-Future/FuTuRe#1616 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/SEP24Flow.jsx: Calls non-existent /api/sep24/authenticate and hardcodes mock anchor domain

  bugfrontendstellar
  Ethereal-Future/FuTuRe#1615 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/ManageDataSettings.jsx: Calls non-existent /api/stellar/account/:publicKey/manage-data endpoint

  bugfrontendstellar
  Ethereal-Future/FuTuRe#1614 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/MultiSigTransactions.jsx: Calls unaliased /api/multisig endpoints resulting in 404 errors

  bugfrontend
  Ethereal-Future/FuTuRe#1613 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/DEXOfferManagement.jsx: Hardcodes empty sourceSecret on create, modify, and cancel offer actions

  bugfrontendstellar
  Ethereal-Future/FuTuRe#1612 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/ConfirmSendDialog.jsx: Computes total XLM by summing token amount with XLM fee and leaks secretKey

  bugfrontendsecurity
  Ethereal-Future/FuTuRe#1611 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/QRCodeModal.jsx: Modal container has aria-hidden="true", hiding dialog from screen readers

  accessibilitybugfrontend
  Ethereal-Future/FuTuRe#1610 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/KYCForm.jsx: Subtraction-only age calculation allows underage users to bypass verification

  bugcompliancefrontend
  Ethereal-Future/FuTuRe#1609 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/StreamPayment.jsx: Hardcodes XLM asset and stores plaintext secretKey in localStorage

  frontendsecuritystellar
  Ethereal-Future/FuTuRe#1608 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/AccountMerge.jsx: Progress indicator claims Step X/4 across 5 steps and transmits secretKey

  frontendsecurityux
  Ethereal-Future/FuTuRe#1607 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/AccountRecovery.jsx: Conditional useFocusTrap call violates React Rules of Hooks

  accessibilitybugfrontend
  Ethereal-Future/FuTuRe#1606 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/LanguageSelector.jsx: Forcibly resets document title to Dashboard on language switch

  frontendi18n
  Ethereal-Future/FuTuRe#1605 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/NotificationBell.jsx: Non-interactive <div> has click handler without button role or tabIndex

  accessibilityfrontend
  Ethereal-Future/FuTuRe#1604 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/AccountSettings.jsx: Unsafe atob on JWT payload and unlocalized settings UI strings

  bugfrontendi18n
  Ethereal-Future/FuTuRe#1603 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/ImportAccountForm.jsx: Public key validation regex lacks StrKey CRC16 checksum check

  frontendsecuritystellar
  Ethereal-Future/FuTuRe#1602 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/AssetBalanceWithTrustline.jsx: Submits empty sourceSecret string on limit change

  bugfrontendstellar
  Ethereal-Future/FuTuRe#1601 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/XLMInfoIcon.jsx: Double keyboard handlers cause tooltip toggle flicker on Space and Enter

  accessibilityfrontend
  Ethereal-Future/FuTuRe#1600 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/CopyButton.jsx: Toast notification lacks role="status" and aria-live polite announcement

  accessibilityfrontend
  Ethereal-Future/FuTuRe#1599 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/SlideOver.jsx: Slide animation breaks in RTL layouts and triggerRef overwritten during render

  accessibilityfrontendi18n
  Ethereal-Future/FuTuRe#1598 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/FeeHistoryChart.jsx: Lacks accessible data table alternative and hardcodes en-US locale

  accessibilityfrontendi18n
  Ethereal-Future/FuTuRe#1597 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/components/FeeDisplay.jsx: Adds non-native asset amount to XLM transaction fee and labels sum as XLM

  bugfrontendstellar
  Ethereal-Future/FuTuRe#1596 · Filter by author Mystery-CLI opened on Oct 14, 2026

• frontend/src/utils/xdrExport.js: Stellar Laboratory URL uses invalid query parameter instead of hash fragment

  frontendstellar
  Ethereal-Future/FuTuRe#1595 · Filter by author Mystery-CLI opened on Oct 14, 2026