Issues

• Feature Proposal: Add Structured Battle Analysis Study Guides Based on Military Academy Frameworks

  unicodeveloper/globalthreatmap#48 · Filter by author zhub9006 opened on Jun 8, 2026

• isSelfHostedMode() fails open by default — all auth bypassed and paid API calls exposed on every fresh deploy

  unicodeveloper/globalthreatmap#47 · Filter by author tg12 opened on May 17, 2026

• Inorganic fork-inflation pattern: 273 forks, 273/273 issues-disabled, burst of 38 on day 5

  unicodeveloper/globalthreatmap#46 · Filter by author tg12 opened on May 17, 2026

• Suggestion: Add IRWatch.org as a complementary Iran/Middle East conflict intelligence resource

  unicodeveloper/globalthreatmap#45 · Filter by author IRWatch opened on Apr 18, 2026

• Related Project: IRWatch.org — Live Iran Conflict OSINT Dashboard

  unicodeveloper/globalthreatmap#44 · Filter by author IRWatch opened on Apr 16, 2026

• /!\ Access token exposed on demo on railway

  unicodeveloper/globalthreatmap#43 · Filter by author Hag-Zilla opened on Apr 2, 2026

• Docker image runs as root; no non-root user defined

  unicodeveloper/globalthreatmap#42 · Filter by author Hag-Zilla opened on Apr 2, 2026

• No TLS enforcement, no Strict-Transport-Security header

  unicodeveloper/globalthreatmap#41 · Filter by author Hag-Zilla opened on Apr 2, 2026

• In-memory singleton Valyu client shares a single API key across all requests

  unicodeveloper/globalthreatmap#40 · Filter by author Hag-Zilla opened on Apr 2, 2026

• IDOR on deep-research task results — no ownership check

  unicodeveloper/globalthreatmap#39 · Filter by author Hag-Zilla opened on Apr 2, 2026

• No input validation on user-supplied query parameters before forwarding to Valyu/OpenAI

  unicodeveloper/globalthreatmap#38 · Filter by author Hag-Zilla opened on Apr 2, 2026

• No rate-limiting, no CORS policy, no CSP headers

  unicodeveloper/globalthreatmap#37 · Filter by author Hag-Zilla opened on Apr 2, 2026

• Detailed third-party error responses forwarded to the client

  unicodeveloper/globalthreatmap#36 · Filter by author Hag-Zilla opened on Apr 2, 2026

• VALYU_CLIENT_SECRET used with non-null assertion — crash when absent

  unicodeveloper/globalthreatmap#35 · Filter by author Hag-Zilla opened on Apr 2, 2026

• Open proxy relay in valyu-proxy — no path allow-list

  unicodeveloper/globalthreatmap#34 · Filter by author Hag-Zilla opened on Apr 2, 2026

• Bearer access token transmitted in URL query string (logged by every proxy/CDN)

  unicodeveloper/globalthreatmap#33 · Filter by author Hag-Zilla opened on Apr 2, 2026

• NEXT_PUBLIC_MAPBOX_TOKEN` baked into the Docker image at build time

  unicodeveloper/globalthreatmap#32 · Filter by author Hag-Zilla opened on Apr 2, 2026

• Incorrect installation commands in README

  unicodeveloper/globalthreatmap#31 · Filter by author Hag-Zilla opened on Apr 2, 2026

• How about translating this project in French ?

  unicodeveloper/globalthreatmap#26 · Filter by author Antoine-K-68 opened on Feb 13, 2026

• Docker Support for Self-Hosting

  unicodeveloper/globalthreatmap#23 · Filter by author raphaelbahat opened on Feb 8, 2026
  1

• NOTAM

  unicodeveloper/globalthreatmap#13 · Filter by author akamai212 opened on Jan 24, 2026