tuanaiseo 1f3d3a8f7f fix(security)(app): unauthenticated server shutdown endpoint enables d (#519) ...

The shutdown API calls `process.exit(0)` on POST without any authentication or authorization checks. Any party that can reach this endpoint can terminate the server process, causing immediate service disruption.

Affected files: route.js

Signed-off-by: tuanaiseo <221258316+tuanaiseo@users.noreply.github.com>

2026-04-08 15:39:09 +07:00

..

route.js

fix(security)(app): unauthenticated server shutdown endpoint enables d (#519)

2026-04-08 15:39:09 +07:00