Issues

• Windows: a store for service "MyApp" enumerates, loads and deletes the credentials of service "MyApp:Dev", because target names are joined with ':' unescaped

  bug
  ktsu-dev/CredentialCache#176 · Filter by author matt-edmondson opened on Sep 29, 2026
  1

• Windows rejects a 2400-char base64 token as over the 2560-byte limit: JSON escaping writes every '+' and non-ASCII char as \uXXXX (6 bytes)

  bug
  ktsu-dev/CredentialCache#175 · Filter by author matt-edmondson opened on Sep 29, 2026
  1

• TryGet on Windows and macOS frees the OS-returned plaintext buffer without zeroing it, so every load leaves a copy of the secret in freed heap

  bug
  ktsu-dev/CredentialCache#173 · Filter by author matt-edmondson opened on Sep 29, 2026
  1

• Saving a consumer-defined Credential subclass throws raw NotSupportedException on every platform store, but succeeds on InMemoryCredentialStore

  ktsu-dev/CredentialCache#171 · Filter by author matt-edmondson opened on Sep 28, 2026
  1

• Linux store throws TypeInitializationException (not DllNotFoundException) on every call when libsecret is missing, so consumers can't detect it and fall back

  ready
  ktsu-dev/CredentialCache#168 · Filter by author matt-edmondson opened on Sep 27, 2026
  1

• macOS Save and Remove decrypt the existing secret into process memory without using it, and free it unscrubbed

  ready
  ktsu-dev/CredentialCache#166 · Filter by author matt-edmondson opened on Sep 26, 2026
  1

• Windows Save leaves the serialized plaintext credential unscrubbed when it exceeds the 2560-byte blob limit

  ready
  ktsu-dev/CredentialCache#165 · Filter by author matt-edmondson opened on Sep 26, 2026
  1