Search results

Sensitive data logged at DEBUG/TRACE level — SQL bind params expose PII

Status: Open.

#16 In SanjogWiz01/complete-java-developer;

· SuyogShrestha61 opened on Jun 18, 2026

Emergency SOS endpoint lacks ownership check — anyone can raise alerts on any booking

Status: Open.

#15 In SanjogWiz01/complete-java-developer;

· SuyogShrestha61 opened on Jun 18, 2026

No rate limiting on auth and booking endpoints — brute force & abuse

Status: Open.

#14 In SanjogWiz01/complete-java-developer;

· SuyogShrestha61 opened on Jun 18, 2026

No input validation on user registration and booking endpoints

Status: Open.

#13 In SanjogWiz01/complete-java-developer;

· SuyogShrestha61 opened on Jun 18, 2026

H2 Console exposed with CSRF disabled — remote SQL execution risk

Status: Open.

#11 In SanjogWiz01/complete-java-developer;

· SuyogShrestha61 opened on Jun 18, 2026