issues Search Results · language:Dune language:Python language:JavaScript language:JavaScript linked:pr language:HTML
Filter by
4.8M results
Parent bounty: #743
Description
The payment controller passes the raw request body directly to the payment service, so malformed or missing payment
fields are accepted before any schema validation.
...
minorstep
Parent bounty: #743
Description
The public registration schema allows the admin role. This lets an arbitrary registrant request administrator privileges
from the client-controlled request body.
Affected ...
Parent bounty: #743
Description
The API configuration falls back to development-secret when JWT_SECRET is not set. If this fallback reaches production,
anyone who knows the default can forge valid JWTs. ...
I have checked the following:
- [x] I ve searched existing issues and found nothing related to my issue.
This feature
- [ ] blocks me from using Bruno
- [x] would improve my quality of life in ...
enhancement
jessejamesblack
Parent Algora bounty: #743
Problem
registerUser() currently generates the response id and the JWT sub with separate Date.now() calls:
id: `usr_${Date.now()}`,
token: signAccessToken({ sub: `usr_${Date.now()}`, ...
taherdhanera
bug
amaster1029-rgb
Someone reported anonymously:
Website URL
https://www.biznis-akademija.com
What browser are u using?
Firefox 151.0
Version
1.1.9
Issue type
General
Notes
Cookies keep showing
Anonymous request
V1.1.9
Website request
OhMyGuus-Bot
Generated Conductor integration blocks disagree on the review command. AGENTS.md/GEMINI.md use the canonical semantic
form:\n\n conductor ask --kind review --base ref --brief-file /tmp/review.md\n\nBut ...
henrymodisett
Bug
POST /api/payments allows unauthenticated callers to create payment intents.
Impact
Payment creation is a sensitive write operation. Without authentication, anonymous callers can hit the payment ...
amantidesigns
Add a mechanic where Mozart collects scattered musical notes that form actual Mozart melodies. Completing a phrase plays
it back and rewards the player.
Mechanic design:
- Floating note collectibles ...
enhancement
maurodoglio
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.