issues Search Results · language:Dune language:Python language:JavaScript language:PHP language:Java language:Python
Filter by
60.1M results
Summary
.github/workflows/claude.yml (the @claude responder) can be triggered by any GitHub user on this public repo, with no
actor or association guard, and runs an AI agent with no tool restriction ...
code-review-2026-05
repo-hygiene
security
jamditis
Summary
The server-side SSRF guard (backend/src/rosen_scraper/url_safety.py) is well-built — http/https only, blocks
loopback/private/link-local/metadata ranges, requires all resolved IPs to be public, ...
backend
code-review-2026-05
security
Goal
Let dense shade reduce lateral bud investment before laterals are committed, instead of only killing them afterward.
Real crowns hollow out partly by not investing in shaded zones; ours only prunes ...
enhancement
julien-riel
Summary
The entity CSV writer writes attacker-influenceable text fields (name, description) without neutralizing spreadsheet
formula triggers. A scraped page that yields an entity like =HYPERLINK( http://evil ...
backend
code-review-2026-05
security
Summary
A few structured record.url / node.url / post.url values are rendered straight into an anchor href with no scheme
allowlist. If a javascript: (or otherwise deceptive) URL ever lands in the generated ...
code-review-2026-05
frontend
security
Recommended Concept
Kiln Shelf Commons is a home ceramics supply store focused on the unglamorous but essential objects that help serious
hobby potters and small studio makers fire, store, dry, and move ...
commerce:woocommerce
industry:home-craft
site-kind:commerce
status:built
status:design-ready
homeboy-ci[bot]
Recommended Concept
Hearthline Board Café is a neighborhood board game café in a converted corner storefront that gives adults, teens,
families, and first-date pairs a warm place to play without needing ...
commerce:none
industry:local-business
site-kind:content
status:built
status:design-ready
Hi there! IDK if maybe someone told u this issue before but when u have the Fresh Animations: Player Extension
resourcepack (one of the most downloaded player animations resourcepacks) the player doesnt ...
Kart0
CI Failure
- Workflow: PR Checks
- Commit: 7b5424ec2191d03d3a20bcd86803dceae41cf6a9
- PR: #337
- Run: https://github.com/jclee941/.github/actions/runs/26727752585
Action Required
Inspect the ...
automated
ci-failure
github-actions[bot]
Now that there are published images for OpenARC, The documentation and sample compose should be updated. There s no need
for new users to build docker images any more, the docs and yml should just reference ...
telnetdoogie
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.