Skip to content

issues Search Results · language:Edge language:Python language:PHP linked:pr language:JavaScript language:JavaScript

Filter by

4.8M results  (324 ms)

4.8M results

PurHur/php-compiler
Stdlib: is_numeric() on enum case operands — must return false, not unsupported-type fatal (ext/standard/type.c)

Category stdlib · php-src-strict Problem is_numeric() accepts any type and returns bool. For enum case objects (backed or pure), php-src returns false. This compiler aborts with: is_numeric() does ...
area:vm
enhancement
implementation-ready
phase-4:stdlib
  • PurHur
  • 2
  • Opened 
    51 minutes ago
  • #7008

PurHur/php-compiler
Language: instance method first-class callable ($obj->m(...)) — compile crash Type::array() (zend_compile.c)

Category language · php-src-strict Problem PHP 8.1+ first-class callable syntax on an ordinary instance method ($f = $obj- m(...)) must compile to a bound closure. php-src prints 1; this compiler dies ...
area:compiler
area:vm
enhancement
implementation-ready
phase-2:language
  • PurHur
  • 2
  • Opened 
    51 minutes ago
  • #7007

PurHur/php-compiler
Regression: backed enum <=> from()/tryFrom() — returns 1 not 0 for equal singletons (zend_enum.c)

Category language · php-src-strict Problem For backed enums, the spaceship operator must treat a case and the singleton returned by from() / tryFrom() with the same backing value as equal (0). php-src ...
area:vm
enhancement
implementation-ready
phase-2:language
  • PurHur
  • 2
  • Opened 
    51 minutes ago
  • #7006

web1701/toasted-stogie
[security] M4: No brute-force / rate-limiting on login

Severity: Medium · CWE-307 · From security review report. Where app/routers/auth_routes.py:99-110 (/login) — no throttling/lockout/backoff. scrypt cost helps but attempts are unbounded. Impact Online ...
security
severity:medium
  • web1701
  • Opened 
    51 minutes ago
  • #38

web1701/toasted-stogie
[security] M3: No security headers / Content-Security-Policy

Severity: Medium · CWE-693 / CWE-1021 · From security review report. Where app/main.py installs only SessionMiddleware — no CSP, X-Content-Type-Options, X-Frame-Options/frame-ancestors, or Referrer-Policy. ...
security
severity:medium
  • web1701
  • Opened 
    51 minutes ago
  • #37

web1701/toasted-stogie
[security] M2: Session cookie not marked Secure (hardcoded https_only=False)

Severity: Medium · CWE-614 · From security review report. Where app/main.py:39-44 — SessionMiddleware(..., https_only=False) is hardcoded. Impact The auth cookie may be sent over plaintext HTTP and ...
security
severity:medium
  • web1701
  • Opened 
    51 minutes ago
  • #36

web1701/toasted-stogie
[security] H1: Cross-user stored XSS via global flavor vocabulary

Severity: High · CWE-79 · From security review security_report/sec_review_toasted-stogie_2026-06-06_11-59-24.md Where - Sink: static/js/app.js smokeCommonFields() (~lines 95-99, 111-112) builds innerHTML ...
security
severity:high
  • web1701
  • Opened 
    51 minutes ago
  • #35

nesquena/hermes-webui
bug(models): picked model reverts to previous/default model on send (likely #3448 profile-aware resolution, v0.51.290)

bug(models): picked model reverts to the previous/default model on send (likely #3448 profile-aware resolution, v0.51.290) Summary A user changes the model in the composer picker, sends a message, and ...
bug
sprint-candidate
  • nesquena-hermes
  • Opened 
    52 minutes ago
  • #3737

enmaku/portfolio-site
Bidding sacrifice mode: tile-based selection with confirmation

Problem Statement During bidding, after the human draws a monster, they must either Add to dungeon or sacrifice equipment to discard the drawn card instead. Today the human chooses sacrifice via a dropdown ...
  • enmaku
  • Opened 
    52 minutes ago
  • #243

SandeepVashishtha/Eventra
chore: remove orphaned EventAnalyticsDashboard.css

Description While investigating this issue, I found that EventAnalyticsDashboard.jsx was already fully migrated to Tailwind CSS — it uses utility classes like bg-white dark:bg-slate-900, rounded-3xl, ...
  • aishwary-vansh
  • 1
  • Opened 
    53 minutes ago
  • #7636
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! Restrict your search to the title by using the in:title qualifier.
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! Restrict your search to the title by using the in:title qualifier.