issues Search Results · language:Edge language:Python language:JavaScript language:JavaScript linked:pr language:JavaScript
Filter by
4.5M results
Parent bounty: #743
Bug
The global error handler in apps/api/src/middleware/errorHandler.js does not recognize Zod ZodError instances and
returns 500 for all validation failures:
return res.status(500).json({ ...
Parent bounty: #743
Bug
POST /api/uploads in apps/api/src/routes/uploadRoutes.js has no authentication middleware, so unauthenticated users can
upload files:
uploadRoutes.post( / , upload.single( file ...
Tracked through the AgentOS issue/branch lifecycle policy.
- Kind: task
- Phase: 2
- Task ID: P2-92
- Planned branch: codex/p2-92-add-docker-attestation-status-product-surface
Parent bounty: #743
Bug
POST /api/notifications in apps/api/src/routes/notificationRoutes.js has no authentication middleware, so
unauthenticated users can create notifications:
notificationRoutes.post( ...
Parent bounty: #743
Bug
POST /api/messages in apps/api/src/routes/messageRoutes.js has no authentication middleware, so unauthenticated users
can send messages:
messageRoutes.post( / , postMessage); ...
Parent bounty: #743
Bug
POST /api/reviews in apps/api/src/routes/reviewRoutes.js has no authentication middleware, so unauthenticated users can
submit reviews:
reviewRoutes.post( / , postReview);
Expected ...
Parent bounty: #743
Bug
POST /api/proposals in apps/api/src/routes/proposalRoutes.js has no authentication middleware, so unauthenticated users
can create proposals:
proposalRoutes.post( / , postProposal); ...
Parent bounty: #743
Bug
sendMessage() in apps/api/src/services/messageService.js spreads caller payload with server fields mixed in:
const message = { id: `msg_${Date.now()}`, ...payload, sentAt: new ...
Parent bounty: #743
Bug
createReview() in apps/api/src/services/reviewService.js spreads caller payload after the server-generated id, allowing
callers to override the server-assigned id field.
Expected ...

Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.