issues Search Results · language:Dune language:TypeScript language:PHP language:JavaScript language:JavaScript linked:pr
Filter by
5.6M results
Bug
POST /api/auth/refresh currently mints a new access token without verifying any existing bearer token or requester
identity. Any caller can hit the refresh route and receive a valid token for the ...
Description
On macOS CI runners, @vscode/test-cli places the VS Code IPC socket inside the extension s .vscode-test/user-data/
directory. A recent VS Code build changed the socket filename format to include ...
Bug
Team-filed (internal)
User-filed
This was generated by AI during triage.
Agent Brief
Category: bug Summary: Signing out clears React state but leaves the JWT in localStorage, so a page refresh silently
logs the user back in.
Current ...
agent-done
bug
What s happening
Since the Get a Primary School Textbook Grant v1.2.0 publish (2026-06-04 ~18:07 UTC), the
get-a-primary-school-textbook-grant smoke fails on every Deploy Sandbox run — first seen on run ...
area:frontend
bug
subsystem:ci
subsystem:forms
This was generated by AI during triage.
Found while tracing #3. The in-memory persona search applies the minPrice filter with the comparison inverted, so it
excludes personas above the minimum instead ...
agent-done
bug
Problem
The Python SDK exposes only a generic list_variables_by_resource_type(resource_id, resource_type) method for listing
variables. To list variables for an environment, callers must write:
client.variables.list_variables_by_resource_type(env_id, ...
status: needs triage
img width= 736 height= 1600 alt= Image src=
https://github.com/user-attachments/assets/91ec43d7-eb2c-4fc1-8638-77f905541f29 /
This was generated by AI during triage.
Typing in the browse page search field updates the URL ?q= param but the persona grid never changes.
Repro (confirmed by code trace):
1. Open the browse page ...
bug
概要
ユーザー一覧・取引先一覧テーブルの「削除」アクションが、枠線付きの ghost ボタンになっている。指示書 design 04 では削除は 枠線なしの赤文字リンク(button class= btn-link style=
color:var(--danger) 削除 /button)で、隣の「編集」リンク(緑のテキストリンク)と揃った見た目。
現状は編集=テキストリンク(緑)/削除=枠線付きボタン、と不揃い。 ...
Description
Severity: CRITICAL
The WebSocket connection handler in backend/src/lib/socket.js blindly trusts the userId sent in the connection query
string with zero authentication. There is no JWT verification ...

Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.