issues Search Results · language:Dune language:JavaScript language:JavaScript language:C# language:JavaScript
Filter by
25.1M results
File: FRONTEND/src/pages/ProductPage.jsx (lines 21, 396-416)
Severity: MEDIUM
Problem: If a user sets quantity to 5 for product A, then navigates to product B with stock 3, the quantity state stays
at ...
bug
frontend
HTTP Basic Auth (A1) protects the edge, but the backend trusts any request that passes it, and a proxy/network
compromise would bypass it. Basic Auth was chosen as a deliberate stopgap.
Action / options: ...
enhancement
security
File: BACKEND/controllers/product.controller.js (lines 378-379)
Severity: HIGH
Problem: Product.find({ name: regex }) has no isDeleted filter. Soft-deleted products appear in search results.
Fix: Add ...
backend
bug
Enrollment uses curl -fsSL http:// host :7420/api/enroll.sh | sudo sh. Over plain HTTP, a LAN MITM could replace the
script body and run arbitrary code as root on the Mac during enrollment (original threat-model ...
enhancement
security
File: BACKEND/controllers/product.controller.js (lines 11-21)
Severity: MEDIUM
Problem: The uploadToCloudinary function creates a stream but never attaches an error handler. If the stream emits an
error ...
backend
bug
File: FRONTEND/src/store/product.js (lines 126, 166)
Severity: MEDIUM
Problem: deleteProduct and updateProduct call res.json() without checking res.ok first. If the server returns a non-JSON
error response ...
backend
bug
frontend
File: BACKEND/controllers/review.controller.js (lines 5-12)
Severity: MEDIUM
Problem: recalcProductRating reads all reviews, computes the average, then writes to the product. If two reviews are
submitted ...
backend
bug
File: BACKEND/controllers/checkout.controller.js (lines 120-128)
Severity: MEDIUM
Problem: The webhook re-fetches product.price from the database when creating order items. If the price changed between ...
backend
bug
varsayılan ayarlarda da denedim, çeşitli ayarları değiştirerek te. discord uygulamasına da sitesine de giremedim. test
için wattpad, bigo tv gibi çeşitli yasaklı sitelere de girmeyi denedim ancak işe yaramadı. ...
File: BACKEND/controllers/product.controller.js (line 378)
Severity: HIGH
Problem: new RegExp(query, i ) passes raw user input directly to the RegExp constructor. A malicious query like (.) can
cause ...
backend
bug
security

Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.