issues Search Results · language:Dune language:HTML language:JavaScript language:HTML language:HTML language:JavaScript

Filter by

• • Code... (...)results
  • Repositories
    results
  • Issues
    results
  • Pull requests
    results
  • Discussions
    results
  • Users
    results
  • More

• State

  • Open
  • Closed

• Advanced

  • Owner
  • State
  • Close reason
  • Has linked pull request
  • Author
  • Assignee
  • Mentioned user
  • Mentioned team
  • Commenter
  • Involved user
  • Label
  • Milestone
  • Number of comments
  • Number of interactions
• Advanced search

Filter:Issues25.4M (25.4M)

25.4M results  (775 ms)

25.4M results

Sort by: Best match

Filter

SecureBananaLabs/bug-bounty

Notification creation should preserve generated id and unread state

Parent bounty: #743 Bug createNotification(payload) creates notifications as { id: generated, read: false, ...payload }, so caller-supplied id and read fields can override server-owned notification metadata. ...

• wangedmund77-cmyk
·
• Opened 
  4 minutes ago
·
• #7220

SecureBananaLabs/bug-bounty

Message creation should preserve server-generated ids

Parent bounty: #743 Bug sendMessage(payload) creates messages as { id: generated, ...payload, sentAt: generated }, so a caller-supplied id can override the server-generated msg_* identifier. Expected ...

• wangedmund77-cmyk
·
• Opened 
  4 minutes ago
·
• #7219

kapseliboi/SCEditor

CVE-2026-53550 (Medium) detected in js-yaml-3.14.1.tgz, js-yaml-4.1.0.tgz

CVE-2026-53550 - Medium Severity Vulnerability details summary img src= https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png width=19 height=20 Vulnerable Libraries - b js-yaml-3.14.1.tgz ...

Mend: dependency security vulnerability

• mend-bolt-for-github[bot]
·
• Opened 
  4 minutes ago
·
• #117

SecureBananaLabs/bug-bounty

Payment creation should reject non-positive amounts

Parent bounty: #743 Bug POST /api/payments forwards the request body directly into createPaymentIntent() without validating amount. The API currently accepts zero, negative, missing, or non-numeric values ...

• wangedmund77-cmyk
·
• Opened 
  4 minutes ago
·
• #7218

kapseliboi/bui

CVE-2026-49356 (Low) detected in core-7.14.3.tgz

CVE-2026-49356 - Low Severity Vulnerability details summary img src= https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png width=19 height=20 Vulnerable Library - b core-7.14.3.tgz ...

Mend: dependency security vulnerability

• mend-bolt-for-github[bot]
·
• Opened 
  4 minutes ago
·
• #138

SecureBananaLabs/bug-bounty

Registration token subject should reuse the returned user id

Parent bounty: #743 Bug registerUser() currently generates the returned id and the access-token sub with separate Date.now() calls. If the clock ticks between those calls, the registration response can ...

• wangedmund77-cmyk
·
• Opened 
  4 minutes ago
·
• #7217

SecureBananaLabs/bug-bounty

Public registration should reject admin role assignment

Parent bounty: #743 Bug POST /api/auth/register accepts role: admin because the public registration schema includes admin in the allowed role enum. That lets an unauthenticated caller self-register ...

• wangedmund77-cmyk
·
• Opened 
  4 minutes ago
·
• #7216

kapseliboi/coronavirus-dashboard

CVE-2026-49356 (Low) detected in core-7.9.0.tgz

CVE-2026-49356 - Low Severity Vulnerability details summary img src= https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png width=19 height=20 Vulnerable Library - b core-7.9.0.tgz ...

Mend: dependency security vulnerability

• mend-bolt-for-github[bot]
·
• Opened 
  4 minutes ago
·
• #221

kapseliboi/watch-rtp-play

CVE-2026-49356 (Low) detected in core-7.15.8.tgz

CVE-2026-49356 - Low Severity Vulnerability details summary img src= https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png width=19 height=20 Vulnerable Library - b core-7.15.8.tgz ...

Mend: dependency security vulnerability

• mend-bolt-for-github[bot]
·
• Opened 
  4 minutes ago
·
• #177

amazonlinux/amazon-linux-2023

[Bug] - 2023.12.20260608 Missing PQ Crypto Algorithms

According to the release notes: crypto-policies now supports enabling post-quantum cryptography in LEGACY, DEFAULT, FUTURE, and FIPS cryptographic policies. Apply the PQ sub-policy to enable post-quantum ...

• EvilJordan
·
• Opened 
  4 minutes ago
·
• #1107

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues

ProTip! Restrict your search to the title by using the in:title qualifier.

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues

ProTip! Restrict your search to the title by using the in:title qualifier.