issues Search Results · language:Dune language:JavaScript language:JavaScript linked:pr language:JavaScript
Filter by
1.8M results
The /sitemap.xml endpoint is caught by the Express catch-all * route and returns index.html instead of raw XML. Fix: add
a dedicated route with Content-Type: text/xml before the catch-all.
##Labels: bug, ui/ux, code-editor, SSoC26, good-first-issue
##Description: The code editor in the playground doesn t respect the application s dark/light theme setting. Users see a
light editor in dark ...
bug
Medium
SSoC26
##Labels: bug, quiz, mobile, SSoC26, good-first-issue
##Description: When taking a quiz on mobile devices, the progress bar doesn t update immediately after answering
questions. Users can t track their ...
bug
Medium
SSoC26
ui/ux
Surfaced by codex review on #1760 Phase 1 (per-scene i2v).
Gap: the Music Video board s scene spinners are cleared only by the gen-specific socket events (image-gen:* for the
reference-frame lane, video-gen:* ...
plan
Description
The AnalysisCache class used by the analyze endpoint has no concurrency protection around cache reads and writes. When
two identical analysis requests arrive simultaneously, both miss the ...
bug
Description
The repoName extracted from user-supplied GitHub URLs is used directly in filesystem paths for cloning and file reading
without sufficient sanitization. A malicious repository can exploit ...
bug
Description
The secrets scanner in backend/utils/secretsScanner.js defines 15 regex patterns, at least 5 of which contain nested
quantifiers and ambiguous character classes that are vulnerable to catastrophic ...
bug
###Labels: enhancement, ux, SSoC26, good-first-issue
###Description: When the practice problems page loads, there s a brief moment where the page appears empty before
content appears. This creates a jarring ...
Medium
SSoC26
Description
The RAG ingestion route implements a delete-then-reinsert pattern without any mutual exclusion. When two concurrent
analysis requests arrive for the same repo_url, their delete and insert ...
bug
Description
The AI Engine s API key initialization at ai-engine/app.py:272 uses a dangerous fallback chain that causes two severe
problems: (1) the GROQ_API_KEY is reused as the inter-service auth token, ...
bug

Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.