Skip to content

pullrequests Search Results · language:Edge language:Python language:JavaScript language:JavaScript language:HTML language:Java

Filter by

211M results  (2 s)

211M results

Security fix — High (from the 2026-06-27 audit) IDOR / Broken Object-Level Authorization (CWE-639, OWASP API1:2023). GoalService.create and update resolved the caller-supplied accountIds with the inherited, ...

See Commits and Changes for more details. Created by img src= https://prod.download/pull-18h-svg valign= bottom / pull[bot] (v2.0.0-alpha.4) Can you help keep this open source service alive? 💖 Please ...
⤵️ pull

See Commits and Changes for more details. Created by img src= https://prod.download/pull-18h-svg valign= bottom / pull[bot] (v2.0.0-alpha.4) Can you help keep this open source service alive? 💖 Please ...
⤵️ pull

Summary registerUser() now generates the user id once and reuses it for both the response id and the JWT sub claim, preventing misalignment when Date.now() changes between calls. Changes - apps/api/src/services/authService.js: ...

Merge pull request #1 from moneybonde-bit/claude/heritage-wedding-tem…

See Commits and Changes for more details. Created by img src= https://prod.download/pull-18h-svg valign= bottom / pull[bot] (v2.0.0-alpha.4) Can you help keep this open source service alive? 💖 Please ...
⤵️ pull

Backport of PR #8546
3. to review

Summary Upload route now enforces a 10 MB file size limit via Multer. Oversized uploads return HTTP 413 instead of falling through to the generic 500 handler. Changes - apps/api/src/routes/uploadRoutes.js: ...