issues Search Results · language:Dune language:Python language:Python language:Java language:CSS language:JavaScript
Filter by
56.6M results
Severity: medium | Category: security | Area: security-config Location: src/FamilySetup.jsx:28
Problem
generateCode() picks 4 chars from a 30-char alphabet → only ~810,000 possible codes (30^4). joinFamily() ...
audit
security
severity:medium
Severity: medium | Category: bug | Area: ui-monolith Location: src/LunaSleep.jsx:4330
Problem
addManual (4330–4351) only checks form.start is set; saveEdit (4369–4409) only checks editForm.start. Neither ...
audit
severity:medium
Severity: medium | Category: bug | Area: ui-monolith Location: src/LunaSleep.jsx:4146
Problem
The top-level LunaSleep component computes today (line 4146), now (4147), and from them wakeMin, wakePct, ...
audit
severity:medium
Severity: medium | Category: reliability | Area: data-sync Location: src/useFirestore.js:1214
Problem
deleteMilestone removes the local copy, then deletes all Storage objects (lines 1208-1224), then ...
audit
severity:medium
Severity: medium | Category: bug | Area: data-sync Location: src/useFirestore.js:1355
Problem
stopRemoteSession builds a brand-new entry with a random id (e-${Date.now()}-${rand}, line 1358) and then ...
audit
severity:medium
Severity: medium | Category: bug | Area: data-sync Location: src/useFirestore.js:121
Problem
ensureFamily races createFamily against a 4s setTimeout (lines 121-127) and then unconditionally setFamilyCode(code). ...
audit
severity:medium
Severity: medium | Category: reliability | Area: data-sync Location: src/useFirestore.js:296
Problem
Firestore batches are capped at 500 operations. addEntries (296), clearEntries (333), the first-snapshot ...
audit
severity:medium
Severity: medium | Category: bug | Area: data-sync Location: src/useFirestore.js:247
Problem
addEntry (line 265) writes localStorage first, then tries Firestore; on failure the error is swallowed (line ...
audit
severity:medium
Severity: medium | Category: bug | Area: cloud-functions Location: functions/index.js:664
Problem
contextPayload.today is new Date().toISOString() (UTC). For an Eastern-time family, any question asked ...
audit
severity:medium
Severity: medium | Category: security | Area: cloud-functions Location: functions/index.js:616
Problem
Auth gate is only if (!req.auth), and the project uses Anonymous Auth — anyone can mint a valid ...
audit
security
severity:medium

Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.