Skip to content

issues Search Results · language:Dune language:HTML language:JavaScript language:JavaScript language:Java language:Python

Filter by

61.6M results  (960 ms)

61.6M results

yzx-66/accout_mange
[Vulnerability] 存在可能导致越权风险的硬编码JWT Secret

描述： 本项目是一个开源项目，任何用户都能获取到该项目中的硬编码的JWT Secret。同时，使用JWT Secret默认值启动项目时并没有任何警告提示，所以大多数用户可能不会修改此JWT Secret默认值，这可能导致攻击者伪造任意用户的权限令牌，从而绕过认证与授权机制，访问受保护接口。 影响: - 攻击者可伪造任意用户的 JWT - 可冒充管理员或高权限账号访问敏感接口 - 用户身份认证机制失效 ...
  • lx915
  • Opened 
    34 minutes ago
  • #6

FabianHen/Dungeon-Breaker
pressurePlate

Kurzbeschreibung Die Methode pressurePlate(Point position, float massTrigger, ICommand command) erzeugt ein Druckplatten-Entity. Die Druckplatte: - besitzt eine Position - besitzt eine grafische ...
  • LisaWckn
  • Opened 
    34 minutes ago
  • #76

bioedca/Yeliztli
Sleep docs still advertise removed PER3 chronotype proxy

Summary: docs/modules/wellness/sleep.md still advertises a Chronotype circadian rhythm pathway using a PER3 VNTR proxy (rs57875989), but the refreshed sleep panel removed that pathway and marker after ...
bioinformatics
evidence-cited
medium-severity
needs-triage
scientific-validity
  • bioedca
  • Opened 
    34 minutes ago
  • #880

oimiragieo/agent-studio
[Branch Protection Audit] Missing required checks on main (2026-06-16)

Automated branch protection audit failed. Run: https://github.com/oimiragieo/agent-studio/actions/runs/27598382616 Checks config: .claude/config/required-status-checks.json Expected status checks: ...
branch-protection
ci
governance
  • github-actions[bot]
  • Opened 
    34 minutes ago
  • #366

fantastijem/Todoo
Change header title and image

  • fantastijem
  • Opened 
    34 minutes ago
  • #4

LoyDizak/Adguard-VPN-GUI-for-Linux
jkdk

  • taimaz15
  • Opened 
    35 minutes ago
  • #1

SteveGan/NeusoftCloudHospital
[Vulnerability] 存在可能导致越权风险的硬编码JWT Secret

描述： 本项目是一个开源项目，任何用户都能获取到该项目中的硬编码的JWT Secret。同时，使用JWT Secret默认值启动项目时并没有任何警告提示，所以大多数用户可能不会修改此JWT Secret默认值，这可能导致攻击者伪造任意用户的权限令牌，从而绕过认证与授权机制，访问受保护接口。 影响: - 攻击者可伪造任意用户的 JWT - 可冒充管理员或高权限账号访问敏感接口 - 用户身份认证机制失效 ...
  • lx915
  • Opened 
    35 minutes ago
  • #35

YDTNK/sre-lab
Set up Grafana alert to GitHub Issue flow

Objective Set up a future flow where Grafana alerts can create GitHub Issues for SRE Lab operations. Target flow Grafana alert ↓ Webhook or automation bridge ↓ GitHub Issue ↓ AI/Codex investigation ...
ops
  • YDTNK
  • 1
  • Opened 
    35 minutes ago
  • #17

ChronoAIProject/consensus-rnd
phase9-router: noop:no-dispatchable-markers despite complete solver triplet — round judge never dispatched, design-consensus stalls

Symptom phase9_router_daemon emits tick noop:no-dispatchable-markers on every tick for hours, even though a design-consensus round has a complete solver triplet ready for its judge. The round never advances; ...
  • ElonSG
  • Opened 
    35 minutes ago
  • #966

Tribal-Trouble/tribaltrouble
Pan camera relative to center of screen, not mouse placement

In legacy build panning camera (middle click or F) would invisibly lock your mouse to the center of the screen, so panning is relative to mouse movement only. In the latest builds the panning instead snaps ...
  • Jlambs
  • Opened 
    35 minutes ago
  • #196
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! Restrict your search to the title by using the in:title qualifier.
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! Restrict your search to the title by using the in:title qualifier.