issues Search Results · language:Dune language:JavaScript language:Java linked:pr language:Java language:HTML language:HTML
Filter by
3.7M results
vidurgupta01Update the github documentation page
approved
manishdait
Parent bounty: #743
Bug
POST /api/payments in apps/api/src/routes/paymentRoutes.js has no authentication middleware, so any unauthenticated user
can create payment records:
paymentRoutes.post( / , createPayment); ...
XananasX7
Parent bounty: #743
Bug
createNotification() in apps/api/src/services/notificationService.js spreads the caller payload after the
server-assigned fields:
export async function createNotification(payload) ...
Parent bounty: #743
Bug
createJob() in apps/api/src/services/jobService.js spreads the caller payload after setting the initial status:
export async function createJob(payload) {
const job = { id: ...
Parent bounty: #743
Bug
createUser() in apps/api/src/services/userService.js spreads the entire caller-supplied payload after the
server-generated id:
export async function createUser(payload) {
const ...
Parent bounty: #743
Bug
POST /api/users in apps/api/src/controllers/userController.js passes req.body directly to createUser() with no input
validation whatsoever:
export async function postUser(req, ...
Parent bounty: #743
Bug
registerSchema in apps/api/src/validators/auth.js does not require a fullName field, but the Prisma User model has
fullName String as a non-nullable, required field. Registrations ...
Parent bounty: #743
Bug
registerSchema in apps/api/src/validators/auth.js allows role: admin during registration:
export const registerSchema = z.object({
email: z.string().email(),
password: z.string().min(8), ...
Parent bounty: #743
Bug
refreshToken() in apps/api/src/services/authService.js ignores its input entirely and issues a fresh access token to any
caller without validating any credential:
export async ...
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.