pullrequests Search Results · language:Dune language:JavaScript language:JavaScript language:Python language:Java language:PHP
Filter by
43M results
Bug and impact
- Private/draft knowpost details could be served from the shared detail cache to anonymous or non-owner callers after
the owner populated the cache.
- Refresh JWTs could be used ...
Summary
- add public catalog readiness diagnostics for fabric main/texture upload files
- exclude published fabrics with missing or unreadable required upload files from public catalog and recommendations ...
Summary
- Adds archive-suppression logic to match-lessons.py: if an agent archives a lesson locally (moves it to an archive/
subdirectory), that copy registers its filename in seen_names so the ...
🚨 Severity: HIGH 💡 Vulnerability: Used hashlib.md5() and hashlib.sha1() without usedforsecurity=False in
non-cryptographic contexts. 🎯 Impact: Triggers Bandit security alerts (B324) and causes issues in ...
Two coherent increments on top of the merged product-expansion batch.
Go SDK parity
clients/go now exposes the new quant endpoints, completing 3-language SDK parity (TS + Python + Go):
- TA(ctx, indicator, ...
A fleet of bots hitting skribbl s /api/play simultaneously gets rate-limited; the uncaught top-level await bot.join()
then crashed the process, leaving containers in a Restarting (1) loop (non-deterministic ...
🚨 Severity: HIGH 💡 Vulnerability: Cross-Site Scripting (XSS) via document.write in PDF export features. 🎯 Impact: An
attacker could inject malicious scripts into client data (e.g., name, notes, collateral) ...
Modifications / 改动点
- 删除误提交到发布分支的 .claude/ 与 goal-1/ 本地 agent 规划产物。
- 在 .gitignore 中加入 .claude/ 与 goal-*/,避免后续再次误提交。
- [x] This is NOT a breaking change. / 这不是一个破坏性变更。
Screenshots or Test Results ...
вернул context path /api поменял местами доабавление новой и удаление старой реакции