Skip to content

issues Search Results · language:Dune language:Python linked:pr language:TypeScript language:JavaScript language:Python

Filter by

7.7M results  (356 ms)

7.7M results

SecureBananaLabs/bug-bounty
fix(auth): add auth middleware to user routes

Security: User Routes Have No Authentication Description: The /api/users routes have no authentication middleware applied. Any unauthenticated caller can list all users (GET /api/users) and create new ...
  • waddle36
  • Opened 
    49 seconds ago
  • #3884

SecureBananaLabs/bug-bounty
fix(auth): add admin role middleware to admin routes

Bug: Missing Admin Role Check on Admin Routes Description: The /api/admin routes only apply authMiddleware, which verifies the JWT is valid but does not check if the user has an admin role. Any authenticated ...
  • waddle36
  • Opened 
    52 seconds ago
  • #3881

SecureBananaLabs/bug-bounty
fix(auth): prevent admin role self-assignment during registration

Registration currently accepts role: admin through registerSchema, so a public caller can self-assign an administrator role during account creation. The register endpoint should only allow normal user ...
  • waddle36
  • Opened 
    53 seconds ago
  • #3880

SecureBananaLabs/bug-bounty
fix(security): restrict CORS to configured origin allowlist

Security: Unrestricted CORS Policy Description: The Express app uses cors() with no configuration, allowing requests from any origin. In a production freelance platform, this should be restricted to trusted ...
  • waddle36
  • Opened 
    54 seconds ago
  • #3879

fo0/clawstash
chore: backlog sweep (Next.js)

Stack Next.js Backlog-Quelle BACKLOG.md Umgesetzte Einträge | # | Eintrag | Kategorie | Aufwand | Empfehlung | Status | | --- | --- | --- | --- | --- | --- | | 67 | importAllData no row-shape validation ...
backlog
chore
tech-debt
  • fo0
  • Opened 
    3 minutes ago
  • #234

ohhalim/fine_tuning_art-tatum_midi_solo
Stage B MIDI-to-solo MVP input contract and run plan

Summary - MIDI 입력 - jazz solo MIDI 출력 MVP 범위 정의 - 입력 MIDI context, 출력 solo 후보, objective gate, fallback 조건 고정 - 6월 11일 완료 기준을 구현 가능한 run plan으로 전환 Context - 현재 repo는 Stage B symbolic MIDI generation ...
  • ohhalim
  • Opened 
    6 minutes ago
  • #481

ryankmcintyre/StockSentinal
Lock column header row on portfolio list when scrolling

  • ryankmcintyre
  • Opened 
    6 minutes ago
  • #129

kingyx3/hermes-vps
Make file removal/deletion possible

J: Remove the extra wendy documents from my workspace Recall (DEV): I couldn t safely apply that. I ve saved it to your inbox for review.
  • kingyx3
  • Opened 
    6 minutes ago
  • #1046

christopher5854/ProyectoBusesManejo
Implementación del módulo de registro de buses

Se desarrolló la funcionalidad para registrar buses dentro del sistema. El módulo permite ingresar, almacenar y consultar la información de cada unidad. Se realizaron pruebas básicas para verificar su ...
  • AbelChiriboga
  • Opened 
    7 minutes ago
  • #18

Kilo-Org/cloud
Free Model green pill fails WCAG AA/AAA contrast requirements

The FreeModelDataBadge component in apps/web/src/components/shared/ModelCombobox.tsx:461 uses bg-green-500 with text-white for the Free pill badge. img width= 352 height= 378 alt= Image src= https://github.com/user-attachments/assets/880ef6f8-8d3a-4c14-9feb-d5c67353385c ...
  • IamCoder18
  • Opened 
    9 minutes ago
  • #3686
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! Restrict your search to the title by using the in:title qualifier.
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! Restrict your search to the title by using the in:title qualifier.