issues Search Results · language:Edge language:TypeScript language:HTML language:Ruby language:TypeScript

Filter by

• • Code... (...)results
  • Repositories
    results
  • Issues
    results
  • Pull requests
    results
  • Discussions
    results
  • Users
    results
  • More

• State

  • Open
  • Closed

• Advanced

  • Owner
  • State
  • Close reason
  • Has linked pull request
  • Author
  • Assignee
  • Mentioned user
  • Mentioned team
  • Commenter
  • Involved user
  • Label
  • Milestone
  • Number of comments
  • Number of interactions
• Advanced search

Filter:Issues25.3M (25.3M)

25.3M results  (623 ms)

25.3M results

Sort by: Best match

Filter

Tristan578/project-forge

[F49] Encryption master key validated only by length, not hex validity

Audit finding F49 · 🟡 low · dimension secrets (security) · phase P2 Part of epic #8592. Source: SpawnForge Security Testing Audit (2026-05-30). File: web/src/lib/keys/encryption.ts:11-20 getMasterKey() ...

audit

bug

priority-p2

security

• Tristan578
·
• Opened 
  8 seconds ago
·
• #8641

Tristan578/project-forge

[F48] Marketplace asset detail route leaks draft/pending/rejected/removed assets (no status filter)

Audit finding F48 · 🟡 low · dimension privacy (security) · phase P2 Part of epic #8592. Source: SpawnForge Security Testing Audit (2026-05-30). File: web/src/app/api/marketplace/assets/[id]/route.ts:43 ...

audit

bug

priority-p2

security

• Tristan578
·
• Opened 
  9 seconds ago
·
• #8640

Tristan578/project-forge

[F47] GDPR data export omits the user's own comments, reviews, ratings, follows, listings, and appeals

Audit finding F47 · 🟡 low · dimension privacy (security) · phase P2 Part of epic #8592. Source: SpawnForge Security Testing Audit (2026-05-30). File: web/src/app/api/user/export-data/route.ts:159-172 ...

audit

bug

priority-p2

security

• Tristan578
·
• Opened 
  10 seconds ago
·
• #8639

Tristan578/project-forge

[F46] Community game detail route leaks unpublished/processing games (no status filter)

Audit finding F46 · 🟡 low · dimension privacy (security) · phase P2 Part of epic #8592. Source: SpawnForge Security Testing Audit (2026-05-30). File: web/src/app/api/community/games/[id]/route.ts:40 ...

audit

bug

priority-p2

security

• Tristan578
·
• Opened 
  12 seconds ago
·
• #8638

Tristan578/project-forge

[F45] Webhook in-flight claim auto-expiry safety net is non-functional — cleanupExpired() has no caller

Audit finding F45 · 🟡 low · dimension payments (security) · phase P2 Part of epic #8592. Source: SpawnForge Security Testing Audit (2026-05-30). File: web/src/lib/billing/webhookIdempotency.ts:39-58, ...

audit

bug

priority-p2

security

• Tristan578
·
• Opened 
  13 seconds ago
·
• #8637

Tristan578/project-forge

[F44] Marketplace purchase row can be committed without charging the buyer if the request crashes mid-p...

Audit finding F44 · 🟡 low · dimension payments (security) · phase P2 Part of epic #8592. Source: SpawnForge Security Testing Audit (2026-05-30). File: web/src/app/api/marketplace/assets/[id]/purchase/route.ts:89-184, ...

audit

bug

priority-p2

security

• Tristan578
·
• Opened 
  14 seconds ago
·
• #8636

pmxt-dev/pmxt

Response drift: limitless — tradePrices.buy/sell directional pricing not extracted

Exchange limitless Severity MEDIUM What Our Normalizer Expects core/src/exchanges/limitless/normalizer.ts reads raw.prices (a 2-element [yesPrice, noPrice] float array) for outcome pricing. No access ...

response-drift

• realfishsam
·
• Opened 
  15 seconds ago
·
• #799

Tristan578/project-forge

[F43] Prompt-injection detection and input sanitization in /api/chat skip array-typed message content

Audit finding F43 · 🟡 low · dimension injection (security) · phase P2 Part of epic #8592. Source: SpawnForge Security Testing Audit (2026-05-30). File: web/src/app/api/chat/route.ts:337-361 The per-message ...

audit

bug

priority-p2

security

• Tristan578
·
• Opened 
  16 seconds ago
·
• #8635

Tristan578/project-forge

[F42] Main-app CSP allows 'unsafe-inline' and 'unsafe-eval' in script-src

Audit finding F42 · 🟡 low · dimension infra (security) · phase P2 Part of epic #8592. Source: SpawnForge Security Testing Audit (2026-05-30). File: web/next.config.ts:15-30 The global CSP script-src ...

audit

bug

priority-p2

security

• Tristan578
·
• Opened 
  17 seconds ago
·
• #8634

Tristan578/project-forge

[F41] Stripe / billing / token-depletion E2E (@api) run in no CI job at all

Audit finding F41 · 🟡 low · dimension e2e (testing) · phase P2 Part of epic #8592. Source: SpawnForge Security Testing Audit (2026-05-30). File: web/e2e/tests/billing-flow.spec.ts:9, web/e2e/tests/token-depletion.spec.ts:9, ...

audit

priority-p2

testing

• Tristan578
·
• Opened 
  19 seconds ago
·
• #8633

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues

ProTip! Restrict your search to the title by using the in:title qualifier.

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues

ProTip! Restrict your search to the title by using the in:title qualifier.