Search results

fix: job controller crashes on Zod validation errors — no structured 400 response

Status: Open.

#11029 In SecureBananaLabs/bug-bounty;

· Ishant5436 opened on Jul 9, 2026

API test script should execute test files instead of the tests directory

Status: Open.

#11027 In SecureBananaLabs/bug-bounty;

· qq2401672073-hub opened on Jul 9, 2026

Review service should avoid same-millisecond id collisions

Status: Open.

#11024 In SecureBananaLabs/bug-bounty;

· dominating opened on Jul 8, 2026

Upload endpoint should reject missing-file submissions with 400

Status: Open.

#11022 In SecureBananaLabs/bug-bounty;

· dominating opened on Jul 8, 2026

Web production build should not rewrite tracked next-env.d.ts (dkx955 reissue via #743)

Status: Open.

#11020 In SecureBananaLabs/bug-bounty;

· dkx955 opened on Jul 8, 2026

@freelanceflow/ui package entrypoint should expose build output for direct imports

Status: Open.

#11018 In SecureBananaLabs/bug-bounty;

· limingwei-88 opened on Jul 8, 2026

[SECURITY] Admin routes missing role-based authorization check

Status: Open.

#11013 In SecureBananaLabs/bug-bounty;

· cff26541-dev opened on Jul 8, 2026

[SECURITY] JWT secret falls back to hardcoded 'development-secret' in production

Status: Open.

#11012 In SecureBananaLabs/bug-bounty;

· cff26541-dev opened on Jul 8, 2026

[SECURITY] Login bypass: no password verification, accepts any credentials

Status: Open.

#11011 In SecureBananaLabs/bug-bounty;

· cff26541-dev opened on Jul 8, 2026

[SECURITY] Registration allows privilege escalation to admin role

Status: Open.

#11010 In SecureBananaLabs/bug-bounty;

· cff26541-dev opened on Jul 8, 2026

fix: refresh endpoint lacks auth middleware — issues hardcoded tokens for usr_existing

Status: Open.

#11006 In SecureBananaLabs/bug-bounty;

· sumarna35 opened on Jul 8, 2026

fix: job controller crashes on Zod validation errors — no structured 400 response

Status: Open.

#11004 In SecureBananaLabs/bug-bounty;

· sumarna35 opened on Jul 8, 2026