Skip to content

Pull requests: SecureBananaLabs/bug-bounty

New pull request New
5,804 Open 644 Closed
5,804 Open 644 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

fix: keep web next-env stable after production build
#11021 opened Jul 8, 2026 by dkx955 Loading…
1
fix: expose ui package build entrypoint
#11019 opened Jul 8, 2026 by limingwei-88 Loading…
fix: add role-based access control to admin routes
#11017 opened Jul 8, 2026 by cff26541-dev Loading…
1
1
fix: prevent weak JWT secret in production environments
#11016 opened Jul 8, 2026 by cff26541-dev Loading…
1
1
fix: add bcrypt password hashing and login verification
#11015 opened Jul 8, 2026 by cff26541-dev Loading…
1
1
fix: remove admin role from registration to prevent privilege escalation
#11014 opened Jul 8, 2026 by cff26541-dev Loading…
1
1
fix(api): target concrete test files to resolve Node 22 MODULE_NOT_FOUND
#11009 opened Jul 8, 2026 by gsrtech100-wq Loading…
1
fix: reject inverted budget ranges in job validation (Closes #2853)
#11008 opened Jul 8, 2026 by foxyManTou Loading…
1
fix: protect refresh endpoint with auth middleware and sign token for authenticated user
#11007 opened Jul 8, 2026 by sumarna35 Loading…
1
fix: handle Zod validation errors in job controller with structured 400 response
#11005 opened Jul 8, 2026 by sumarna35 Loading…
1
fix: login endpoint verifies password against registered user store
#11003 opened Jul 8, 2026 by sumarna35 Loading…
1
Validate user creation payloads
#11001 opened Jul 7, 2026 by es3298 Loading…
1
fix: add user validation to prevent admin role self-assignment
#10998 opened Jul 7, 2026 by sumarna35 Loading…
Normalize payment intent currency
#10997 opened Jul 7, 2026 by es3298 Loading…
1
1
Harden notification creation ids
#10996 opened Jul 7, 2026 by es3298 Loading…
1
1
Harden message creation ids
#10995 opened Jul 7, 2026 by es3298 Loading…
1
1
Normalize search query parameters
#10994 opened Jul 7, 2026 by es3298 Loading…
1
1
Keep registration token subject stable
#10993 opened Jul 7, 2026 by es3298 Loading…
1
1
fix(api): restrict admin metrics to admin role
#10992 opened Jul 7, 2026 by es3298 Loading…
1
1
Fix health route rate limiting
#10991 opened Jul 7, 2026 by Muyutxd1 Loading…
1
Keep health checks outside API rate limit
#10989 opened Jul 7, 2026 by ewbd09-svg Loading…
1
Fix registerUser token subject mismatch
#10987 opened Jul 7, 2026 by Muyutxd1 Loading…
1
1
Validate user creation payloads
#10986 opened Jul 7, 2026 by bingmokaka Loading…
1
Require admin role for metrics route
#10983 opened Jul 7, 2026 by bingmokaka Loading…
1
fix(api): run node tests via file glob
#10981 opened Jul 7, 2026 by jz-nobody Loading…
1
ProTip! Adding no:label will show everything without a label.