Search results

Pre-existing test failure: experience validation "applies defaults" fails on main

bugSomething isn't workingSomething isn't working

tests

Status: Open.

#115 In Amadou-dot/LodgeFlow_admin;

· Amadou-dot opened on Jul 2, 2026

No lockfile committed — builds aren't reproducible and dependencies can't be audited

infrastructure

security

Status: Open.

#114 In Amadou-dot/LodgeFlow_admin;

· Amadou-dot opened on Jul 2, 2026

In-memory rate limiter and Clerk user cache don't work across serverless instances

infrastructure

Status: Open.

#113 In Amadou-dot/LodgeFlow_admin;

· Amadou-dot opened on Jul 2, 2026

Customers list: sorting by totalSpent/totalBookings only sorts the current page

bugSomething isn't workingSomething isn't working

Status: Open.

#112 In Amadou-dot/LodgeFlow_admin;

· Amadou-dot opened on Jul 2, 2026

Settings PUT mass-assigns the raw request body onto the singleton with no request validation

security

Status: Open.

#111 In Amadou-dot/LodgeFlow_admin;

· Amadou-dot opened on Jul 2, 2026

Booking overlap check has a TOCTOU race window — double-bookings still possible under concurrency

bugSomething isn't workingSomething isn't working

Status: Open.

#110 In Amadou-dot/LodgeFlow_admin;

· Amadou-dot opened on Jul 2, 2026

POST /api/bookings trusts client-supplied pricing fields despite comment claiming server-side calculation

security

Status: Open.

#109 In Amadou-dot/LodgeFlow_admin;

· Amadou-dot opened on Jul 2, 2026

Zod schemas for cabins/dining/experiences exist but are not wired into API routes (and have drifted from the models)

security

tech-debt

Status: Open.

#108 In Amadou-dot/LodgeFlow_admin;

· Amadou-dot opened on Jul 2, 2026