-
Notifications
You must be signed in to change notification settings - Fork 1
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
- Status: Open.#149 In fblan/fairnsquare;
security(low): AdminTokenFilter returns 503 vs 401 lets attackers fingerprint admin-enabled deployments
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#141 In fblan/fairnsquare;security(low): error responses and logs echo raw user input
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#140 In fblan/fairnsquare;security(low): OpenAPI spec exposed at /q/openapi reveals admin and CAPTCHA endpoints
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#139 In fblan/fairnsquare;security(low): no upper bound on expense amount
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#138 In fblan/fairnsquare;security(medium): persisted split ZIPs have no integrity check (no MAC)
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#136 In fblan/fairnsquare;security(medium): OWASP dependency-check disabled, no automated CVE scan in CI
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#134 In fblan/fairnsquare;security(medium): no HTTP security headers (CSP, X-Frame-Options, HSTS, Referrer-Policy)
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#133 In fblan/fairnsquare;security(medium): admin password sent raw in X-Admin-Token header and stored in sessionStorage
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#132 In fblan/fairnsquare;security(high): no rate limiting on /api/admin, /api/captcha or /api/splits
securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningStatus: Open.#129 In fblan/fairnsquare;- Status: Open.#95 In fblan/fairnsquare;