All pull requests

Pull requests

• fix: Unsafe Eval in profile.js (CWE-95)

  #182·freddan58 opened Mar 10, 2026Owner·

  ·

• fix: SQL Injection via NoSQL-Style JSON Filter in profile.js (CWE-89)

  #181·freddan58 opened Mar 10, 2026Owner·

  ·

• fix: Information Exposure in profile.js (CWE-200)

  #180·freddan58 opened Mar 10, 2026Owner·

  ·

• fix: Cleartext logging of financial transaction data (PII exposure) in payments.js (CWE-532)

  #179·freddan58 opened Mar 10, 2026Owner·

  ·

• fix: Sensitive data exposure in URL parameters in payments.js (CWE-598)

  #178·freddan58 opened Mar 10, 2026Owner·

  ·

• fix: HTTP Response Splitting / Header Injection in notifications.js (CWE-113)

  #177·freddan58 opened Mar 10, 2026Owner·

  ·

• fix: Improper Error Handling - Stack Trace Exposure in notifications.js (CWE-209)

  #176·freddan58 opened Mar 10, 2026Owner·

  ·

• fix: Uncontrolled Resource Consumption - Zip bomb in decompression in diagnostics.js (CWE-400)

  #175·freddan58 opened Mar 10, 2026Owner·

  ·

• fix: Information Exposure in Response in reports.js (CWE-200)

  #174·freddan58 opened Feb 27, 2026Owner·

  ·

• fix: SQL Injection via dynamic JSON query construction in profile.js (CWE-89)

  #173·freddan58 opened Feb 27, 2026Owner·

  ·

• fix: Code Injection via Unsafe Eval in profile.js (CWE-95)

  #172·freddan58 opened Feb 27, 2026Owner·

  ·

• fix: Uncontrolled Resource Consumption in diagnostics.js (CWE-400)

  #171·freddan58 opened Feb 27, 2026Owner·

  ·

• fix: In-Memory Session Store Without Size Limit (Memory Exhaustion Denial of Service) in session.js (CWE-400)

  #170·freddan58 opened Feb 27, 2026Owner·

  ·

• fix: Session Fixation in session.js (CWE-384)

  #169·freddan58 opened Feb 27, 2026Owner·

  ·

• fix: Information Exposure and User Enumeration in reports.js (CWE-200)

  #168·freddan58 opened Feb 24, 2026Owner·

  ·

• fix: SQL Injection via Unsanitized JSON query input in profile.js (CWE-89)

  #167·freddan58 opened Feb 24, 2026Owner·

  ·

• fix: Mass Data Exposure (Sensitive Information Exposure) in profile.js (CWE-200)

  #166·freddan58 opened Feb 24, 2026Owner·

  ·

• fix: Missing Authorization / IDOR in profile.js (CWE-639)

  #165·freddan58 opened Feb 24, 2026Owner·

  ·

• fix: Information Exposure in Logs in logger.js (CWE-532)

  #164·freddan58 opened Feb 24, 2026Owner·

  ·

• fix: Session Fixation due to Missing Session ID Regeneration After Login in session.js (CWE-384)

  #163·freddan58 opened Feb 24, 2026Owner·

  ·

• fix: Missing Session Expiration in session.js (CWE-613)

  #162·freddan58 opened Feb 24, 2026Owner·

  ·

• fix: Information Exposure - Reset Token in Response in reports.js (CWE-200)

  #161·freddan58 opened Feb 23, 2026Owner·

  ·

• fix: Remote Code Execution via Unsafe Eval in profile.js (CWE-95)

  #160·freddan58 opened Feb 23, 2026Owner·

  ·

• fix: SQL Injection via NoSQL-style Injection in profile.js (CWE-89)

  #159·freddan58 opened Feb 23, 2026Owner·

  ·

• fix: Information Exposure in Response in profile.js (CWE-200)

  #158·freddan58 opened Feb 23, 2026Owner·

  ·