All issues

Search results

fix(api): reject upload without file with 400

Status: Open.

#11654 In SecureBananaLabs/bug-bounty;

· 0xhermes-28 opened on Aug 8, 2026

Upload endpoint should reject requests without a file

Status: Open.

#11641 In SecureBananaLabs/bug-bounty;

· mattmediawg opened on Aug 6, 2026

Reject inverted job budget ranges in job validation

Status: Open.

#11639 In SecureBananaLabs/bug-bounty;

· mattmediawg opened on Aug 6, 2026

Reject inverted job budget ranges in job validation (reissue)

Status: Open.

#11637 In SecureBananaLabs/bug-bounty;

· SmartMenu9872 opened on Aug 6, 2026

[Bug] Upload route accepts unauthenticated requests

Status: Open.

#11634 In SecureBananaLabs/bug-bounty;

· SmartMenu9872 opened on Aug 6, 2026

Fix Card to forward native section props

Status: Open.

#11620 In SecureBananaLabs/bug-bounty;

· kencouchattemp-prog opened on Aug 6, 2026

Require authentication for proposal creation without restricting reads

Status: Open.

#11618 In SecureBananaLabs/bug-bounty;

· MyTH-zyxeon opened on Aug 6, 2026

SECURITY: POST /api/payments has no auth — unauthenticated payment creation

Status: Open.

#11606 In SecureBananaLabs/bug-bounty;

· laurentketterle-hub opened on Aug 3, 2026

Bug: Login accepts any password without verification stub hardening

Status: Open.

#11596 In SecureBananaLabs/bug-bounty;

· samuelpatak-png opened on Aug 3, 2026

Bug: GET /api/users exposes user list without authentication

Status: Open.

#11595 In SecureBananaLabs/bug-bounty;

· samuelpatak-png opened on Aug 3, 2026

Bug: Search endpoint lacks authentication

Status: Open.

#11594 In SecureBananaLabs/bug-bounty;

· samuelpatak-png opened on Aug 3, 2026

Bug: Proposal creation accepts records missing estimated duration

Status: Open.

#11593 In SecureBananaLabs/bug-bounty;

· samuelpatak-png opened on Aug 3, 2026