Search results

Refactor Hard-Coded Color Values into CSS Variables

Status: Open.

#2922 In ritesh-1918/HELPDESK.AI;

· Arpita2919 opened on Jun 18, 2026

CRITICAL: IDOR in scorecard endpoints — missing tenant isolation allows cross-company data access

Status: Open.

#2917 In ritesh-1918/HELPDESK.AI;

· namann5 opened on Jun 18, 2026

CRITICAL: Missing auth on POST/PATCH tickets and IDOR on GET tickets endpoint

Status: Open.

#2916 In ritesh-1918/HELPDESK.AI;

· namann5 opened on Jun 18, 2026

CRITICAL: SSRF vulnerability in webhook service allows internal network scanning

Status: Open.

#2915 In ritesh-1918/HELPDESK.AI;

· namann5 opened on Jun 18, 2026

CRITICAL: Missing admin role verification in all /api/* admin endpoints allows privilege escalation

Status: Open.

#2913 In ritesh-1918/HELPDESK.AI;

· namann5 opened on Jun 18, 2026

Implement fallback 404 page for invalid routes

Status: Open.

#2912 In ritesh-1918/HELPDESK.AI;

· Yogender-verma opened on Jun 17, 2026

Security: supabaseClient accepts http:// protocol potentially transmitting session tokens over plaintext

bugSomething isn't workingSomething isn't working

Status: Open.

#2910 In ritesh-1918/HELPDESK.AI;

· akhilmodi29 opened on Jun 17, 2026

CRITICAL] Confirmed Leaked Secrets in Git History — Google API Key, Supabase Service Role Key, GitHub PAT`

Status: Open.

#2906 In ritesh-1918/HELPDESK.AI;

· Jeel2904 opened on Jun 17, 2026

[CRITICAL] No Authentication on 16/17 Backend API Endpoints — Full Database & AI Access Exposed

Status: Open.

#2905 In ritesh-1918/HELPDESK.AI;

· Jeel2904 opened on Jun 17, 2026

[BOUNTY] [level:advanced] Per-user and per-tenant rate limiting missing on AI endpoints — IP-only throttling bypassable via proxies

Status: Open.

#2903 In ritesh-1918/HELPDESK.AI;

· Nancy-3012 opened on Jun 17, 2026

[MEDIUM] Duplicate limiter import in translation.py — first import silently overridden

Status: Open.

#2898 In ritesh-1918/HELPDESK.AI;

· namann5 opened on Jun 16, 2026

[HIGH] Mass assignment vulnerability — any authenticated user can escalate to admin via PATCH /profiles

Status: Open.

#2894 In ritesh-1918/HELPDESK.AI;

· namann5 opened on Jun 16, 2026