-
Notifications
You must be signed in to change notification settings - Fork 265
Pull requests: ritesh-1918/HELPDESK.AI
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
fix: only accept https:// in isLikelyValidUrl to prevent auth tokens being sent over plain HTTP
#2911
opened Jun 17, 2026 by
akhilmodi29
Loading…
fix: remove hardcoded secrets and add .env to gitignore
#2909
opened Jun 17, 2026 by
pranayukey200
Loading…
fix: add authentication to unprotected POST /tickets and PATCH /tickets/{ticket_id} endpoints
#2907
opened Jun 17, 2026 by
Aryanbansal-05
Loading…
fix: per-user and per-tenant rate limiting on AI endpoints
#2904
opened Jun 17, 2026 by
Nancy-3012
Loading…
fix(security): enforce schema + role gate on PATCH /api/profiles/{user_id} (closes #2894)
#2901
opened Jun 16, 2026 by
codeboost-tr
Loading…
fix(translation): remove duplicate limiter import (closes #2898)
#2900
opened Jun 16, 2026 by
codeboost-tr
Loading…
[MEDIUM] Remove duplicate limiter import in translation.py (Fixes #2898)
#2899
opened Jun 16, 2026 by
namann5
Contributor
Loading…
[HIGH] Prevent mass assignment and add role-based auth to admin endpoints (Fixes #2894)
#2897
opened Jun 16, 2026 by
namann5
Contributor
Loading…
[CRITICAL] Information disclosure — exception details leaked in auth responses (Fixes #2893)
#2896
opened Jun 16, 2026 by
namann5
Contributor
Loading…
[HIGH] Wire SecurityHeadersMiddleware into main.py — app missing CSP, HSTS, X-Frame-Options (Fixes #2892)
#2895
opened Jun 16, 2026 by
namann5
Contributor
Loading…
[CRITICAL] Fix auth rate limiter bypass — login/signup endpoints allow unlimited brute-force (Fixes #2890)
#2891
opened Jun 16, 2026 by
namann5
Contributor
Loading…
[Resource Leak] Redis connection pool never disconnected on shutdown
#2887
opened Jun 14, 2026 by
sanrishi
Loading…
[Security] Add payload size limit and JSON nesting depth middleware
#2886
opened Jun 14, 2026 by
sanrishi
Loading…
[Security] Enforce ocr_json_safety validators on all image_base64 inputs
#2885
opened Jun 14, 2026 by
sanrishi
Loading…
[Security] Error leakage in admin.py + no global exception handler
#2884
opened Jun 14, 2026 by
sanrishi
Loading…
[Concurrency] TICKETS_DB list lacks thread safety for concurrent create/update
#2883
opened Jun 14, 2026 by
sanrishi
Loading…
[Security] log_correction uses raw_request.json() instead of Pydantic model; no CorrectionsLogService
#2882
opened Jun 14, 2026 by
sanrishi
Loading…
[Security] All Pydantic request models missing max-length and input sanitization
#2881
opened Jun 14, 2026 by
sanrishi
Loading…
[Security] Rate limiting only covers 1 of 6 AI endpoints - apply to all
#2880
opened Jun 14, 2026 by
sanrishi
Loading…
[Memory Leak] Supabase client connections created without lifecycle shutdown
#2879
opened Jun 14, 2026 by
sanrishi
Loading…
[Memory Leak] SSE streaming endpoint lacks disconnect detection and task timeout
#2878
opened Jun 14, 2026 by
sanrishi
Loading…
fix: make supabase service key env var consistent
#2867
opened Jun 14, 2026 by
pranayukey200
Loading…
feat: add reusable ticket templates for common issues
#2866
opened Jun 14, 2026 by
jainiksha
Loading…
Previous Next
ProTip!
Type g i on any issue or pull request to go back to the issue listing page.