Skip to content

Pull requests: SecureBananaLabs/bug-bounty

New pull request New
5,999 Open 674 Closed
5,999 Open 674 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

feat: implement Stripe payment gateway with validation and error handling
#11348 opened Jul 21, 2026 by pistakugli Loading…
8 tasks done
1
Reject inverted job budget ranges in job validation
#11347 opened Jul 21, 2026 by hanu-14 Loading…
Search endpoint has no input validation or length limit on query
#11346 opened Jul 21, 2026 by hanu-14 Loading…
Job validation should reject inverted budget ranges
#11345 opened Jul 21, 2026 by hanu-14 Loading…
Fix #2853: Job validation should reject inverted budget ranges
#11344 opened Jul 21, 2026 by abhiavi Loading…
Fix #2833: Search endpoint has no input validation or length limit on query
#11343 opened Jul 21, 2026 by diptikhaparde-coder Loading…
Fix #2827: Reject inverted job budget ranges in job validation
#11342 opened Jul 21, 2026 by abhiavi Loading…
fix: add Zod schema.parse() validation to 3 controllers (user, review, proposal)
#11341 opened Jul 21, 2026 by chfr19820610-cell Loading…
1
1
fix: Security: Hardcoded JWT fallback secret exposes authentication to forgery
#11338 opened Jul 20, 2026 by zorelcocos-dot Loading…
1
fix: API workspace test script should target test files
#11337 opened Jul 20, 2026 by zorelcocos-dot Loading…
1
fix: paymentController missing input validation on createPayment
#11336 opened Jul 20, 2026 by zorelcocos-dot Loading…
1
fix: authController missing error handling in all route handlers
#11335 opened Jul 20, 2026 by zorelcocos-dot Loading…
1
fix: Job detail route should resolve mock jobs by id
#11334 opened Jul 20, 2026 by zorelcocos-dot Loading…
1
fix: Job detail page should render real job data and 404 on invalid ids
#11333 opened Jul 20, 2026 by zorelcocos-dot Loading…
1
fix: Job detail page should render actual job data
#11332 opened Jul 20, 2026 by zorelcocos-dot Loading…
1
fix: Unsupported JSON charset and encoding errors should return 415
#11331 opened Jul 20, 2026 by zorelcocos-dot Loading…
1
fix: Job budget validation allows budgetMax < budgetMin
#11330 opened Jul 20, 2026 by zorelcocos-dot Loading…
1
fix: Upload endpoint should reject requests without an attached file
#11329 opened Jul 20, 2026 by zorelcocos-dot Loading…
1
fix: upload endpoint accepts empty file submissions
#11328 opened Jul 20, 2026 by zorelcocos-dot Loading…
1
fix: Validate POST /api/users payloads before creating user records
#11327 opened Jul 20, 2026 by zorelcocos-dot Loading…
1
fix: userService listUsers should return defensive snapshots
#11326 opened Jul 20, 2026 by zorelcocos-dot Loading…
1
fix: Express 4 async error handling - all routes silently drop errors
#11325 opened Jul 20, 2026 by zorelcocos-dot Loading…
1
fix: Fix apps/api test script so npm test runs test files
#11324 opened Jul 20, 2026 by zorelcocos-dot Loading…
1
fix: Fix apps/api test script so node --test runs the health test duplicate
#11323 opened Jul 20, 2026 by zorelcocos-dot Loading…
1
fix: Fix apps/api test script so node --test runs the health test
#11322 opened Jul 20, 2026 by zorelcocos-dot Loading…
1
ProTip! Add no:assignee to see everything that’s not assigned.