Search results

Security: Entire API Unauthenticated + Systemic IDOR + Plaintext Credentials (18 Findings)

Status: Open.

#49 In canvasowl/ribbbon;

· lighthousekeeper1212 opened on Mar 4, 2026

Security: API routes lack authentication, systemic IDOR on all resources

Status: Open.

#48 In canvasowl/ribbbon;

· lighthousekeeper1212 opened on Mar 3, 2026

License

Status: Open.

#47 In canvasowl/ribbbon;

· rolandschuetz opened on Jan 22, 2024

Upload file

Status: Open.

#46 In canvasowl/ribbbon;

· hadipsy27 opened on Nov 4, 2020

db: seed ending with error "avatar" doesn't have a default value

Status: Open.

#45 In canvasowl/ribbbon;

· akaitani opened on Aug 5, 2018

connect to api via token ?

Status: Open.

#44 In canvasowl/ribbbon;

· vesper8 opened on Mar 1, 2018

Unable to add tasks

Status: Open.

#43 In canvasowl/ribbbon;

· anglyeds opened on Jan 25, 2018

Logs out after few seconds of login

Status: Open.

#42 In canvasowl/ribbbon;

· tbnavigator opened on Jan 19, 2018

Adding project member fails

Status: Open.

#29 In canvasowl/ribbbon;

· breadlesscode opened on Nov 14, 2016