All issues

Search results

[Security] Leaderboard score-immutability migrations use invalid SQL - protection never applies

gssoc26

gssoc:approved

Status: Open.

#1952 In durdana3105/peer-learning;

· payalrvs3 opened on Aug 8, 2026

[Bug] Chat/resource-upload/host-session XP awards only once, ever, per user

Status: Open.

#1951 In durdana3105/peer-learning;

· payalrvs3 opened on Aug 8, 2026

[Bug]: issue-auto-reply.yml is malformed YAML so the workflow never loads

gssoc26

gssoc:approved

Status: Open.

#1948 In durdana3105/peer-learning;

· nyxsky404 opened on Aug 6, 2026

[BUG] CI test failures in docs.test.js and uploadPhoto.test.js

gssoc26

gssoc:approved

Status: Open.

#1940 In durdana3105/peer-learning;

· Dev-Mayuresh opened on Aug 6, 2026

[Bug] Auth callback page crashes on malformed error params and renders attacker-controlled text

gssoc26

gssoc:approved

Status: Open.

#1929 In durdana3105/peer-learning;

· atul-upadhyay-7 opened on Aug 4, 2026

[Security] Doubt upvote counts can be forged by any authenticated user

Status: Open.

#1928 In durdana3105/peer-learning;

· atul-upadhyay-7 opened on Aug 4, 2026

[Security] match_users RPC lets authenticated users probe arbitrary email addresses (account enumeration)

Status: Open.

#1927 In durdana3105/peer-learning;

· atul-upadhyay-7 opened on Aug 4, 2026

[Security] Private study session metadata is world-readable, including by unauthenticated users

Status: Open.

#1926 In durdana3105/peer-learning;

· atul-upadhyay-7 opened on Aug 4, 2026

[Security] Authenticated users can forge leaderboard entries with arbitrary XP via direct INSERT/DELETE

Status: Open.

#1925 In durdana3105/peer-learning;

· atul-upadhyay-7 opened on Aug 4, 2026

[Security] Any authenticated user can read every account's email address via permissive profiles RLS

Status: Open.

#1924 In durdana3105/peer-learning;

· atul-upadhyay-7 opened on Aug 4, 2026

[Feature]: Add Custom Reminder Preferences for Study Sessions

gssoc26

gssoc:approved

Status: Open.

#1923 In durdana3105/peer-learning;

· adepat06 opened on Aug 4, 2026

[Feature]: Add Waitlist Support for Full Study Sessions

gssoc26

gssoc:approved

Status: Open.

#1922 In durdana3105/peer-learning;

· adepat06 opened on Aug 4, 2026