Search results

SECURITY: POST /api/payments has no auth — unauthenticated payment creation

Status: Open.

#11606 In SecureBananaLabs/bug-bounty;

· laurentketterle-hub opened on Aug 3, 2026

Bug: Login accepts any password without verification stub hardening

Status: Open.

#11596 In SecureBananaLabs/bug-bounty;

· samuelpatak-png opened on Aug 3, 2026

Bug: GET /api/users exposes user list without authentication

Status: Open.

#11595 In SecureBananaLabs/bug-bounty;

· samuelpatak-png opened on Aug 3, 2026

Bug: Search endpoint lacks authentication

Status: Open.

#11594 In SecureBananaLabs/bug-bounty;

· samuelpatak-png opened on Aug 3, 2026

Bug: Proposal creation accepts records missing estimated duration

Status: Open.

#11593 In SecureBananaLabs/bug-bounty;

· samuelpatak-png opened on Aug 3, 2026

Bug: Rate limiter should count malformed JSON before body parsing

Status: Open.

#11592 In SecureBananaLabs/bug-bounty;

· samuelpatak-png opened on Aug 3, 2026

Bug: prevent admin role self-assignment during registration

Status: Open.

#11591 In SecureBananaLabs/bug-bounty;

· samuelpatak-png opened on Aug 3, 2026

Bug: Missing admin role authorization check on admin metrics endpoint

Status: Open.

#11590 In SecureBananaLabs/bug-bounty;

· samuelpatak-png opened on Aug 3, 2026

Bug: POST /api/jobs endpoint missing authentication middleware

Status: Open.

#11589 In SecureBananaLabs/bug-bounty;

· samuelpatak-png opened on Aug 3, 2026

Bug: POST /api/notifications endpoint missing authentication middleware

Status: Open.

#11588 In SecureBananaLabs/bug-bounty;

· samuelpatak-png opened on Aug 3, 2026

Bug: POST /api/messages endpoint missing authentication middleware

Status: Open.

#11587 In SecureBananaLabs/bug-bounty;

· samuelpatak-png opened on Aug 3, 2026

SECURITY: POST /api/payments has no auth — unauthenticated payment creation

Status: Open.

#11576 In SecureBananaLabs/bug-bounty;

· laurentketterle-hub opened on Aug 3, 2026