Repository navigation

All pull requests

Labels (9)Milestones (0)New pull request

Open

(161)

Closed

(135)

Defensive hardening: SQL injection (sqli)
#296ajrequenez opened Aug 10, 2026
Replace low XOR scheme with authenticated encryption
#295r1kka6 opened Aug 10, 2026
Add lockout protection to low brute force login
#294r1kka6 opened Aug 10, 2026
Secure low JavaScript token validation
#293r1kka6 opened Aug 10, 2026
Harden low CSP script inclusion
#292r1kka6 opened Aug 10, 2026
Enforce low authbypass admin checks
#291r1kka6 opened Aug 10, 2026
Harden low file upload handling
#290r1kka6 opened Aug 10, 2026
Fix low BAC profile authorization
#289r1kka6 opened Aug 10, 2026
Remove password hashes from legacy user API responses
#288r1kka6 opened Aug 9, 2026
Bind low security password change to CAPTCHA completion
#287r1kka6 opened Aug 9, 2026
Fix SQL Injection Blind Low
#286r1kka6 opened Aug 9, 2026
Restrict DOM XSS language selection in low security level
#285r1kka6 opened Aug 9, 2026
Restrict file inclusion in low security level
#283r1kka6 opened Aug 9, 2026
Fix SQL injection in low security level
#282r1kka6 opened Aug 9, 2026
Fix stored XSS in low security level
#281r1kka6 opened Aug 9, 2026
Harden Weak Session IDs Low
#280r1kka6 opened Aug 9, 2026
Add CSRF protection to low security password changes
#279r1kka6 opened Aug 9, 2026
Fix Open Redirect Low same-site validation
#278r1kka6 opened Aug 9, 2026
Fix command injection in low security level
#277r1kka6 opened Aug 9, 2026
Fix reflected XSS in XSS Reflected Low challenge
#276r1kka6 opened Aug 9, 2026
fix(file-ops): implement whitelist validation for file operations (CW…
#273markuszaki opened Aug 9, 2026
1
fix(crypto-csp): use CSPRNG and strict CSP headers to prevent cryptog…
#272markuszaki opened Aug 9, 2026
1
fix(xss): encode all output with htmlspecialchars() to prevent XSS (C…
#271markuszaki opened Aug 9, 2026
1
fix(auth): implement secure token validation and server-side CAPTCHA …
#270markuszaki opened Aug 9, 2026
1
fix(sqli-blind): use prepared statements to prevent blind SQL injection (CWE-89)
#269markuszaki opened Aug 9, 2026
1

Pull requests