-
Notifications
You must be signed in to change notification settings - Fork 92
Issues
is:issue state:open
is:issue state:open
Issue creation is restricted in this repository
Search results
[Bug]: [Security] Confirmed: image upload filter trusts client-supplied MIME type, extension preserved — enables stored XSS via /uploads static serving
bugSomething isn't workingSomething isn't workingStatus: Open.#385 In Canopus-Labs/PrepPilot;[Feature]: Build AI-Powered Adaptive Learning Engine with Real-Time Performance Analytics Dashboard
enhancementNew feature or requestNew feature or requestStatus: Open.#384 In Canopus-Labs/PrepPilot;[Docs]: Update README.md to reflect the latest backend folder structure
documentationImprovements or additions to documentationImprovements or additions to documentationStatus: Open.#382 In Canopus-Labs/PrepPilot;[Feature]: Prevent duplicate Gemini API requests using in-flight request coalescing
enhancementNew feature or requestNew feature or requestStatus: Open.#380 In Canopus-Labs/PrepPilot;[Bug]: "Not Found" error after clicking Logout
bugSomething isn't workingSomething isn't workingStatus: Open.#379 In Canopus-Labs/PrepPilot;[Bug]: Basic Info Profile Form Fields Accept Numeric Characters in name field.
bugSomething isn't workingSomething isn't workingStatus: Open.#378 In Canopus-Labs/PrepPilot;[Feature]: Persist AI Assistant Chat History Across Page Refreshes
enhancementNew feature or requestNew feature or requestStatus: Open.#377 In Canopus-Labs/PrepPilot;[Devops]: express-rate-limit uses default in-memory store — limits are per-instance and reset on restart
bugSomething isn't workingSomething isn't workingStatus: Open.#376 In Canopus-Labs/PrepPilot;[Bug]: saveResume returns HTTP 200 success with a null resume when resumeId is invalid or not owned by the caller
bugSomething isn't workingSomething isn't workingStatus: Open.#375 In Canopus-Labs/PrepPilot;[Security]: Refresh token rotation has no reuse-detection grace window, causing concurrent refreshes to lock users out
bugSomething isn't workingSomething isn't workingStatus: Open.#374 In Canopus-Labs/PrepPilot;[Bug]: deleteSession is non-transactional — partial failure orphans questions or leaves sessions undeleted
bugSomething isn't workingSomething isn't workingStatus: Open.#373 In Canopus-Labs/PrepPilot;[Bug]: TOCTOU race allows bypassing MAX_SESSIONS limit under concurrent session creation
bugSomething isn't workingSomething isn't workingStatus: Open.#372 In Canopus-Labs/PrepPilot;