Search results

Email uniqueness not checked before update, raw DB error returned to client

bugSomething isn't workingSomething isn't working

Status: Open.

#53 In windoze95/saltybytes;

· windoze95 opened on Mar 4, 2026

Username has no maximum length enforced

bugSomething isn't workingSomething isn't working

Status: Open.

#52 In windoze95/saltybytes;

· windoze95 opened on Mar 4, 2026

N+1 queries in AssociateTagsWithRecipe

enhancementNew feature or requestNew feature or request

Status: Open.

#51 In windoze95/saltybytes;

· windoze95 opened on Mar 4, 2026

Similarity search includes source recipe in its own results

bugSomething isn't workingSomething isn't working

Status: Open.

#50 In windoze95/saltybytes;

· windoze95 opened on Mar 4, 2026

WebSocket CheckOrigin blocks mobile/native clients (missing empty-origin case)

bugSomething isn't workingSomething isn't working

Status: Open.

#49 In windoze95/saltybytes;

· windoze95 opened on Mar 4, 2026

ID header check vulnerable to timing attack

securitySecurity vulnerability or hardeningSecurity vulnerability or hardening

Status: Open.

#48 In windoze95/saltybytes;

· windoze95 opened on Mar 4, 2026

Image upload handler reads entire file into memory with no enforced size limit

bugSomething isn't workingSomething isn't working

Status: Open.

#47 In windoze95/saltybytes;

· windoze95 opened on Mar 3, 2026

Transaction not rolled back on early return in UpdateRecipeWithHistoryEntry

bugSomething isn't workingSomething isn't working

Status: Open.

#46 In windoze95/saltybytes;

· windoze95 opened on Mar 3, 2026

GET /v1/recipes/:recipe_id is publicly accessible without authentication

bugSomething isn't workingSomething isn't working

Status: Open.

#45 In windoze95/saltybytes;

· windoze95 opened on Mar 3, 2026

S3 key built with raw user-supplied filename, enabling key injection

bugSomething isn't workingSomething isn't working

Status: Open.

#44 In windoze95/saltybytes;

· windoze95 opened on Mar 3, 2026

Regex compiled per-call in hot paths

enhancementNew feature or requestNew feature or request

Status: Open.

#43 In windoze95/saltybytes;

· windoze95 opened on Mar 3, 2026

N+1 queries and potential infinite loop in GetNodeAncestors

enhancementNew feature or requestNew feature or request

Status: Open.

#42 In windoze95/saltybytes;

· windoze95 opened on Mar 3, 2026