Skip to content

Actions: SecureBananaLabs/bug-bounty

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
2,500+ workflow runs
2,500+ workflow runs

Filter by Workflow

⌥ + click/return to exclude

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
fix: prevent client-side controlled payment amount Update PR leaderboard #2838: Pull request #4378 opened by jhosepm352-design
14s
14s
Prevent admin self-registration Update PR leaderboard #2837: Pull request #4375 opened by bozicovichsantiago20-oss
11s
11s
Reject unsupported payment currencies Update PR leaderboard #2836: Pull request #4374 opened by bozicovichsantiago20-oss
10s
10s
Prevent clients from marking new notifications as read Update PR leaderboard #2835: Pull request #4373 opened by 13415887994
13s
13s
Move navigation outside main landmark Update PR leaderboard #2834: Pull request #4372 opened by tudorian95
12s
12s
fix: auth security fixes - refresh token auth, login validation, admin role (#4345, #4318, #4359) Update PR leaderboard #2833: Pull request #4371 opened by H4ck3r-netizen
10s
10s
fix: add structured JSON 404 handler for unknown routes (#4361) Update PR leaderboard #2832: Pull request #4369 opened by H4ck3r-netizen
12s
12s
fix: add input validation and length limit to search query parameter (#4349) Update PR leaderboard #2831: Pull request #4368 opened by H4ck3r-netizen
12s
12s
fix: strip password field from user service responses (#4301) Update PR leaderboard #2830: Pull request #4367 opened by H4ck3r-netizen
10s
10s
fix: prevent client from overriding notification read state and id (#4355) Update PR leaderboard #2829: Pull request #4366 opened by H4ck3r-netizen
12s
12s
Reject oversized job metadata Update PR leaderboard #2828: Pull request #4365 opened by bozicovichsantiago20-oss
10s
10s
Validate user creation input Update PR leaderboard #2827: Pull request #4363 opened by tinyopsstudio
12s
12s
Fix auth and job validation bounty issues Update PR leaderboard #2826: Pull request #4362 opened by gchahal1982
10s
10s
Remove admin role from public registration schema Update PR leaderboard #2825: Pull request #4360 opened by rebel117
13s
13s
Protect notification server-owned fields from client override Update PR leaderboard #2824: Pull request #4358 opened by rebel117
15s
15s
Fix registration id/JWT subject mismatch Update PR leaderboard #2823: Pull request #4356 opened by rebel117
13s
13s
fix: resolve freelancer profile by username from mock data Update PR leaderboard #2822: Pull request #4354 opened by duongynhi000005-oss
10s
10s
fix: reject upload requests without a file Update PR leaderboard #2821: Pull request #4353 opened by duongynhi000005-oss
10s
10s
fix: add input validation and length limit to search query parameter Update PR leaderboard #2820: Pull request #4352 opened by duongynhi000005-oss
10s
10s
Cap job metadata size Update PR leaderboard #2819: Pull request #4348 opened by alan747271363-art
10s
10s
Require authentication for token refresh Update PR leaderboard #2818: Pull request #4346 opened by alan747271363-art
12s
12s
Reject unsupported payment currencies Update PR leaderboard #2817: Pull request #4344 opened by alan747271363-art
12s
12s
Fix: registration token subject matches returned user id Update PR leaderboard #2816: Pull request #4342 opened by mvmax-dev
12s
12s
[ShanaBoo] Job validation should reject inverted budget ranges Update PR leaderboard #2815: Pull request #4341 opened by genesisrevelationinc-debug
11s
11s
[ShanaBoo] upload endpoint accepts empty file submissions as successful uploads Update PR leaderboard #2814: Pull request #4339 opened by genesisrevelationinc-debug
10s
10s
ProTip! You can narrow down the results and go further in time using created:<2026-06-04 or the other filters available.