IssueAggregator

Freelancer profile should render matching mock profile and unknown fallback

[radar] SN open bounty 2026-05-07T15:56

Add JSDoc to userService

Notification creation should preserve server-owned id and read state

[radar] SN open bounty 2026-05-07T12:21

Job detail route should resolve mock jobs by id

[radar] SN open bounty 2026-05-07T09:17

Payment API should require authentication

[radar] SN open bounty 2026-05-07T08:03

Job detail page should render matching mock job and unknown fallback

[radar] SN open bounty 2026-05-06T23:37

Bug: Admin role self-assignment via registration endpoint

[radar] SN open bounty 2026-05-06T21:20

Settings page should provide actionable account controls

[radar] SN open bounty 2026-05-06T20:54

Settings page should provide actionable account controls

[radar] SN open bounty 2026-05-06T16:16

fix: enforce authentication on job creation endpoint

[radar] SN open bounty 2026-05-03T23:30

fix: prevent DoS on search endpoint via query length limit and input validation

[radar] SN open bounty 2026-05-03T20:07

Patch PostCSS audit advisory from Next dependency lockfile

[radar] SN open bounty 2026-05-03T17:36

Search endpoint has no input validation or length limit on query

[radar] SN open bounty 2026-05-03T14:16

Job creation endpoint lacks authentication — anyone can post jobs

[radar] SN open bounty 2026-05-03T10:59

Refresh token endpoint ignores the provided refresh token

CORS configured with no origin restrictions — allows any domain

User creation endpoint has no input validation

Payment endpoint lacks authentication — unauthenticated payment creation

Upload endpoint lacks authentication — unauthenticated file uploads allowed

Admin routes lack role-based access control — any authenticated user can access admin endpoints

Bug: user creation accepts empty payloads and client-controlled ids

Bug: Missing admin role authorization check on admin metrics endpoint

Bug: Multiple security vulnerabilities in API layer - registerUser() ID mismatch, missing auth, missing validation

Bug: registerUser signs token with a different generated user id

fix(auth): prevent admin role self-assignment during registration

Bug: Refresh endpoint mints tokens without validating a refresh token

Registration token subject can drift from returned user id

fix: prevent admin role self-assignment during registration

Bug: Proposal creation accepts records missing estimated duration

fix: prevent admin role self-assignment

Bug: Rate limiter should count malformed JSON before body parsing

fix: prevent admin role self-assignment

Low Handing Fruit Automation

Pixel Art Creation with high Creative Thinking

Technical Poem Generation and Content Creation

Benchmark APIs with p50, p95, p99 latency, RPS, error rate and TTFB

Implement a fully functional Admin Panel

Implement Secure Payment Gateway and Payment Service