Issues

[Enhancement]: Add Docker and Docker Compose to streamline local setup

#641

· khushigoel44-afk opened

on Jul 9, 2026

[FEATURE] WhatsApp Campaign Step

#640

· anushkap0 opened

on Jul 9, 2026

[Easy - Docs] Update Readme Current Caveats sections to match current codebase as most listed issues are already fixed and Remove Duplicate Content in Readme

#636

· Rishita-Chouksey opened

on Jul 8, 2026

[Critical] [Security] No Two-Factor Authentication (2FA) / MFA implementation allows account takeover

#628

· ShreyasPatil3105 opened

on Jul 7, 2026

[Critical] [Security] No failed login attempt rate limiting or account lockout allows brute force attacks

#626

· ShreyasPatil3105 opened

on Jul 7, 2026

[Critical] [Security] Missing Content-Security-Policy (CSP) header allows XSS attacks

#624

· ShreyasPatil3105 opened

on Jul 7, 2026

[Critical] [Security] Weak password policy with only 8 character minimum

#622

· ShreyasPatil3105 opened

on Jul 7, 2026

[Critical] [Security] Outdated dependencies with known vulnerabilities

#620

· ShreyasPatil3105 opened

on Jul 7, 2026

[Critical] [Security] JWT uses default HS256 algorithm with SECRET_KEY (potential token forgery)

#618

· ShreyasPatil3105 opened

on Jul 7, 2026

[Critical] [Security] No email verification required for account activation allows fake account creation

#616

· ShreyasPatil3105 opened

on Jul 7, 2026

[Critical] [Security] Admin panel exposed at default /admin/ URL

#614

· ShreyasPatil3105 opened

on Jul 7, 2026

[Critical] [Security] Insecure session and CSRF cookie settings allow session hijacking over HTTP

#612

· ShreyasPatil3105 opened

on Jul 7, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Enhancement]: Add Docker and Docker Compose to streamline local setup

[FEATURE] WhatsApp Campaign Step

[Easy - Docs] Update Readme Current Caveats sections to match current codebase as most listed issues are already fixed and Remove Duplicate Content in Readme

[Critical] [Security] No Two-Factor Authentication (2FA) / MFA implementation allows account takeover

[Critical] [Security] No failed login attempt rate limiting or account lockout allows brute force attacks

[Critical] [Security] Missing Content-Security-Policy (CSP) header allows XSS attacks

[Critical] [Security] Weak password policy with only 8 character minimum

[Critical] [Security] Outdated dependencies with known vulnerabilities

[Critical] [Security] JWT uses default HS256 algorithm with SECRET_KEY (potential token forgery)

[Critical] [Security] No email verification required for account activation allows fake account creation

[Critical] [Security] Admin panel exposed at default /admin/ URL

[Critical] [Security] Insecure session and CSRF cookie settings allow session hijacking over HTTP

Search results