Skip to content

Pull requests: ASCIT31/juice-shop

New pull request New
57 Open 0 Closed
57 Open 0 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

fix: Quarantine Directory Exposes Malware Samples
#57 opened Sep 16, 2026 by MBK-fr Contributor Loading…
fix: Open Redirect via Allowlisted Domains
#56 opened Sep 16, 2026 by MBK-fr Contributor Loading…
fix: No Content Security Policy - Unrestricted Inline Script Execution
#55 opened Sep 16, 2026 by MBK-fr Contributor Loading…
fix: All User Authentication Details Exposed via REST API
#54 opened Sep 16, 2026 by MBK-fr Contributor Loading…
fix: Confidential FTP Documents and KeePass Database Publicly Accessible
#53 opened Sep 16, 2026 by MBK-fr Contributor Loading…
fix: JWT Token Contains Full User Object Including Password Hash
#52 opened Sep 16, 2026 by MBK-fr Contributor Loading…
fix: JWT RSA Public Key Exposed at /encryptionkeys/jwt.pub
#51 opened Sep 16, 2026 by MBK-fr Contributor • Draft
fix: Password Hash and Deluxe Token Leak via /rest/memories API
#50 opened Sep 16, 2026 by MBK-fr Contributor Loading…
fix: IDOR - Unauthorized Access to All User Baskets
#49 opened Sep 16, 2026 by MBK-fr Contributor Loading…
fix: Admin Role Registration via API Parameter Injection
#48 opened Sep 16, 2026 by MBK-fr Contributor Loading…
fix: Score Board Hidden Route Accessible (Information Disclosure)
#47 opened Sep 16, 2026 by MBK-fr Contributor • Draft
fix: DOM XSS via Search Parameter - Multiple Payload Vectors
#46 opened Sep 16, 2026 by MBK-fr Contributor • Draft
fix: Sensitive Mnemonic Phrase Exposed in Customer Feedback
#45 opened Sep 16, 2026 by MBK-fr Contributor • Draft
fix: Hardcoded Test Password in Frontend JavaScript Bundle
#44 opened Sep 16, 2026 by MBK-fr Contributor • Draft
fix: Wildcard CORS (Access-Control-Allow-Origin: *)
#43 opened Sep 16, 2026 by MBK-fr Contributor Loading…
fix: Zero Stars Feedback Validation Bypass
#42 opened Sep 16, 2026 by MBK-fr Contributor Loading…
fix: CSAF Security Advisories Exposed
#41 opened Sep 16, 2026 by MBK-fr Contributor • Draft
fix: Missing Security Headers (CSP, HSTS, etc.)
#40 opened Sep 16, 2026 by MBK-fr Contributor Loading…
fix: Blueprint/CAD File Exposed (JuiceShop.stl)
#39 opened Sep 16, 2026 by MBK-fr Contributor • Draft
fix: Access Logs Publicly Accessible
#38 opened Sep 16, 2026 by MBK-fr Contributor Loading…
fix: Prometheus Metrics Exposed Without Authentication
#37 opened Sep 16, 2026 by MBK-fr Contributor Loading…
fix: CAPTCHA Answer Leaked in API Response
#36 opened Sep 16, 2026 by MBK-fr Contributor Loading…
fix: Open Redirect Bypass via @ Character
#35 opened Sep 16, 2026 by MBK-fr Contributor Loading…
fix: Ethereum Wallet Mnemonic Leaked in Public Feedback
#34 opened Sep 16, 2026 by MBK-fr Contributor • Draft
fix: FTP Directory with Sensitive Backup Files Exposed
#33 opened Sep 16, 2026 by MBK-fr Contributor Loading…
ProTip! Adding no:label will show everything without a label.