-
Notifications
You must be signed in to change notification settings - Fork 979
Pull requests: Countly/countly-server
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
security(core): stop scoped tokens from escalating via token create and login (24.05)
#7958
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
security(core): stop scoped tokens from escalating via token create and login
#7957
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
security(star-rating): authorize the /o?method=star ratings read (24.05)
#7956
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
security(star-rating): authorize the /o?method=star ratings read
#7955
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
[security][core] escape values at dashboard html sinks the api escaper does not cover
#7954
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
security(star-rating): forward only the widget's own parameters from /i/feedback/input (24.05)
#7953
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
security(star-rating): forward only the widget's own parameters from /i/feedback/input
#7952
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
build(deps): Bump @faker-js/faker from 10.5.0 to 10.6.0 in /ui-tests
dependencies
Pull requests that update a dependency file
#7951
opened Aug 18, 2026 by
dependabot
Bot
Loading…
security(core): escape "<" in the res.expose script island (24.05)
#7950
opened Aug 17, 2026 by
ar2rsawseen
Member
Loading…
security(core): escape "<" in the res.expose script island (stored XSS via app name)
#7949
opened Aug 17, 2026 by
ar2rsawseen
Member
Loading…
[fix][push] check audience filter operators on the estimate endpoint (24.05)
#7948
opened Aug 17, 2026 by
ar2rsawseen
Member
Loading…
[fix][push] check audience filter operators on the estimate endpoint
#7947
opened Aug 17, 2026 by
ar2rsawseen
Member
Loading…
[fix][core] restrict export projections to include and exclude (24.05)
#7946
opened Aug 17, 2026 by
ar2rsawseen
Member
Loading…
[fix][core] restrict export projections to include and exclude
#7945
opened Aug 17, 2026 by
ar2rsawseen
Member
Loading…
[fix][hooks] keep app credentials out of the effect payload (24.05)
#7942
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
[fix][hooks] keep app credentials out of the effect payload
#7941
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
[fix][core] stop returning credentials from the current user endpoint (24.05)
#7940
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
[fix][core] stop returning credentials from the current user endpoint
#7939
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
[fix][core] validate scalar request parameter types before using them in queries (24.05)
#7938
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
[fix][core] validate scalar request parameter types before using them in queries
#7937
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
[fix][views] apply the token owner's read right on the heatmap endpoint (24.05)
#7936
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
[fix][views] apply the token owner's read right on the heatmap endpoint
#7935
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
[fix][core] keep the stored member language a language code (24.05)
#7933
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
[fix][core] keep the stored member language a language code
#7932
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
[fix][star-rating] keep the uploaded logo name inside the images directory (24.05)
#7931
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
Previous Next
ProTip!
Mix and match filters to narrow down what you’re looking for.