-
Notifications
You must be signed in to change notification settings - Fork 979
Pull requests: Countly/countly-server
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
security(core): scope auth tokens with explicit CRUD permissions and server-assigned login (24.05)
#7964
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
security(core): scope auth tokens with explicit CRUD permissions and server-assigned login
#7963
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
security(compliance-hub): HTML-encode the application name in the export-history action cell (24.05)
#7962
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
security(compliance-hub): HTML-encode the application name in the export-history action cell
#7961
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
security(core): reject the RFC 8215 local-use NAT64 prefix in the SSRF filter (24.05)
#7960
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
security(core): reject the RFC 8215 local-use NAT64 prefix in the SSRF filter
#7959
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
security(star-rating): authorize the /o?method=star ratings read (24.05)
#7956
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
security(star-rating): authorize the /o?method=star ratings read
#7955
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
[security][core] escape values at dashboard html sinks the api escaper does not cover
#7954
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
security(star-rating): forward only the widget's own parameters from /i/feedback/input (24.05)
#7953
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
security(star-rating): forward only the widget's own parameters from /i/feedback/input
#7952
opened Aug 18, 2026 by
ar2rsawseen
Member
Loading…
build(deps): Bump @faker-js/faker from 10.5.0 to 10.6.0 in /ui-tests
dependencies
Pull requests that update a dependency file
#7951
opened Aug 18, 2026 by
dependabot
Bot
Loading…
security(core): escape "<" in the res.expose script island (24.05)
#7950
opened Aug 17, 2026 by
ar2rsawseen
Member
Loading…
security(core): escape "<" in the res.expose script island (stored XSS via app name)
#7949
opened Aug 17, 2026 by
ar2rsawseen
Member
Loading…
[fix][push] check audience filter operators on the estimate endpoint (24.05)
#7948
opened Aug 17, 2026 by
ar2rsawseen
Member
Loading…
[fix][push] check audience filter operators on the estimate endpoint
#7947
opened Aug 17, 2026 by
ar2rsawseen
Member
Loading…
[fix][core] restrict export projections to include and exclude (24.05)
#7946
opened Aug 17, 2026 by
ar2rsawseen
Member
Loading…
[fix][core] restrict export projections to include and exclude
#7945
opened Aug 17, 2026 by
ar2rsawseen
Member
Loading…
[fix][hooks] keep app credentials out of the effect payload (24.05)
#7942
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
[fix][hooks] keep app credentials out of the effect payload
#7941
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
[fix][core] stop returning credentials from the current user endpoint (24.05)
#7940
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
[fix][core] stop returning credentials from the current user endpoint
#7939
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
[fix][core] validate scalar request parameter types before using them in queries (24.05)
#7938
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
[fix][core] validate scalar request parameter types before using them in queries
#7937
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
[fix][views] apply the token owner's read right on the heatmap endpoint (24.05)
#7936
opened Aug 14, 2026 by
ar2rsawseen
Member
Loading…
Previous Next
ProTip!
Filter pull requests by the default branch with base:master.