Search results

Authorization check missing in mergeSpecifiedPersons and

Status: Open.

#10914 In hcengineering/platform;

· johnweeklys opened on Jun 18, 2026

Bug: GitHub App configuration fails to load repository list after creating multiple workspaces

Status: Open.

#10913 In hcengineering/platform;

· Dpratap-y opened on Jun 18, 2026

Print service SSRF via missing hostname allowlist in default configuration

Status: Open.

#10908 In hcengineering/platform;

· geo-chen opened on Jun 13, 2026

[Bug] Error - Invalid Id: TypeMilestoneStatus

Status: Open.

#10900 In hcengineering/platform;

· AlexMattyou opened on Jun 4, 2026

[Feature] Clarification on Sprint Support and Project Planning Direction

Status: Open.

#10896 In hcengineering/platform;

· AlexMattyou opened on Jun 1, 2026

Technical Documentation - Unable to Locate Space

Status: Open.

#10894 In hcengineering/platform;

· clairk11 opened on May 27, 2026

Authenticated SSRF in front pod /import endpoint allows internal HTTPS scanning and exfiltration

Status: Open.

#10892 In hcengineering/platform;

· geo-chen opened on May 26, 2026

@hcengineering/* 0.7.423 still missing TypeScript declarations despite PR #10768

Status: Open.

#10881 In hcengineering/platform;

· dugynoo opened on May 24, 2026

Workflow uses secrets.R2_ACCESS_KEY_ID on a pull_request trigger

Status: Open.

#10870 In hcengineering/platform;

· repobilitycom opened on May 20, 2026

[SECURITY] - Server-Side Request Forgery (SSRF) in Print Service via Unvalidated link Parameter

Status: Open.

#10864 In hcengineering/platform;

· arexgodofwar opened on May 19, 2026

Account Info Disclosure -- Any Authenticated User Can Read Another User's Locale, Timezone, and 2FA Status

Status: Open.

#10863 In hcengineering/platform;

· geo-chen opened on May 19, 2026

Mailbox SMTP Secret Disclosure via Discarded Authorization Check Return Value

Status: Open.

#10862 In hcengineering/platform;

· geo-chen opened on May 19, 2026