Search results

Bug: API play_card crashes with 500 error when player_id doesn't belong to game_id

Status: Open.

#2562 In OWASP/cornucopia;

· Adarshkumar0509 opened on Mar 7, 2026

Critical Authorization Bypass: Self-Voting Vulnerability in Card Voting System

Status: Open.

#2561 In OWASP/cornucopia;

· khushal-winner opened on Mar 7, 2026

🚨Security Issue: play_card API Vulnerable to DoS Attack - 29% Success Rate Confirmed

Status: Open.

#2559 In OWASP/cornucopia;

· khushal-winner opened on Mar 7, 2026

Vote schema has empty changeset with no validation/required fields.

Status: Open.

#2557 In OWASP/cornucopia;

· khushal-winner opened on Mar 7, 2026

PostgreSQL RANDOM() in Card Shuffling Lacks Cryptographic Security

Status: Open.

#2556 In OWASP/cornucopia;

· khushal-winner opened on Mar 7, 2026

Raw Malicious Content Stored in Database Due to Missing Changeset Validation

Status: Open.

#2555 In OWASP/cornucopia;

· khushal-winner opened on Mar 7, 2026

Bug: <code>len(lang) == 2</code> filter in check_translations.py silently skips Norwegian and Portuguese translations entirely

Status: Open.

#2550 In OWASP/cornucopia;

· immortal71 opened on Mar 7, 2026

Bug: <code>cache.push</code> inside loop in <code>deckService.ts</code> causes <code>getCards()</code> to return mobileapp-only partial results after cache is warmed

Status: Open.

#2549 In OWASP/cornucopia;

· immortal71 opened on Mar 7, 2026

Bug: <code>handle_info</code> in game_live/show.ex always sets <code>requested_round = rounds_played + 1</code>, breaking finished game summary view

Status: Open.

#2548 In OWASP/cornucopia;

· immortal71 opened on Mar 7, 2026

Bug: <code>shortcode in subitem[\"Shortcode\"]</code> substring match in convert_capec.py generates wrong ASVS links

Status: Open.

#2547 In OWASP/cornucopia;

· immortal71 opened on Mar 7, 2026

Maintenance: Pin outdated GitHub Actions versions in CI workflows for supply chain security

bugSomething isn't workingSomething isn't working

github_actionsPull requests that update GitHub Actions codePull requests that update GitHub Actions code

Status: Open.

#2542 In OWASP/cornucopia;

· Adarshkumar0509 opened on Mar 6, 2026

Auto-Label Issues with GitHub Actions

enhancementNew feature or requestNew feature or request

github_actionsPull requests that update GitHub Actions codePull requests that update GitHub Actions code

Status: Open.

#2541 In OWASP/cornucopia;

· khushal-winner opened on Mar 6, 2026