Search results

[SECURITY] Error handler middleware exposes full Express stack traces in JSON responses

Status: Open.

#474 In Nsanjayboruds/RIVETO;

· anshul23102 opened on Jul 13, 2026

[SECURITY] User passwords hashed with MD5 or without proper salting - vulnerable to rainbow table attacks

Status: Open.

#473 In Nsanjayboruds/RIVETO;

· anshul23102 opened on Jul 13, 2026

[SECURITY] Missing X-Frame-Options header leaves application vulnerable to clickjacking attacks

Status: Open.

#472 In Nsanjayboruds/RIVETO;

· anshul23102 opened on Jul 13, 2026

[SECURITY] JWT secret committed as placeholder in .env.example - cloned deployments run with known secret

Status: Open.

#471 In Nsanjayboruds/RIVETO;

· anshul23102 opened on Jul 13, 2026

[SECURITY] CORS configured with wildcard origin on authenticated routes allowing cross-origin credential reads

Status: Open.

#470 In Nsanjayboruds/RIVETO;

· anshul23102 opened on Jul 13, 2026

[ENHANCEMENT]: Implement Pre-start Environment Variable Verification Script for Backend

enhancementNew feature or requestNew feature or request

Status: Open.

#468 In Nsanjayboruds/RIVETO;

· DeepeshKafalatiya opened on Jul 13, 2026

[Bug]: isAuth reads decoded.userId while JWTs are signed with { id }, causing authenticated routes to fail

bugSomething isn't workingSomething isn't working

Status: Open.

#467 In Nsanjayboruds/RIVETO;

· bh462007 opened on Jul 12, 2026

[FEATURE]: Add CSRF protection for cookie-based authentication using the double-submit cookie pattern

enhancementNew feature or requestNew feature or request

Status: Open.

#464 In Nsanjayboruds/RIVETO;

· bh462007 opened on Jul 12, 2026

[FEATURE]: Add Redis-backed shared rate limiting with graceful in-memory fallback

enhancementNew feature or requestNew feature or request

GSSoC '26

level:advanced

type:feature

Status: Open.

#463 In Nsanjayboruds/RIVETO;

· bh462007 opened on Jul 12, 2026

[FEATURE]: Add a coupon and discount code system with secure server-side validation

enhancementNew feature or requestNew feature or request

Status: Open.

#462 In Nsanjayboruds/RIVETO;

· bh462007 opened on Jul 12, 2026

[GSSoC26] feat: Add consistent API error response format middleware

Status: Open.

#456 In Nsanjayboruds/RIVETO;

· ashrion opened on Jul 11, 2026

[GSSoC26] feat: Add MongoDB connection retry logic with exponential backoff

Status: Open.

#455 In Nsanjayboruds/RIVETO;

· ashrion opened on Jul 11, 2026