Issues

• feat(ctf): expose CWE, OWASP, CVE and the vulnerable sink in challenges.json

  improvement
  kOaDT/oss-oopssec-store#332 · Filter by author kOaDT opened on Sep 13, 2026

• feat(ctf): export the curriculum to CTFd / RootTheBox format

  ctfhelp wanted
  kOaDT/oss-oopssec-store#317 · Filter by author kOaDT opened on Sep 3, 2026

• feat(ctf): per-instance flags derived via HMAC(CTF_KEY, slug)

  ctfhelp wanted
  kOaDT/oss-oopssec-store#316 · Filter by author kOaDT opened on Sep 3, 2026

• refactor: source remaining hardcoded flags from the database

  improvement
  kOaDT/oss-oopssec-store#315 · Filter by author kOaDT opened on Sep 3, 2026

• formatDate is duplicated in two admin clients

  good first issueimprovement
  kOaDT/oss-oopssec-store#305 · Filter by author kOaDT opened on Aug 31, 2026

• npm run lint never fails on warnings

  good first issueimprovement
  kOaDT/oss-oopssec-store#303 · Filter by author kOaDT opened on Aug 31, 2026

• Challenge count in the README hero is not covered by the parity suite

  good first issueimprovement
  kOaDT/oss-oopssec-store#302 · Filter by author kOaDT opened on Aug 31, 2026

• Follow-up to #252: The flags table denylist on the SQLi routes is bypassable

  improvement
  kOaDT/oss-oopssec-store#279 · Filter by author kOaDT opened on Aug 14, 2026

• Guard lab artifacts behind the arbitrary-file-read primitives

  improvement
  kOaDT/oss-oopssec-store#252 · Filter by author kOaDT opened on Aug 11, 2026
  1

• Design: Create project logo, banners, and favicons

  good first issuehelp wantedimprovement
  kOaDT/oss-oopssec-store#130 · Filter by author kOaDT opened on Mar 9, 2026

• Refactor seed.ts by extracting mocked data into dedicated files

  good first issueimprovement
  kOaDT/oss-oopssec-store#54 · Filter by author kOaDT opened on Feb 12, 2026

• Insufficient Security Headers in Next.js Middleware

  flag
  kOaDT/oss-oopssec-store#17 · Filter by author kOaDT opened on Jan 14, 2026