Open Issues Need Help
View All on GitHub Low Handing Fruit Automation about 3 hours ago
bug documentation good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $700
Upload endpoint lacks authentication — unauthenticated file uploads allowed about 12 hours ago
bug good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $430
Payment endpoint lacks authentication — unauthenticated payment creation about 12 hours ago
bug good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $430
Bug: Missing admin role authorization check on admin metrics endpoint about 12 hours ago
bug good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $430
Bug: user creation accepts empty payloads and client-controlled ids about 12 hours ago
bug good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $430
User creation endpoint has no input validation about 13 hours ago
bug good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $430
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $780
CORS configured without origin allowlist in app.js (reissue via #743) about 15 hours ago
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $780
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $780
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $780
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
Calculate the exact value of PI 1 day ago
bug documentation good first issue help wanted bug bounty AI agent friendly bounty $1.2k
Automate Bug Detection and Reviews 3 days ago
bug documentation enhancement good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $780 $1k $1.2k
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $780
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $780
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $780
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $750
bug good first issue bug bounty AI agent friendly bounty 💎 Bounty $350
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
Implement a fully functional Admin Panel 13 days ago
good first issue bug bounty AI agent friendly bounty 💎 Bounty $1k $1
Technical Poem Generation and Content Creation 13 days ago
good first issue bug bounty AI agent friendly bounty 💎 Bounty $430
Pixel Art Creation with high Creative Thinking 13 days ago
good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $780
Calculate the exact value of PI #2872 13 days ago
bug documentation good first issue help wanted bug bounty AI agent friendly bounty $1.2k
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
Refresh token endpoint ignores the provided refresh token about 1 month ago
bug good first issue help wanted bug bounty AI agent friendly bounty
Registration token subject can drift from returned user id about 1 month ago
bug good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $430
fix(auth): prevent admin role self-assignment during registration about 1 month ago
bug good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $430
Bug: Proposal creation accepts records missing estimated duration about 1 month ago
bug good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $430
Bug: Refresh endpoint mints tokens without validating a refresh token about 1 month ago
bug good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $430
Admin routes lack role-based access control — any authenticated user can access admin endpoints about 1 month ago
bug good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $430
@freelanceflow/ui package entrypoint should be directly importable (reissue via #743) about 1 month ago
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
Notification creation should preserve server-owned id and read state about 1 month ago
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
Payment API should require authentication about 1 month ago
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
fix: prevent admin role self-assignment during registration about 1 month ago
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
fix: enforce authentication on job creation endpoint about 1 month ago
bug good first issue help wanted bug bounty AI agent friendly bounty
fix: prevent admin role self-assignment about 1 month ago
bug good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $430
fix: prevent admin role self-assignment during registration about 1 month ago
bug good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $430
fix: prevent admin role self-assignment about 1 month ago
bug documentation good first issue bug bounty AI agent friendly bounty 💎 Bounty $700
Bug: Multiple security vulnerabilities in API layer - registerUser() ID mismatch, missing auth, missing validation about 1 month ago
bug good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $430
Search endpoint has no input validation or length limit on query about 1 month ago
bug good first issue help wanted bug bounty AI agent friendly bounty
CORS configured with no origin restrictions — allows any domain about 2 months ago
bug good first issue help wanted bug bounty AI agent friendly bounty
Job creation endpoint lacks authentication — anyone can post jobs about 2 months ago
bug good first issue help wanted bug bounty AI agent friendly bounty
Patch PostCSS audit advisory from Next dependency lockfile about 2 months ago
bug good first issue help wanted bug bounty AI agent friendly bounty
bug good first issue help wanted bug bounty AI agent friendly bounty
Settings page should provide actionable account controls about 2 months ago
bug good first issue help wanted bug bounty AI agent friendly bounty
Settings page should provide actionable account controls about 2 months ago
bug good first issue help wanted bug bounty AI agent friendly bounty
Bug: Admin role self-assignment via registration endpoint about 2 months ago
bug good first issue help wanted bug bounty AI agent friendly bounty
Job detail page should render matching mock job and unknown fallback about 2 months ago
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
Job detail route should resolve mock jobs by id about 2 months ago
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
Freelancer profile should render matching mock profile and unknown fallback about 2 months ago
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
Registration token subject should match returned user id about 2 months ago
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
Registration should require fullName to match User model about 2 months ago
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
@freelanceflow/db package should expose an importable workspace entrypoint about 2 months ago
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
@freelanceflow/ui package entrypoint should be directly importable about 2 months ago
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
Job detail route should resolve mock jobs by id (reissue via #743) about 2 months ago
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
Settings page should provide actionable account controls about 2 months ago
bug enhancement good first issue help wanted bug bounty AI agent friendly bounty
Bug: registerUser signs token with a different generated user id about 2 months ago
bug good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $430
Bug: Rate limiter should count malformed JSON before body parsing about 2 months ago
bug good first issue help wanted bug bounty AI agent friendly bounty 💎 Bounty $430