issueopenedPerformance: continuous-time reservoirs (PR4 of #397)SciML/ReservoirComputing.jlupstream·6d ago·open ↗11:30 AM
issueopeneddelete_student leaves orphaned Lesson Doubt rows with the child's PII and free-text questionfossdot/hikmatupstream·Jun 26·open ↗10:53 PM
issueopenedBearer-token auth bypassed for any student whose auth_token row is empty (_token_ok returns True)fossdot/hikmatupstream·Jun 26·open ↗10:26 PM
issueopenedPre-auth DoS on login_by_name: full-table scan per call + bypassable lockoutfossdot/hikmatupstream·Jun 26·open ↗10:07 PM
issueopenedPre-auth account takeover of PIN-less students via public roster + login_studentfossdot/hikmatupstream·Jun 26·open ↗09:47 PM
issueopenedStored XSS in Lesson Email slot labels — unescaped innerHTML interpolationfossdot/hikmatupstream·Jun 26·open ↗08:20 PM