Search results

Replace <code>alg: none</code> JWT with Weakly Signed JWT

good first issueGood for newcomersGood for newcomers

improvement

Status: Open.

#32 In kOaDT/oss-oopssec-store;

· kOaDT opened on Jan 21, 2026

XML Injection (XXE) in Supplier Order Import

flag

Status: Open.

#31 In kOaDT/oss-oopssec-store;

· kOaDT opened on Jan 21, 2026

Migrate authentication from localStorage to cookies for realistic CSRF demonstration

improvement

Status: Open.

#25 In kOaDT/oss-oopssec-store;

· kOaDT opened on Jan 17, 2026

Profile Takeover via Self-XSS + CSRF Chain

flag

Status: Open.

#18 In kOaDT/oss-oopssec-store;

· kOaDT opened on Jan 14, 2026

Insufficient Security Headers in Next.js Middleware

flag

Status: Open.

#17 In kOaDT/oss-oopssec-store;

· kOaDT opened on Jan 14, 2026

Encrypted Coupon (AES-CBC Padding Oracle)

flag

Status: Open.

#16 In kOaDT/oss-oopssec-store;

· kOaDT opened on Jan 14, 2026