All pull requests

Pull requests

• OTWO-7736 Update OpenHub S3 Upload Configuration for Private Bucket P…

  #1952·Niharika1117 opened Sep 23, 2026Contributor·

  ·

• OTWO-7733 Update env file

  #1951·Priya5 opened Sep 23, 2026Contributor·

  ·

• OTWO-7718 CWE-918: SSRF via repository enlistment URL — FIS bot perfo…

  #1950·Niharika1117 opened Sep 15, 2026Contributor·

  ·
  6

• OTWO-7712 robots.txt discloses sensitive internal paths — login, perm…

  #1949·Niharika1117 opened Aug 31, 2026Contributor·

  ·
  2

• OTWO-7716 CWE-79/CWE-20: javascript: URI accepted in Homepage URL fie…

  #1948·Niharika1117 opened Aug 31, 2026Contributor·

  ·
  5

• OTWO-7731 Application Potentially Vulnerable to BREACH Attack (CVE-20…

  #1947·Niharika1117 opened Aug 31, 2026Contributor·

  ·
  3

• OTWO-7714 CWE-1104: Bootstrap 3.2.0 in use — XSS CVEs (CVE-2018-14041…

  #1946·Niharika1117 opened Aug 28, 2026Contributor·

  ·
  2

• OTWO-7715 CSP misconfigured — unsafe-inline, unsafe-eval, overly broa…

  #1945·Niharika1117 opened Aug 28, 2026Contributor·

  ·
  4

• OTWO-7707 Implemented OKTA AUTH for admins

  Don't merge
  #1944·bd-vaibhav opened Aug 14, 2026Contributor·

  ·
  6

• OTWO-7711 CWE-319: HSTS header missing — config.force_ssl disabled in…

  #1943·Niharika1117 opened Aug 14, 2026Contributor·

  ·
  3

• OTWO-7713 CWE-1021: Clickjacking — X-Frame-Options and CSP frame-ance…

  #1942·Niharika1117 opened Aug 13, 2026Contributor·

  ·
  3

• Remove outdated code

  #1940·Priya5 opened Aug 11, 2026Contributor·

  ·

• OTWO-7709 Authenticated pages missing Cache-Control: no-store — brows…

  #1939·Niharika1117 opened Aug 11, 2026Contributor·

  ·
  1

• OTWO-7705 Username enumeration via activation resend endpoint — disti…

  #1938·Niharika1117 opened Aug 11, 2026Contributor·

  ·
  3

• OTWO-7729 Project id and enlistment id relationship not validated in …

  #1937·Niharika1117 opened Aug 11, 2026Contributor·

  ·
  1

• OTWO-7717 Open redirect via referer header redirect_back uses allow_o…

  #1936·Niharika1117 opened Aug 11, 2026Contributor·

  ·
  2

• OTWO-7708 Removed default setup of remember_token cookie

  #1935·bd-vaibhav opened Aug 10, 2026Contributor·

  ·
  3

• OTWO-7725:enforce JWT expiration validation and update refresh token …

  #1934·kaushak-ai opened Aug 7, 2026·

  ·
  5

• OTWO-7704 Rate-limiting on password reset request

  #1933·bd-vaibhav opened Aug 5, 2026Contributor·

  ·
  7

• OTWO-7710 Invaidate concurrent session when password is changed

  #1932·bd-vaibhav opened Aug 3, 2026Contributor·

  ·
  3

• OTWO-7723 API Keys and JWT Tokens Transmitted in URL Query String — S……

  #1930·Niharika1117 opened Jul 30, 2026Contributor·

  ·
  5

• OTWO-7696 remediate high severity SAST findings in openHub ui codebase

  Don't merge
  #1924·Niharika1117 opened Jul 21, 2026Contributor·

  ·
  4

• OTWO-7670: Migrate domain from openhub.net to openhub.blackduck.com

  Don't merge
  #1908·kaushak-ai opened Jun 19, 2026·

  ·

• OTWO-7608 Add docker setup for ohloh-ui

  Don't merge
  #1890·ashutok036221 opened Apr 30, 2026·

  ·
  1

• OTWO-7546 Foundation UI Redesign - Shared Layout & Design System

  Don't merge
  #1880·Niharika1117 opened Mar 31, 2026Contributor·

  ·