carrot_bbs/backend
4
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity
Pulse Contributors Code Frequency Recent Commits

2026-01-08 - 2026-07-08
Period: 6 months
1 day 3 days 1 week 1 month 3 months 6 months 1 year

Overview

4 Active Pull Requests
10 Active Issues
4
Merged Pull Requests 0
Proposed Pull Requests 8
Closed Issues 10
New Issues
Excluding merges, 3 authors have pushed 146 commits to master and 153 commits to all branches. On master, 341 files have changed and there have been 89312 additions and 21639 deletions.

4 Pull requests merged by 1 user

Merged #4 feature/flea-market 2026-04-26 19:44:32 +08:00

Merged #3 refactor(trade): remove OriginalPrice and Location fields from trade items 2026-04-26 17:19:13 +08:00

Merged #2 feat(trade): implement second-hand trading/flea market feature 2026-04-26 15:21:31 +08:00

Merged #1 feat: 添加日志管理和敏感词过滤功能 2026-03-15 12:10:14 +08:00

8 Issues closed from 1 user

Closed #9 [LOW] JWT 载荷含敏感信息 + 缺少安全响应头 2026-04-30 12:23:20 +08:00

Closed #10 [HIGH] SSRF 漏洞：用户可控 URL 未验证即发起 HTTP 请求 2026-04-30 12:23:20 +08:00

Closed #11 [MEDIUM] HTTP Server 缺少超时配置：Slowloris DoS 攻击风险 2026-04-30 12:23:20 +08:00

Closed #5 [CRITICAL] 大规模 IDOR 漏洞：Delete/Update 操作缺失所有权检查 2026-04-30 12:23:20 +08:00

Closed #6 [HIGH] SetupSuperAdmin 接口暴露：无速率限制，可被爆破 2026-04-30 12:23:20 +08:00

Closed #8 [MEDIUM] 缺失全局速率限制：登录、注册、密码重置接口可被爆破 2026-04-30 12:23:20 +08:00

Closed #13 [MEDIUM] Email TLS 证书校验可被禁用：InsecureSkipVerify 配置风险 2026-04-30 12:23:20 +08:00

Closed #14 [LOW] SQL LIKE 查询未转义通配符：用户输入可导致全表扫描/数据泄露 2026-04-30 12:23:20 +08:00

10 Issues created by 1 user

Opened #5 [CRITICAL] 大规模 IDOR 漏洞：Delete/Update 操作缺失所有权检查 2026-04-30 03:44:14 +08:00

Opened #6 [HIGH] SetupSuperAdmin 接口暴露：无速率限制，可被爆破 2026-04-30 03:44:39 +08:00

Opened #7 [MEDIUM] CORS 配置过于宽松：子域名通配 + localhost 任意端口 2026-04-30 03:45:06 +08:00

Opened #8 [MEDIUM] 缺失全局速率限制：登录、注册、密码重置接口可被爆破 2026-04-30 03:48:43 +08:00

Opened #9 [LOW] JWT 载荷含敏感信息 + 缺少安全响应头 2026-04-30 03:49:01 +08:00

Opened #10 [HIGH] SSRF 漏洞：用户可控 URL 未验证即发起 HTTP 请求 2026-04-30 03:55:40 +08:00

Opened #11 [MEDIUM] HTTP Server 缺少超时配置：Slowloris DoS 攻击风险 2026-04-30 03:55:59 +08:00

Opened #12 [LOW] fmt.Sscanf 返回值未检查：可能导致逻辑错误 2026-04-30 03:56:18 +08:00

Opened #13 [MEDIUM] Email TLS 证书校验可被禁用：InsecureSkipVerify 配置风险 2026-04-30 03:56:36 +08:00

Opened #14 [LOW] SQL LIKE 查询未转义通配符：用户输入可导致全表扫描/数据泄露 2026-04-30 03:56:58 +08:00