Search results

Hardcoded Flask Secret Key & CORS Origins (SECURITY)

Status: Open.

#47 In OSeMOSYS/MUIO;

· linisha15 opened on Mar 13, 2026

(SECURITY BUG) Path Traversal Vulnerability in Download Endpoints

Status: Open.

#45 In OSeMOSYS/MUIO;

· linisha15 opened on Mar 13, 2026

Bug: /myfunc endpoint crashes with TypeError

Status: Open.

#44 In OSeMOSYS/MUIO;

· linisha15 opened on Mar 12, 2026

Enforce request size limits to prevent unbounded file uploads

Status: Open.

#40 In OSeMOSYS/MUIO;

· Aaravanand00 opened on Feb 25, 2026

Clarify environment variable and .env configuration strategy

Status: Open.

#39 In OSeMOSYS/MUIO;

· Aaravanand00 opened on Feb 25, 2026

Fix race condition in ZIP download cleanup and remove broken legacy route

Status: Open.

#37 In OSeMOSYS/MUIO;

· arnchlmcodes opened on Feb 21, 2026

[SECURITY] Path Traversal + ZIP Slip allow arbitrary filesystem read/write/delete

Status: Open.

#34 In OSeMOSYS/MUIO;

· arnchlmcodes opened on Feb 21, 2026

Add a simple backend health check endpoint (/health)

Status: Open.

#29 In OSeMOSYS/MUIO;

· Aaravanand00 opened on Feb 20, 2026

Add global Flask error handlers for 404 and 500 responses

Status: Open.

#28 In OSeMOSYS/MUIO;

· Aaravanand00 opened on Feb 20, 2026

[SECURITY/STABILITY] Move hardcoded secrets and config to environment variables

Status: Open.

#25 In OSeMOSYS/MUIO;

· adity0208 opened on Feb 20, 2026

Standardize Flask API responses to a consistent JSON schema

Status: Open.

#24 In OSeMOSYS/MUIO;

· Aaravanand00 opened on Feb 20, 2026

Frontend Modernization: Introduce Vite-based bundling workflow (non-breaking)

Status: Open.

#21 In OSeMOSYS/MUIO;

· sairamsharan opened on Feb 20, 2026