-
-
Notifications
You must be signed in to change notification settings - Fork 1.1k
Pull requests: Leantime/leantime
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
fix(security): stop invite-email spam via unsanitized names + missing rate limits
#3661
opened Jul 17, 2026 by
marcelfolaron
Collaborator
Loading…
fix: remove cron.run from public actions to prevent unauthenticated CRON access (CWE-306)
#3660
opened Jul 17, 2026 by
javokhir-sec
Loading…
fix: enable VerifyCsrfToken middleware globally to prevent CSRF (CWE-352)
#3659
opened Jul 17, 2026 by
javokhir-sec
Loading…
fix: use resolveSafeRedirect() in Login POST handler to prevent Open Redirect (CWE-601)
#3658
opened Jul 17, 2026 by
javokhir-sec
Loading…
fix: add project ownership check to getMilestone() to prevent IDOR (CWE-639)
#3657
opened Jul 17, 2026 by
javokhir-sec
Loading…
fix: validate file path in Blueprints::import() to prevent SSRF/LFI (CWE-918)
#3656
opened Jul 17, 2026 by
javokhir-sec
Loading…
test(pgmpro/resources): coverage for security guards + updateBudgetItem regression
#3655
opened Jul 17, 2026 by
gloriafolaron
Contributor
Loading…
feat(users): weekly_hours + employment_type on user (Slice 1)
#3653
opened Jul 16, 2026 by
gloriafolaron
Contributor
Loading…
3 tasks done
feat(strategypro): reverse-engineer flow — Outcomes pilot (submodule bump + tests)
#3651
opened Jul 15, 2026 by
gloriafolaron
Contributor
Loading…
3 tasks
fix(tickets): record status→Done in history + report real last-updated
#3650
opened Jul 14, 2026 by
gloriafolaron
Contributor
Loading…
feat(tickets): getMyCommentedTicketsForRange for Progress "Supported"
#3649
opened Jul 14, 2026 by
gloriafolaron
Contributor
Loading…
feat(reports): stakeholder report — Phase 1 shell (deck, header, navigation)
#3648
opened Jul 14, 2026 by
gloriafolaron
Contributor
Loading…
6 tasks
feat(tickets): getMyClosedTicketsForRange for period close-lists
#3647
opened Jul 14, 2026 by
gloriafolaron
Contributor
Loading…
feat(core): Resources contract surface — gateway, registry, value objects, shared blade primitives
#3645
opened Jul 14, 2026 by
gloriafolaron
Contributor
Loading…
4 of 6 tasks
fix(content-templates): polish batch — Phase 4 slug bug, status label rendering, typos
#3644
opened Jul 13, 2026 by
gloriafolaron
Contributor
Loading…
3 of 6 tasks
feat(reports): period-based status report screens + shared report engine
#3643
opened Jul 13, 2026 by
marcelfolaron
Collaborator
Loading…
fix(timesheets): show a user's own general-work (no-project) time in account reads
#3642
opened Jul 13, 2026 by
gloriafolaron
Contributor
Loading…
fix(tickets): assign ticketParents on NewTicket POST validation-failure path (#3640)
#3641
opened Jul 13, 2026 by
marcelfolaron
Collaborator
•
Draft
6 tasks
fix(tickets): exclude archived-project tickets from getAllOpenUserTickets
Bug
#3639
opened Jul 12, 2026 by
gloriafolaron
Contributor
Loading…
fix(projects): getProjectsByUserActivity excludes archived projects (projectStatus 'open')
Bug
#3638
opened Jul 12, 2026 by
gloriafolaron
Contributor
Loading…
feat(oidc): mobile SSO bridge — one-time-code → bearer token exchange (generic OIDC)
Feature
#3637
opened Jul 12, 2026 by
gloriafolaron
Contributor
Loading…
Swap invalid "if" for valid name=value pairs in Goal input
#3634
opened Jul 10, 2026 by
komali2
Loading…
1 of 3 tasks
ProTip!
Type g i on any issue or pull request to go back to the issue listing page.