Search results

Zap nightly scan for the cornucopia website

cornucopia.owasp.org

dockerPull requests that update Docker codePull requests that update Docker code

github_actionsPull requests that update GitHub Actions codePull requests that update GitHub Actions code

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#2764 In OWASP/cornucopia;

· sydseter opened on Apr 7, 2026

Update the CSP header for copi.owasp.org to include form-action 'self'.

bugSomething isn't workingSomething isn't working

copi.owasp.org

elixirPull requests that update elixir codePull requests that update elixir code

Status: Open.

#2763 In OWASP/cornucopia;

· sydseter opened on Apr 7, 2026

Issue: Duplicate helper function across taxonomy components

Status: Open.

#2761 In OWASP/cornucopia;

· Suresh-Krishna-P opened on Apr 6, 2026

Improve error handling in DeckService for missing markdown files (EoP readiness)

Status: Open.

#2747 In OWASP/cornucopia;

· theanand108 opened on Mar 29, 2026

Integrate the ts-standard for cornucopia.owasp.org

Status: Open.

#2647 In OWASP/cornucopia;

· sydseter opened on Mar 17, 2026

Add DBD card deck to copi.owasp.org

Status: Open.

#2640 In OWASP/cornucopia;

· SachinAditya opened on Mar 16, 2026

Bug: handle_event("next_round") always executes unconditional DB fetch and broadcast — intermediate returns are dead code

Status: Open.

#2632 In OWASP/cornucopia;

· immortal71 opened on Mar 15, 2026

Bug: play_card API endpoint allows playing cards on unstarted or finished games

Status: Open.

#2631 In OWASP/cornucopia;

· immortal71 opened on Mar 15, 2026

Prevent mixing npm and pnpm in the project

Status: Open.

#2623 In OWASP/cornucopia;

· Gurkiratcodemaster opened on Mar 13, 2026

Players can vote on cards game time/before/after completed rounds/finished game

Status: Open.

#2568 In OWASP/cornucopia;

· khushal-winner opened on Mar 8, 2026

Critical Authorization Bypass: Self-Voting Vulnerability in Card Voting System

Status: Open.

#2561 In OWASP/cornucopia;

· khushal-winner opened on Mar 7, 2026

🚨Security Issue: play_card API Vulnerable to DoS Attack - 29% Success Rate Confirmed

Status: Open.

#2559 In OWASP/cornucopia;

· khushal-winner opened on Mar 7, 2026