All issues

10y Roadmap and Manifesto
#4726 · kodjima33 opened on Feb 10, 2026
1

Make mobile capture status truthful

#14614

· thesohamdatta opened

on Sep 18, 2026

[Bounty proposal] fix(public-holidays): coerce null optional parameters, normalize year/limit inputs, and add regression tests ($25 proposed)

#14610

· onlymrneo opened

on Sep 18, 2026

[Bounty proposal] security(whoop-app): `error` OAuth parameter reflected raw into callback HTML (reflected XSS, no preconditions) ($25 proposed)

#14603

· Mateidslx opened

on Sep 18, 2026

[Bounty proposal] two plugin regression guards repaired and wired into CI (US$75 proposed)

#14597

· aceshaurya opened

on Sep 18, 2026

[Bounty proposal] fix(semantic-scholar): URL normalization, null limit coercion, and connection pooling ($25 proposed)

#14585

· onlymrneo opened

on Sep 18, 2026

[Bounty proposal] security(ms365): reflected HTML injection in setup uid and OAuth error page ($50 proposed)

#14582

· AllProjectschat opened

on Sep 18, 2026

[Bounty proposal] security: omi-dropbox-app reflects raw uid into setup-page HTML (reflected XSS) + stored folder_name sink ($75 proposed)

#14578

· t3ratech opened

on Sep 18, 2026

[Bounty proposal] docs(cli): Spanish agent quickstart and CSV export guide ($60 proposed)

#14576

· apb31 opened

on Sep 18, 2026

[Bounty proposal] docs(cli): Japanese (ja) agent quickstart ($25 proposed)

#14573

· knoauktasu5624-wq opened

on Sep 18, 2026

[Bounty proposal] docs(cli): bring quickstart.ja.md up to the current localized template ($25 proposed)

#14572

· knoauktasu5624-wq opened

on Sep 18, 2026

[Tested patch] Hacker News tools ignore JSON POST bodies after payload changed to Any

#14563

· Python840 opened

on Sep 18, 2026

[Bounty proposal] fix(crossref): normalize encoded DOI resolver URLs before lookup ($25 proposed)

#14523

· dvdphobia opened

on Sep 18, 2026