Search results

[Bounty] - Unauthenticated full-read SSRF in the DRep Campaign Platform API (metadataUrl fetched server-side)

Status: Open.

#15 In IntersectMBO/drep-campaign-platform;

· Hornan7 opened on Jun 25, 2026

[Bounty] - Unauthenticated SQL injection in the DRep Campaign Platform API (stakeKey pasted into a raw query)

Status: Open.

#14 In IntersectMBO/drep-campaign-platform;

· Hornan7 opened on Jun 25, 2026

[Bounty] - Hardcoded JWT Signing Secret in Public Repository + /auth/login Signs Any Payload Without Verification — Full Authentication Bypass on Every Deployment

Status: Open.

#13 In IntersectMBO/drep-campaign-platform;

· Hornan7 opened on May 28, 2026

New Governance Metric - OSC Governance/Security TWG

documentationImprovements or additions to documentationImprovements or additions to documentation

Status: Open.

#9 In IntersectMBO/drep-campaign-platform;

· Ranchhand87 opened on Sep 13, 2024

Missing Documentation per OSC Governance

documentationImprovements or additions to documentationImprovements or additions to documentation

Status: Open.

#6 In IntersectMBO/drep-campaign-platform;

· Ranchhand87 opened on Jul 1, 2024