Search results

Drone CI - refresh token grant should use user ID of OAuth client user instead of repo owner

Status: Open.

#3691 In harness/harness;

· ecmchow opened on May 23, 2026

[Security] ListAllGitspaces Authorization Bypass

Status: Open.

#3689 In harness/harness;

· geo-chen opened on May 19, 2026

[Security] Tar Slip Path Traversal + SSRF in Gitspace DevContainer Feature Download

Status: Open.

#3687 In harness/harness;

· icysun opened on May 7, 2026

GitLab Tag Push triggers Drone Pipeline with occasional cannot find YAML+OAuth error

Status: Open.

#3685 In harness/harness;

· wyl-zyzy opened on Apr 27, 2026

[BUG] Plain API content writes bypass push protection in pre-receive

Status: Open.

#3681 In harness/harness;

· shaun0927 opened on Apr 16, 2026

Bitbucket (Cloud) import does not support API tokens while App passwords are deprecated

Status: Open.

#3678 In harness/harness;

· elanclarkson opened on Apr 7, 2026

user id entered incorrectly

Status: Open.

#3675 In harness/harness;

· fengshunli opened on Apr 3, 2026

Google Wire

Status: Open.

#3674 In harness/harness;

· cmilesio opened on Apr 1, 2026

[feature] how about support sprig

Status: Open.

#3671 In harness/harness;

· nogolang opened on Mar 12, 2026

Use case-insensitive matching for Git error message "Not a valid object name"

Status: Open.

#3665 In harness/harness;

· mdferdousalam opened on Feb 23, 2026

Fix: UI URL generation missing '/-/' path segment

Status: Open.

#3661 In harness/harness;

· zhouyq opened on Jan 23, 2026

БД

Status: Open.

#3660 In harness/harness;

· sacha699612-hub opened on Jan 20, 2026