Vipin-Baniya/KalaOS - 6 Help Wanted Issues

Open Issues Need Help

Bug: POST /auth/forgot-password always returns HTTP 200 for any email, enables user enumeration about 5 hours ago

good first issue gssoc:approved level:advanced quality:clean type:bug type:security

KalaOS is an AI-native art platform for creation, streaming, and distribution that preserves artistic intent, credits effort, and prioritizes human dignity over engagement.

Python

Security: in-memory token revocation list cleared on restart, revoked tokens become valid again about 5 hours ago

good first issue gssoc:approved level:advanced quality:clean type:bug

Vipin-Baniya/KalaOS

KalaOS is an AI-native art platform for creation, streaming, and distribution that preserves artistic intent, credits effort, and prioritizes human dignity over engagement.

Python

Security: POST /auth/forgot-password returns plaintext reset token in response when SMTP unconfigured about 5 hours ago

good first issue gssoc:approved level:advanced quality:clean type:security

Vipin-Baniya/KalaOS

KalaOS is an AI-native art platform for creation, streaming, and distribution that preserves artistic intent, credits effort, and prioritizes human dignity over engagement.

Python

Security: KALA_CORS_ORIGINS defaults to wildcard '*', any origin makes credentialed API requests about 5 hours ago

good first issue gssoc:approved level:advanced quality:clean type:bug type:security

Vipin-Baniya/KalaOS

KalaOS is an AI-native art platform for creation, streaming, and distribution that preserves artistic intent, credits effort, and prioritizes human dignity over engagement.

Python

Security: KALA_SECRET defaults to 'change-me-in-production' in docker-compose.yml, tokens forgeable about 5 hours ago

good first issue gssoc:approved level:advanced quality:clean type:bug

Vipin-Baniya/KalaOS

KalaOS is an AI-native art platform for creation, streaming, and distribution that preserves artistic intent, credits effort, and prioritizes human dignity over engagement.

Python

Bug: CORS allow_origins=* with allow_credentials=True breaks authenticated requests 13 days ago

good first issue gssoc:approved

Vipin-Baniya/KalaOS

KalaOS is an AI-native art platform for creation, streaming, and distribution that preserves artistic intent, credits effort, and prioritizes human dignity over engagement.

Python