All issues

Search results

OAuth /rest/v1/callback continues after Flask session state mismatch (missing return)

Status: Open.

#1021In OWASP/OpenCRE;

· shiwani42 opened on Aug 16, 2026

REST 404s return generic "Resource Not found" and drop abort() descriptions

Status: Open.

#1020In OWASP/OpenCRE;

· shiwani42 opened on Aug 16, 2026

Add AVE (Agentic Vulnerability Enumeration) mappings — Batch 1 (3 pilot mappings)

Status: Open.

#1017In OWASP/OpenCRE;

· chaksaray opened on Aug 15, 2026

Add AISVS 1.0 mappings

Status: Open.

#1016In OWASP/OpenCRE;

· ottosulin opened on Aug 14, 2026

Add OWASP Top 10 for LLM Applications 2026 as a mapped resource

Status: Open.

#1015In OWASP/OpenCRE;

· rocklambros opened on Aug 14, 2026

Gap-analysis tests silently connect to real Redis instead of the mock, causing flaky/order-dependent failures

Status: Open.

#1009In OWASP/OpenCRE;

· DevPatils opened on Aug 10, 2026

Feature: MCP server exposing REST API with identical authz (incl. MyOpenCRE)

good first issueGood for newcomersGood for newcomers

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#1003In OWASP/OpenCRE;

· northdpole opened on Aug 2, 2026

maintainer: drop SQLite — Postgres-only OpenCRE (Makefile, CI, local cache)

Status: Open.

#982In OWASP/OpenCRE;

· northdpole opened on Jul 15, 2026

E2E: migrate frontend to Cypress (consolidate #729 + #774); keep Python Playwright

good first issueGood for newcomersGood for newcomers

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#967In OWASP/OpenCRE;

· northdpole opened on Jul 8, 2026

Auth-wrap POST /rest/v1/cre_csv_import (deprecate anonymous MyOpenCRE import)

Status: Open.

#966In OWASP/OpenCRE;

· northdpole opened on Jul 8, 2026

MyOpenCRE mapping: reuse Module C Librarian retriever/reranker (RFC TODO 3)

Status: Open.

#965In OWASP/OpenCRE;

· northdpole opened on Jul 8, 2026

Auth: migrate OAuth routes from /rest/v1/login to /rest/v1/auth/*

Status: Open.

#963In OWASP/OpenCRE;

· northdpole opened on Jul 8, 2026