Go to issue

Labels Milestones New Issue

0 Open 107 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

api

bug

concurrency

config

data-integrity

dead-code

documentation

duplicate

enhancement

help wanted

invalid

needs-decision

notifications

performance

priority/docs

priority/high

priority/low

priority/medium

question

rate-limiting

reliability

security

ux

wontfix

workflow

Milestone

All milestones No milestones

Project

All projects No project

Author

All users

Assignee

Assigned to nobody Assigned to anybody

cole (Cole Keller) jared (Jared Vititoe) nathan (Nathan Vititoe)

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

0 Open 107 Closed

Label

Clear labels

api

bug

concurrency

config

data-integrity

dead-code

documentation

duplicate

enhancement

help wanted

invalid

needs-decision

notifications

performance

priority/docs

priority/high

priority/low

priority/medium

question

rate-limiting

reliability

security

ux

wontfix

workflow

Milestone

No milestone

Projects

Clear projects

Assignee

Clear assignees

cole

jared

nathan

Custom field values have no server-side validation against field_type or select options priority/mediumsecurity

#50

by jared was closed 2026-09-11 13:48:31 -04:00

1

User Activity report: "Tickets Assigned" column filters by ticket creation date, not assignment date priority/mediumreliability

#49

by jared was closed 2026-09-11 22:20:13 -04:00

1

api/notifications.php: in-app notifications don't re-check current ticket visibility notificationspriority/mediumsecurity

#48

by jared was closed 2026-09-11 13:48:31 -04:00

1

Custom Fields feature is entirely disconnected from ticket creation/editing/viewing priority/highux

#47

by jared was closed 2026-09-11 13:17:43 -04:00

1

Confidential/internal ticket titles leak to Matrix on create/status-change (NotificationHelper missing visibility check) notificationspriority/highsecurity

#46

by jared was closed 2026-09-11 11:27:06 -04:00

1

README.md Project Structure tree is stale (missing error views, config/requirements.php, migration 001) documentationpriority/docs

#45

by jared was closed 2026-09-11 15:20:22 -04:00

1

ESLint: ~20 empty catch blocks and ~6 loose equality comparisons in assets/js/ dead-codepriority/low

#44

by jared was closed 2026-09-11 15:20:22 -04:00

1

base.js: unused lt.markdown module has no URL-protocol allowlist on links — latent stored-XSS trap dead-codepriority/lowsecurity

#43

by jared was closed 2026-09-11 15:20:22 -04:00

1

api/get_users.php: unrestricted user enumeration, no pagination or admin gate priority/lowsecurity

#42

by jared was closed 2026-09-08 20:46:36 -04:00

1

Collation inconsistency: saved_filters and ticket_attachments use utf8mb4_unicode_ci instead of the documented utf8mb4_general_ci convention data-integritypriority/medium

#41

by jared was closed 2026-09-08 20:46:36 -04:00

1

Inconsistent FK ON DELETE behavior: bulk_operations.performed_by and ticket_templates.created_by default to RESTRICT data-integritypriority/medium

#40

by jared was closed 2026-09-08 20:46:35 -04:00

1

13 of 33 API endpoints never disable display_errors — potential stack-trace leak priority/mediumsecurity

#39

by jared was closed 2026-09-11 12:23:59 -04:00

1

ErrorHandler.php documented as global but only wired into 1 of 33 API endpoints priority/mediumreliability

#38

by jared was closed 2026-09-11 12:23:59 -04:00

1

Required-comment status-change flow isn't transactional (client and server) priority/mediumreliabilityworkflow

#37

by jared was closed 2026-09-11 21:50:57 -04:00

1

Bulk-action buttons have no double-submit guard concurrencypriority/mediumux

#36

by jared was closed 2026-09-11 21:58:59 -04:00

1

create_ticket_api.php: dedup/escalation race can duplicate notifications or drop a real escalation concurrencynotificationspriority/medium

#35

by jared was closed 2026-09-11 21:50:57 -04:00

1

Bulk operations: TOCTOU race on ticket status used for workflow validation concurrencypriority/mediumworkflow

#34

by jared was closed 2026-09-11 21:50:57 -04:00

1

Bulk operations aren't actually atomic despite the docblock claiming so priority/mediumreliability

#33

by jared was closed 2026-09-11 21:58:59 -04:00

1

ticket_watchers: ticket_id type mismatch (int vs varchar) and missing FK to tickets data-integritypriority/high

#32

by jared was closed 2026-09-08 21:33:43 -04:00

1

Avatar color hash has drifted between PHP (crc32) and JS (custom hash) — same user shows different colors priority/highux

#31

by jared was closed 2026-09-08 20:46:35 -04:00

1