Security Good First Issues

Browse open source issues grouped under Security. Where the subject goes by older names in the issue metadata, those are matched too.

107 matching issues

Security

Slice signals

Average annotated difficulty: 3.5/5 across 107 issues.
14% of 107 time estimates are one day or less.

Open All

107 open issues indexed

ON HOLD - (Back-end) SSO login Open

feature

13th-office/IBM-SkillBoard#48 · 2 comments · 0 reactions · 2 assignees · Indexed Sep 13, 2026
Write a Vulnerable Server to be attacked. Open

enhancement help wanted

133794m3r/itp_270_projects#4 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Write a forensics report generator Open

133794m3r/itp_270_projects#2 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Encryption And Decryption Methods Open

133794m3r/itp132-232#3 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Known Plaintext Attack Open

133794m3r/itp132-232#5 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Implement API rate limiter Open

enhancement good first issue

12products/poke-backend#6 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
AutoLogout Open

bug

101Loop/HisabKitab-FE#30 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Feat: Integrate social authentication (Login using fb/google) Open

enhancement

101Loop/drf-user#106 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
OTP Based endpoints should only work when user enabled send mail/send message settings Open

bug

101Loop/drf-user#212 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Project upload moderation system Open

backend frontend

0xVantrex/CampusHub#19 · 0 comments · 0 reactions · 2 assignees · Indexed Sep 13, 2026
Automating ngrok authentication retrival for configuration Open

hard jwoc

0xPrateek/DASH#23 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
finding vulnerable subdomains out of found subdomains Open

Hard jwoc

0xPrateek/Stake#1 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
feat: optional AWS SigV4 auth for the Anthropic provider Open

0xPlaygrounds/rig#2386 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
feat(auth): support application-provided OAuth token storage Open

0xPlaygrounds/rig#2481 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Leaked API keys detected — 1 findings across 1 providers Open

0xnyn/periscope#2 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
FEAT: Implement User Management for Cascade Open

0xnyn/cascade#2 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Feature request: secret management Open

0xnyn/canary#3 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Support ECDSA auth scheme Open

wallet

0xMiden/feedback#121 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Canonical Transport Layer for Private Notes Open

0xMiden/miden-proposals#4 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
TransactionGuard (policy checks before transaction execution) Open

0xMiden/MultiSig#10 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
RFC: Unified Private State Manager (PSM) Architecture for Multisig Accounts Open

enhancement

0xMiden/MultiSig#22 · 4 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
RFC: ECDSA / Para Integration Plan for Miden Multisig Open

enhancement

0xMiden/MultiSig#23 · 6 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
bug: `flatten_ef`/`unflatten_ef` use unsafe transmute with unverified memory layout assumption Open

0xMiden/miden-signature#1 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
hexToBytes silently converts invalid hex characters to zero bytes Open

0xMiden/turnkey-sdk#18 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add endpoint to access account storage Open

enhancement

0xMiden/wallet-adapter#2 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Spam protection mechanism Open

0xMiden/note-transport-service#44 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Squatting protection Open

0xMiden/note-transport-service#47 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Integrate encryption with the Address struct Open

0xMiden/note-transport-service#48 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Production-readiness gap analysis (meta / tracking) Open

production-readiness

0xMiden/note-transport-service#114 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Define and enforce a trust/auth model for all RPCs Open

production-readiness question

0xMiden/note-transport-service#115 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
SendNote accepts arbitrary unverified blobs (no on-chain commitment / header-details binding) Open

enhancement production-readiness

0xMiden/note-transport-service#116 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
No rate limiting or per-client request quotas Open

enhancement production-readiness

0xMiden/note-transport-service#117 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
No TLS on the gRPC server; missing HTTP/2 connection hardening Open

enhancement production-readiness

0xMiden/note-transport-service#120 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
docs: clarify the privacy boundary of remote transaction proving Open

0xMiden/docs#360 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Fix Windows Hello not working on reopening Windows app Open

0xMiden/wallet#103 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Android work-profile setup cannot use available biometrics Open

0xMiden/wallet#465 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Store account keys securely Open

0xMiden/rust-sdk#30 · 6 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Store decryption keys in the client Open

0xMiden/rust-sdk#1613 · 4 comments · 1 reaction · 0 assignees · Indexed Sep 13, 2026
React SDK useConsume uses proxy signer, fails recipient verification in custom scripts Open

0xMiden/web-sdk#108 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Feature: user-configurable spending limits (daily/weekly) with biometric/password confirmation Open

enhancement

0xMiden/wallet#646 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Seed-recovered Guardian account can be permanently locked behind its own rotation gate Open

0xMiden/wallet#805 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 13, 2026
[Discussion] Key management in bread Open

0xMiden/wallet#841 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Trigger deferred recovery-phrase backup after first funds arrive Open

enhancement

0xMiden/wallet#842 · 1 comment · 1 reaction · 1 assignee · Indexed Sep 13, 2026
Platform authentication such as Touch ID or Windows Hello instead of repeatedly entering a wallet password. Open

0xMiden/wallet#846 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
[Discussion] Bread Wallet Backend Open

0xMiden/wallet#850 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Allow creating miden accounts with a previous seed phrase Open

0xMiden/wallet#882 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add a trust policy for lazy-fetched note scripts Open

rpc

0xMiden/rust-sdk#2133 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026
State sync: authenticate chain-tip header via `block_signature` Open

0xMiden/rust-sdk#2236 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 13, 2026
Implement Web3Signer-compatible `Keystore` Open

enhancement

0xMiden/rust-sdk#2369 · 3 comments · 1 reaction · 1 assignee · Indexed Sep 13, 2026
VerifyingRpcClient never checks that range-scoped responses fall inside the requested block window Open

0xMiden/rust-sdk#2454 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

Security Good First Issues

Slice signals

Get new issues in your inbox