Issues

• [40%] /api/broadcast realtime channel auth (MISCONFIG,

  ai-hypothesisbug-bountyconfidence-40model-bigpickleonecodepending
  riteshekbote/onecode-hunt#13 · Filter by author github-actions opened on Sep 4, 2026

• [42%] Recovery/invite magic-link token leakage via URL fragment (OATH,

  ai-hypothesisbug-bountyconfidence-40model-bigpickleonecodepending
  riteshekbote/onecode-hunt#12 · Filter by author github-actions opened on Sep 4, 2026

• [0%] www.onecode.de Webflow — low, skip or config.

  ai-hypothesisbug-bountyconfidence-0model-bigpickleonecodepending
  riteshekbote/onecode-hunt#9 · Filter by author github-actions opened on Sep 4, 2026

• [0%] Recovery/invite magic-link token-in-URL-hash leakage (OATH/TOKEN, minor)

  ai-hypothesisbug-bountyconfidence-0model-bigpickleonecodepending
  riteshekbote/onecode-hunt#8 · Filter by author github-actions opened on Sep 4, 2026

• [100%] No repo audit candidates

  ai-hypothesisbug-bountyconfidence-100high-confidencemodel-bigpickleonecodepending
  riteshekbote/onecode-hunt#6 · Filter by author github-actions opened on Sep 3, 2026

• [40%] Railway app API discovery:

  ai-hypothesisbug-bountyconfidence-40model-bigpickleonecodepending
  riteshekbote/onecode-hunt#2 · Filter by author github-actions opened on Sep 3, 2026