Search results

Cross-object authorization issue in /testcase-detail/update-issue allows testcase-scoped access to update unrelated issue IDs

Status: Open.

#5262 In google/clusterfuzz;

· Omar-Khaleel opened on Apr 29, 2026

Two handlers missing access checks: issue_redirector and coverage_report

Status: Open.

#5258 In google/clusterfuzz;

· sammiee5311 opened on Apr 28, 2026

Security: Stored XSS in ClusterFuzz testcase event history via uploaded fuzzer name

Status: Open.

#5257 In google/clusterfuzz;

· foxllb opened on Apr 28, 2026

insecurity threats

Status: Open.

#5230 In google/clusterfuzz;

· Allankw-dev opened on Apr 5, 2026

Hacked

Status: Open.

#5228 In google/clusterfuzz;

· rickyrodrigo2999-arch opened on Apr 3, 2026

Large repro cases are missing tgz file extensions

stale

Status: Open.

#5217 In google/clusterfuzz;

· camillobruni opened on Mar 24, 2026

Mrr

stale

Status: Open.

#5208 In google/clusterfuzz;

· Sovann87 opened on Mar 16, 2026

Open Redirect on Clusterfuzz.com

stale

Status: Open.

#5168 In google/clusterfuzz;

· Lundrim23 opened on Feb 19, 2026

Add support for filing GitHub Security Advisories via file_github_security_advisory

Status: Open.

#5015 In google/clusterfuzz;

· pellared opened on Nov 5, 2025

[Tech debt] Split success and error return values in uworker_output.ErrorType

Status: Open.

#4517 In google/clusterfuzz;

· vitorguidi opened on Dec 17, 2024

Incompatible return types for storage.get between local filesystem and GCS implementation

Status: Open.

#4357 In google/clusterfuzz;

· vitorguidi opened on Oct 24, 2024

Delete the monorail issue tracker code

Status: Open.

#4282 In google/clusterfuzz;

· jonathanmetzman opened on Sep 30, 2024