Issues

• New admin accounts use a hardcoded default password

  edcNITD-website/task-bucket#18 · Filter by author wolfofdalalst opened on Aug 8, 2026

• Comment endpoint bypass private-task visibility (any user can read/post comments on any task)

  edcNITD-website/task-bucket#17 · Filter by author wolfofdalalst opened on Aug 8, 2026

• batchUpsertTasks allows any authenticated user to edit/hijack any task (missing authorization check)

  edcNITD-website/task-bucket#16 · Filter by author wolfofdalalst opened on Aug 8, 2026