Search results

Pushin

Status: Open.

#5321 In google/clusterfuzz;

· cajijalopezjesusantonio-lab opened on Jun 15, 2026

/issue/<testcase_id> redirector omits the testcase access check, disclosing the existence and restricted bug URL of security-sensitive testcases

Status: Open.

#5319 In google/clusterfuzz;

· geo-chen opened on Jun 14, 2026

mojo_parse_message_fuzzer: Stack-overflow in mojo::internal::ArraySerializationHelper<mojo::internal::Pointer<mojo::internal:

Status: Open.

#5301 In google/clusterfuzz;

· arshadvashraf-cmd opened on May 31, 2026

Yu

Status: Open.

#5300 In google/clusterfuzz;

· cesarkdksu-prog opened on May 30, 2026

Cross-object authorization issue in /testcase-detail/update-issue allows testcase-scoped access to update unrelated issue IDs

Status: Open.

#5262 In google/clusterfuzz;

· Omar-Khaleel opened on Apr 29, 2026

Two handlers missing access checks: issue_redirector and coverage_report

Status: Open.

#5258 In google/clusterfuzz;

· sammiee5311 opened on Apr 28, 2026

Security: Stored XSS in ClusterFuzz testcase event history via uploaded fuzzer name

Status: Open.

#5257 In google/clusterfuzz;

· foxllb opened on Apr 28, 2026

Add support for filing GitHub Security Advisories via file_github_security_advisory

Status: Open.

#5015 In google/clusterfuzz;

· pellared opened on Nov 5, 2025

[Tech debt] Split success and error return values in uworker_output.ErrorType

Status: Open.

#4517 In google/clusterfuzz;

· vitorguidi opened on Dec 17, 2024

Incompatible return types for storage.get between local filesystem and GCS implementation

Status: Open.

#4357 In google/clusterfuzz;

· vitorguidi opened on Oct 24, 2024

Delete the monorail issue tracker code

Status: Open.

#4282 In google/clusterfuzz;

· jonathanmetzman opened on Sep 30, 2024

Make firebase auth work with appengine staging

backlog

bugSomething isn't workingSomething isn't working

Status: Open.

#4269 In google/clusterfuzz;

· oliverchang opened on Sep 23, 2024