All issues

Search results

安全漏洞：已认证用户可绕过 visibility 权限访问私有内容

Status: Open.

#16 In minorcell/album;

· minorcell opened on May 11, 2026

bug: 删除用户照片时未清理对象存储中的文件，导致存储泄漏

Status: Open.

#15 In minorcell/album;

· minorcell opened on May 9, 2026

bug: 两处明显缺陷 — 下载接口缺少可见性校验 & auth check 模式不一致

Status: Open.

#14 In minorcell/album;

· minorcell opened on May 8, 2026

bug: 三处明显缺陷 - 批量下载越权、删除顺序错误、鉴权判断不一致

Status: Open.

#13 In minorcell/album;

· minorcell opened on May 6, 2026

Bug: 三处安全/数据一致性问题（可见性绕过 & 孤儿文件）

Status: Open.

#12 In minorcell/album;

· minorcell opened on Apr 30, 2026

bug: 搜索接口越权访问私有分类 & 上传接口 MIME 类型判断逻辑错误

Status: Open.

#11 In minorcell/album;

· minorcell opened on Apr 27, 2026

bug: 批量下载接口缺少分类可见性校验 + 用户关系缺少级联删除 + 账号状态接口信息泄露

Status: Open.

#10 In minorcell/album;

· minorcell opened on Apr 27, 2026

bug: 多处安全漏洞与逻辑错误

Status: Open.

#9 In minorcell/album;

· minorcell opened on Apr 25, 2026

bug: 3处明显缺陷 - 权限绕过/数据不一致/密码明文传输

Status: Open.

#8 In minorcell/album;

· minorcell opened on Apr 24, 2026

bug: 三处明显 Bug —— 搜索越权、批量下载越权、删除操作顺序错误

Status: Open.

#7 In minorcell/album;

· minorcell opened on Apr 24, 2026

bug: 多处安全与逻辑缺陷汇总

Status: Open.

#6 In minorcell/album;

· minorcell opened on Apr 24, 2026

Bug: 多处明显逻辑错误与数据一致性问题

bugSomething isn't workingSomething isn't working

Status: Open.

#5 In minorcell/album;

· minorcell opened on Apr 24, 2026