bonna61/Moon-Household-Budget
1
0
Fork 0
Code Issues 40 Pull Requests Actions Packages Projects Releases Wiki Activity
Labels Milestones New Issue
40 Open 2 Closed
Label
Clear labels
bug
correctness
data-integrity
frontend
infra
security
severity:critical
severity:high
severity:low
severity:medium
tech-debt
Milestone
No milestone
Projects
Clear projects
Assignee
Clear assignees
No assignee
bonna61
Fix amortization float rounding leaving non-zero final balance
correctness
severity:medium
#21 opened 2026-06-06 19:58:13 +00:00 by tonym
Fix simulate_payoff 4th return value double-counting minimums
bug
severity:medium
#20 opened 2026-06-06 19:58:13 +00:00 by tonym
Validate int() parsing of form year/month (raises 500 on bad input)
bug
severity:medium
#19 opened 2026-06-06 19:58:13 +00:00 by tonym
Initialize next_num before loop in bnpl_payment (UnboundLocalError 500)
bug
severity:high
#18 opened 2026-06-06 19:58:12 +00:00 by tonym
Clamp bills due on day 29-31 in short months (calendar drops them)
bug
severity:high
#17 opened 2026-06-06 19:58:12 +00:00 by tonym
Remove dead code and fix off-by-one in current_balance_estimate
bug
severity:high
#16 opened 2026-06-06 19:58:12 +00:00 by tonym
Fix biweekly mortgage schedule interest basis (overstates payoff)
correctness
severity:high
#15 opened 2026-06-06 19:58:12 +00:00 by tonym
Roll back multi-file saves on partial failure
data-integrity
severity:medium
#14 opened 2026-06-06 19:58:12 +00:00 by tonym
Fix concurrent JSON read-modify-write race (2 gunicorn workers, no lock)
data-integrity
severity:high
#13 opened 2026-06-06 19:58:12 +00:00 by tonym
Handle JSONDecodeError in all load_* functions
data-integrity
severity:high
#12 opened 2026-06-06 19:58:11 +00:00 by tonym
Make all JSON saves atomic (temp file + os.replace)
data-integrity
severity:high
#11 opened 2026-06-06 19:58:11 +00:00 by tonym
Add Subresource Integrity (SRI) to CDN-loaded Chart.js
security
severity:low
#10 opened 2026-06-06 19:58:11 +00:00 by tonym
Guard the /suggestions HTML page with the same auth as its API
security
severity:low
#9 opened 2026-06-06 19:58:11 +00:00 by tonym
Cap pasted statement text size before regex parsing
security
severity:medium
#8 opened 2026-06-06 19:58:11 +00:00 by tonym
Make Werkzeug debug mode opt-in instead of debug=True
security
severity:medium
#7 opened 2026-06-06 19:58:11 +00:00 by tonym
Escape input in bold_md filter before wrapping in Markup (stored XSS)
security
severity:high
#6 opened 2026-06-06 19:58:10 +00:00 by tonym
Add authentication + CSRF protection to all mutating routes
security
severity:high
#5 opened 2026-06-06 19:58:10 +00:00 by tonym
Add MAX_CONTENT_LENGTH + content-type check to the PDF/CSV import route
security
severity:high
#4 opened 2026-06-06 19:58:10 +00:00 by tonym
Sanitize upload filename — path traversal in import route
security
severity:critical
#3 opened 2026-06-06 19:58:10 +00:00 by tonym
Remove hardcoded Flask secret_key fallback ("fullmoonbakehouse")
security
severity:critical
#1 opened 2026-06-06 19:58:09 +00:00 by tonym