Issues

• CRITICAL - DNS Rebinding (TOCTOU Race Condition)

  featuregood first issue
  ExtensionShield/ExtensionShield#187 · Filter by author harshal-paltse opened on Apr 4, 2026
  2

• Add version-to-version risk and permission diff tracking for rescanned extensions

  enhancement
  ExtensionShield/ExtensionShield#179 · Filter by author Meghraj-100 opened on Apr 4, 2026
  2

  

• Inconsistent User-Agent Strings in Extension Downloader

  bug
  ExtensionShield/ExtensionShield#175 · Filter by author Meghraj-100 opened on Apr 4, 2026

• Fix droplet color inconsistency, improve animation logic, and add accessibility support

  ExtensionShield/ExtensionShield#172 · Filter by author gauravsingh001-cyber opened on Apr 4, 2026

• Scraper Fragility

  bugenhancement
  ExtensionShield/ExtensionShield#167 · Filter by author sm-28601 opened on Apr 4, 2026
  2

  

• Database Refactor

  bug
  ExtensionShield/ExtensionShield#166 · Filter by author sm-28601 opened on Apr 4, 2026

• Use of print() instead of structured logging in production code

  bug
  ExtensionShield/ExtensionShield#165 · Filter by author sm-28601 opened on Apr 4, 2026
  4

• Unbounded thread creation during scans may cause performance issues

  ExtensionShield/ExtensionShield#164 · Filter by author sm-28601 opened on Apr 4, 2026

• LLM failures silently return empty results without user feedback

  backendbughelp wanted
  ExtensionShield/ExtensionShield#163 · Filter by author sm-28601 opened on Apr 4, 2026
  

• In-memory scan state grows indefinitely (potential memory leak)

  ExtensionShield/ExtensionShield#160 · Filter by author sm-28601 opened on Apr 4, 2026

• api/main.py is too large (God File) and violates separation of concerns

  feature
  ExtensionShield/ExtensionShield#159 · Filter by author sm-28601 opened on Apr 4, 2026

• ecurity Vulnerability: Incomplete Zip-Slip Protection Allows Extraction to Adjacent Directories via Path Traversal

  enhancementsecurity
  ExtensionShield/ExtensionShield#156 · Filter by author Th-Shivam opened on Apr 4, 2026
  1

  

• Security: docker-compose.yml exposes API on 0.0.0.0:8007 with no CORS or network isolation

  good first issuesecurity
  ExtensionShield/ExtensionShield#150 · Filter by author patel-prithvi opened on Apr 4, 2026
  1

  

• Security: VITE_AUTH_ENABLED defaults to 'true' in Dockerfile but 'false' in docs — auth bypass risk

  bugdocumentationsecurity
  ExtensionShield/ExtensionShield#143 · Filter by author patel-prithvi opened on Apr 4, 2026
  1

• Docs: SECURITY.md missing secrets severity guide and rotation instructions

  documentationquestionsecurity
  ExtensionShield/ExtensionShield#140 · Filter by author patel-prithvi opened on Apr 4, 2026

• UX/Privacy: Extension does not show which backend it is connected to (OSS vs cloud)

  ExtensionShield/ExtensionShield#138 · Filter by author patel-prithvi opened on Apr 4, 2026

• Privacy: No privacy policy linked — required by Chrome Web Store policy

  documentationsecurity
  ExtensionShield/ExtensionShield#136 · Filter by author patel-prithvi opened on Apr 4, 2026
  1

• handle non-numeric manifest icon keys in get_extension_icon to prevent ValueError crash

  bug
  ExtensionShield/ExtensionShield#131 · Filter by author Th-Shivam opened on Apr 4, 2026

• Bug: Misleading “Recent Scans” Label Displays Global Data Instead of User-Specific Activity

  bug
  ExtensionShield/ExtensionShield#129 · Filter by author Gothxam opened on Apr 4, 2026

• Incorrect Extension Data Rendered on Scan Results Navigation

  ExtensionShield/ExtensionShield#127 · Filter by author JaiswalShivang opened on Apr 4, 2026

• Content Security Policy (CSP) Violations on Auth Callback

  bugsecurity
  ExtensionShield/ExtensionShield#120 · Filter by author JaiswalShivang opened on Apr 4, 2026

• [BUG]: Inconsistent Scan History Behavior Between URL and Name-Based Scans

  bugfeature
  ExtensionShield/ExtensionShield#119 · Filter by author Gothxam opened on Apr 4, 2026

• Inconsistent Risk Classification and Lack of Transparent Scoring Logic

  ExtensionShield/ExtensionShield#118 · Filter by author Laharipriya29 opened on Apr 4, 2026

• Inconsistent Risk Classification and Lack of Transparent Scoring Logic

  ExtensionShield/ExtensionShield#117 · Filter by author Laharipriya29 opened on Apr 4, 2026

• [Bug]UI Responsiveness Issue in Dashboard Leading to Overlapping Elements

  bug
  ExtensionShield/ExtensionShield#116 · Filter by author Gothxam opened on Apr 4, 2026
  3