Curated Issues

Security Good First Issues

Browse open source issues grouped under Security domains. Legacy aliases are included so older issue metadata stays discoverable.

1,534 matching issues

RSSAtom
securityauthenticationauthorization
Open
Keycloak port included in some but not all OIDC endpoints
area/oidchelp wantedkind/bugpriority/normalstatus/auto-bumpstatus/auto-expireteam/core-clients

keycloak/keycloak #47,817 opened Apr 7, 2026 · Java · 34,398 stars

Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
1 comment2 reactions1 assignee
Open
Admin UI drops unknown realm attributes when saving realm settings
area/admin/uihelp wantedkind/bugpriority/lowstatus/auto-bumpstatus/auto-expireteam/core-clientsteam/core-shared

keycloak/keycloak #47,682 opened Apr 1, 2026 · Java · 34,398 stars

Why recommendedNo assignee yet · Has a beginner-friendly label
No assignee yetHas a beginner-friendly labelContributing guide available
4 comments1 reaction0 assignees
Open
[Security Solution][Bug] Commenter Identity Mismatch in Rule Exceptions (ID vs. Username)
Feature:Rule ExceptionsTeam: SecuritySolutionTeam:Detection EngineTeam:Detection EngineeringTeam:Detections and Respbugeffort:lowgood first issueimpact:lowv9.4.0value:medium

elastic/kibana #259,743 opened Mar 26, 2026 · TypeScript · 19,065 stars

Why recommendedHas a beginner-friendly label · Contributing guide available
Has a beginner-friendly labelContributing guide available
5 comments0 reactions2 assignees
Open
domain specific TLS Configuration
area/tlsenhancementhelp wantedstale

envoyproxy/envoy #44,021 opened Mar 19, 2026 · C++ · 27,997 stars

Why recommendedNo assignee yet · Has a beginner-friendly label
No assignee yetHas a beginner-friendly labelContributing guide available
10 comments0 reactions0 assignees
Open
External-Internal Token Exchange - User already Exists
area/token-exchangehelp wantedkind/bugpriority/normalstatus/auto-bumpstatus/auto-expirestatus/bumped-by-botteam/core-clients

keycloak/keycloak #47,250 opened Mar 18, 2026 · Java · 34,398 stars

Why recommendedNo assignee yet · Has a beginner-friendly label
No assignee yetHas a beginner-friendly labelContributing guide available
2 comments5 reactions0 assignees
Open
vpsm4_ex-armv8.pl implementation bug
branch: 3.5branch: 3.6branch: 4.0branch: masterhelp wantedtriaged: bug

openssl/openssl #30,409 opened Mar 13, 2026 · C · 30,157 stars

Why recommendedNo assignee yet · No comments yet
No assignee yetNo comments yetHas a beginner-friendly labelContributing guide available
0 comments0 reactions0 assignees
Open
Implement RFC 9861 KangarooTwelve and TurboSHAKE
help wantedtriaged: feature

openssl/openssl #30,304 opened Mar 8, 2026 · C · 30,157 stars

Why recommendedNo assignee yet · Has a beginner-friendly label
No assignee yetHas a beginner-friendly labelContributing guide available
11 comments0 reactions0 assignees