MERN Security & Bug Fixes
Budget / Salary$30–250
TypeFreelance project
LocationRemote
Posted2 hours ago
My production site runs on the React JS on the client, a Node.js/Express API, and MongoDB for persistence. After an external audit with another freelancer I now have a clear list of security weaknesses and several functional bugs that escaped earlier testing.
Most of the issues sit in server-side logic: exposed endpoints that bypass auth checks, insecure data validation, and some race-condition edge cases that crash certain requests. On the client, a few components render unpredictable states after failed API calls, so error boundaries and tighter state management will need attention as well.
I will share the exact findings (code snippets, Postman collections, and a short Loom walkthrough) at project start. All fixes must be applied directly to the production branch via fork-and-PR so I can review changes commit by commit. Automated tests already exist; add or update them where behaviour changes, then run our GitHub Actions pipeline to confirm green builds. Final acceptance is a successful redeploy on Heroku with zero regression across the existing Cypress end-to-end suite.
Tech in play: React 18, Redux Toolkit, Node.js 18, Express 4, Mongoose 6, JWT auth, Helmet, and AWS S3 for static assets. Please be comfortable debugging with Chrome DevTools, VS Code, and MongoDB Atlas.
Deliverable: merged, tested code that closes every ticket in the shared issue list and a brief changelog describing each fix. and then I will ask the tester to run test again, If ok I will raise the amount
Most of the issues sit in server-side logic: exposed endpoints that bypass auth checks, insecure data validation, and some race-condition edge cases that crash certain requests. On the client, a few components render unpredictable states after failed API calls, so error boundaries and tighter state management will need attention as well.
I will share the exact findings (code snippets, Postman collections, and a short Loom walkthrough) at project start. All fixes must be applied directly to the production branch via fork-and-PR so I can review changes commit by commit. Automated tests already exist; add or update them where behaviour changes, then run our GitHub Actions pipeline to confirm green builds. Final acceptance is a successful redeploy on Heroku with zero regression across the existing Cypress end-to-end suite.
Tech in play: React 18, Redux Toolkit, Node.js 18, Express 4, Mongoose 6, JWT auth, Helmet, and AWS S3 for static assets. Please be comfortable debugging with Chrome DevTools, VS Code, and MongoDB Atlas.
Deliverable: merged, tested code that closes every ticket in the shared issue list and a brief changelog describing each fix. and then I will ask the tester to run test again, If ok I will raise the amount
Apply on Freelancer →
Project sourced from Freelancer.com. Applications happen directly on the original platform — we never collect your data.