Search results

Workflow uses secrets.R2_ACCESS_KEY_ID on a pull_request trigger

Status: Open.

#10870 In hcengineering/platform;

· repobilitycom opened on May 20, 2026

[SECURITY] - Server-Side Request Forgery (SSRF) in Print Service via Unvalidated link Parameter

Status: Open.

#10864 In hcengineering/platform;

· arexgodofwar opened on May 19, 2026

Account Info Disclosure -- Any Authenticated User Can Read Another User's Locale, Timezone, and 2FA Status

Status: Open.

#10863 In hcengineering/platform;

· geo-chen opened on May 19, 2026

Mailbox SMTP Secret Disclosure via Discarded Authorization Check Return Value

Status: Open.

#10862 In hcengineering/platform;

· geo-chen opened on May 19, 2026

Respect OIDC token lifetime and use refresh tokens

Status: Open.

#10833 In hcengineering/platform;

· hboyd2003 opened on May 9, 2026

Guest rights

Status: Open.

#10783 In hcengineering/platform;

· Yugandhar-Wall opened on Apr 19, 2026

DateTime localization display order is not applicable in Asian languages

Status: Open.

#10779 In hcengineering/platform;

· l3nemy opened on Apr 16, 2026

[Bug] Controlled Documents - "New category" crashes on self-hosted v0.7.413

Status: Open.

#10772 In hcengineering/platform;

· pandora0667 opened on Apr 15, 2026

Question / Feature Request: Keep right sidebar closed by default

Status: Open.

#10765 In hcengineering/platform;

· danielkassar opened on Apr 14, 2026

Issue: Google calendar integrated in wrong account, cannot seem to change.

Status: Open.

#10748 In hcengineering/platform;

· Yugandhar-Wall opened on Apr 11, 2026

Svelte 5 migration

Status: Open.

#10745 In hcengineering/platform;

· Prajwalg19 opened on Apr 10, 2026

Comments responses appear out of order

Status: Open.

#10742 In hcengineering/platform;

· Page-MS opened on Apr 9, 2026