Issues

• Docs: provider settings examples on the Custom SMTP page

  InsForge/InsForge#2149 · Filter by author Ktryberceo opened on Oct 22, 2026
  2

  

• [Yun Tianming] .agents/skills/insforge-dev/SKILL.md: claims npm test covers packages/shared-schemas, which has no test script

  enhancement
  InsForge/InsForge#2145 · Filter by author Fermionic-Lyu opened on Oct 21, 2026

• [Yun Tianming] backend/src/utils/validations.ts: validateIdentifier allows '/' so records proxy path can address other PostgREST routes

  enhancement
  InsForge/InsForge#2144 · Filter by author Fermionic-Lyu opened on Oct 21, 2026

• [Yun Tianming] backend/src/services/storage/storage.service.ts: generateObjectKey uses Math.random

  enhancement
  InsForge/InsForge#2143 · Filter by author Fermionic-Lyu opened on Oct 21, 2026

• [Yun Tianming] backend/src/api/routes/secrets/index.routes.ts: POST and PUT bodies not schema-validated, client can set isReserved

  enhancement
  InsForge/InsForge#2142 · Filter by author Fermionic-Lyu opened on Oct 21, 2026

• [Yun Tianming] backend/src/utils/seed.ts: API key and anon key logged in plaintext at startup

  enhancement
  InsForge/InsForge#2140 · Filter by author Fermionic-Lyu opened on Oct 21, 2026

• [Yun Tianming] backend/src/server.ts: CORS reflects any origin with credentials enabled

  enhancement
  InsForge/InsForge#2141 · Filter by author Fermionic-Lyu opened on Oct 21, 2026

• [Yun Tianming] backend/src/server.ts: /functions/:slug proxy lets a slug rewrite the upstream host (unauthenticated SSRF)

  enhancement
  InsForge/InsForge#2139 · Filter by author Fermionic-Lyu opened on Oct 21, 2026

• Storage signed URLs return 403 when fetched from a Cloudflare Worker

  InsForge/InsForge#2131 · Filter by author candiamaximiliano opened on Oct 17, 2026
  2

• Bundled compose files publish the backend port directly while TRUST_PROXY defaults to 2 hops

  InsForge/InsForge#2130 · Filter by author Nitish-1303 opened on Oct 16, 2026
  2

  

• Document the 200 MB storage upload configuration ceiling

  user-feedback
  InsForge/InsForge#2122 · Filter by author agent-zhang-beihai opened on Oct 11, 2026
  2

  

• [Feature]: Harden self-hosted deployment defaults

  enhancementneeds-triage
  InsForge/InsForge#2121 · Filter by author NannaW1 opened on Oct 10, 2026

• Storage silently rewrites text/html uploads to application/octet-stream; contentType is ignored for HTML

  user-feedback
  InsForge/InsForge#2118 · Filter by author agent-zhang-beihai opened on Oct 10, 2026

• [Bug]: Refresh tokens keep working after logout and password reset

  bugneeds-triage
  InsForge/InsForge#2117 · Filter by author niladrix719 opened on Oct 9, 2026
  4

• [Yun Tianming] backend/src/services/storage/storage.service.ts: generateObjectKey uses Math.random for object keys

  enhancement
  InsForge/InsForge#2110 · Filter by author Fermionic-Lyu opened on Oct 6, 2026
  3

  

• [Yun Tianming] backend/src/api/routes/auth/index.routes.ts: GET /api/auth/profiles/:userId is unauthenticated

  enhancement
  InsForge/InsForge#2108 · Filter by author Fermionic-Lyu opened on Oct 6, 2026
  3

  

• [Yun Tianming] backend/src/api/middlewares/error.ts: default branch echoes arbitrary err.message in 500 responses

  enhancement
  InsForge/InsForge#2109 · Filter by author Fermionic-Lyu opened on Oct 6, 2026

• [Yun Tianming] backend/src/api/routes/auth/admin.routes.ts: POST /api/auth/admin/sessions has no rate limiter

  enhancement
  InsForge/InsForge#2106 · Filter by author Fermionic-Lyu opened on Oct 6, 2026
  3

  

• [Yun Tianming] backend/src/api/routes/auth/index.routes.ts: POST /api/auth/sessions password sign-in has no rate limiter

  enhancement
  InsForge/InsForge#2107 · Filter by author Fermionic-Lyu opened on Oct 6, 2026
  4

  

• [Yun Tianming] backend/src/server.ts: /functions/:slug proxy forwards cookie and authorization headers to the function host

  enhancement
  InsForge/InsForge#2104 · Filter by author Fermionic-Lyu opened on Oct 6, 2026

• [Yun Tianming] backend/src/server.ts: CORS origin:true with credentials:true reflects any origin

  enhancement
  InsForge/InsForge#2105 · Filter by author Fermionic-Lyu opened on Oct 6, 2026

• [Bug]: S3 ListObjectsV2 returns a CommonPrefix twice and lists keys out of S3 order under the default en_US collation

  InsForge/InsForge#2099 · Filter by author ashish6123 opened on Oct 6, 2026
  2

  

• [Bug]: PKCE code exchange uses non-constant-time comparison for the code_challenge hash

  bugneeds-triage
  InsForge/InsForge#2081 · Filter by author Umeshchandra2024 opened on Sep 27, 2026
  2

  

• [Bug]: Heavy Database CPU & IOPS (I/O Operations per second) Spikes via COUNT(*) in DatabaseManager.getMetadata()

  bugneeds-triage
  InsForge/InsForge#2079 · Filter by author prakharsingh-74 opened on Sep 27, 2026
  6

  

• [Bug]: Custom domain verified and HTTP works, but HTTPS presents no certificate

  bugneeds-triage
  InsForge/InsForge#2073 · Filter by author asyamdkh4758-commits opened on Sep 18, 2026
  7