Issues

• Document the 200 MB storage upload configuration ceiling

  user-feedback
  InsForge/InsForge#2122 · Filter by author agent-zhang-beihai opened on Oct 11, 2026

• [Feature]: Harden self-hosted deployment defaults

  enhancementneeds-triage
  InsForge/InsForge#2121 · Filter by author NannaW1 opened on Oct 10, 2026

• Storage silently rewrites text/html uploads to application/octet-stream; contentType is ignored for HTML

  user-feedback
  InsForge/InsForge#2118 · Filter by author agent-zhang-beihai opened on Oct 10, 2026

• [Bug]: Refresh tokens keep working after logout and password reset

  bugneeds-triage
  InsForge/InsForge#2117 · Filter by author niladrix719 opened on Oct 9, 2026
  2

  

• [Yun Tianming] backend/src/services/storage/storage.service.ts: generateObjectKey uses Math.random for object keys

  enhancement
  InsForge/InsForge#2110 · Filter by author Fermionic-Lyu opened on Oct 6, 2026
  3

  

• [Yun Tianming] backend/src/api/routes/auth/index.routes.ts: GET /api/auth/profiles/:userId is unauthenticated

  enhancement
  InsForge/InsForge#2108 · Filter by author Fermionic-Lyu opened on Oct 6, 2026
  3

  

• [Yun Tianming] backend/src/api/middlewares/error.ts: default branch echoes arbitrary err.message in 500 responses

  enhancement
  InsForge/InsForge#2109 · Filter by author Fermionic-Lyu opened on Oct 6, 2026

• [Yun Tianming] backend/src/api/routes/auth/admin.routes.ts: POST /api/auth/admin/sessions has no rate limiter

  enhancement
  InsForge/InsForge#2106 · Filter by author Fermionic-Lyu opened on Oct 6, 2026
  2

  

• [Yun Tianming] backend/src/api/routes/auth/index.routes.ts: POST /api/auth/sessions password sign-in has no rate limiter

  enhancement
  InsForge/InsForge#2107 · Filter by author Fermionic-Lyu opened on Oct 6, 2026
  2

  

• [Yun Tianming] backend/src/server.ts: /functions/:slug proxy forwards cookie and authorization headers to the function host

  enhancement
  InsForge/InsForge#2104 · Filter by author Fermionic-Lyu opened on Oct 6, 2026

• [Yun Tianming] backend/src/server.ts: CORS origin:true with credentials:true reflects any origin

  enhancement
  InsForge/InsForge#2105 · Filter by author Fermionic-Lyu opened on Oct 6, 2026

• [Bug]: S3 ListObjectsV2 returns a CommonPrefix twice and lists keys out of S3 order under the default en_US collation

  InsForge/InsForge#2099 · Filter by author ashish6123 opened on Oct 6, 2026
  2

  

• [Bug]: PKCE code exchange uses non-constant-time comparison for the code_challenge hash

  bugneeds-triage
  InsForge/InsForge#2081 · Filter by author Umeshchandra2024 opened on Sep 27, 2026
  2

  

• [Bug]: Heavy Database CPU & IOPS (I/O Operations per second) Spikes via COUNT(*) in DatabaseManager.getMetadata()

  bugneeds-triage
  InsForge/InsForge#2079 · Filter by author prakharsingh-74 opened on Sep 27, 2026
  6

  

• [Bug]: Custom domain verified and HTTP works, but HTTPS presents no certificate

  bugneeds-triage
  InsForge/InsForge#2073 · Filter by author asyamdkh4758-commits opened on Sep 18, 2026
  6

  

• [Test]: Add unit tests for validatePassword in backend/src/utils/validations.ts

  enhancementneeds-triage
  InsForge/InsForge#2059 · Filter by author karthik120710 opened on Sep 11, 2026
  3

  

• [Bug]: Uncaught BadResource: Bad resource ID crashes the entire Deno runtime process when a client aborts a function request mid-flight

  bugneeds-triage
  InsForge/InsForge#2055 · Filter by author ElvisSoriano14 opened on Sep 9, 2026
  2

  

• [Bug]: POST /rpc/* intermittently 500s with "socket hang up" — stale-socket replay is capped at one attempt for non-idempotent methods

  bugneeds-triage
  InsForge/InsForge#2054 · Filter by author thinkenvy opened on Sep 9, 2026
  2

  

• [Bug]: X shared-key OAuth cannot complete after #2051, since x.provider.ts still uses the pre-hardening init query

  InsForge/InsForge#2053 · Filter by author ayaangazali opened on Sep 8, 2026
  9

  

• memory remember unexpectedly requires OpenRouter configuration

  user-feedback
  InsForge/InsForge#2034 · Filter by author agent-zhang-beihai opened on Sep 2, 2026
  2

  

• [Docs]: pricing table advertises $1 of AI model credits on Free, and pgvector never says where OPENROUTER_API_KEY comes from

  bugneeds-triage
  InsForge/InsForge#2032 · Filter by author ssrajadh opened on Sep 1, 2026
  2

  

• [Bug]: unfrozen project won't build

  bugneeds-triage
  InsForge/InsForge#2030 · Filter by author tripzydevops opened on Sep 1, 2026
  1

• [Docs]: migrations.mdx says plain db query wraps in a transaction, but both raw-SQL routes share one BEGIN-free path, so it steers users to the root back door for no reason

  InsForge/InsForge#2029 · Filter by author ayaangazali opened on Aug 31, 2026
  6

  

• Publisher upload required Authorization header omitted from requiredHeaders

  user-feedback
  InsForge/InsForge#2027 · Filter by author agent-zhang-beihai opened on Aug 31, 2026
  6

  

• [Bug]: the Zeabur one-click deploy button 404s, and the documented template update command targets the same dead code

  InsForge/InsForge#2020 · Filter by author ayaangazali opened on Aug 29, 2026
  8