coai · Issues· 43 open
Open on GitHubLocally synced open issues (discussions stay on GitHub)
- #418
Gin's trusted-proxies is never configured, letting X-Forwarded-For defeat every per-IP rate limit and IP ban
Updated Sep 15, 2026 - #416
Conversation share links use a predictable, guessable hash instead of a random secret
Updated Sep 15, 2026 - #415
Propagate downstream stream cancellation to upstream SSE requests
Updated Sep 1, 2026 - #414
Default root-password warning checks the wrong password
Updated Sep 1, 2026 - #412
Unsalted password hash embedded in JWT payload enables offline password recovery
Updated Aug 26, 2026 - #411
Default JWT signing key is predictable, allowing admin token forgery in default deployments
Updated Aug 26, 2026 - #407
chai2010/webp v1.1.1 bundles libwebp 1.0.2 (CVE-2023-4863)
Updated Jun 11, 2026 - #395
Discord邀请无效了，我想咨询一下购买授权的功能，但是没有能联系的地方
bugUpdated Apr 28, 2026 - #347
请求上架1panel商店
featureUpdated Feb 6, 2026 - #392
自定义预设是商业版才有的吗？
bugUpdated Jan 4, 2026 - #390
公告管理中删除及编辑，请求失败。
bugUpdated Dec 29, 2025 - #388
模型市场，模型配置无法生效
bugUpdated Dec 27, 2025 - #382
CollectQuota 在 goroutine 中使用被复用的 *gin.Context 导致 utils.GetDBFromContext 报错 / panic
bugUpdated Nov 14, 2025 - #375
是否考虑支持sonu？
featureUpdated Aug 19, 2025 - #369
“预设设置”点击使用预设后，聊天框区域失去响应
needs-more-infoUpdated Jul 5, 2025