conductor · Issues· 253 open
Open on GitHubLocally synced open issues (discussions stay on GitHub)
- #1010
Epic: Critical Security Updates Q2/3 2026
bugsecurityUpdated Sep 17, 2026 - #1642
Security: Identity (no-op) string replacement in errorInspector helpers (CodeQL alert #23)
bugsecurityUpdated Sep 17, 2026 - #1641
Security: Missing workflow `permissions` blocks in GitHub Actions (CodeQL alerts #14/#17/#24/#29/#31/#32)
securityUpdated Sep 17, 2026 - #1640
Security: ReDoS + per-call Pattern compile in PostgresIndexQueryBuilder (CodeQL alert #3)
bugsecurityUpdated Sep 17, 2026 - #1639
Security: Path injection in DummyPayloadStorage (CodeQL alert #4)
bugsecurityUpdated Sep 17, 2026 - #1638
Security: ReDoS in ParametersUtils parameter substitution (CodeQL alert #6)
bugsecurityUpdated Sep 17, 2026 - #1501
show Agent executions and the id for the agent execution in the agent execution page
uiUpdated Sep 17, 2026 - #1500
Agent executions page - The end time toggle does not seem to work accurately.
uiUpdated Sep 17, 2026 - #1628
Restart with useLatestDefinitions=true does not re-seed workflow.variables from the new definition, so ${workflow.variables.*} resolves to null
Updated Sep 15, 2026 - #1626
Make worktree creation optional
Updated Sep 13, 2026 - #1589
Add PR # to sidebar list if the worktree is associated with a PR. Add option to order by worktree creation time.
Updated Sep 10, 2026 - #1528
CVEs in Conductor-OSS 3.32.0-rc.25
dependenciesUpdated Sep 9, 2026 - #1590
[BUG] [UI] Workflow version dropdown lists non-existent versions up to 99
Updated Sep 9, 2026 - #1615
DYNAMIC_FORK: one SUB_WORKFLOW branch never created, force-TIMED_OUT after 60 min (regression in 3.32.0 from #1369)
bugUpdated Sep 9, 2026 - #1611
/workflowDefs aborts while serializing a 100+ MB /metadata/workflow response (Broken pipe)
Updated Sep 9, 2026