drogon · Issues· 436 open

possible exception in db connexions creations

MQTT

RealIpResolver: IPv6 not supported — v6 trust_ips fails with a misleading error, v6 X-Forwarded-For is silently dropped

Potential HashDoS in the server-side session map from client-supplied session IDs

[Security] Null-byte (%00) truncation in StaticFileRouter defeats the file-type allowlist (file disclosure)

RedisClient::execCommand* incorrectly splits EVAL arguments

PostgreSQL reconnect retry interval should be configurable

SIGSEGV when exception thrown during coroutine promise aggregate initialization (Clang 21 / nlohmann::json)

[Security]SQL Injection in Drogon ORM - Criteria JSON Constructor

[Security]SQL Injection in Drogon ORM - orderBy() Method

HttpClient has no connection pool — requestsBufferSize() unusable from async code

EventLoopThread self-join in DbClientImpl teardown when last ref released from own DbLoop thread (throws Resource deadlock avoided)

AsyncStream Memory Leak

trying to convert mysql rows to json array

PgBatchConnection: preparedStatementsMap_ grows unbounded; PostgreSQL backend memory exhaustion under long-lived connections