server · Issues· 88 open
Open on GitHubLocally synced open issues (discussions stay on GitHub)
- #1053
/docs loads swagger-ui 4.15.5 from cdnjs without SRI, and does not work offline
Updated Sep 17, 2026 - #1052
CORS and websocket origin allowlists match unanchored, so 'https://example.com' also allows 'https://example.com.evil.net'
Updated Sep 17, 2026 - #1051
Session elevation duration is unbounded, and large values silently overflow to a past timestamp
Updated Sep 17, 2026 - #1050
Bump x/text, quic-go and pgx: three govulncheck findings with call paths in v3.1.1
Updated Sep 17, 2026 - #714
Dependency Dashboard
Updated Sep 16, 2026 - #1047
Application image may not be cleaned up with concurrent uploads
a:bugUpdated Sep 12, 2026 - #1043
Allow account recovery without access to an admin account
a:featureUpdated Sep 4, 2026 - #1037
OIDC: Disallow changing admin permissions for oidc users when OIDC group mapping is configured
a:featureUpdated Aug 25, 2026 - #1032
OIDC: require explicit confirmation when linking local accounts
a:featureUpdated Aug 20, 2026 - #371
Allow changing the password with the gotify/server cli
a:featureUpdated Jul 28, 2026 - #1008
Remove default admin password
a:featureUpdated Jul 26, 2026 - #995
Prometheus/Alertmanager Support
questionUpdated Jul 8, 2026 - #983
No way to clean up plugin configs
a:featureUpdated Jun 28, 2026 - #981
Whitelist newly registered users
a:featurerequest-for-commentsUpdated Jun 20, 2026 - #966
New Token Format Proposal
Updated Jun 4, 2026