chatbot-ui · Issues· 242 open
Open on GitHubLocally synced open issues (discussions stay on GitHub)
- #1910
AI Agent 中文
Updated Sep 5, 2026 - #2041
/api/chat/custom has no authentication and reads any user's custom-model API key via the service-role client
Updated Sep 2, 2026 - #2040
delete_storage_object RPC is SECURITY DEFINER and executable by anon — any storage object can be deleted without auth
Updated Sep 2, 2026 - #2039
Free OpenAI-Compatible Demo Endpoint with Built-In Monetization via ChatADy
Updated Aug 26, 2026 - #2029
Need perfect AI model For 8 GB VRAM
Updated Jun 26, 2026 - #2028
Cross-user private file-content disclosure via unvalidated fileIds in the retrieval API (Supabase RLS bypass)
Updated Jun 12, 2026 - #2025
Your project is featured in awesome-ai-chat-apps
Updated May 24, 2026 - #2022
Security: Insecure Direct Object Reference（IDOR）
Updated Apr 20, 2026 - #2017
Security: Missing authentication on custom model endpoint - cross-tenant API key usage (CWE-306)
Updated Apr 4, 2026 - #2016
Qodo AntiSlop scan found 35 issues across 10 recent PRs
Updated Apr 4, 2026 - #2004
Request to join as team member/maintainer
Updated Mar 24, 2026 - #1990
Could we add support for specifying a custom base URL for OpenAI-compatible APIs?
Updated Dec 24, 2025 - #1981
Issue: Empty array when using ChatbotUI with local Supabase #Nginx #SelfHosted
Updated Dec 23, 2025 - #1989
Proposal: Add Client-Side Rate Limiting to prevent API credit draining
Updated Dec 18, 2025 - #1987
Was macht der Parameter d?
Updated Nov 19, 2025