Issues

• [Bug]: SMTP per-recipient rate limit can be bypassed via email address casing

  InsForge/InsForge#2223 · Filter by author Adityakk9031 opened on Nov 12, 2026
  1

• [Docs]: Create deployment guide for xCloud

  InsForge/InsForge#2221 · Filter by author mahfuz-rahman007 opened on Nov 11, 2026

• POST /api/secrets keeps the old expires_at when re-creating a deleted secret

  InsForge/InsForge#2204 · Filter by author ayaangazali opened on Nov 2, 2026
  4

  

• [Bug]: S3 verifyObjectExists reports any HeadObject error as a missing object

  InsForge/InsForge#2202 · Filter by author ayaangazali opened on Nov 1, 2026
  2

  

• [Bug]: Schedule header secrets containing $& or $' are corrupted when substituted

  InsForge/InsForge#2201 · Filter by author kunalgoesbyken opened on Nov 1, 2026
  2

• [Bug]: CloudWatch stats fallback reports a stale lastActivity for sources with more than 1000 events a day

  InsForge/InsForge#2197 · Filter by author ayaangazali opened on Oct 31, 2026
  1

• [Bug]: CloudWatch Insights failures and timeouts come back as empty log results

  InsForge/InsForge#2193 · Filter by author ayaangazali opened on Oct 30, 2026
  1

• [Bug]: CloudWatch pagination fallback returns the oldest logs in its window, not the ones before the cursor

  InsForge/InsForge#2190 · Filter by author ayaangazali opened on Oct 29, 2026
  1

• [Yun Tianming] .agents/skills/insforge-dev/dashboard/SKILL.md: test-location globs and workflow job count drift from the vitest configs and frontend-tests.yml

  enhancement
  InsForge/InsForge#2188 · Filter by author Fermionic-Lyu opened on Oct 29, 2026

• [Yun Tianming] .agents/skills/insforge-dev/backend/SKILL.md: the ".env.example documents every env var" rule is violated by ~37 backend variables

  enhancement
  InsForge/InsForge#2187 · Filter by author Fermionic-Lyu opened on Oct 29, 2026

• [Yun Tianming] .agents/skills/insforge-dev/docs/DOCS_I18N.md: documented parity check fails today and contradicts build-docs-langs.py

  enhancement
  InsForge/InsForge#2186 · Filter by author Fermionic-Lyu opened on Oct 29, 2026

• [Yun Tianming] .agents/skills/insforge-dev/docs/SKILL.md: prescribes docs/core-concepts/<domain>/architecture.md, which exists nowhere

  enhancement
  InsForge/InsForge#2185 · Filter by author Fermionic-Lyu opened on Oct 29, 2026

• [Yun Tianming] backend/src/api/routes/s3-gateway/index.routes.ts: InternalError responses echo raw internal error messages

  enhancement
  InsForge/InsForge#2184 · Filter by author Fermionic-Lyu opened on Oct 29, 2026
  1

• [Yun Tianming] backend/src/services/payments/razorpay/order.service.ts: verifyOrderPayment / verifySubscriptionPayment skip ownership checks

  enhancement
  InsForge/InsForge#2183 · Filter by author Fermionic-Lyu opened on Oct 29, 2026

• [Yun Tianming] backend/src/services/payments/*/config.service.ts: GET config returns plaintext secret keys and webhook secrets

  enhancement
  InsForge/InsForge#2182 · Filter by author Fermionic-Lyu opened on Oct 29, 2026

• [Yun Tianming] backend/src/services/auth/auth-config.service.ts: redirect allowlist passes every URL when unset

  enhancement
  InsForge/InsForge#2180 · Filter by author Fermionic-Lyu opened on Oct 29, 2026

• [Yun Tianming] backend/src/services/payments/razorpay/webhook.service.ts: x-razorpay-event-id header controls the idempotency key

  enhancement
  InsForge/InsForge#2181 · Filter by author Fermionic-Lyu opened on Oct 29, 2026

• [Yun Tianming] backend/src/api/routes/auth/oauth.routes.ts: upstream error text reflected into the OAuth redirect URL

  enhancement
  InsForge/InsForge#2179 · Filter by author Fermionic-Lyu opened on Oct 29, 2026
  1

• [Yun Tianming] backend/src/services/email/smtp-config.service.ts: private-IP SMTP host check fails open when DNS does not resolve

  enhancement
  InsForge/InsForge#2178 · Filter by author Fermionic-Lyu opened on Oct 29, 2026
  1

• [Yun Tianming] backend/src/infra/realtime/webhook-sender.ts: realtime channel webhook URLs are posted to without private-address checks

  enhancement
  InsForge/InsForge#2177 · Filter by author Fermionic-Lyu opened on Oct 29, 2026

• [Yun Tianming] backend/src/providers/oauth/custom.provider.ts: OIDC discovery URL fetched with no SSRF host check; client_secret posted to discovered token_endpoint

  enhancement
  InsForge/InsForge#2176 · Filter by author Fermionic-Lyu opened on Oct 29, 2026

• [Yun Tianming] backend/src/services/auth/auth.service.ts: OAuth links existing account by email without checking provider email_verified

  enhancement
  InsForge/InsForge#2175 · Filter by author Fermionic-Lyu opened on Oct 29, 2026
  2

• [Bug]: User search treats _ and % as wildcards and is case-sensitive

  InsForge/InsForge#2169 · Filter by author kunalgoesbyken opened on Oct 27, 2026

• [Bug]: Email signup creates a second account for a mixed-case OAuth email

  InsForge/InsForge#2168 · Filter by author kunalgoesbyken opened on Oct 27, 2026
  2

  

• [Bug]: Two filters on the same column reach PostgREST as col[]=

  InsForge/InsForge#2167 · Filter by author kunalgoesbyken opened on Oct 27, 2026