Search results

Technical Documentation - Unable to Locate Space

Status: Open.

#10894 In hcengineering/platform;

· clairk11 opened on May 27, 2026

Authenticated SSRF in front pod /import endpoint allows internal HTTPS scanning and exfiltration

Status: Open.

#10892 In hcengineering/platform;

· geo-chen opened on May 26, 2026

@hcengineering/* 0.7.423 still missing TypeScript declarations despite PR #10768

Status: Open.

#10881 In hcengineering/platform;

· dugynoo opened on May 24, 2026

Workflow uses secrets.R2_ACCESS_KEY_ID on a pull_request trigger

Status: Open.

#10870 In hcengineering/platform;

· repobilitycom opened on May 20, 2026

[SECURITY] - Server-Side Request Forgery (SSRF) in Print Service via Unvalidated link Parameter

Status: Open.

#10864 In hcengineering/platform;

· arexgodofwar opened on May 19, 2026

Account Info Disclosure -- Any Authenticated User Can Read Another User's Locale, Timezone, and 2FA Status

Status: Open.

#10863 In hcengineering/platform;

· geo-chen opened on May 19, 2026

Mailbox SMTP Secret Disclosure via Discarded Authorization Check Return Value

Status: Open.

#10862 In hcengineering/platform;

· geo-chen opened on May 19, 2026

Respect OIDC token lifetime and use refresh tokens

Status: Open.

#10833 In hcengineering/platform;

· hboyd2003 opened on May 9, 2026

Guest rights

Status: Open.

#10783 In hcengineering/platform;

· Yugandhar-Wall opened on Apr 19, 2026

DateTime localization display order is not applicable in Asian languages

Status: Open.

#10779 In hcengineering/platform;

· l3nemy opened on Apr 16, 2026

[Bug] Controlled Documents - "New category" crashes on self-hosted v0.7.413

Status: Open.

#10772 In hcengineering/platform;

· pandora0667 opened on Apr 15, 2026

Question / Feature Request: Keep right sidebar closed by default

Status: Open.

#10765 In hcengineering/platform;

· danielkassar opened on Apr 14, 2026