Issues · ToolJet/ToolJet · GitHub

Labels Milestones New issue

Critical Security Vulnerability within ToolJet repository - pending response

#16438

· avivdon opened

on May 17, 2026

JSONSchema form import fails to create child fields

#16432

· evelant opened

on May 15, 2026

Cannot run tooljet on fly.io managed postgres due to ALTER ROLE in helper.ts -- setup won't finish because no permission to ALTER ROLE

#16430

· evelant opened

on May 15, 2026

AWS SDK version upgrade

#16342

· Srimanitejas123 opened

on May 8, 2026

[SECURITY] Authentication Bypass in ToolJet DB Module (Unauthenticated Join Tables Query + DB Proxy Access)

#16341

· icysun opened

on May 8, 2026

[15918] UI Bugs Query Builder

#16294

· Mekhla-Asopa opened

on May 5, 2026

[BUG] Critical: Invitation login path can skip password verification

#16219

· parasol-aser opened

on Apr 29, 2026

[BUG] Critical: Marketplace plugin install executes attacker-controlled code with host privileges

#16218

· parasol-aser opened

on Apr 29, 2026

[BUG] Critical: SCIM bearer auth bypass when token secret is unset

#16217

· parasol-aser opened

on Apr 29, 2026

Ups open api spec not rendering the operation

#15974

· Srimanitejas123 opened

on Apr 17, 2026

The postgresSQL query is converting the empty string "" into null values.

#15968

· Srimanitejas123 opened

on Apr 17, 2026

Oracle plugin needs support both thin/thick mode on ee

#15861

· Srimanitejas123 opened

on Apr 8, 2026