All issues

Search results

Avatar never revokes its blob URLs, and a stale response can show the wrong user's picture

Status: Open.

#17526 In ToolJet/ToolJet;

· omlahore opened on Aug 15, 2026

[refactor]:Jyoti_kanwar57

Status: Open.

#17525 In ToolJet/ToolJet;

· surajkumarkanwar24-del opened on Aug 15, 2026

BAHRU

feature request

Status: Open.

#17524 In ToolJet/ToolJet;

· c8j28h6s62-byte opened on Aug 15, 2026

Add option to export query results to CSV in dark theme for Query Manager

Status: Open.

#17519 In ToolJet/ToolJet;

· HoneyTyagii opened on Aug 14, 2026

[Proposal] Memory for ToolJet agents — 97.5% fewer tokens (ViBo)

Status: Open.

#17500 In ToolJet/ToolJet;

· vnbochkarev-netizen opened on Aug 13, 2026

frontend: App.jsx setInterval for metadata refresh never cleared - accumulates on remount, continues after logout

Status: Open.

#17498 In ToolJet/ToolJet;

· harsh4vardhan opened on Aug 13, 2026

tooljet-db: two-phase DDL commits are non-atomic - first commit success with second commit failure leaves metadata and physical schema permanently out of sync

Status: Open.

#17497 In ToolJet/ToolJet;

· harsh4vardhan opened on Aug 13, 2026

data-queries: deleteOne called without transaction manager - DataQuery committed before outer txn completes, leaves orphaned EventHandler records on rollback

Status: Open.

#17496 In ToolJet/ToolJet;

· harsh4vardhan opened on Aug 13, 2026

security: IDOR in ToolJet DB endpoints - organizationId from URL not validated against caller session - cross-org schema read and DDL write

Status: Open.

#17495 In ToolJet/ToolJet;

· harsh4vardhan opened on Aug 13, 2026

Abilities & guards test suite: guard-subclass unit coverage + cross-tenant e2e (test/abilities-and-guards-test-suite-update)

Status: Open.

#17396 In ToolJet/ToolJet;

· RndmCodeGuy20 opened on Aug 4, 2026

findAppFromVersion() throws instead of returning null — guards' 404 checks are dead code, callers 500

bugSomething isn't workingSomething isn't working

Status: Open.

#17395 In ToolJet/ToolJet;

· RndmCodeGuy20 opened on Aug 4, 2026

TJDB endpoints trust :organizationId path param — cross-tenant IDOR

bugSomething isn't workingSomething isn't working

Status: Open.

#17394 In ToolJet/ToolJet;

· RndmCodeGuy20 opened on Aug 4, 2026