Search results

Wrong project count in Usage & Billing

deployment:cloud

product:platform

Status: Open.

#6690 In Infisical/infisical;

· joaocac opened on Jun 1, 2026

SAML RelayState parsed with JSON.parse without try/catch — potential crash

Status: Open.

#6688 In Infisical/infisical;

· mdayan8 opened on May 31, 2026

LDAP dynamic secret provider missing SSRF host validation

Status: Open.

#6687 In Infisical/infisical;

· mdayan8 opened on May 31, 2026

dropOnUpdateTrigger unconditional in down() causes rollback failure

deployment:self-hosted

product:platform

Status: Open.

#6654 In Infisical/infisical;

· R0hit-Sriram opened on May 28, 2026

createOnUpdateTrigger outside hasTable guard causes migration re-run failure

deployment:self-hosted

product:platform

Status: Open.

#6653 In Infisical/infisical;

· R0hit-Sriram opened on May 28, 2026

buildExpansionSecretList groups by wrong folder ID, breaking cross-environment imports

deployment:self-hosted

product:platform

Status: Open.

#6652 In Infisical/infisical;

· R0hit-Sriram opened on May 28, 2026

peekJWTClaims misclassifies 4-part tokens as valid JWTs

deployment:self-hosted

product:platform

Status: Open.

#6651 In Infisical/infisical;

· R0hit-Sriram opened on May 28, 2026

findEffectiveOrgMembership silently rejects identities with non-accepted status

deployment:self-hosted

product:platform

Status: Open.

#6650 In Infisical/infisical;

· R0hit-Sriram opened on May 28, 2026

nil pointer dereference in NewGetSecretByNameRawV3GetSecretResultOK

deployment:self-hosted

product:platform

Status: Open.

#6648 In Infisical/infisical;

· R0hit-Sriram opened on May 28, 2026

nil pointer dereference in NewGetSecretByNameV4GetSecretResultOK

deployment:self-hosted

product:platform

Status: Open.

#6647 In Infisical/infisical;

· R0hit-Sriram opened on May 28, 2026

GoaErrorName returns "bad_request" for all error types, breaking HTTP status routing

deployment:self-hosted

product:platform

Status: Open.

#6646 In Infisical/infisical;

· R0hit-Sriram opened on May 28, 2026

IP spoofing via untrusted X-Forwarded-For header in getRealIP

deployment:self-hosted

product:platform

Status: Open.

#6645 In Infisical/infisical;

· R0hit-Sriram opened on May 28, 2026