All issues

Search results

Security disclosure: request for a private reporting channel

bug

external

question

Status: Open.

#8558 In TykTechnologies/tyk;

· sec-reex opened on Aug 9, 2026

Security disclosure: request for a private reporting channel

bug

external

question

Status: Open.

#8557 In TykTechnologies/tyk;

· sec-reex opened on Aug 9, 2026

Low-privilege MCP consumer bypasses Tool-Based Access Control via Content-Type case differential

bug

external

Status: Open.

#8539 In TykTechnologies/tyk;

· matiasinsaurralde opened on Aug 4, 2026

Extend GraphQL Field-Based Permissions to support Input Types (⁠INPUT_OBJECT⁠)

enhancement

external

feature

Status: Open.

#8538 In TykTechnologies/tyk;

· inamit opened on Aug 4, 2026

Bug: maxLatencyWriter panics on hijacked connections with OpenTelemetry enabled

bug

external

Status: Open.

#8489 In TykTechnologies/tyk;

· probelabs opened on Jul 13, 2026

Add non-cloning ctx.GetOASDefinitionRaw accessor for read-only hot paths

enhancement

external

Status: Open.

#8484 In TykTechnologies/tyk;

· emmanuelchaplais2 opened on Jul 13, 2026

Add opt-in request body passthrough to avoid buffering large uploads

enhancement

external

feature

Status: Open.

#8483 In TykTechnologies/tyk;

· emmanuelchaplais2 opened on Jul 13, 2026

OAS 3.1 import rejects default FastAPI/Pydantic output: lookahead pattern on Decimal fields fails RE2 compile (invalid or unsupported Perl syntax: (?!)

bug

external

Status: Open.

#8321 In TykTechnologies/tyk;

· sakaal opened on Jun 16, 2026

Bug: Critical data loss in RPC analytics purger when MDCB is unstable

bug

external

Status: Open.

#8301 In TykTechnologies/tyk;

· probelabs opened on Jun 9, 2026

Bug: JSVM TykMakeHttpRequest and TykBatchRequest panic with nil pointer dereference during API reload (Race Condition)

bug

external

Status: Open.

#8285 In TykTechnologies/tyk;

· probelabs opened on Jun 8, 2026

[bug] Go-plugin intentional reject (4xx/5xx) emits unconditional level=error log spam — extend existing errpack pattern to fix

bug

external

Status: Open.

#8245 In TykTechnologies/tyk;

· tshtark opened on May 25, 2026

goplugin: analytics RawResponse is a zero-value HTTP response for plugin-rejected requests (status >= 400)

bug

external

Status: Open.

#8242 In TykTechnologies/tyk;

· tshtark opened on May 21, 2026