Search results

Placeholder parser mistakes '?' inside string literals/comments for a bind placeholder → argument shift

Status: Open.

#1399 In uptrace/bun;

· namtzigla opened on Jul 22, 2026

pgdriver: message-length uint32 overflow → SQL injection (pgx CVE-2024-27304 class) + unbounded server-controlled allocations

Status: Open.

#1397 In uptrace/bun;

· namtzigla opened on Jul 22, 2026

Dropped field value(s) on slice model insert

Status: Open.

#1394 In uptrace/bun;

· NyaaaWhatsUpDoc opened on Jul 20, 2026

SelectQuery.Clone drops execution state (Conn, Err, soft-delete flags, WherePK, CTE materialization)

Status: Open.

#1388 In uptrace/bun;

· nakisen opened on Jul 11, 2026

Many-to-many relation is duplicated when its owning model is reached via a belongs-to shared by multiple parent rows

Status: Open.

#1386 In uptrace/bun;

· kubakl opened on Jun 22, 2026

Replace unmaintained github.com/tmthrgd/go-hex with stdlib encoding/hex

good first issueGood for newcomersGood for newcomers

Status: Open.

#1385 In uptrace/bun;

· PeterSeb opened on Jun 18, 2026

Important Notes on Releasing the Next Version

no stalebot

release

stale

Status: Open.

#1363 In uptrace/bun;

· Aoang opened on Apr 7, 2026

Panic from Column-Scan mismatch causes deadlock

no stalebot

stale

Status: Open.

#1339 In uptrace/bun;

· NathanBaulch opened on Feb 27, 2026

Adding a query with a WHERE OR on a soft-delete model ignores soft-delete condition

no stalebot

Status: Open.

#1321 In uptrace/bun;

· john8329 opened on Jan 5, 2026

Possible SQL Injection via driver.Valuer Error Messages

bugSomething isn't workingSomething isn't working

no stalebot

v2

Status: Open.

#1307 In uptrace/bun;

· flimzy opened on Nov 26, 2025

Panic in scanJSON causes deadlock

no stalebot

Status: Open.

#1306 In uptrace/bun;

· meetmorrowsolonmars opened on Nov 25, 2025

Migration Add API Broken

no stalebot

stale

Status: Open.

#1297 In uptrace/bun;

· jemtucker opened on Nov 13, 2025