Search results

Small upgrade for form-data

critical

Security issue

Status: Open.

#7042 In erxes/erxes;

· mendorshikh opened on Feb 24, 2026

Minor upgrade for fast-xml-parser

critical

Security issue

Status: Open.

#7033 In erxes/erxes;

· mendorshikh opened on Feb 21, 2026

Security: Commented-out permission checks + missing authorization on multiple mutations (CWE-862)

Status: Open.

#7032 In erxes/erxes;

· lighthousekeeper1212 opened on Feb 20, 2026

[Detail Bug] Magic link auth race condition: shared Redis 'subdomain' key causes cross-tenant logins

bug

detail

Status: Open.

#6983 In erxes/erxes;

· detail-app opened on Feb 16, 2026

[Detail Bug] Missing app_id verification in Facebook OAuth allows cross-app token use

bug

detail

Status: Open.

#6982 In erxes/erxes;

· detail-app opened on Feb 16, 2026

Remote Code Execution possible via eval()-type functions

critical

Security issue

Status: Open.

#6968 In erxes/erxes;

· mendorshikh opened on Feb 12, 2026

Major upgrade for parse-url

critical

Security issue

Status: Open.

#6876 In erxes/erxes;

· mendorshikh opened on Jan 27, 2026

Some bugs were found in the project

Status: Open.

#6875 In erxes/erxes;

· zcxlighthouse opened on Jan 27, 2026

Small upgrade for Next.js

critical

Security issue

Status: Open.

#6719 In erxes/erxes;

· mendorshikh opened on Dec 8, 2025

typo image

Status: Open.

#6681 In erxes/erxes;

· tom-doerr opened on Nov 17, 2025

Please clean up your issue list

Status: Open.

#6651 In erxes/erxes;

· btseee opened on Nov 7, 2025

Fixed typo in README Installation section Description

Status: Open.

#6633 In erxes/erxes;

· khushimd1226-hub opened on Nov 5, 2025