Repository navigation

Issues

New issue

Who is using Apache APISIX?
#487 · moonming opened on Sep 9, 2019
113
Critical CVEs in Docker Images
#12461 · githubcdr opened on Jul 24, 2025
6
help request: Apisix ETCD going into Crash loop back off
#11338 · Lakshmi2k1 opened on Jun 6, 2024
45

ai-proxy forwards client Transfer-Encoding: chunked but sends an unchunked body (upstream 400)
apache/apisix#14152 · opened on Nov 3, 2026
ai-cache fingerprint omits forwarded client headers and instance auth (cache cell for a different effective request)
apache/apisix#14151 · opened on Nov 3, 2026
bug: kubernetes discovery - a single worker can get permanently stuck serving stale endpoints due to a write-order race in shared dict (#version written before content)
apache/apisix#14149 · opened on Nov 3, 2026
docs: modularize the Admin API OpenAPI specification
apache/apisix#14145 · opened on Nov 3, 2026
bug: csrf cookie rotation can reject legitimate concurrent browser writes
apache/apisix#14130 · opened on Nov 1, 2026
bug: ai-proxy passthrough ignores the path rewritten by proxy-rewrite
apache/apisix#14129 · opened on Oct 31, 2026
feat: As a user, I want to configure run_policy in _meta, so that route-level plugins can override global rules
apache/apisix#14127 · opened on Oct 30, 2026
bug: graphql-limit-count introspection can select a zero-weight upstream node
apache/apisix#14123 · opened on Oct 28, 2026
bug: stream traffic-split inline upstream bypasses stream TLS and node resolution
apache/apisix#14116 · opened on Oct 28, 2026
bug(openid-connect): track repeated discovery requests in lua-resty-openidc 1.9.3
apache/apisix#14114 · opened on Oct 28, 2026
bug: Fix Brotli version in docker image CVE-2026-111497
apache/apisix#14107 · opened on Oct 27, 2026
bug: stream bandwidth counts old traffic again when its baseline is lost
apache/apisix#14103 · opened on Oct 27, 2026
bug: # AWS Secrets Manager secret (apisix/secret/aws.lua) cannot use temporary credentials in standalone mode — session token never refreshes
apache/apisix#14100 · opened on Oct 26, 2026
3
feat: support file-based secrets provider for Kubernetes file-mounted secrets
apache/apisix#14099 · opened on Oct 26, 2026
bug: graphql plugins return 500 on non-object JSON bodies instead of 400
apache/apisix#14066 · opened on Oct 22, 2026
bug: a memory usage issue after upgrading Apache APISIX from 3.12 to 3.18.
apache/apisix#14062 · opened on Oct 21, 2026
bug: verify_https_client crashes with nil dereference when ngx.ctx.matched_ssl is nil
apache/apisix#14056 · opened on Oct 20, 2026
As a user, I want the opa plugin to propagate trace context (traceparent) to OPA, so that OPA spans are linked to the APISIX request trace
apache/apisix#14051 · opened on Oct 19, 2026
3
bug: ngx.req.set_body_data fails to invalidate req_post_args and post_arg.* cache
apache/apisix#14042 · opened on Oct 15, 2026
1
bug: apisix.yml and apisix.json have different behavior on loading env vars
apache/apisix#14038 · opened on Oct 15, 2026
3
feat: dynamic partition key for each request in kafka-logger plugin
apache/apisix#14029 · opened on Oct 12, 2026
1
bug: csrf plugin crashes with runtime error on malformed or non-table base64 token
apache/apisix#14024 · opened on Oct 10, 2026
1
docs: reconcile shared plugin examples with corrected released behavior
apache/apisix#14023 · opened on Oct 10, 2026
feat: support backlog in listen and if= condition in access_log via nginx_config
apache/apisix#14022 · opened on Oct 9, 2026
2
bug: splunk-hec-logging crashes with nil concatenation when error response json lacks text field
apache/apisix#14011 · opened on Oct 7, 2026
1

Navigation Menu

Repository navigation

Issues

Issues

ai-proxy forwards client `Transfer-Encoding: chunked` but sends an unchunked body (upstream 400)

ai-cache fingerprint omits forwarded client headers and instance auth (cache cell for a different effective request)

bug: kubernetes discovery - a single worker can get permanently stuck serving stale endpoints due to a write-order race in shared dict (#version written before content)

docs: modularize the Admin API OpenAPI specification

bug: csrf cookie rotation can reject legitimate concurrent browser writes

bug: ai-proxy passthrough ignores the path rewritten by proxy-rewrite

feat: As a user, I want to configure run_policy in _meta, so that route-level plugins can override global rules

bug: graphql-limit-count introspection can select a zero-weight upstream node

bug: stream traffic-split inline upstream bypasses stream TLS and node resolution

bug(openid-connect): track repeated discovery requests in lua-resty-openidc 1.9.3

bug: Fix Brotli version in docker image CVE-2026-111497

bug: stream bandwidth counts old traffic again when its baseline is lost

bug: # AWS Secrets Manager secret (`apisix/secret/aws.lua`) cannot use temporary credentials in standalone mode — session token never refreshes

feat: support file-based secrets provider for Kubernetes file-mounted secrets

bug: graphql plugins return 500 on non-object JSON bodies instead of 400

bug: a memory usage issue after upgrading Apache APISIX from 3.12 to 3.18.

bug: verify_https_client crashes with nil dereference when ngx.ctx.matched_ssl is nil

As a user, I want the opa plugin to propagate trace context (traceparent) to OPA, so that OPA spans are linked to the APISIX request trace

bug: ngx.req.set_body_data fails to invalidate req_post_args and post_arg.* cache

bug: apisix.yml and apisix.json have different behavior on loading env vars

feat: dynamic partition key for each request in kafka-logger plugin

bug: csrf plugin crashes with runtime error on malformed or non-table base64 token

docs: reconcile shared plugin examples with corrected released behavior

feat: support `backlog` in listen and `if=` condition in access_log via nginx_config

bug: splunk-hec-logging crashes with nil concatenation when error response json lacks text field